10.9.1. Classified National Security Information

(1) This revision addresses policy updates to implement changes that will allow the IRS to provide clarity regarding required safeguards for CNSI and appropriately handle CNSI from its inception to destruction.

(1) Treasury Department Publication (TD P) 15-71, Department of the Treasury Security Manual, dated June 17, 2011.

(2) Treasury Order (TO) 105-19, Delegation of Original Classification Authority; Requirements for Downgrading and Declassification, dated June 17, 2011.

(3) Department of Treasury Security Classification Guide dated March 2, 2012.

(4) Treasury Directive 85-01, Department of the Treasury Information Technology (IT) Security Program, dated February 28, 2022.

(5) Information Security Oversight Office (ISOO) Directive No. 1, 32 Code of Federal Regulations (CFR) Parts 2001 and 2003, Classified National Security Information (implementing Executive Order 13526), dated June 22, 2010.

(6) ISOO, Marking Classified National Security Information, Rev. 4, dated January 2018.

(7) Executive Order (EO) 13526, Classified National Security Information, dated December 29, 2009.

(8) EO 12968, Access to Classified Information, dated August 2, 1995, as amended.

(9) EO 12829, National Industrial Security Program, dated January 8, 1993, as amended.

(10) 32 CFR Part 2004, National Industrial Security Program (NISP), dated May 7, 2018, as amended.

(11) 32 CFR Part 117, National Industrial Security Program Operating Manual (NISPOM), dated February 24, 2021.

(12) North Atlantic Treaty Organization (NATO) Instruction 1-07, Implementation of NATO Security Requirements, dated April 5, 2007.

(13) IRM 10.23.1, National Security Positions and Access to Classified Information.

(14) IRM 10.23.3, Personnel Security/Suitability Program for Employment and Personnel Security Operations.

(15) Physical Security Design Manual, dated November 4, 2020.

(1) The IRS Commissioner is responsible for:

1. Establishing the IRS CNSI program and NISP in accordance with the authorities and references contained in this IRM.

2. Demonstrating personal commitment and committing senior management to the successful implementation of the IRS CNSI program and NISP.

3. Appointing a Senior Agency Official (SAO) to direct and administer the CNSI program under which the information is protected throughout its lifecycle.

(2) The Chief, FMSS is responsible for:

1. Overseeing, as SAO, the IRS CNSI program and NISP.

2. Approving and issuing IRS security policies and guidance for the conduct of the CNSI program and NISP.

3. Establishing and maintaining an ongoing CNSI self-assessment program, which includes periodic review and assessment of the IRS CNSI holdings and classification products in accordance with 32 CFR 2001, TD P 15-71, Chapter 3, Section 31 and this IRM 10.9.1.

4. Establishing that risks associated with the CNSI program are identified, analyzed, responded to, reported on, and monitored to ensure the program’s health and compliance with National and Treasury guidance.

5. Ensuring the timely and accurate response on the ISOO annual request for completion of the Standard Form (SF) 311, Agency Security Classification Management Program Data.

6. Delegating the signature authority for courier letters and cards to the Associate Director (AD), Security. This serves as the official delegation.

7. Serving as the approval authority for the IRS on Sensitive Compartmented Information Facility (SCIF) Justification Memoranda prior to sending to Treasury for final approval.

8. Coordinating with other Agencies as the IRS liaison on classification challenges and requests for declassification or reclassification.

(3) The Associate Director (AD), Security, FMSS is responsible for:

1. Administering and directing the IRS CNSI program and NISP on behalf of the SAO.

2. Appointing Program Managers responsible for execution of the CNSI program and NISP.

3. Ensuring the coordination and performance of self-assessments for the CNSI program.

4. Serving as the IRS approval authority for Security Areas, to include Top Secret Spaces, by signing their certification letters (Open Storage of Secret or Top Secret Spaces) or submitting them to Treasury (Treasury Secure Data Network (TSDN) Limited Areas (LA)), as applicable.

5. Serving as review authority for SCIF Justification Memoranda.

6. Reviewing and approving, as applicable, administrative and risk-based decision documentation regarding the IRS CNSI program.

(4) The Senior Executive responsible for an office or a business, functional or operating unit is responsible for:

1. Ensuring effective management of CNSI within their organization.

2. Ensuring that CNSI within their organization is appropriately protected throughout its lifecycle in accordance with this IRM.

3. Ensuring that non-Senior Executive Service employees with a security clearance are rated on their protection of CNSI annually via Form 15283, Classified National Security Information Critical Element for Employees Whose Duties Require a National Security Clearance.

(5) The Senior Manager(s) in an office or a business, functional, or operating unit is responsible for:

1. Ensuring effective management of CNSI within their organization.

2. Verifying the clearance of and designating, as needed, a primary and alternate Classified Document Custodian(s) (CDC) in writing.

