Department of Defense DIRECTIVE NUMBER 8520.1 December 20, 2001 ASD(C3I) SUBJECT: Protection of Sensitive Compartmented Information (SCI) References: (a) Section 403-5(a) of title 50, United States Code, "National Security" (b) Executive Order 12333, "United States Intelligence Activities," December 4, 1981 (c) DoD 5200.2-R, "DoD Personnel Security Program Regulation," January 1987 1. PURPOSE This Directive implements reference (a) to establish policy and assign responsibilities regarding the protection, use, and dissemination of Sensitive Compartmented Information (SCI) within the Department of Defense. 2. APPLICABILITY AND SCOPE This Directive applies to the Office of the Secretary of Defense, the Military Departments, the Chairman of the Joint Chiefs of Staff, the Combatant Commands, the Office of the Inspector General of the Department of Defense, the Defense Agencies, the DoD Field Activities, and all other organizational entities within the Department of Defense (hereafter referred to collectively as "the DoD Components"). 3. DEFINITIONS 3.1. Intelligence Community and Agencies Within the Intelligence Community. Consistent with Section 3 of reference (a) and Section 3.4(f)(1 through 6) of Executive Order 12333 (reference (b)) the Intelligence Community and agencies within the Intelligence Community refer to the following agencies or organizations: the Central Intelligence Agency (CIA), the National Security Agency (NSA), the Defense Intelligence Agency (DIA), the National Imagery and Mapping Agency, the National Reconnaissance Office, the offices within the Department of Defense for the collection of specialized national foreign intelligence through reconnaissance programs, the Bureau of Intelligence and Research of the Department of State, the intelligence elements of the Army, the Navy, the Air Force, and the Marine Corps, the Federal Bureau of Investigation, the Department of the Treasury, and the Department of Energy. 3.2. Senior Officials of the Intelligence Community (SOICs). Consistent with Section 1.7 of Executive Order 12333 (reference (b)), Senior Officials of the Intelligence Community are the heads of departments and agencies with organizations in the Intelligence Community or the heads of such organizations, as specified in DCI Directives. 3.3. Sensitive Compartmented Information (SCI). Classified information concerning or derived from intelligence sources, methods, or analytical processes, that is required to be handled within formal access control systems established by the Director of Central Intelligence (DCI). 3.4. Senior Intelligence Officer (SIO). The highest ranking military or civilian charged with direct foreign intelligence missions, functions, or responsibilities within a department, agency, component, or element of an Intelligence Community organization. 4. POLICY It is DoD policy that: 4.1. SCI shall be safeguarded in accordance with policies and procedures established by the DCI. Nothing in this Directive is intended to diminish the authority and responsibility of the DCI over SCI or individual SOICs. 4.2. All DoD Components with responsibility for protecting SCI will establish and foster partnerships with elements of the DoD SCI community, the DCI, industry, and professional associations to gain insight to establishing common security practices and reciprocity wherever practicable. 5. RESPONSIBILITIES 5.1. The Assistant Secretary of Defense for Command, Control, Communications, and Intelligence shall: 5.1.1. Serve as the senior DoD official responsible for oversight of implementation of SCI security policies and procedures within the Department of Defense. 5.1.2. Represent the Secretary of Defense in coordination of SCI security policies and procedures established by the DCI. 5.2. The Director, National Security Agency, Director, National Reconnaissance Office, and Director, National Imagery and Mapping Agency shall establish, direct, and administer all aspects of their respective organization's SCI security programs to include all necessary coordination and implementation of DCI security policy. 5.3. The Director, Defense Intelligence Agency shall: 5.3.1. Administer within the Department of Defense, with the exception of NSA and NRO, SCI security policies and procedures issued by the DCI. As a minimum, this includes responsibility for: 5.3.1.1. Ensuring that SCI security policies and procedures issued by the DCI, and all DCI-issued changes or modifications thereto, are disseminated within the Department of Defense in a timely and efficient manner. 5.3.1.2. Inspecting and accrediting DoD and DoD contractor facilities for the handling, processing, storage and discussion of SCI. 5.3.1.3. Inspecting DoD and DoD contractor-accredited SCI facilities on a recurrent basis to determine continued compliance with established SCI security policies and procedures and issuance of reports detailing any deficiencies noted and corrective action required. 5.3.1.4. Preparing and submitting such reports as may be required by the DCI and/or the Assistant Secretary of Defense for Command, Control, Communications, and Intelligence (ASD(C3I)) regarding the status of implementation of SCI security policies and procedures within the Department of Defense. 5.3.1.5. Adjudicating eligibility for access to SCI for all civilian personnel assigned to DIA, the Office of the Secretary of Defense, the Joint Staff, the Defense Agencies and the DoD Field Activities, including contractors and consultants, and military personnel assigned to DIA, in accordance with DoD 5200.2-R (reference (c)). 5.3.1.6. Monitoring SCI personnel security practice to include leading program reviews and conducting inspections of adjudication facilities to ensure standardization of SCI personnel security practices. 5.3.1.7. Monitoring the establishment and maintenance of SCI security awareness and education programs within the DoD Components. 5.3.1.8. Developing and coordinating within the Department of Defense recommendations with respect to current or proposed DCI SCI security policy and procedures. 5.3.1.9. Establishing Memoranda of Agreement for joint DoD use of CIA, NSA, and NRO SCI-accredited contractor facilities by the DoD Components and their subordinate elements. 5.3.1.10. Operating SCI security programs to support other DoD activities and Federal Agencies by special agreement, as required. 5.4. The Head of each DoD Component that does not have a Senior Official of the Intelligence Community (SOIC) shall designate at appropriate levels, Senior Intelligence Officers who shall be responsible for the effective implementation of SCI security policies and security awareness and education programs within the Component. 5.5. DoD Senior Officials of the Intelligence Community and Senior Intelligence Officials Designated Under paragraph 5.4., above, shall: 5.5.1. Protect intelligence and intelligence sources and methods from unauthorized disclosure and administer SCI security programs within their respective organizations, consistent with guidance established by the DCI. 5.5.2. Be responsible for ensuring that adequate funding and other resources are available for effective implementation of SCI security policies and procedures and associated security awareness and education programs within the Component. 6. EFFECTIVE DATE This Directive is effective immediately.