What Is a SCIF? Secure Rooms and the Safes Inside Them

A SCIF (Sensitive Compartmented Information Facility) is an accredited room or building where the US government handles its most sensitive intelligence. It’s built to Intelligence Community Directive 705, and the SCI inside usually sits in a GSA-approved safe when it isn’t in use.

SCIF at a glance

The official definition is drier than any spy film. A SCIF is “an area, room, group of rooms, buildings, or installation certified and accredited” as meeting the Director of National Intelligence’s security standards for processing, storing or discussing SCI.¹ ICD 705, signed on 26 May 2010, made that a rule: all SCI must be handled in an accredited SCIF, every SCIF must meet uniform requirements, and each must be accredited before it’s used. The head of an intelligence agency may accredit, re-accredit and de-accredit SCIFs, or hand the job to one named Accrediting Official.²

What “sensitive compartmented information” means

SCI is classified information “concerning or derived from intelligence sources, methods, or analytical processes” that has to be handled inside formal access control systems set up by the Director of National Intelligence.³ In plain English, it’s intelligence that could give away how it was gathered. A clearance level on its own isn’t the point: SCI is controlled compartment by compartment, so access depends on being approved for the right one.

“Compartmented” is the key word. Each control system is a separate compartment with its own list of people. A CIA study written in 1977 found the compartments had multiplied so far that it was “difficult to find anyone who is cleared for all of them or even witting of the existence of all of them”.⁴ A SCIF is the physical side of that idea: a room where people with the right access can read, talk and work without anyone outside hearing or seeing.

Where SCIFs came from

The compartments came first. The CIA’s 1977 study traces them to the codebreaking of the early 1940s: an Army G-2 agreement with naval intelligence of 23 June 1941 named only nine people who could receive communications intelligence (COMINT). COMINT became a formal compartment in 1946, and in 1952 responsibility for it went to the new National Security Agency.⁴

The Cold War added more. CIA’s U-2 flights led, in the mid-1950s, to the TALENT compartment, which protected both the aircraft and its photographs. A presidential directive of 20 August 1960 widened TALENT and created a sub-compartment, KEYHOLE, for intelligence collected by satellite.⁴ The same study mentions, in passing, a facility the State Department set up for storing TALENT-KEYHOLE material, but it doesn’t describe it.

When did those rooms get a rulebook? We couldn’t find a public document that names the first room called a SCIF. The earliest standard we could read in full is a United States Intelligence Board policy statement approved on 30 April 1973. It set minimum standards for “facilities for storing and processing sensitive compartmented information”, covering construction, alarms, sound attenuation and storage.⁵ The Director of Central Intelligence replaced it with new SCIF standards, effective 23 April 1981, which already defined an “SCI Facility (SCIF)” much as the term is used today.⁶

The 1973 rules read like a safe catalogue. Doors in some categories needed a permanently installed GSA-approved Group 1 combination lock with an escape mechanism, and closed storage meant GSA-approved security containers at least as resistant to surreptitious entry as a Class 3 or Class 6 container.⁵ By 1981 the bar for closed storage was simply Class 6.⁶ The next directive, DCID 6/9, was dated by its own preface to 30 January 1994, with a manual effective 18 November 2002; ICD 705 rescinded it in 2010.⁷²

Timeline

• 1941 An Army G-2 and naval intelligence agreement limits COMINT to nine named recipients.
• 1946 COMINT becomes a formal compartment.
• Mid-1950s The TALENT compartment is set up to protect U-2 photography.
• 1960 KEYHOLE is created for satellite intelligence.
• 1961 An executive order drops the rule that GSA security containers must be insulated.
• 1973 The US Intelligence Board issues physical security standards for compartmented information facilities.
• 1981 New Director of Central Intelligence standards for SCIFs take effect.
• 1992 The Mas-Hamilton X-07, the first FF-L-2740 lock, is approved and fitted to new containers.
• 2010 ICD 705 makes accredited SCIFs mandatory for all SCI.
• 2012 From 1 October, all classified information must be kept in GSA-approved containers and vault doors.

What makes a room a SCIF

The detail lives in the Technical Specifications, a long public document prepared by the National Counterintelligence and Security Center. Its stated aim is to protect SCI against compromising emanations, inadvertent observation and disclosure by unauthorised people, and to detect unauthorised entry.⁸ We’ve kept to that public level here. Broadly, a room has to pass on four fronts.

