Special access program

Last updated

Special access programs (SAPs) in the U.S. Federal Government are security protocols that provide highly classified information with safeguards and access restrictions that exceed those for regular (collateral) classified information. SAPs can range from black projects to routine but especially-sensitive operations, such as COMSEC maintenance or presidential transportation support. In addition to collateral controls, a SAP may impose more stringent investigative or adjudicative requirements, specialized nondisclosure agreements, special terminology or markings, exclusion from standard contract investigations (carve-outs), and centralized billet systems. [1] Within the Department of Defense, SAP is better known as "SAR" by the mandatory Special Access Required (SAR) markings.

Contents

History

March 22, 1940

Shortly before America's involvement in World War II Franklin D. Roosevelt signs Executive Order 8381, creating the three security levels for his country's most important documents- Restricted, Confidential, and Secret. [2]

February 1, 1950

After the conclusion of World War II, President Harry S. Truman issues Executive order 10104, and creates the "Top Secret classification" designation. [3]

November 5, 1953

Dwight D. Eisenhower issues Executive order 10501. It drops the "restricted" classification level. It removes classification authority from 28 government entities and limits its use in 17 more. There are now explicit guidelines for the remaining three classification levels to prevent a systematic flood of classified documents coming from the Pentagon and other agencies. The Pentagon responds by creating its own "special access" labels to further insulate classified information from outside influence. [4] [5]

March 8, 1972

In Executive Order number 11652 Richard M. Nixon legitimizes the use of special access controls and the "special access program" is finally made official. [5] [6]

Types and categories

Types

Two types of SAP exist – acknowledged and unacknowledged. The existence of an acknowledged SAP may be publicly disclosed, but the details of the program remain classified. An unacknowledged SAP (or USAP) is made known only to authorized persons, including members of the appropriate committees of the United States Congress. Waived SAPs are a subset of unacknowledged SAPs in the Department of Defense. These SAPs are exempt by statutory authority of the Secretary of Defense from most reporting requirements and, within the legislative branch, the only persons who are required to be informed of said SAPs are the chairpersons and ranking committee members of the Senate Appropriations Committee, Senate Armed Services Committee, House Appropriations Committee, and the House Armed Services Committee. [7] Oftentimes, this notification is only oral. [8] [9]

Categories

There are three categories of SAPs within the Department of Defense: [10]

Only the Director of National Intelligence may create IN-SAPs. Sensitive Compartmented Information (SCI) control systems may be the most well-known intelligence SAPs. The treatment of SCI is singular among SAPs, and it seems there is some disagreement within the government as to whether or not SCI is a SAP. Defense Department sources usually state that it is, [11] and at least one publication refers to a separate SCI-SAP category alongside the three listed above. [12] The Intelligence Community, drawing on the DNI's statutory responsibility to protect intelligence sources and methods, finds a legal basis for SCI separate from that of SAPs, and consequently consider SCI and SAPs separate instances of the more general controlled access program. [13]

Marking

SAP documents require special marking to indicate their status. The words SPECIAL ACCESS REQUIRED, followed by the program nickname or codeword, are placed in the document's banner line.

Abbreviations

Abbreviations may be used for either element. Portion markings use SAR and the program's abbreviation. For example, a secret SAP with the nickname MEDIAN BELL would be marked SECRET//SPECIAL ACCESS REQUIRED-MEDIAN BELL. Portions would be marked (S//SAR-MB). [14]

Multiple SAPs

Multiple SAPs are separated by slashes.

Compartments

Compartments within SAPs may be denoted by a hyphen, and are listed alphanumerically. Subcompartments are separated by spaces, and are also listed alphanumerically. Markings do not show the hierarchy beyond the sub-compartment level. Sub-sub-compartments are listed in the same manner as sub-compartments. [15] A more complex banner line with multiple SAPs and subcompartments might read TOP SECRET//SAR-MB/SC-RF 1532-RG A691 D722. [16]

Variations

Older documents used different standard for marking. The banner line might read SECRET//MEDIAN BELL//SPECIAL ACCESS REQUIRED, and the portion marking would read (S//MB). [17] Other variations move the special access warning to a second line, which would read MEDIAN BELL Special Control and Access Required (SCAR) Use Only or some other phrase directed by the program security instructions. [18]

Involved individuals

SAP access ergo policy on classified security categories de facto is understood informally as described as those who need to know have access, access is "on a need to know basis". [19] A SAP can only be initiated, modified, and terminated within their department or agency; the Secretary of State, Secretary of Defense, Secretary of Energy, Secretary of Homeland Security, the Attorney General, the Director of National Intelligence; their principal deputies (e.g. the Deputy Secretary of State in DoS and the Deputy Secretary of Defense in DoD); or others designated in writing by the President. [20] These offices are better known as 'classification authorities.' They retain the right to declassify or revise classification levels.

