SAPPC - Physical Security

Question 1

Purpose of Storage Containers and Facilities

Answer 1

Protect valuables, records, and sensitive and classified information and material, as well as conventional and nuclear weapons by delaying unauthorized entry.

Question 2

Storage Containers

Answer 2

Security containers include:
Cabinets 
Field Safes 
Secure Rooms 
Vaults

Question 3

Define Storage Facility

Answer 3

Restricted areas are generally on military installations and are designed to protect certain types of classified material or items that require larger spaces such as nuclear weapons

Question 4

Examples of Storage Facilities

Answer 4

SCIFs
AA&E Storage Facilities
Nuclear Storage Facilities

Question 5

What are the 3 types of unauthorized entry?

Answer 5

Forced Entry
Covert Entry
Surreptitious Entry

Question 6

Forced Entry

Answer 6

Occurs when someone breaks into the container or facility by using a tool, torch, or explosives, for example.

Can cause obvious visible damage to the container.

Can cause less obvious damage, such as holes drilled behind cabinet labels.

Question 7

Covert Entry

Answer 7

Occurs when someone breaks into a container by manipulating a lock using an auto dialer machine to learn the combination of a combination lock or by picking a keyed lock, for example.

Entry is not easily detected, but trained persons can detect entry.

Question 8

Surreptitious Entry

Answer 8

Occurs when someone breaks into a container by using radiological means such as an x-ray machine to view the dial rings on the older mechanical locks.

Entry is not easily detected, even trained persons have a difficult time detecting entry.

Question 9

Examples of Supplemental Protection for storage containers

Answer 9

Intrusion Detection Systems (IDS)
Alarms
Guards

Question 10

Factors in Choosing a Container/Facility

Answer 10

1. Level of Material
   - Confidential document would require stricter storage requirements than an unclassified document
2. Type of Material
   - Paper material would have different storage requirements than weapons
3. Geographic Location of Material
   - Different requirements for materials being stored overseas, in war zones, for example, than for materials being stored in the United States.

Question 11

What is GSA?

Answer 11

The General Services Administration (GSA) establishes and publishes minimum standards, specifications, and supply schedules for containers, vault doors, modular vaults, and other associated security devices suitable for the storage and protection of classified information against forced, covert, and surreptitious entry.

Question 12

What is required for COMSEC storage?

Answer 12

GSA-approved container

National Security Agency (NSA) requirements met

Stringent protection and strict accountability
-Ex: two person concept where two people are required to inventory, package, and destroy the material

Question 13

Compare Class V and VI containers

Answer 13

Both protect against covert and surreptitious entry

Class V protects against forced entry

Neither protects against fire

Question 14

Which container class protects against fire?

Answer 14

Class I and Class II

Question 15

Types of GSA-Approved Locks

Answer 15

Built-in Combination Locks (most widely used)
Combination Padlocks
Key-Operated Padlocks

Question 16

Most Common Models of Combination Locks

Answer 16

Kaba Mas X07, X08, X09, and X-10

Sargent and Greenleaf (S&G) 2740 and S&G 2740B

*Locks must meet Federal Specification FF-L-2740 series

Question 17

What type of label must be on a container storing classified information

Answer 17

GSA-approved security containers must clearly display the GSA-approved label on the face of the container in order to be used to store classified information.

Question 18

Types of GSA-Approved storage container labels

Answer 18

GSA-Approved Label
Test Certification Label
Cabinet Identification Label
Number Label
Warning Label

Question 19

What should you do if a GSA-approved label is missing or if the structural integrity of the container has been compromised?

Answer 19

*Repair and recertification of the container is required

The container may not be used until:

• Repaired and restored to its original condition by a certified technician
• Recertified by an authorized certifying official
• A new GSA-approved label has been applied to the container by the certifying official

Question 20

Secure Room

Answer 20

• Areas designated and authorized for the open storage of classified information
• Used when larger storage capability is needed than can be obtained from the use of GSA-approved security containers alone
• Built to enhanced commercial construction standards, but do not afford the extra security inherent with vaults.
• May have additional requirements prohibiting the open storage of classified information

Question 21

What is the policy is used for construction standards for secure rooms?

Answer 21

DoDM 5200.01, Information Security Program for DoD

NISPOM for cleared contractor facilities

Question 22

Secure Room vs Vault

Answer 22

Both are areas designated and authorized for the open storage of classified information

Vaults are constructed to meet strict forcible entry standards established by the GSA and outlined in DoDM 5200.01

Vaults are more secure than secure rooms

Question 23

Characteristics of Vaults

Answer 23

• Reinforced concrete on all walls, ceilings, and floors
• Hardened steel door
• Doors must meet GSA standards for surreptitious, covert, and forced entry

Question 24

Factors to Maintain Certification of Vault

Answer 24

• Doors and frames must remain in their original color, which is gray
• Placement of GSA-approved labels on the outside face of vault doors
• Locks installed on vault doors have the same requirements as locks installed on security containers.

Question 25

Top Secret Storage Requirements

Answer 25

Stored in a GSA-approved container and, at least one of the following supplemental protections is required: - Continuous protection by cleared guard or duty personnel, or cleared guard/duty personnel inspects container every 2 hours - An intrusion detection system (IDS) used with 15 minute response time with security-in-depth or within 5 minutes if not security-in-depth

Question 26

Secret Storage Requirements

Answer 26

Secret information must be stored in one of the areas approved for Top Secret information. Supplemental protection is not required for Secret information stored in a GSA-approved security container or vault. Supplemental protection is required for Secret information that is stored by defense contractors in a closed area. It must have at least one of the following supplemental protections - Continuous protection by cleared guard or duty personnel - Cleared guard or duty personnel inspects container every 4 hours - IDS used with a 30 minute response time

Question 27

Confidential Storage Requirements

Answer 27

Confidential information must be stored in one of the areas approved for Top Secret or Secret information. Supplemental protection is not normally required for the storage of Confidential information.