3. Ensuring the CDC is trained and provided the resources to protect CNSI.

4. Ensuring the CNSI Program Manager (PM) is made aware of changes to the Classified Document Custodian appointments.

5. Justifying the need for and, if approved, appointing a Top Secret Control Officer in writing.

6. Ensuring the CDC conducts self-assessments as prescribed by FMSS Security.

7. Appointing a Top Secret Control Officer after a Top Secret Space is certified or SCIF is accredited.

8. Appointing, in the event of a security incident, an appropriately cleared alternate Inquiry Official if the local CDC is materially involved.

9. Ensuring that subordinate managers and staff participate fully in an inquiry into a security incident, and, as applicable, that appropriate remediations for clearance holders found at fault in a security incident are applied.

10. Ensuring authorized holders are rated on their protection of CNSI at the end of each rating period.

(6) The Security Section Chief (SSC) is responsible for:

1. Coordinating with security contractor(s), Business Units and CNSI PM on physical security requirements, upgrades, or construction related to CNSI.

2. Ensuring physical security requirements in national, Treasury and IRS guidance are implemented as appropriate.

(7) CNSI Program Manager (PM) is responsible for:

1. Managing the IRS CNSI program and NISP on behalf of the SAO.

2. Authoring and updating CNSI and NISP policy in accordance with Authorities in this IRM.

3. Completing the annual ISOO SF 311 and sending to the AD, Security.

4. Serving as the liaison for classification challenges, reclassification requests, declassification confirmation, courier cards/letters, and security incidents between IRS and Department of Treasury and/or other Agencies as required.

5. Ensuring a system exists to process, track and record formal classification challenges, reclassification requests, declassification requests, courier cards/letters, and security incidents.

6. Hosting, granting and removing access to the Security Container Tracker based upon input from the field.

7. Coordinating with those involved in procurements requiring NISP compliance to ensure the appropriate security features appear in contractual documents.

8. Ensuring all CNSI and NISP related security, education, and awareness training is implemented in accordance with authorities in this IRM.

9. Serving as a single point of contact at the headquarters level on all security matters related to Security Areas that protect CNSI to include the approvals, certification letters, and provisions of security policy.

(8) The Top Secret Control Officer is responsible for:

1. Maintaining a Top Secret security clearance, at minimum, and receiving training from Treasury Office of Intelligence and Analysis if the information held is at the Top Secret/Sensitive Compartmented Information (TS/SCI) level.

2. Ensuring Top Secret information is protected throughout its lifecycle per the requirements in this IRM.

3. Maintaining current accountability records of Top Secret information received within their office and attendant supply of Top Secret document forms.

4. Following prohibitions against reproduction of Top Secret information.

5. Ensuring Business Unit authorized holders know to immediately notify their Top Secret Control Officer whenever they receive any Top Secret material.

6. Maintaining Treasury Department Form (TD F) 15-05.4, Document Control Register, for all Top Secret information held by the Business Unit.

7. Conducting an annual physical inventory of Top Secret information within the Business Unit under their purview using TD F 15-05.4, with the designated alternate Top Secret Control Officer (if appointed) or another authorized holder to serve as witness.

8. Downgrading, declassifying, or destroying Top Secret documents, as appropriate, per this IRM.

9. Maintaining accountability records, receipts of the transmission, and receipts of destruction of Top Secret information.

10. Verifying authorized holders that receive Top Secret information have the appropriate security clearance, need-to-know, and storage capability that has been approved by AD, Security prior to the information being released.

    Note: A Top Secret Control Officer is appointed by the Business Unit who owns the accredited Top Secret Space or SCIF. A Top Secret Control Officer can serve concurrently as Classified Document Custodian and/or Security Container Custodian.

(9) The Classified Document Custodians, both a primary and alternate, are responsible for:

1. Serving as the principal advisor to the appointing official and supervisor in matters pertaining to security of CNSI.

2. Providing full name(s) of replacements to CNSI PMs prior to departure from the role.

3. Serving as Cognizant Security Official by providing guidance to authorized holders regarding protection of CNSI and discussing issues/solutions with the CNSI PMs.

4. Conducting self-assessments as laid out in subsection IRM 10.9.1.15.

5. Conducting incident inquiries in accordance with subsection IRM 10.9.1.14 and provide timely updates to management and CNSI PM.

6. Coordinating with Treasury Inspector General for Tax Administration (TIGTA), CSIRC, and CNSI PM on security incidents.

7. Ensuring that access to CNSI is limited to authorized holders with a need-to-know as defined in subsection IRM 10.9.1.8.1.

8. Annually verifying the Security Container Tracker for all containers used to store CNSI under their purview.

9. Clearing security containers prior to being decommissioned in accordance with this subsection IRM 10.9.1.8.4(9).

10. Maintaining combinations of security containers under their control in accordance with the manufacturer’s operating instructions and this IRM.

11. Creating and maintaining a list of the CNSI to be taken on travel and, upon return, verifying that all CNSI has been returned by the authorized holders who traveled.

