GSA PBS P 3490.3
Listed by: NARA Registry, DoD Registry, Related authorities
Designation evidence
- NARA authority row: GSA PBS P 3490.3 | status: Basic | banner: CUI.
- DoD authority row: GSA PBS P 3490.3. DoD lists this citation for the category; this DoD detail page does not display a separate Basic/Specified field.
- Related authority evidence: GSA PBS P 3490.3 | status: Basic | banner: CUI
- Related authority evidence: DoD lists this authority for the category; the linked authority text is extracted below when available.
- Registry designation context: Basic, CUI//PHYS. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling. The linked authority text contains violation, penalty, sanction, or enforcement language that may affect consequences for mishandling.
- Registry designation for this category is Basic with banner CUI//PHYS.
Extracted authority meaning
- Title: Page not found
- Registry designation context: Basic, CUI//PHYS. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling. The linked authority text contains violation, penalty, sanction, or enforcement language that may affect consequences for mishandling.
Operating conditions
- NARA category scope used with this authority: Related to protection of federal buildings, grounds or property.
- DoD category scope used with this authority: Related to protection of federal buildings, grounds, and property.
- GSA PBS P 3490.3 | status: Basic | banner: CUI
- DoD lists this authority for the category; the linked authority text is extracted below when available.
- NARA registry status: Basic. Per-authority NARA status values: Basic. NARA banner marking evidence: CUI//PHYS, CUI. The registry evidence is preserved here; detailed primary-law or regulation text analysis remains pending for this category.
- NARA category scope: Related to protection of federal buildings, grounds or property.
- DoD category scope: Related to protection of federal buildings, grounds, and property.
- Extracted authority condition: The customer portal for RWA information is called eRETA at[extportal.pbs.gsa.gov](). * request for proposals A document used in negotiated procurements to communicate government requirements to prospective contractors (firms holding Multiple Award Schedule contracts) and to solicit proposals (offers) from them. * request for quotation A document used to communicate government requirements, but which do not solicit binding offers.
- Extracted authority condition: * [Contract opportunities on SAM.gov]( "Search current federal contract opportunities and procurement notices.")Search current federal contract opportunities and procurement notices. * [Forecast of contracting opportunities]( "Anticipated contracts offered by GSA.")Anticipated contracts offered by GSA. * [Vendor support center]( "Research the federal market, report sales, and upload contract information.")Research the federal market, report sales, and upload contract information.
- Extracted authority condition: * [Governmentwide Initiatives]() * [Centers of Excellence]() * [Digital experience]() * [Emergency response]() * [Federal Cybersecurity]() * [ID, Credentials, and Access Management]() * [Information Quality]() * [Open Data]() * [Technology Modernization Fund]()
- Extracted authority condition: SFOs include the information necessary to enable prospective offerors to prepare proposals.
- Extracted authority condition: See [FAR 2.101]() at Acquisition.gov for more. * continental From [5 USC 5701(6)](), "continental United States" means the several states and the District of Columbia, but does not include Alaska or Hawaii. * contracting officer An employee who negotiates and awards contracts with vendors and who has the sole authority to change, alter or modify a contract. * contracting officer’s representative An employee whose duties are to develop proper requirements and ensure contractors meet the commitments during contract administration, including the timeliness and delivery of quality goods and services as required by the contract. * delegation of procurement authority A request of GSA where a federal agency retains and manages all aspects of the procurement process and is able to work with the selected vendor after award.
- Extracted authority condition: * [Cloud computing services]() * [Cybersecurity products and services]() * [Governmentwide acquisition contracts]() * [MAS information technology]() * [USAccess]()
Safeguarding and dissemination controls
- NARA registry control evidence: status Basic; banner marking CUI.
- DoD applicable policies: DoDI 5200.08, DoDM 5105.21, Volume 2, DoDM 5200.01, Volume 3, DoDM 5200.08, Volume 3, DoDM 5205.07, Volume 3, ICD 705
- Nara basic or specified: Basic
- Nara authority rows: GSA PBS P 3490.3 | status: Basic | banner: CUI || The Risk Management Process for Federal Facilities: An Interagency Security Committee Standard - 2024 Edition (promulgated under Executive Order 12977, as modified by Executive Order 13286) | status: Basic | banner: CUI
- Nara banner markings: CUI//PHYS, CUI
- Dod applicable policies: DoDI 5200.08, DoDM 5105.21, Volume 2, DoDM 5200.01, Volume 3, DoDM 5200.08, Volume 3, DoDM 5205.07, Volume 3, ICD 705
- No DoD required dissemination control is listed on the registry page. Apply approved limited dissemination controls only when required or permitted by the designating agency or governing authority.
