ACCREDITATION RESPONSIBILITIES FOR AUTOMATED SCI HANDLING SYSTEMS

• Document Type: CREST
• Collection: General CIA Records
• Document Number (FOIA) /ESDN (CREST): CIA-RDP89B01354R000400580005-0
• Release Decision: RIPPUB
• Original Classification: C
• Document Page Count: 1
• Document Creation Date: December 27, 2016
• Document Release Date: July 24, 2013
• Sequence Number: 5
• Publication Date: August 10, 1984
• Content Type: MEMO

LUNriuBlIA
Declassified in Part - Sanitized Copy Approved for Release 2013/07/24: CIA-RDP89B01354R000400580005-0
The Director of Central Intelligence
Washington, D C 20505
10 August 1984
MEMORANDUM FOR: Members, National Foreign Intelligence Board
SUBJECT: Accreditation Responsibilities for Automated SCI
Handling Systems
1. The protection of sensitive compartmented information (SCI) handled in
automated systems is one of the most important responsibilities of the
National Foreign Intelligence Board. The means for achieving acceptable
levels of protection for SCI is both complex and costly and hence will
probably be a lengthy process.
2. One immediate step toward better protection of SCI is to strengthen
supporting NFIB policies. In this regard, a concern of mine has been the
manner in which the policy responsibility for accrediting automated SCI
handling systems has been implemented in some cases by delegating accredi-
tation actions to organizations outside the Intelligence Community (IC).
Decisions regarding the impact of SCI compromise on collection resources, on
sources and methods, on relationships of our government with other
governments, on technological developments, and the like can best, and often
can only, be made by NFIB seniors.
3. Present policies that permit operational users and system
developmental agencies outside the IC to determine what risks are acceptable
in handling SCI raise real questions about NFIB's governance of its
responsibilities in regard to the protection of automated systems processing
Sc'.
4. Accordingly, I am requesting, consistent with the provisions of DCID
1/16, that NFIB members take the necessary actions to retain or return to NFIB
officials all delegations of accreditation authority and related actions for
automated systems handling SCI: this should be accomplished within sixty days.
5. It appears that NFIB members may lack sufficient accreditation
resources and that resource estimates for such action may not be readily
available. As NFIB members and officials accumulate and project resource
estimates, I will assist as appropriate in NFIB budge r support.
William J.
25X1
COMIDLNIIAL
Declassified in Part - Sanitized Copy Approved for Release 2013/07/24: CIA-RDP89B01354R000400580005-0