12. Establishing written administrative procedures for the control of CNSI under their control in line with this IRM. At a minimum, procedures must cover:
    
    i. Information, dissemination, and reproduction control measures that fit the local environment.
    ii. Personnel security clearances and need-to-know verification.
    iii. End-of-day and after-hours security checks.
    iv. Whether security container combination storage will be centralized in one container or decentralized among many.
    v. Additional protections for CNSI telephone conversations in spaces certified by Business Units to host them.
    vi. Emergency procedures for protecting CNSI in the event of an emergency.

    Note: Classified Document Custodians must be appointed at every facility that houses CNSI under a given senior manager (e.g., if two Business Units have CNSI at a given facility, each Business Unit must appoint a primary/alternate for their CNSI; if necessary, the alternate CDC may be located at another facility). If the facility is a large, multi-building campus or similar with a multitude of security containers, then senior management should decide how many Classified Document Custodians should work in concert to ensure the safety of the CNSI. Senior Management must verify that the appointed Classified Document Custodian has a clearance commensurate with the highest level of the CNSI present at the facility(ies) for which they are responsible prior to their appointment. The Classified Document Custodian’s responsibilities must be removed in the event of the clearance’s lapse. Classified Document Custodians may serve concurrently as Top Secret Control Officer and/or Security Container Custodian.

(10) The Security Container Custodian is responsible for:

1. Implementing the administrative procedures laid out by this IRM and the local Classified Document Custodian for the security container(s) under the Custodian’s purview.

2. Ensuring authorized holders requesting access to the security container be verified by Personnel Security (hco.ps.national.security.programs@irs.gov) to have the clearance of the highest level of information stored in the security container and the requisite need-to-know, as defined in Terms/Definitions/Acronyms.

3. Listing their information on the SF 700, Security Container Information on all security containers assigned security containers.

4. Ensuring the container combination is turned over to the local Classified Document Custodian and the next Security Container Custodian prior to their departure from their position.

5. Ensuring the individuals with access to the container properly use the SF 701, Activity Security Checklist, as required and SF 702, Security Container Check Sheet, by discussing the requirements and reviewing the forms every 90 calendar days for compliance.

6. Ensuring a list of those with access to a container is maintained for the purposes of combination maintenance.

7. Maintaining and changing the combination to security containers in accordance with the manufacturers operating instructions and this IRM.

8. Ensuring authorized holders with access to the security container perform an annual review of material in the container to ensure that the classified material is:
   
   i. appropriately marked,
   ii. required for job performance/records, purposes and
   iii. destroyed, as applicable, in a National Security Agency/Central Security Service (NSA/CSS) Evaluated Products List (EPL) approved shredder.
   
   

9. Ensuring the Classified Document Custodian is aware of security container movements or decommissioning.

10. Clearing the security container prior to being decommissioned in accordance with subsection IRM 10.9.1.8.4(9).

Note: This subsection applies to any individual who is responsible for a security container, regardless of Business Unit. A Security Container Custodian must be appointed for every security container owned by the Business Unit and may serve concurrently as Top Secret Control Officers and/or CDCs.

(11) The Security Area Responsible Party is responsible for:

1. Serving as the primary Point of Contact (POC) of the Business Unit who is responsible for the Security Area and appointing an alternate POC from Authorized Personnel when unavailable to perform duties listed in b) - q) below.

2. Being designated as one of the individual(s) listed on the SF 700 the secure side of the Security Area’s entry door.

3. Serving as liaison on the Security requirements for the Security Area, including but not limited to:
   
   i. Coordinating with CNSI PMs to procure required security items (shredder, security container, etc.).
   ii. Physical Security requirements.
   iii. Behavioral compliance in protecting CNSI.
   iv. Self-assessments in conjunction with the Classified Document Custodian.
   
   

4. Responding to a Security Area when called in the event of an alarm, disturbance, or facility emergency. In the event of a safety concern, the monitoring entity must be informed prior to Responsible Party entering.

5. Ensuring year-round coverage for after-hours response.

6. Verifying the clearance and need-to-know of all Authorized Personnel prior to granting them access.

7. Verifying the clearance and need-to-know of visitors, ensuring those who are unauthorized are escorted.

8. Ensuring the lock and combination for the access door is maintained and changed as prescribed in subsection IRM 10.9.1.8.4(6), Federal Specification FF-L-2740, Locks Combination, and the manufacturer’s operating manual.

9. Ensuring that utilization of IRS Form 5421 Limited Area Register and on-site storage of the register for one year.

10. Participating in and accommodating any security assessments or security incident inquiries.

11. Issuing, or ensuring the issuance of, local written procedures for the Security Area that includes life safety requirements and Occupant Emergency Plans in accordance with TD P 15-71, Chapter 5, Section 1,9.
    
    i. Arranging for a security container in another room in which to store CNSI typically held in a Security Area in the event of emergency in consultation with the local Classified Document Custodian.
    