- Use the registry assertions, NARA authority rows, DoD authorities, DoD policies, warning statements, required dissemination controls, and examples first. Where the cited authority does not specify a handling detail, apply CUI Basic safeguards and dissemination rules so long as they do not conflict with the authority or agency-specific controls.
- Extracted authority control: * [Human capital]() * [Industrial products and services]() * [Office management]() * [Professional services]() * [Security and protection]() * [Transportation and logistics services]()
- Extracted authority control: [Security and protection]()
- Extracted authority control: * [Cloud computing services]() * [Cybersecurity products and services]() * [Governmentwide acquisition contracts]() * [MAS information technology]() * [USAccess]()
- Extracted authority control: * [Artificial Intelligence]() * [Cybersecurity]() * [Emerging citizen technology]() * [FedRAMP]() * [Federal identity, credentials, and access management]() * [Robotic process automation community]() * [Technology modernization fund]()
- Extracted authority control: * [Governmentwide Initiatives]() * [Centers of Excellence]() * [Digital experience]() * [Emergency response]() * [Federal Cybersecurity]() * [ID, Credentials, and Access Management]() * [Information Quality]() * [Open Data]() * [Technology Modernization Fund]()
- Extracted authority control: Use[acquisition.gov]()to[browse FAR parts or subparts or download the full FAR]()in various formats. * Federal Travel Regulation The travel and relocation policy for all federal civilian employees and others authorized to travel at government expense. * FedRAMP A governmentwide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. * Fleet
- Extracted authority control: * [Accessibility statement]() * [Website Policies]() * [Reports]() * [Office of the Inspector General]() * [No FEAR Act]() * [FOIA Requests]() * [Board of Contract Appeals]()
Authority excerpts
Most relevant extracted authority passage
* [Human capital]() * [Industrial products and services]() * [Office management]() * [Professional services]() * [Security and protection]() * [Transportation and logistics services]()
Extracted authority passage 2
[Security and protection]()
Extracted authority passage 3
* [Cloud computing services]() * [Cybersecurity products and services]() * [Governmentwide acquisition contracts]() * [MAS information technology]() * [USAccess]()
Extracted authority passage 4
* [Artificial Intelligence]() * [Cybersecurity]() * [Emerging citizen technology]() * [FedRAMP]() * [Federal identity, credentials, and access management]() * [Robotic process automation community]() * [Technology modernization fund]()
Extracted authority passage 5
* [Governmentwide Initiatives]() * [Centers of Excellence]() * [Digital experience]() * [Emergency response]() * [Federal Cybersecurity]() * [ID, Credentials, and Access Management]() * [Information Quality]() * [Open Data]() * [Technology Modernization Fund]()
Extracted authority passage 6
The customer portal for RWA information is called eRETA at[extportal.pbs.gsa.gov](). * request for proposals A document used in negotiated procurements to communicate government requirements to prospective contractors (firms holding Multiple Award Schedule contracts) and to solicit proposals (offers) from them. * request for quotation A document used to communicate government requirements, but which do not solicit binding offers.
The Risk Management Process for Federal Facilities: An Interagency Security Committee Standard
Listed by: DoD Registry, Related authorities
Designation evidence
- DoD authority row: The Risk Management Process for Federal Facilities: An Interagency Security Committee Standard. DoD lists this citation for the category; this DoD detail page does not display a separate Basic/Specified field.
- Related authority evidence: DoD lists this authority for the category; the linked authority text is extracted below when available.
- Registry designation context: Basic, CUI//PHYS. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling. The linked authority text contains violation, penalty, sanction, or enforcement language that may affect consequences for mishandling.
- Registry designation for this category is Basic with banner CUI//PHYS.
Extracted authority meaning
- Partnerships and Collaboration
- Registry designation context: Basic, CUI//PHYS. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling. The linked authority text contains violation, penalty, sanction, or enforcement language that may affect consequences for mishandling.
Operating conditions
- DoD category scope used with this authority: Related to protection of federal buildings, grounds, and property.