The sound groups are described in wonderfully human terms. In a Sound Group 3 room (STC 45 or better), loud speech inside can be faintly heard but not understood outside. Sound Group 4 (STC 50 or better) is meant for very loud sounds: “loud singing, brass music, or a radio at full volume” should be heard faintly or not at all.⁸ Somebody, at some point, had to test that.

The fourth front is people and their gadgets. Entry goes through an access control system, visitors are controlled, and portable electronic devices are sorted by risk. Only low-risk devices may come in; multi-function mobile phones are listed among the high-risk examples, and those need mitigation and the Accrediting Official’s approval first.⁸ Rooms are inspected, and technical surveillance countermeasures (TSCM) checks can be part of that.⁸ The 1973 standard was already setting sound attenuation classes for SCI rooms, so the acoustic side is nothing new.⁵

SCIF vs SAPF: what’s the difference?

A SAPF (Special Access Program Facility) looks much the same from the corridor. The difference is what’s inside and who signs it off. A special access program is “a program established for a specific class of classified information” with safeguarding and access rules beyond the normal ones for that classification level.¹⁰ A SAPF is the space accredited in writing by the cognizant Program Security Officer for that program’s information, hardware and materials.¹¹

The two meet in the middle. Executive Order 13526 lets six senior officials (the Secretaries of State, Defense, Energy and Homeland Security, the Attorney General and the Director of National Intelligence) create special access programs, and gives the DNI those that concern intelligence sources and methods.¹⁰ The Technical Specifications add that a SAPF built to them can be accredited as a SCIF after a review of its construction documents.⁸

The safes inside: GSA-approved security containers

This is where SCIFs meet our usual subject. Open storage is the exception: the 1981 standards said it “shall be avoided if possible”.⁶ The norm is “closed storage”, which DCID 6/9 defined it as storing SCI “in properly secured GSA approved security containers within an accredited SCIF”, and anything else as open storage.⁷ The Technical Specifications still say SCI in a temporary SCIF must go in GSA-approved containers, and that SCI used in a secure working area must be locked away in them, in a SCIF or a vault, or destroyed, when the room is empty.⁸ So the typical SCIF has a safe in it: a steel filing cabinet with a combination dial on the drawer.

GSA sorts them into two classes, both approved for Top Secret, Secret and Confidential information.¹²

The GSA approval label

What makes a grey cabinet a GSA container is a label. Equipment must carry a GSA approval label, or a recertification label, on the front to hold classified information. The outside label reads “General Services Administration Approved Security Container” (or “Vault Door”), and a “Test Certification” label sits inside the locking drawer or door. New file cabinets, weapons containers and vault doors come with a red label, IPS cabinets with a blue one.¹² A black label means the container was made before 1990, and those are being phased out because of age, lack of parts and security concerns.¹³

From a designer’s point of view it’s a small, plain label doing a lot of work. Without it, the government treats even a perfect-looking cabinet as just a cabinet. If a container is opened or repaired other than as Federal Standard 809 allows, both labels come off.¹²

From dials to FF-L-2740 locks

For decades the lock was a mechanical dial. Mosler’s operating sheet for its “GSA MRK 302”, a three-tumbler key-change combination lock made in Group 1R and Group 1 versions, was filed in a volume titled “GSA Products”.¹⁴ If you know the old safe dials in our guide to how old safe combination locks work, you’d recognise it at once.

Then the government switched to electronics. Federal Specification FF-L-2740 covers electromechanical combination locks. The first lock approved to it was the Mas-Hamilton X-07, in February 1992, and since 10 March 1992 GSA-approved containers and vault doors have left the factory with an FF-L-2740 lock fitted.¹⁵ In 1993 Congress directed the Defense Department to replace the combination locks on containers and spaces protecting classified information, and a 1997 Navy newsletter said the X-07 was then the only lock that met the specification.¹⁶ Six locks have been approved under FF-L-2740: the X-07 (1992), X-08 (1999), Kaba Mas X-09 (2002), Sargent & Greenleaf 2740 (2010), Kaba Mas X-10 (2013) and S&G 2740B (2013).¹⁵ GSA lists the X-10 and the 2740B as today’s two.¹³