    

12. Reviewing access lists to Security Areas biannually, to include validating clearances, and coordinate with the SSC to remove those who no longer meet the requirements of access or who no longer require access.

13. Ensuring the removal of Authorized Personnel who no longer require access from the access control system promptly.

14. Updating the monitoring entity promptly when changes occur to the after-hours response list.

15. Monitoring and securing any keys for the Security Area doors per subsection IRM 10.9.1.8.4(5).

16. Preventing unauthorized access to the Security Area by ensuring that a Responsible Party or Authorized Personnel for the space physically controls the entry/exit door should either need to be opened for any length of time (due to an emergency or other).

17. Serving as the Key Custodian for keys to Security Areas, as specified in this IRM.

    Note: This subsection applies to any individual named Responsible Party for an Open Storage Security Area or Treasury Secure Data Network (TSDN) Limited Area (LA) by the Business Unit who owns the space. This person can serve concurrently as a Top Secret Control Officer, Security Container Custodian, and/or Classified Document Custodian.

(12) The Authorized Personnel is responsible for:

1. Serving as alternate Responsible Party if appointed.

2. Protecting CNSI and Security Areas by following this IRM.

3. Escorting unauthorized individuals inside Security Areas.

4. Responding, if designated by the Responsible Party, in the event of an alarm or disturbance or facility emergency. In the event of a safety concern, the monitoring entity must be informed prior to Authorized Personnel entering the Security Area.

5. Opening and closing the Security Area to accommodate business hours in a secure manner, as directed by the Responsible Party.

   Note: This subsection applies to any individual, regardless of Business Unit who owns the Security Area, granted Authorized Personnel privileges for an Open Storage Security Area or TSDN LA.

(13) The Inquiry Official is responsible for:

1. Serving as a neutral party to the security incident (e.g., not involved in the events leading up to or directly causing the security incident).

2. Holding a security clearance commensurate with the level of CNSI the security incident involves if the Inquiry requires review of classified information.

3. Familiarizing themselves with this subsection IRM 10.9.1.14, regarding the conduct of the inquiry and meeting the deadlines associated.

4. Preventing further unauthorized disclosure of CNSI, as prescribed throughout this document.

Note: This subsection applies to any individual, regardless of Business Unit, who is appointed to be the Inquiry Official. This role is typically filled by the local Classified Document Custodian but may need to be appointed by the CNSI PMs if there is a conflict of interest.

(14) The authorized holder of CNSI is responsible for:

1. Ensuring consistent protection of CNSI from unauthorized disclosure by meeting safeguarding requirements prescribed throughout this document.

2. Contacting the local Classified Document Custodian promptly in an unclassified manner in the event of a security incident, either infraction or violation.

3. Ensuring that CNSI is not communicated over unsecured voice or data systems, (e.g., IRS network, phone line, cell phones, etc.) in public conveyances or places, or in any other manner that permits interception by unauthorized personnel.

4. Completing the required annual training -Integrated Talent Management Item, “Annual Security and Derivative Classification Brief.”

Note: This subsection applies to any individual, regardless of Business Unit, who possesses a security clearance for the performance of their duties at the IRS.

(15) The authorized holders working at another agency or organization are responsible for:

1. Following the CNSI policies and procedures of both the IRS and the agency they are working at.

2. Completing the annual training - Integrated Talent Management “Annual Security and Derivative Classification Brief.”

3. Ensuring the request of an IRS issued courier device, as needed, to courier CNSI from IRS to other authorized holders in accordance with subsection IRM 10.9.1.10.1.

(16) The authorized holders detailed to another agency or organization are responsible for:

1. Following the CNSI policies and procedures of the agency they are detailed to.

2. Completed the annual training - Integrated Talent Management Item, “Annual Security and Derivative Classification Brief.”

3. Returning any IRS issued courier device prior to going on detail and obtaining one, as required, from the agency they are detailed to.

4. Notifying the CI Security Specialist and/or CNSI PMs of their involvement in a security incident, either infraction or violation.

(1) Program Reports: The CNSI program will be assessed via self-assessment at an interval set by AD, Security. The CNSI PM will direct the self-assessment program. The designated Classified Document Custodian is responsible for conducting the self-assessment in local field offices where CNSI is held. Annual reporting on the health of the CNSI program, based on the self-assessments takes place via the SF 311 per TD P 15-71. The SF 311 reporting will occur to ISOO by the end of fiscal year.

(1) The CNSI Program requests Business Units that handle CNSI through its life cycle conduct an annual self-assessment indicating the status of their organization’s protection of classified material and compliance with relevant policies. The CNSI program managers compile the data into a report for FMSS AD, Security, Chief, Protection Management, and signature of the Chief, FMSS. This report is sent by the CNSI Program to the Department of Treasury CNSI Program using the SF-311.

(1) Access - The ability and opportunity to obtain knowledge or possession of CNSI information and material or access to Security Areas processing CNSI.

(2) Agency - Any "Executive Agency," as defined in 5 United States Code (USC) 105, and any other entity within the executive branch that comes into the possession of CNSI.