- DoD lists this authority for the category; the linked authority text is extracted below when available.
- NARA registry status: Basic. Per-authority NARA status values: Basic. NARA banner marking evidence: CUI//PHYS, CUI. The registry evidence is preserved here; detailed primary-law or regulation text analysis remains pending for this category.
- NARA category scope: Related to protection of federal buildings, grounds or property.
- DoD category scope: Related to protection of federal buildings, grounds, and property.
- Extracted authority condition: A lock ( Lock A locked padlock ) or you’ve safely connected to the.gov website.
- Extracted authority condition: To request access, email TRIPwire at TOC@mail.cisa.gov with your full name and contact information, including email, agency name, and reason for access.
- Extracted authority condition: no-cost Cyber Services Secure by design Secure Your Business Shields Up Report A Cyber Issue
Safeguarding and dissemination controls
- DoD applicable policies: DoDI 5200.08, DoDM 5105.21, Volume 2, DoDM 5200.01, Volume 3, DoDM 5200.08, Volume 3, DoDM 5205.07, Volume 3, ICD 705
- Nara basic or specified: Basic
- Nara authority rows: GSA PBS P 3490.3 | status: Basic | banner: CUI || The Risk Management Process for Federal Facilities: An Interagency Security Committee Standard - 2024 Edition (promulgated under Executive Order 12977, as modified by Executive Order 13286) | status: Basic | banner: CUI
- Nara banner markings: CUI//PHYS, CUI
- Dod applicable policies: DoDI 5200.08, DoDM 5105.21, Volume 2, DoDM 5200.01, Volume 3, DoDM 5200.08, Volume 3, DoDM 5205.07, Volume 3, ICD 705
- No DoD required dissemination control is listed on the registry page. Apply approved limited dissemination controls only when required or permitted by the designating agency or governing authority.
- Use the registry assertions, NARA authority rows, DoD authorities, DoD policies, warning statements, required dissemination controls, and examples first. Where the cited authority does not specify a handling detail, apply CUI Basic safeguards and dissemination rules so long as they do not conflict with the authority or agency-specific controls.
- Extracted authority control: To request access, email TRIPwire at TOC@mail.cisa.gov with your full name and contact information, including email, agency name, and reason for access.
- Extracted authority control: This ISC Standard defines the criteria and processes facility security professionals should use in determining a facility's security level.
Authority excerpts
Most relevant extracted authority passage
To request access, email TRIPwire at TOC@mail.cisa.gov with your full name and contact information, including email, agency name, and reason for access.
Extracted authority passage 2
A lock ( Lock A locked padlock ) or you’ve safely connected to the.gov website.
Extracted authority passage 3
no-cost Cyber Services Secure by design Secure Your Business Shields Up Report A Cyber Issue
Extracted authority passage 4
This ISC Standard defines the criteria and processes facility security professionals should use in determining a facility's security level.
DoDI 5200.08
Listed by: Related authorities
Designation evidence
- Related authority evidence: DoD lists this applicable policy for the category; the linked policy text is extracted below when available.
- Registry designation context: Basic, CUI//PHYS. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling. The linked authority text contains violation, penalty, sanction, or enforcement language that may affect consequences for mishandling.
- Registry designation for this category is Basic with banner CUI//PHYS.
Extracted authority meaning
- Title: DoDI 5200.08, December 10, 2005, Incorporating Change 3 on November 20, 2015
- Registry designation context: Basic, CUI//PHYS. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling. The linked authority text contains violation, penalty, sanction, or enforcement language that may affect consequences for mishandling.
Operating conditions
- DoD lists this applicable policy for the category; the linked policy text is extracted below when available.
- Extracted authority condition: E2.2.2 Determine requirements and conduct the necessary staffing on matters referred to the DoD PSRB, and provide DUSD(I&S) and the DoD Components with current information and the status of actions on physical security matters within the PSRB’s jurisdiction.
- Extracted authority condition: Federal Government Personal Identity Verification (PIV) cards that are compliant with Federal Information Processing Standard Publication 201-2 (reference (h)) will be reciprocally accepted and used to facilitate physical access to controlled DoD assets, information, and facilities to enhance security, increase efficiency, reduce identity fraud, and protect personal privacy pursuant to Office of Management and Budget Memorandum 11-11 (reference (i)).