Question 28

Container Access Control

Answer 28

- Granted only to those who are authorized to access the classified information stored inside or to those who are authorized to change combinations or make repairs on the security containers and locks - Entrances to storage containers must be kept under visual observation or equipped with electric, mechanical, or electromechanical access control devices at all times during work hours - Keep records of security containers, vaults, and secure rooms used for the storage of classified material

Question 29

What forms are utilized for access control?

Answer 29

SF-700 SF-701 SF-702

Question 30

SF-700

Answer 30

Security Container Information - Tracks the location of the storage container as well as the contact information for each individual who knows the combination and should be contacted in the event the container is found open and unattended. - Must be stored in a sealed, opaque envelope inside the control drawer.

Question 31

SF-701

Answer 31

Activity Security Checklist -Records end-of-day security checks which are conducted to ensure all vaults, secure rooms, and containers used for the storage of classified information are secured at the end of each working day

Question 32

SF-702

Answer 32

Security Container Check Sheet -Tracks opening and closing of storage containers. *If there is an open container violation, this form helps to narrow the scope of inquiry.

Question 33

Storage Container Procedures

Answer 33

- Procure new security storage equipment from the GSA Federal Supply Schedule. - Do not mark the outside of a storage container in any way that could divulge the classification level of the material being stored. - It is recommended that you keep the sides and tops of containers clear. - When removing security containers, you must completely inspect the inside of the container, including complete drawer removal, to ensure there is no classified material left inside - Turn in the containers in accordance with local property control procedures.

Question 34

Container Content Requirements

Answer 34

Do not store classified information with sensitive items or weapons. Doing so could make the classified storage container more of a target for thieves looking for valuables. Destroy classified information when no longer needed. This reduces the need for additional storage containers.

Question 35

Neutralization

Answer 35

The drilling or cutting open of a lock by properly trained and equipped personnel. Ex: lock freezes, forget combo or lose key - Neutralization must be done by a GSA Authorized Safe & Vault Technician using methods outlined in Federal Standard 809B - Neutralization may affect the container’s certification, so the container must be repaired to its original condition so it may be recertified

Question 36

Key-Operated Lock Requirements

Answer 36

Keys and locks must be protected at all times. Protect keys and spare locks in a secure container at the same level of protection afforded the material or information being secured.

Question 37

Combination Lock Requirements

Answer 37

- Combinations must be protected at all times. - Treat combinations at the same level of classified material they protect. - It is recommended you always secure mechanical combination locks with four rotations of the dial. - Change combinations at specific times such as when they are first placed in use, when an individual who knows the combination no longer requires access, when the combination has been subject to possible compromise, and when the container is taken out of service. - When a container is taken out of service, the combination must be reset to the factory default setting.

Question 38

What is a restricted area?

Answer 38

Storage facilities in buildings or on military installations that require additional protection

Question 39

Common types of restricted areas

Answer 39

SCIFs AA&E storage facilities Nuclear storage facilities

Question 40

Demarcation

Answer 40

Warning signs displaying RESTRICTED AREA must be posted no more than 100 feet apart at each boundary of or logical approach to the restricted area Must be easily read by anyone approaching on foot or in a vehicle Signs must be posted on every gate and on both sides of every fence corner

Question 41

SCIF

Answer 41

Used by the intelligence community for the storage of their sensitive compartmented information (SCI) Strict construction standards must be adhered to (ICD 705)

Question 42

Who has governance over SCIFs?

Answer 42

Security requirements for SCIFs are established by the Director of National Intelligence (DNI). Accreditation is the responsibility of the Defense Intelligence Agency (DIA).

Question 43

What is the policy that governs Physical Security of AA&E?

Answer 43

DoDM 5100.76, Physical Security of Sensitive Conventional Arms, Ammunition, and Explosives

Question 44

What are the categories of AA&E?

Answer 44

SRC I - SRC IV

Question 45

Demilitarize/Dispose

Answer 45

AA&E must be demilitarized or disposed of once they have become obsolete or unserviceable. By doing this, costs for protecting, storing, and accounting for AA&E no longer needed will be reduced

Question 46

What is authorized to be stored in all four security risk categories of AA&E?

Answer 46

Fixed-location, free-standing magazines

Question 47

Nuclear Weapon Storage and Security Policy?

Answer 47

DoD S 5210.41-M

Question 48

Fence Requirements for Nuclear Weapons

Answer 48

- 7 ft high, 9-guage, 2 inch diamond mesh, equipped with Y outrigger with 15 inch arms. - Anchored to the ground, two fences minimum, separation zone of 30 ft between the fences. - Nuclear storage facility fencing also requires a 30 foot clear zone on both the inside and outside of the fence. -Nothing can be in this clear zone, including trees and buildings.

Question 49

What is special about Nuclear Access?

Answer 49

Restricted Area procedures and... - Lettering on signs displayed in black or blue, except the words USE OF DEADLY FORCE AUTHORIZED which must be displayed in red - Continual barrier concept (similar to mantrap) - Privately owned vehicles (POVs) never permitted