(3) Authorized Holder - A Federal employee who has a favorable determination of eligibility (e.g., security clearance) for access to CNSI, signed an approved nondisclosure agreement, and has a need-to-know the CNSI in the performance of official duties, and has fulfilled the requirement to take the annual Integrated Talent Management Item, “Annual Security and Derivative Classification Brief.” This includes contractor personnel on a NISP compliant contractor personnel on a NISP compliant contract who meet the same qualifications. Employees who are holders of, or have access to, CNSI or serve as Classified Document Custodians, CNSI PMs, or Responsible Party(ies) must be authorized holders.

(4) Authorized Personnel - An IRS authorized holder, vetted by the Responsible Party(ies) and Personnel Security, with a valid work requirement who is allowed unrestricted access to the Security Area and given the combination to both the door and the Intrusion Detection System (IDS).

(5) Automated Information System (AIS) - An assembly of computer hardware, software, or firmware configured to collect, create, communicate, compute, disseminate, process, store, or control data or information.

(6) Automatic Declassification - The declassification of information based solely on the occurrence of a specific date or event as determined by an Original Classification Authority (OCA) or the expiration of a maximum timeframe for the duration of classification established under EO 13526.

(7) Classification - The process by which information is determined to be CNSI either by original or derivative means as discussed in subsection IRM 10.9.1.3 and IRM 10.9.1.3.2.

(8) Classification Guide - A documentary form of classification guidance issued by an OCA that identifies the elements of information regarding a specific subject that must be classified and establishes the level and duration of classification for each such element. OSP’s classification guidance will be used, as IRS does not have its own Classification Guide.

(9) Classification Management - Classification management seeks to ensure that official information is classified only when required in the interest of national security and is properly identified and retains the classification assigned if necessary.

(10) Classified National Security Information (CNSI) - Information that has been determined pursuant to EO 13526 or any predecessor order to require protection against unauthorized disclosure and is marked to indicate its classified status regardless of its form (document, technology, equipment, etc.). Termed "CNSI" in this IRM.

(11) Closer - A Responsible Party or Authorized Personnel who is entrusted with the task of closing the Security Area in a secure manner at the end of the business day.

(12) Cognizant Security Official - An employee of the Federal government (e.g., Classified Document Custodian, Regional Security Officer, Special Security Officer (SSO)) charged with responsibility for physical, technical, personnel, and information security affecting that organization.

(13) Communications Security (COMSEC) - Measures and controls taken to deny unauthorized personnel information derived from telecommunications and to ensure the authenticity of such communications. COMSEC includes cryptographic security, transmission security, emission security, and physical security of COMSEC material.

(14) Compromise - The unauthorized disclosure of CNSI to an individual without the appropriate clearance or need-to-know.

(15) Confidential - The classification level applied only to information the unauthorized disclosure of which reasonably could be expected to cause damage to the national security that the OCA is able to identify or describe.

(16) Control - The authority of an agency that originates CNSI, or its successor in function, to regulate access to the information.

(17) Declassification - The authorized change in the status of information from CNSI to unclassified and the subsequent revision of associated markings.

(18) Declassification Authority - Officials delegated declassification authority in writing by the Secretary of Treasury or Treasury’s Senior Agency Official (SAO) responsible for Treasury’s CNSI program.

(19) Declassification Guide - The written instructions issued by a declassification authority that detail what specific elements of information may be declassified and the elements that must remain classified.

(20) Derivative Classification - The incorporating, paraphrasing, restating, or generating, in new form, information that is already classified and marking the newly developed material consistent with the classification markings that apply to the source information. Derivative classification includes the classification of information based on a classification guide. The duplication or reproduction, such as copying or printing, of existing CNSI is not derivative classification.

(21) Disclosure - The communication or physical transfer of CNSI to an unauthorized recipient by showing or revealing CNSI, whether orally, in writing or any other medium (e.g., video, graphic, etc.).

(22) Downgrading - A determination by a downgrading/declassification authority that information classified and safeguarded at a specified level must be classified and safeguarded at a lower level.

(23) Foreign Government Information (FGI) - Information provided to the U.S. Government by a foreign government or governments, an international organization of governments, or any element thereof, with the expectation that the information, the source of the information, or both, are to be held in confidence. -OR- Information produced by the U.S. Government pursuant to or as a result of a joint arrangement with a foreign government or governments, or an international organization of governments, or any element thereof, requiring that the information, the arrangement, or both, are to held in confidence. -OR- Information received and treated as “Foreign Government Information” pursuant to the terms of a predecessor order to EO 13526.

(24) Industrial Security - The segment of security concerned with protecting CNSI released to and in the possession of contractors. This term describes the program under which the United States Government (USG) engages in a contract that has security policies and responsibilities for safeguarding the CNSI, CNSI systems, assets or facilities, which are imposed on the contractor, and in which the USG provides guidance to and conducts oversight of contractor implementation of those policies.