- Extracted authority condition: All security orders and regulations shall be submitted for review to ensure legal sufficiency by the servicing Judge Advocate or other legal advisor to the command.
Safeguarding and dissemination controls
- Extracted authority control: Federal Government Personal Identity Verification (PIV) cards that are compliant with Federal Information Processing Standard Publication 201-2 (reference (h)) will be reciprocally accepted and used to facilitate physical access to controlled DoD assets, information, and facilities to enhance security, increase efficiency, reduce identity fraud, and protect personal privacy pursuant to Office of Management and Budget Memorandum 11-11 (reference (i)).
- Extracted authority control: The following commanders shall issue the necessary regulations for the protection and security of property or places under their command, according to references (a, c, and d):
- Extracted authority control: Commanders shall prepare, clearly post, and enforce the security orders and regulations issued, and according to this Instruction and law, as appropriate, to ensure the proper safeguarding of personnel, facilities, and property from loss, destruction, espionage, terrorism, or sabotage.
- Extracted authority control: Authorizes commanders to issue regulations for the protection or security of property or places under their command, according to reference (c).
- Extracted authority control: Commanders at all levels have the responsibility and authority to enforce appropriate security measures to ensure the protection of DoD property and personnel assigned, attached, or subject to their control.
- Extracted authority control: The commanders/civilian directors in the chain of command or supervision immediately above an installation or activity not headed by a commander or civilian equivalent shall issue regulations or orders on the security of the installation or activity.
- Extracted authority control: Where there is no commander or civilian equivalent in the chain of command supervision, necessary proposed regulations or orders shall be forwarded to the USD(I) for processing.
Authority excerpts
Most relevant extracted authority passage
Federal Government Personal Identity Verification (PIV) cards that are compliant with Federal Information Processing Standard Publication 201-2 (reference (h)) will be reciprocally accepted and used to facilitate physical access to controlled DoD assets, information, and facilities to enhance security, increase efficiency, reduce identity fraud, and protect personal privacy pursuant to Office of Management and Budget Memorandum 11-11 (reference (i)).
Extracted authority passage 2
The following commanders shall issue the necessary regulations for the protection and security of property or places under their command, according to references (a, c, and d):
Extracted authority passage 3
Commanders shall prepare, clearly post, and enforce the security orders and regulations issued, and according to this Instruction and law, as appropriate, to ensure the proper safeguarding of personnel, facilities, and property from loss, destruction, espionage, terrorism, or sabotage.
Extracted authority passage 4
Authorizes commanders to issue regulations for the protection or security of property or places under their command, according to reference (c).
Extracted authority passage 5
Commanders at all levels have the responsibility and authority to enforce appropriate security measures to ensure the protection of DoD property and personnel assigned, attached, or subject to their control.
Extracted authority passage 6
E2.2.2 Determine requirements and conduct the necessary staffing on matters referred to the DoD PSRB, and provide DUSD(I&S) and the DoD Components with current information and the status of actions on physical security matters within the PSRB’s jurisdiction.
DoDM 5105.21, Volume 2
Listed by: Related authorities
Designation evidence
- Related authority evidence: DoD lists this applicable policy for the category; the linked policy text is extracted below when available.
- Registry designation context: Basic, CUI//PHYS. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling. The linked authority text contains violation, penalty, sanction, or enforcement language that may affect consequences for mishandling.
- Registry designation for this category is Basic with banner CUI//PHYS.
Extracted authority meaning
- Department of Defense
- Registry designation context: Basic, CUI//PHYS. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling. The linked authority text contains violation, penalty, sanction, or enforcement language that may affect consequences for mishandling.
Operating conditions
- DoD lists this applicable policy for the category; the linked policy text is extracted below when available.
- Extracted authority condition: SCIFs transferred from one CSA to another are not required to be reaccredited provided that all the physical security standards remain in place, all accreditation records will be furnished to the new CSA, and all appropriate organizations will be notified.
- Extracted authority condition: Title: DoDM 5105.21, Volume 2, "Sensitive Compartmented Information (SCI) Administrative Security Manual: Administration of Physical Security, Visitor Control, and Technical Security," October 19, 2012; Incorporating Change 2 on November 2, 2020
- Extracted authority condition: A security POC shall be provided for construction personnel to report information of a security nature.
