An Acronym Guide for SCIF and SAPF Construction

Construction of SCIFs is always related to United States Government programs. With that comes the use of acronyms for shorthand communication. We at Faraday Defense understand that when moving into SCIF construction, some of these terms may sound like another language, so we wanted to provide some insight to help along the way.

SCIF – Sensitive Compartmented Information Facility
A SCIF is a U.S. Government-accredited facility built with multiple levels of mitigation to store, discuss, and process SCI.

SAPF – Special Access Program Facilities
SAPFs are built to the same standards as SCIFs; however, they have some internal procedural standards that may differ from a SCIF.

T-SCIF – Temporary SCIF
A short-term solution for secure facility needs. Accreditation must be reviewed within one year of commissioning.

CA – Compartmented Area
A single SCIF may house multiple programs within its perimeter. These programs will be separated within the SCIF and may or may not have the same security requirements.

CUA – Co-Utilization Agreement
A document submitted to the AO for approval before construction to authorize the operation of multiple programs within a secure facility.

ICD 705 – Intelligence Community Directive 705
A document that outlines the technical specifications for construction and management of SCI. This document is also commonly referred to as the Tech Spec.

SCI – Sensitive Compartmented Information
A classified information program that segregates data into compartments, requiring clearance for additional protection and controlled dissemination.

AO – Accreditation Official
The government personnel who have the final authority on mitigation levels required for a facility. They also provide final approval after construction for program commissioning.

CSA – Cognizant Security Authority
An individual who acts as a liaison for the AO but does not have final accreditation authority.

SSM – Site Security Manager
Ensures compliance with ICD 705 and the CSP during the construction of a secure facility and reports any violations to the AO.

CST – Construction Surveillance Technician
An individual responsible for maintaining security and personnel oversight during construction.

FSO – Field Security Officer
Ensures an operational facility maintains compliance with U.S. Government classified information security standards and personnel clearances.

TEMPEST – Transient Electromagnetic Pulse Emanation Standard
DoD-developed standards designed to protect electronic information from interception through electromagnetic radiation.

CTTA – Certified TEMPEST Technical Authority
Works closely with the AO to determine required TEMPEST countermeasures for facility mitigation.

STC – Sound Transmission Class
A rating assigned to a facility or its components to measure the reduction of audible transmissions from within the facility.

RA – Risk Assessment
Conducted early in the planning process to evaluate threats, vulnerabilities, probabilities, and consequences, determining security requirements for the facility.

SID – Security in Depth
A strategy that defines multiple layers of security to deter, detect, delay, and deny unauthorized access to the facility.

CSP – Construction Security Plan
A security plan document that monitors personnel and site control during the construction of a secure facility.

FFC – Fixed Facility Checklist
An inspection document reviewing SID, IDS, TEMPEST, STC, doors, and other facility elements. It is periodically completed, often by the FSO.

FCL – Facility Security Clearance
A government-issued approval determining if a contractor is authorized to access classified information.

IDS – Intrusion Detection System
The primary security system used to monitor and protect a facility when unoccupied. It must comply with UL 2050 standards.

ACS – Access Control System
A security system managing entry points into a facility, typically requiring two-factor authentication (2FA).

2FA – Two-Factor Authentication
Used in ACS systems, 2FA requires two of the following three factors:

• Knowledge Factor (something you know, e.g., PIN or password)
• Possession Factor (something you have, e.g., PIV card or key)
• Inherence Factor (something you are, e.g., fingerprint or retina scan)

CCTV – Closed-Circuit Television
A video surveillance system that transmits secured video signals to a dedicated location.

UL – Underwriters Laboratories
A nonprofit third-party testing organization that evaluates product safety and compliance before distribution.

RFI – Request for Information
A formal request used to obtain additional details not previously provided in documentation. It is typically logged for tracking and response verification.

RFQ – Request for Quote / RFP – Request for Proposal
A solicitation to contractors requesting pricing and a scope of work (SOW) for facility construction.

SOW – Scope of Work
A detailed outline specifying facility requirements, space needs, and project timelines.

SW – Schematic Design
The initial conceptual design phase that visualizes facility layout.

DD – Design Development
The detailed planning stage, refining construction plans through multiple revisions.

CD – Construction Documents
The finalized set of drawings used as the contractor’s reference throughout the project.

ROM – Rough Order of Magnitude
A preliminary cost estimate provided within a percentage of accuracy (e.g., a ROM of $100,000 at 30% could result in a final cost between $70,000 and $130,000). The industry standard is -25% / +75%.

CONUS – Contiguous United States
Refers to SCIF/program locations within the mainland U.S.

OCONUS – Outside the Contiguous United States
Refers to SCIF/program locations outside the mainland U.S.

RF – Radio Frequency
A range of electromagnetic waves used for data transmission.

dB – Decibel
A unit of measurement used for sound levels and electromagnetic signal attenuation.

EMI – Electromagnetic Interference
The disruption of an electrical circuit due to interference from another device.

GSA – General Services Administration
A government agency responsible for managing and supporting federal agency operations while minimizing costs.

The above is an overview of terms you may hear throughout the lifecycle of a SCIF/SAPF. If any terms or acronyms arise during the procurement of your secure facility, please reach out to us at Faraday Defense—we’re here to assist.