(25) Information Security - The program established by EO for the classification, declassification, downgrading, and safeguarding of CNSI. This includes protection of Sensitive but Unclassified (SBU), non-national security information.

(26) Lines of Inquiry (LOI) - Discreet, measurable items reviewed during an assessment to ascertain the operational ability of a program.

(27) Limited Area - An Area to which access is limited to Authorized Personnel only and requires a two-factor authentication mechanism to gain access.

(28) Mandatory Declassification Review - The review for declassification of CNSI in response to a request for declassification that meets the requirements for EO 13526.

(29) Material - In the context of a security incident, an individual is considered material to the inquiry if they were a part of the issue that lead to the incident or if they have knowledge regarding the incident that will influence, or is crucial to, the inquiry.

(30) Monitoring Entity - The entity responsible for the monitoring of alarms linked to Security Areas.

(31) National Security - The national defense or foreign relations of the U.S. and includes, with a Treasury context, U.S. economic vitality, global competitiveness, market sensitivity, and tracking terrorist assets/financial crimes.

(32) National Security Clearance - Certification issued by a designated personnel security official or designee that a person may access up to Secret or Top Secret CNSI on a need-to-know basis granted after a valid, in scope Tier 3 or Tier 5 investigation, respectively.

(33) Need-to-know - A determination by the employee’s direct management and HCO that an employee requires access to CNSI to perform or assist in a lawful and authorized governmental function.

(34) Non-Disclosure Agreement (NDA) - An officially authorized contract between an individual and the USG signed by an individual as a condition of access to CNSI and specifying the security requirements for the access and details the penalties for noncompliance carried out via the SF 312, Classified Information Nondisclosure Agreement.

(35) North Atlantic Treaty Organization (NATO) - NATO is an alliance of countries from Europe and North America enabling cooperation in the field of defense, security and crisis-management. As a participant in NATO, the U.S., and therefore IRS, must protect NATO CNSI in accordance with, NATO Instruction 1-07, Implementation of NATO Security Requirements. The information in this Manual applies only to NATO CNSI.

(36) Open Storage - The storage of CNSI openly (i.e., not requiring storage inside a security container) when Authorized Personnel do not occupy the facility. In all instances, "open storage" must be specifically approved in writing by OSP to store CNSI at the Secret level. This term is used in concert with TSDN LA.

(37) Opener - A Responsible Party or Authorized Personnel who is entrusted with the task of opening the Security Area in a secure manner at the beginning of the business day.

(38) Original Classification - The initial determination that information requires, in the interest of national security, protection against unauthorized disclosure.

(39) Original Classification Authority(ies) (OCA) - An individual authorized in writing, either by the President or by agency heads, or other officials designated by the President, to classify information in the first instance. Within Treasury, OCA are designated by the Secretary (at the Top Secret, Secret, or Confidential levels) or by the Department’s SAO (at the Secret or Confidential levels). IRS does not have an OCA.

(40) Paragraph or Portion Markings - Required markings on classified documents to indicate the specific level of classification applicable to each paragraph or portion of a document shown as follows: (TS) for Top Secret, (S) for Secret, (C) for Confidential, and (U) for Unclassified.

(41) Personnel Security - The segment of security that concerns the trustworthiness and integrity of Federal employees and others associated with the USG. It is also the process in the USG for complying with national security interest requirements under EO 10450 or with other similar authority.

(42) Physical Security - The segment of security concerning protective requirements and means for safeguarding IRS employees, property, facilities, and information.

(43) Public Trust - Investigations (Tier 1, Low Risk; Tier 2, Moderate Risk; Tier 4, High Risk) performed to ascertain whether an individual is suitable or eligible to work in sensitive or public trust positions.

(44) Responder - A designated, cleared Responsible Party or Authorized Personnel who will respond when called, regardless of day or time, to the Security Area to perform a walkthrough in the event of an alarm.

(45) Response Force - The portion of the monitoring entity that responds to the Security Area in an alarm event and remains until a responder arrives to perform a walkthrough.

(46) Responsible Party - An IRS authorized holder who is accountable for ensuring the Security Area remains secure, that those with access are vetted and trained, and that the responder list is maintained.

(47) Safeguarding or Safeguards - Physical, procedural, or electronic measures and controls prescribed to ensure CNSI and SBU is not accessed inadvertently or improperly.

(48) Secret - The classification level applied only to information the unauthorized disclosure of which reasonably could be expected to cause serious damage to the national security that the OCA is able to identify or describe.

(49) Secure Telephone Equipment (STE) - The USG current encrypted telephone communications system for wired or "landline" communications, for example the Sectera vIPer.

(50) Security Area - Consists of either controlled or limited areas, which require individual access authentication to gain entry. It is noted that in the Treasury Directive Policy (TD P) 15-71, Treasury Security Manual, the overarching term for areas requiring security to protect assets is termed "Controlled Area" but the term "Controlled Area" is used in IRS as a specific type of area requiring physical security.