- Extracted authority condition: These files may include work schedules, picture ID cards and access records, local guard incident and other reports, inspection reports, copies of security violations, and similar substantive project documentation as deemed appropriate by the SSM.
- Extracted authority condition: SUBJECT: Sensitive Compartmented Information (SCI) Administrative Security Manual: Administration of Physical Security, Visitor Control, and Technical Security
Safeguarding and dissemination controls
- Extracted authority control: When employed, they must be configured to provide adequate electrical, electromagnetic, and physical security safeguards to protect against compromising DoDM 5105.21-V2, October 19, 2012
- Extracted authority control: (3) Physical security barriers shall be erected to deny unauthorized access to the controlled areas.
- Extracted authority control: Physical security standards for the construction and protection of SCIFs are prescribed in Intelligence Community Directive (ICD) 705 (Reference (f)), Intelligence Community Standard (ICS) 705-1 (Reference (g)), and ICS 705-2 (Reference (h)).
- Extracted authority control: Release of information is limited to personnel authorized commensurate degree of access.
- Extracted authority control: TSCM involves techniques and measures to detect and nullify a wide variety of technologies that are used to obtain unauthorized access to National Security Information (NSI), restricted data, and sensitive but unclassified information.
- Extracted authority control: (1) Access to the construction site shall be denied or withdrawn by the SSM if any security checks reveal a felony criminal record, or the risk is otherwise too great to permit access to the site.
- Extracted authority control: The special security officer (SSO) will coordinate to list the SCIF within the post or installation directive that defines and designates all local restricted areas and will post outside the SCIF the proper English and, when appropriate (overseas areas only), foreign language “Restricted Area” signs.
Authority excerpts
Most relevant extracted authority passage
When employed, they must be configured to provide adequate electrical, electromagnetic, and physical security safeguards to protect against compromising DoDM 5105.21-V2, October 19, 2012
Extracted authority passage 2
(3) Physical security barriers shall be erected to deny unauthorized access to the controlled areas.
Extracted authority passage 3
Physical security standards for the construction and protection of SCIFs are prescribed in Intelligence Community Directive (ICD) 705 (Reference (f)), Intelligence Community Standard (ICS) 705-1 (Reference (g)), and ICS 705-2 (Reference (h)).
Extracted authority passage 4
Release of information is limited to personnel authorized commensurate degree of access.
Extracted authority passage 5
TSCM involves techniques and measures to detect and nullify a wide variety of technologies that are used to obtain unauthorized access to National Security Information (NSI), restricted data, and sensitive but unclassified information.
Extracted authority passage 6
SCIFs transferred from one CSA to another are not required to be reaccredited provided that all the physical security standards remain in place, all accreditation records will be furnished to the new CSA, and all appropriate organizations will be notified.
DoDM 5200.01, Volume 3
Listed by: Related authorities
Designation evidence
- Related authority evidence: DoD lists this applicable policy for the category; the linked policy text is extracted below when available.
- Registry designation context: Basic, CUI//PHYS. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling. The linked authority text contains violation, penalty, sanction, or enforcement language that may affect consequences for mishandling.
- Registry designation for this category is Basic with banner CUI//PHYS.
Extracted authority meaning
- Title: DoDM 5200.01, Volume 3, "DoD Information Security Program: Potection of Classified Information," February 24, 2012; Incorporating Change 3 on July 28, 2020
- Registry designation context: Basic, CUI//PHYS. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling. The linked authority text contains violation, penalty, sanction, or enforcement language that may affect consequences for mishandling.
Operating conditions
- DoD lists this applicable policy for the category; the linked policy text is extracted below when available.
- Extracted authority condition: (b) Technical data (including technical papers, manuals, presentations, specifications, guides and reports), regardless of media or means of transmission (physical, oral, or electronic), shall be individually labeled with the appropriate marking detailed in paragraphs 7.c.(1) or 7.c.(2) of this section; or, where such labeling is impracticable shall be accompanied by documentation or verbal notification clearly associating the technical data with the appropriate markings as detailed in paragraphs 7.c.(1) or 7.c.(2) of this section.
- Extracted authority condition: It includes, but is not limited to, name, social security number, date and place of birth, mother's maiden name, home address and phone number, personal e-mail address, biometric records, financial transactions, medical history, criminal or employment history, and other information to which a security manager may have access.