The U.S. Secretary of Defense is obliged to submit a report, submitted not later than the 1st of March for each year, to the defense committee on special access programs. [21]

Examples

The following national or international SAPs, unless otherwise noted, are identified in 32 CFR 154.17:

See also

Related Research Articles

<span class="mw-page-title-main">Classified information</span> Material that government claims requires confidentiality

Classified information is material that a government body deems to be sensitive information that must be protected. Access is restricted by law or regulation to particular groups of people with the necessary security clearance and need to know, and mishandling of the material can incur criminal penalties.

A security clearance is a status granted to individuals allowing them access to classified information or to restricted areas, after completion of a thorough background check. The term "security clearance" is also sometimes used in private organizations that have a formal process to vet employees for access to sensitive information. A clearance by itself is normally not sufficient to gain access; the organization must also determine that the cleared individual needs to know specific information. No individual is supposed to be granted automatic access to classified information solely because of rank, position, or a security clearance.

<span class="mw-page-title-main">Freedom of Information Act (United States)</span> 1967 US statute regarding access to information held by the US government

The Freedom of Information Act, 5 U.S.C. § 552, is the United States federal freedom of information law that requires the full or partial disclosure of previously unreleased or uncirculated information and documents controlled by the U.S. government, state, or other public authority upon request. The act defines agency records subject to disclosure, outlines mandatory disclosure procedures, and includes nine exemptions that define categories of information not subject to disclosure. The act was intended to make U.S. government agencies' functions more transparent so that the American public could more easily identify problems in government functioning and put pressure on Congress, agency officials, and the president to address them. The FOIA has been changed repeatedly by both the legislative and executive branches.

<span class="mw-page-title-main">Sensitive compartmented information</span> Information relative to U.S. National Security

Sensitive compartmented information (SCI) is a type of United States classified information concerning or derived from sensitive intelligence sources, methods, or analytical processes. All SCI must be handled within formal access control systems established by the Director of National Intelligence.

<span class="mw-page-title-main">Bureau of Intelligence and Research</span> Intelligence agency in the U.S. State Department

The Bureau of Intelligence and Research (INR) is an intelligence agency in the United States Department of State. Its central mission is to provide all-source intelligence and analysis in support of U.S. diplomacy and foreign policy. INR is the oldest civilian element of the U.S. Intelligence Community and among the smallest, with roughly 300 personnel. Though lacking the resources and technology of other U.S. intelligence agencies, it is "one of the most highly regarded" for the quality of its work.

<i>The Puzzle Palace</i>

The Puzzle Palace is a book written by James Bamford and published in 1982. It is the first major, popular work devoted entirely to the history and workings of the National Security Agency (NSA), a United States intelligence organization. The title refers to a nickname for the NSA, which is headquartered in Fort Meade, Maryland. In addition to describing the role of the NSA and explaining how it was organized, the book exposed details of a massive eavesdropping operation called Operation Shamrock. According to security expert Bruce Schneier, the book was popular within the NSA itself, as "the agency's secrecy prevents its employees from knowing much about their own history".

<span class="mw-page-title-main">Sensitive compartmented information facility</span> Description of the United States military term SCIF

A sensitive compartmented information facility, in United States military, national security/national defense and intelligence parlance, is an enclosed area within a building that is used to process sensitive compartmented information (SCI) types of classified information.

The United States government classification system is established under Executive Order 13526, the latest in a long series of executive orders on the topic beginning in 1951. Issued by President Barack Obama in 2009, Executive Order 13526 replaced earlier executive orders on the topic and modified the regulations codified to 32 C.F.R. 2001. It lays out the system of classification, declassification, and handling of national security information generated by the U.S. government and its employees and contractors, as well as information received from other governments.

The Special Security Office (SSO) is a function within multiple arms of the United States federal government and armed forces with the mission to provide a reliable and secure means to receive and disseminate Sensitive Compartmented Information (SCI) and Special Access Programs (SAP) to authorized recipients in the United States government and military organizations. In the military, they are administered by the National Security Agency or Defense Intelligence Agency depending on the command's mission.

The Joint Worldwide Intelligence Communication System is the United States Department of Defense's secure intranet system that houses top secret and sensitive compartmented information. JWICS superseded the earlier DSNET2 and DSNET3, the Top Secret and SCI levels of the Defense Data Network based on ARPANET technology.

Project Mockingbird was a wiretapping operation initiated by United States President John F. Kennedy to identify the sources of government leaks by eavesdropping on the communications of journalists.

Executive oversight of United States covert operations has been carried out by a series of sub-committees of the National Security Council (NSC).