(51) Security Classification Guide (SCG) - A documentary form of guidance, issued by an OCA, providing the user with instructions on what types of information may be classified and the level/duration thereof.

(52) Security Container - A General Services Administration (GSA) approved security container equipped with built-in (mounted), dial-type, changeable combination lock, specifically designed for the CNSI. A security container may be used for protecting money and other highly negotiable materials or assets; however, this IRM only applies to any container housing CNSI.

(53) Security Container Tracker - A system created and hosted by the CNSI PM for the Classified Document Custodians and Security Container Custodians to maintain the status of the security containers used to protect CNSI.

(54) Security Clearance - An administrative authorization for access to CNSI, up to a stated classification level (Top Secret, Secret, or Confidential), and referred to as a clearance.

(55) Security Countermeasures - Actions, devices, procedures, and/or techniques to reduce security risks.

(56) Security Incident - An act that constitutes a threat to a security program or is a deviation from existing security regulations. Security incidents will be categorized as security infractions or violations.

(57) Security-in-Depth - A determination by the agency head, or designee, that a facility’s security program consists of layered and complementary security controls enough to deter and detect unauthorized entry and movement within a facility. Examples include, but are not limited to, use of perimeter fences, employee and visitor access controls, use of an intrusion detection system, random guard controls, etc.

(58) Security Infraction - Any knowing, willful, or negligent action contrary to the requirements of EO 13526 or its implementing directives that does not result in an unauthorized disclosure CNSI.

(59) Security Violation - Any knowing, willful, or negligent action that could reasonably be expected 1) to result in an unauthorized disclosure of CNSI, 2) to classify or continue the classification of information contrary to the requirements of EO 13526 or its implementing directives, or 3) to create or continue a special access program contrary to EO 13526.

(60) Senior Agency Official (SAO) - The official designated by the agency head under EO 13526 to direct and administer the agency’s security program, under which information is classified, safeguarded, handled, or declassified.

(61) Sensitive but Unclassified (SBU) - Treasury, bureaus, or another authority has determined to require protection from unauthorized or unwarranted public disclosure.

(62) Sensitive Compartmented Information (SCI) - Information concerning or derived from intelligence sources, methods, or analytical processes that is required to be protected within formal access control systems established by the Director National Intelligence (DNI).

(63) SCI Facility(ies) (SCIF) - An area or installation certified and accredited as meeting DNI security standards for the processing, storage and/or discussion of SCI. SCIF must be coordinated by the Business Unit via the CNSI PMs with Treasury’s SSO in advance of construction.

(64) Sensitive Position - Any position the occupant of which could bring about, by virtue of the nature of the position and access to CNSI, a materially adverse effect on the national security, the mission of the Department, or the IRS. All sensitive positions are designated as either non-critical sensitive, critical sensitive, or special sensitive.

(65) Source Document - An existing document containing CNSI that can be incorporated, paraphrased, restated, or generated into a new document.

(66) Systemic Declassification Review - The review for declassification of CNSI contained in records the Archivist of the U.S. has determined to have a permanent historical value in accordance with 44 U.S.C. 2107.

(67) Threat - The intention and capability of an adversary to undertake actions that would be detrimental to the interests of the U.S.

(68) Top Secret (TS) - The classification level applied only to information the unauthorized disclosure of which could reasonably be expected to cause exceptionally grave damage to the national security that the OCA is able to identify or describe. Approval from the AD, Security is needed prior to storing TS.

(69) Treasury Secure Data Network (TSDN) Limited Area (LA) - A room that offers the protection necessary to store CNSI systems and material up to the Secret level through a combination of Protective Service Officers (PSO), responders, detectors/alarms, and/or locking devices.

(70) Unauthorized Personnel - An individual lacking appropriate level of security clearance, need-to-know, SF 312, or annual CNSI Refresher Briefing.

(71) Unauthorized Disclosure - Communication or physical transfer of classified information to unauthorized personnel (e.g., those who lack the appropriate security clearance or need-to-know).

(72) Visitor - Any person who is not a Responsible Party or Authorized Personnel for the Security Area, regardless of the visitor’s level of clearance and need-to-know.
Acronyms

(1) IRS CNSI and NISP Website, updated as new versions of the forms are issued

(2) ISOO Marking Guide

(3) Department of Treasury Security Classification Guide (document is FOUO)

(4) NSA/CSS EPL for Shredders

(5) NSA/CSS EPL for Degaussers

(6) IRM 10.2.14, Methods of Providing Protection

(7) IRM 10.2.18, Physical Access Control (PAC)

(8) IRM 10.23.1, National Security Positions and Access to Classified Information

(9) IRM 10.23.3, Personnel Security/Suitability for Employment and Personnel Security Operations

(10) Physical Security Design Manual

(1) In no case will CNSI remain classified or be reclassified to:

1. Conceal violations of law, inefficiency, or administrative error.

2. Prevent embarrassment to a person, organization, or agency.

3. Restrain competition.

4. Prevent or delay the release of information that does not require protection in the interest of the national security.