- Extracted authority condition: COMSEC includes crypto security, emission security, transmission security, and physical security of COMSEC material and information.
- Extracted authority condition: (b) Information in records with permanent historic value may be classified for longer than 25 years only if the Interagency Security Classification Appeals Panel (ISCAP) has been notified of such a date in accordance with the procedures in section 13, Enclosure 5 of Volume 1 of this Manual.
Safeguarding and dissemination controls
- Extracted authority control: Control panels located within a controlled area shall require only a minimal degree of physical security protection sufficient to preclude unauthorized access to the mechanism.
- Extracted authority control: Except as provided in sections 5 and 6 of this enclosure and in accordance with section 11 of Enclosure 3 of Volume 1, no person may have access to classified information unless that person has a security clearance in accordance with DoD Manual 5200.02 (Reference (l)) and has signed a Standard Form (SF) 312, “Classified Information Non-Disclosure Agreement” (NDA), and access is essential to the accomplishment of a lawful and authorized Government function (i.e., has a need to know).
- Extracted authority control: The purpose of the overall Manual, as authorized by DoD Directive (DoDD) 5143.01 (Reference (a)) and DoD Instruction (DoDI) 5200.01 (Reference (b)), is to reissue DoD 5200.1-R (Reference (c)) as a DoD Manual to implement policy, assign responsibilities, and provide procedures for the designation, marking, protection, and dissemination of controlled unclassified information (CUI) and classified information, including information categorized as collateral, sensitive compartmented information (SCI), and Special Access Program (SAP).
- Extracted authority control: If the unauthorized access was by a person with the appropriate security clearance but no need to know, debriefing is usually appropriate only so far as necessary to ensure that the individual is aware that the information to which they had unauthorized access is classified and requires protection.
- Extracted authority control: Use of remote diagnostic or repair capabilities shall be specifically approved and authorized in writing by the activity security manager; if the equipment retains or stores any classified information appropriate physical and logical protection must be provided on the remote end and secure communications are required.
- Extracted authority control: (6) The definition of a security incident, a violation and a compromise of classified information, examples of each, and an explanation of the criminal, civil, and administrative sanctions that may be taken against an individual who fails to comply with program requirements or to protect classified information from unauthorized disclosure.
- Extracted authority control: (3) Notify personnel of their responsibilities within the security program, and inform them of the administrative, civil, and/or criminal sanctions that can be applied when appropriate.
Authority excerpts
Most relevant extracted authority passage
Control panels located within a controlled area shall require only a minimal degree of physical security protection sufficient to preclude unauthorized access to the mechanism.
Extracted authority passage 2
Except as provided in sections 5 and 6 of this enclosure and in accordance with section 11 of Enclosure 3 of Volume 1, no person may have access to classified information unless that person has a security clearance in accordance with DoD Manual 5200.02 (Reference (l)) and has signed a Standard Form (SF) 312, “Classified Information Non-Disclosure Agreement” (NDA), and access is essential to the accomplishment of a lawful and authorized Government function (i.e., has a need to know).
Extracted authority passage 3
The purpose of the overall Manual, as authorized by DoD Directive (DoDD) 5143.01 (Reference (a)) and DoD Instruction (DoDI) 5200.01 (Reference (b)), is to reissue DoD 5200.1-R (Reference (c)) as a DoD Manual to implement policy, assign responsibilities, and provide procedures for the designation, marking, protection, and dissemination of controlled unclassified information (CUI) and classified information, including information categorized as collateral, sensitive compartmented information (SCI), and Special Access Program (SAP).
Extracted authority passage 4
If the unauthorized access was by a person with the appropriate security clearance but no need to know, debriefing is usually appropriate only so far as necessary to ensure that the individual is aware that the information to which they had unauthorized access is classified and requires protection.
Extracted authority passage 5
Use of remote diagnostic or repair capabilities shall be specifically approved and authorized in writing by the activity security manager; if the equipment retains or stores any classified information appropriate physical and logical protection must be provided on the remote end and secure communications are required.
DoDM 5200.08, Volume 3
Listed by: Related authorities
Designation evidence
- Related authority evidence: DoD lists this applicable policy for the category; the linked policy text is extracted below when available.
- Registry designation context: Basic, CUI//PHYS. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling. The linked authority text contains violation, penalty, sanction, or enforcement language that may affect consequences for mishandling.