National intelligence programs, and, by extension, the overall defenses of nations, are vulnerable to attack. It is the role of intelligence cycle security to protect the process embodied in the intelligence cycle, and that which it defends. A number of disciplines go into protecting the intelligence cycle. One of the challenges is there are a wide range of potential threats, so threat assessment, if complete, is a complex task. Governments try to protect three things:

The United States Intelligence Community A-Space, or Analytic Space, is a project started in 2007 from the Office of the Director of National Intelligence's (ODNI) Office of Analytic Transformation and Technology to develop a common collaborative workspace for all analysts from the USIC. It is accessible from common workstations and provides unprecedented access to interagency databases, a capability to search classified and unclassified sources simultaneously, web-based messaging, and collaboration tools. The Defense Intelligence Agency (DIA) is the executive agent for building the first phase of A-Space. Initial operational capability was scheduled for December 2007. A-Space went live on the government's classified Joint Worldwide Intelligence Communications System 22 September 2008. A-Space is built on Jive Software's Clearspace application.

For Official Use Only (FOUO) is an information security designation used by some governments.

In information security, the process of being read into a compartmented program generally entails being approved for access to particularly sensitive and restricted information about a classified program, receiving a briefing about the program, and formally acknowledging the briefing, usually by signing a non-disclosure agreement describing restrictions on the handling and use of information concerning the program. Officials with the required security clearance and a need to know may be read into a covert operation or clandestine operation they will be working on. For codeword–classified programs, an official would not be aware a program existed with that codeword until being read in, because the codewords themselves are classified.

A variety of networks operating in special security domains handle classified information in the United States or sensitive but unclassified information, while other specialized networks are reserved specifically for unclassified use by the same agencies. Some sites accessed from these networks have been referred to as "classified websites" in official communications, such as the American embassy "Amman's Classified Web Site at http://www.state.sgov.gov/pinea/amman/" and "Mexico City's Classified Web Site at http://www.state.sgov.gov/p/wha/mexicocity" Some of these trace back to the Defense Data Network which split from the Internet in 1983.

<span class="mw-page-title-main">United States Army Counterintelligence</span>

United States Army Counterintelligence (ACI) is the component of United States Army Military Intelligence which conducts counterintelligence activities to detect, identify, assess, counter, exploit and/or neutralize adversarial, foreign intelligence services, international terrorist organizations, and insider threats to the United States Army and U.S. Department of Defense (DoD).

The Government Security Classifications Policy (GSCP) is a system for classifying sensitive government data in the United Kingdom.

References

  1. DOD 5200.1-R, 1997, p. 86
  2. "Executive Order No. 8381".
  3. "Executive Orders". National Archives. 2016-08-15. Retrieved 2019-06-01.
  4. "EXECUTIVE ORDER 10501 SAFEGUARDING OFFICIAL INFORMATION IN THE INTERESTS OF THE DEFENSE OF THE UNITED STATES | CIA FOIA (foia.cia.gov)". www.cia.gov. Archived from the original on January 23, 2017. Retrieved 2019-06-01.
  5. 1 2 Relyea, Harold C. (October 2010). Security Classified and Controlled Information: History, Status, and Emerging Management Issues. DIANE Publishing. ISBN   9781437935776.
  6. "EXECUTIVE ORDER 11652 -- 'CLASSIFICATION AND DECLASSIFICATION OF NATIONAL SECURITY INFORMATION AND MATERIAL' | CIA FOIA (foia.cia.gov)". www.cia.gov. Archived from the original on January 23, 2017. Retrieved 2019-06-01.
  7. 10 USC 119
  8. "Commission on Protecting and Reducing Government Secrecy".
  9. "Hearing before the Select Committee on Intelligence" (PDF).
  10. AR 380-381, 2004, p. 11
  11. 32 CFR 154.17 and NISPOM, 2006, p. 9-3-1
  12. AR 380-5, 2000, p. 11
  13. DCID 3/29, 1995
  14. Authorized Classification and Control Markings Register v1.2, p. 9
  15. Intelligence Community Authorized Classification and Control Markings Register and Manual, v5.1, p. 67-68
  16. For the aforementioned notional MEDIAN BELL program, and the RED FAN 1532 and RED GLUE A691 and D722 sub-compartments of the notional SPACKLE CEILING program. It is possible that A691 is a sub-sub-compartment of D722, or vice versa.
  17. AR 380-5, 2000, p. 221
  18. AR 380-381, 2004, p. 37
  19. F.A.S. - Intelligence and Security Doctrine published by the Federation of American Scientists [Retrieved 2015-12-13]
  20. Executive Order 13526
  21. United States Code, 2006, V. 4, Title 8, Aliens and Nationality, to Title 10, Armed Forces, Sections 101-1805 -(p.593) printed by U.S. Government Printing Office [Retrieved 2015-12-12]
  22. AR 380-67, 1988, p. 17