Acronym Guide for SCIFs and SAPF Construction

SCIF accreditation can feel like swimming through a bowl of alphabet soup—DCID, ICD, NISPOM, DoDM, TEMPEST... the list goes on. Don’t get lost in the acronyms—we’re here to make sense of it all.

Navigating the world of high-security environments means managing an overwhelming number of acronyms. If you work in the Sensitive Compartmented Information Facility (SCIF) or Special Access Program Facility (SAPF) construction space, you’re likely inundated with acronyms daily. To make your life easier, here’s a comprehensive guide to some of the most common acronyms you’ll encounter. Keep this list handy to cut through the confusion and stay on top of your game.

---

ACS: Access Control System

The technology used to manage who enters and exits a SCIF, such as fingerprint scanners, card readers, or PIN pads.

ADA: Americans with Disabilities Act

This law ensures facilities are accessible to individuals with disabilities, requiring features like wheelchair ramps and accessible doorways.

AO: Accrediting Official

The decision-maker responsible for granting final accreditation to a project.

CA: Compartmented Area

Subdivisions within a SCIF that enable multiple classified programs to operate without needing separate facilities.

CCTV: Closed Circuit Television

A video surveillance system that transmits footage to designated monitors for secure viewing.

COMSEC: Communications Security

Measures to protect information shared via telecommunications, a subset of OPSEC.

CSA: Cognizant Security Authority

The entity overseeing security requirements and protocols for a SCIF or SAPF.

CSP: Construction Security Plan

A document outlining the security measures for the design and construction of a SCIF or SAPF.

CTTA: Certified TEMPEST Technical Authority

A key official who provides oversight for TEMPEST mitigations in the construction process.

CUA: Co-Utilization/Co-Use Agreement

A required document when multiple programs share a single facility.

DNI: Director of National Intelligence

The head of the U.S. Intelligence Community.

FFC: Fixed Facility Checklist

A document providing critical details about a SCIF or SAPF, including the SID, doors, and IDS components.

FSO: Facility Security Officer

An official in a clearance-holding company who oversees security operations and personnel clearances.

GSA: General Services Administration

A government body that manages federal agency operations and approves containers for classified materials.

HVAC: Heating, Ventilation, Air Conditioning

An essential system in all types of construction, often addressed collectively as HVAC.

ICD: Intelligence Community Directive

Typically referring to ICD 705, which sets the standards for SCIF and SAPF construction, established by the DNI.

IDS: Intrusion Detection System

Technology like motion detectors and glass break sensors that monitor unauthorized access attempts.

MEP: Mechanical, Electrical, Plumbing

Three critical components of construction, requiring attention to mitigate risks from penetrations.

MFA: Multi-Factor Authentication

A security system requiring multiple forms of identity verification to grant access.

NIC: Noise Isolation Class

A field measurement of sound insulation, differing from STC, which is measured in a lab.

OPSEC: Operations Security

Systems and processes to protect sensitive information from adversaries.

ROM: Rough Order of Magnitude

An initial estimate of project costs.

RF: Radio Frequency

A measure of electromagnetic waves, often discussed in the context of shielding to prevent compromising emanations.

RFI: Request for Information

A step in the project proposal process where contractors seek clarification to prepare their bids.

RFP: Request for Proposal

A formal request inviting contractors to submit detailed project proposals and cost estimates.

RFQ: Request for Quote

A request for contractors to submit price bids when the project owner has a clear vision of the requirements.

SAP: Special Access Program

Protocols providing additional safeguards for highly classified information.

SCI: Sensitive Compartmented Information

Classified intelligence requiring special protection due to its sensitive nature.

SID: Security in Depth

The multiple layers of security that protect an asset.

SOP: Standard Operating Plan

Instructions designed to standardize routine operations.

SSM: Site Security Manager

A pivotal role in SCIF and SAPF construction, overseeing security during the build and compiling the accreditation package.

STC: Sound Transmission Class

A lab measurement of sound insulation in materials like wall assemblies.

TEMPEST:

Not an acronym but a term referring to the study and mitigation of unintended emanations that could compromise security if intercepted.

TFA: Two-Factor Authentication

A security method requiring two types of identity verification for access.

UL: Underwriters Laboratories

A safety organization that sets standards for alarm systems and other secure technologies.