The SF-700 form taped inside

Open the control drawer of a container in service and you should find paperwork taped inside. Standard Form 700, “Security Container Information”, is a three-part form: a cover sheet, an envelope and a tear-off tab. The filled-in cover sheet goes inside the control drawer, or on the inside face of a vault door, with tape or a magnetic holder. It records the activity, the container, the lock and who to call if the container is found open. The tab with the combination goes into the envelope, sealed, to the security manager.¹⁷

The completed combination part is itself classified at the highest level the container is approved to hold, and the form is updated every time the combination changes.¹⁷ Combinations must be changed when a lock is first used, when someone who knows it no longer needs access, and when it may have been compromised.⁹

Which American safe makers built GSA containers

The first GSA containers were fire safes as much as security cabinets. According to the Defense Department’s lock programme, Federal Specification AA-F-357 required them to be insulated to protect paper from fire, and Herring-Hall-Marvin built the first GSA-approved insulated security containers.¹⁸

Diebold took over that work when it bought Herring-Hall-Marvin. The lock programme gives the year as 1960; Diebold’s company history puts the purchase of the Hamilton, Ohio firm in September 1959.¹⁸¹⁹ In 1961 an executive order removed the insulation requirement, but Diebold kept making insulated GSA-approved containers, alongside many uninsulated ones, until 1982. Neither firm used asbestos in the insulation of its GSA-approved containers.¹⁸ Today’s main cabinet specification, AA-F-358, is titled “Filing Cabinet, Legal and Letter Size, Uninsulated, Security”.¹²

The insulated steel office cabinet was an older American idea. Willis Dick’s 1906 patent for a fire-resisting cabinet launched the Safe-Cabinet Company, later part of Remington Rand. But Remington Rand’s insulated containers were never GSA-approved, the lock programme says, and most contain some asbestos.¹⁸

Mosler said it entered “the government security container business” after the Second World War, making products “to protect the nation’s classified documents”, and in 1998 claimed it still led that business.²⁰ That’s the company’s own marketing, but its paperwork backs up the line of work: the MRK 302 dial sheet was filed in a Mosler volume titled “GSA Products” and issued from Hamilton, Ohio, when Mosler was “An American-Standard Company”.¹⁴

The name you’re most likely to see on a newer container is Hamilton. Hamilton Products Group, the government arm of Hamilton Safe, said in 2015 it had been an approved GSA supplier for more than 20 years, making Class 5 and 6 filing cabinets, field safes, map and plan cabinets and IPS containers; in 2017 it said these were made in its own Ohio facilities.²¹²² The Navy’s lock programme was already pointing buyers of GSA field safes to Hamilton Products Group in 2002.¹⁸ It’s one of nine manufacturers on GSA’s approved list in June 2026, with A&H, Alpha, American Made, Brown, International Vault, Overly, Trusted Systems and Will-Burt.¹²

Sources for the myths: the definitions in ICD 705 and CNSSI 4009;¹ the GSA purchasing guide on labels, specifications and refurbished containers;¹² the lock programme on insulation;¹⁸ and its container FAQ, which says used or refurbished containers bought from a third-party vendor may not be used.²³ If you’ve got an old dial-locked filing safe with a maker’s plate and want to know who made it and roughly when, send us photos of the plate and any labels.

Temporary and residential SCIFs

Not every SCIF is a basement room with a vault door. The Technical Specifications have a whole chapter on temporary, airborne and shipboard SCIFs for contingency, emergency and tactical military operations. A ground-based temporary SCIF (T-SCIF) can be set up in a building or bunker, or in a truck-mounted or towed shelter, a prefabricated building or a tent, though hardened structures are preferred. Its accreditation can’t run beyond a year without mission justification, and all SCI in it goes into GSA-approved containers unless an exception is approved.⁸ The idea is old: the 1981 standards already had a section on tactical, combat, portable and mobile SCIFs.⁶

There’s a lighter category too. A Temporary Secure Working Area is accredited for handling or discussing SCI for less than 40 hours a month, for 12 months at most, and nothing can be stored there.⁸ Travel is another case: press explainers describe hotel rooms being set up as temporary SCIFs when presidents travel, with calls outside the room made over encrypted lines.²⁴²⁵

SCIFs have also been built in the private homes of senior officials, according to press reports.²⁵ We couldn’t find a separate standard for homes in the published Technical Specifications. As far as the public rules go, a room in a house is a SCIF only if it’s built to ICD 705 standards and accredited like any other, and the SCI in it still has to be stored, used and discussed inside that accredited space.²

Frequently asked questions