Who Provides Accreditation for DoD SCIFs and other Key Roles in SCIF construction
- Phil
- Jan 10
- 2 min read
When undertaking the construction and accreditation of a Sensitive Compartmented Information Facility (SCIF), several key roles will be instrumental in ensuring success. Here’s an overview of the essential personnel involved in the process.
Who Provides Accreditation for SCIFs? The Accrediting Official (AO)
The Accrediting Official (AO) is appointed by the head of an Intelligence Community (IC) element to oversee and approve facilities, information technologies, and programs that handle classified information. This individual may also delegate responsibilities to others on their behalf.
The AO is your primary point of contact for security oversight throughout the construction process. Their responsibilities include:
Reviewing and approving design concept plans.
Approving the Construction Security Plan (CSP).
Evaluating and approving the final design before construction begins.
Preparing and considering requests for waivers to adjust standards.
Assessing the Security in Depth (SID) of your facility.
Due to their often heavy caseload or remote location, AOs may have limited availability. Establishing a strong line of communication with your AO early on is critical to avoid delays. Ensure all documentation submitted to the AO is thorough and well-prepared. Clear and efficient communication minimizes the chances of late-stage issues arising.
The Site Security Manager (SSM)
The Site Security Manager (SSM) must be approved by the AO at the start of your project. This role is pivotal for enforcing security measures and reporting all relevant information to the AO. The SSM is present from project inception through final accreditation.
Key responsibilities of the SSM include:
Directly overseeing site security.
Developing the CSP in coordination with the AO.
Conducting regular inspections to ensure adherence to the CSP.
The SSM will be dedicated to your site, making them the most accessible point of contact for security-related questions and concerns throughout the construction process.
The Certified TEMPEST Technical Authority (CTTA)
The Certified TEMPEST Technical Authority (CTTA) ensures that your project complies with TEMPEST requirements, which involve the mitigation of unintentional emanations that could compromise security. While the CTTA and AO collaborate on certain aspects, the CTTA generally works independently of the SSM and the broader project team.
The CTTA’s responsibilities include:
Evaluating the project for compliance with TEMPEST standards.
Recommending mitigations needed to meet TEMPEST requirements.
Given the CTTA’s typically extensive caseload, securing their input early in the project is crucial. Reaching out during the initial phases can help prevent delays later in the process.
By understanding the roles and responsibilities of the AO, SSM, and CTTA, you can better navigate the complexities of SCIF construction and accreditation. Early communication and thorough preparation are key to ensuring your project stays on track.
Comments