- Registry designation for this category is Basic with banner CUI//PHYS.
Extracted authority meaning
- Title: DoDM 5200.08 Volume 3, "Physical Security Program: Access to DoD Installations," January 2, 2019; Incorporating Change 1 on September 18, 2020
- Registry designation context: Basic, CUI//PHYS. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling. The linked authority text contains violation, penalty, sanction, or enforcement language that may affect consequences for mishandling.
Operating conditions
- DoD lists this applicable policy for the category; the linked policy text is extracted below when available.
- Extracted authority condition: (a) Be covered by surveillance cameras that are recorded and monitored, either manually or by automated (e.g. motion detection) means, at all times.
- Extracted authority condition: DoD Manual 5200.01, Volume 4, “DoD Information Security Program: Controlled Unclassified Information,” February 24, 2012, as amended
- Extracted authority condition: The collection, use, maintenance, and dissemination of personally identifiable information must comply with the DoDM 5200.08 V3, January 2, 2019
Safeguarding and dissemination controls
- Extracted authority control: Title: DoDM 5200.08 Volume 3, "Physical Security Program: Access to DoD Installations," January 2, 2019; Incorporating Change 1 on September 18, 2020
- Extracted authority control: In accordance with DoDI 5400.11, personally identifiable information collected, used, maintained, or disseminated in the execution of this issuance will be appropriately maintained and safeguarded to prevent its unauthorized access, use, disclosure, or loss.
- Extracted authority control: Establishes physical security access control standards, procedures, and guidance consistent with this issuance, DoDD 5143.01, DoDI 5200.08, approved federal standards, and applicable laws.
- Extracted authority control: Situations where physical access is either limited to small numbers of individuals who are generally known to each other, or to rare and occasional periods.
- Extracted authority control: Includes the DD Form 2 (Retired, Reserve, and Reserve Retired versions), DD Form 1173 and 1173-1, DD Form 2765, and the DoD Civilian Retiree Card as described by DoDI 1000.13 and Volumes 1 and 2 of DoDM 1000.13.
- Extracted authority control: A determination that an individual’s criminal history reflects a level of character and personal conduct that does not pose a risk to the safety, security, and efficiency of an installation or its occupants.
Authority excerpts
Most relevant extracted authority passage
Title: DoDM 5200.08 Volume 3, "Physical Security Program: Access to DoD Installations," January 2, 2019; Incorporating Change 1 on September 18, 2020
Extracted authority passage 2
In accordance with DoDI 5400.11, personally identifiable information collected, used, maintained, or disseminated in the execution of this issuance will be appropriately maintained and safeguarded to prevent its unauthorized access, use, disclosure, or loss.
Extracted authority passage 3
Establishes physical security access control standards, procedures, and guidance consistent with this issuance, DoDD 5143.01, DoDI 5200.08, approved federal standards, and applicable laws.
Extracted authority passage 5
Situations where physical access is either limited to small numbers of individuals who are generally known to each other, or to rare and occasional periods.
Extracted authority passage 6
(a) Be covered by surveillance cameras that are recorded and monitored, either manually or by automated (e.g. motion detection) means, at all times.
ICD 705
Listed by: Related authorities
Designation evidence
- Related authority evidence: DoD lists this applicable policy for the category; the linked policy text is extracted below when available.
- Registry designation context: Basic, CUI//PHYS. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling.
- Registry designation for this category is Basic with banner CUI//PHYS.
Extracted authority meaning
- Title: 404 - Category not found
- Registry designation context: Basic, CUI//PHYS. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling.
Operating conditions
- DoD lists this applicable policy for the category; the linked policy text is extracted below when available.
- Extracted authority condition: If difficulties persist, please contact the System Administrator of this site and report the error below.
Safeguarding and dissemination controls
- Extracted authority control: 1. an **out-of-date bookmark/favourite** 2. a search engine that has an **out-of-date listing for this site** 3. a **mistyped address** 4. you have **no access** to this page 5.
Authority excerpts
Most relevant extracted authority passage
1. an **out-of-date bookmark/favourite** 2. a search engine that has an **out-of-date listing for this site** 3. a **mistyped address** 4. you have **no access** to this page 5.
Extracted authority passage 2
If difficulties persist, please contact the System Administrator of this site and report the error below.