(2) Information may not be reclassified after declassification and subsequent release to the public under proper authority unless:

1. The reclassification action is approved in writing by the Secretary of Treasury based on the determination that reclassification is required to prevent significant, demonstrable damage to national security and the information may be reasonably recovered without bringing undue attention.

2. The reclassification request is reported promptly through the CNSI PM to the Director, OSP.

(1) Derivative classification is the restatement of existing CNSI by unauthorized holders who reproduce, extract, summarize, or apply classification markings derived from source material or as directed by a classification guide. Derivative can also mean incorporating, paraphrasing, restating, or generating in new form or information that is already classified and marking the newly developed material consistent with the classification markings that apply to the source information.

(2) The basis for derivative classification actions involves use of one or more of the following types of information:

1. Existing classified source document.

2. Approved classification guide.

3. Classified communication (e.g., information provided orally via STE or obtained/discussed during a classified meeting).

(3) Derivative classification may be exercised by any authorized holder, including consultants or contractors under the National Industrial Security Program (NISP), who have received initial derivative training prior to creating derivative decisions and/or are current on the required biannual derivative training. Derivative classifiers will keep accessible up-to-date, official materials that aid in their ability to perform accurate derivative classification (i.e., TD P 15-71, Chapter III, Section 6; ISOO Marking Guide; ISOO Derivative Classification training video).

(1) Information classified under EO 13526 and prior EO is subject to challenge by any authorized holder of the information. Authorized holders are defined as:

1. Cleared USG authorized holder who is a recipient of the CNSI in the course of conducting official business.

2. Agency security official who is responsible for properly safeguarding classified information.

3. Contractor or consultant on a contract with classified scope per the NISP.

(2) Challenges of classification decisions are intended to bring about corrective action that ensures only information legitimately requiring protection based upon criteria in EO 13526 is appropriately classified. The decision to challenge is based on one of the following assumptions:

1. Information should/should not be classified.

2. Information should be classified at a lower/higher level (under/over-classification).

3. Information is improperly classified (including an overly restrictive period or without proper authority).

4. Information is improperly marked.

(3) Those who exercise a classification challenge will not be subjected to adverse action, reprisal, retribution, retaliation based on their election to engage the challenge provision.

(1) Marking must be accomplished per the requirements stated in TD P 15-71, Chapter 3, Section 6 and this IRM.

(2) If CNSI in the IRS’s possession is not marked in accordance with Treasury guidelines, the authorized holder who is protecting the CNSI must request clarification from the originator. Clarification comes from the individual on the "classified by" line or the originating agency and should be marked in an unclassified manner in writing; if issues arise in contacting the originator, the CNSI PM should be contacted for assistance. Records should be kept regarding the request for clarification about the erroneous marking.

(3) If unclassified is comingled with CNSI, the designation of "(U)" must be used in portion marking; pages that are entirely unclassified should be included as an addendum or in an unclassified version of the document. It is encouraged that unclassified be kept separate from CNSI whenever possible.

(4) If SBU is comingled with CNSI, the designation of "(SBU)" must be used in portion marking. Like unclassified information, pages that are entirely SBU should be included as an addendum or as an SBU version of the document.

(5) For bulky material or classification by compilation, consult 32 CFR 2001.24. Classification by compilation may occur if items that are individually unclassified are placed into the same document and meet, through their aggregation, the standards in section 1.2 of EO 13526. In this event, any unclassified portions will be portion marked"(U)" while the banner markings will reflect the overall classification of the compilation.

(6) Dissemination control and handling markings identify any limitations to the distribution of the information, these markings appear after the classification level on the top and bottom of each page. The markings used must be those approved by ISOO or the Office of the DNI.

(1) Markings for derivatively classified documents: For information derivatively classified based on a single source or multiple sources, the derivative classifier carries forward the date or event for declassification that corresponds to the longest period of classification among the sources; the level of classification reflects the highest level of classification of the portions of the source document used.

1. Overall/Banner Classification Marking: This is determined by the highest level of classification of any one portion of the document and must be placed at the top and bottom of the page. If there is more than one page, the overall marking must be on the front cover, title page, first page, each interior page, and outside of the back cover/page. The markings at top and bottom of each page must be marked with either the highest level of classification on that page, including "Unclassified" when applicable, or with the overall classification of the document.

2. Portion Markings: Must be marked at the highest level of information contained at the start of the subject/title, each paragraph, graph, table, picture, etc. Note that if a source document is not portion marked, then it cannot be used in a derivatively classified document.

3. Classification Authority Block consisting of:
   
   i. "Classified By" identifying the derivative classifier by given name and title or personal identifier and agency of origin. If a personal identifier is needed, contact the CNSI PMs.
   ii. "Derived From" identify the source document(s), including agency and office of origin when available. When there are multiple sources, the derived from line will state "multiple sources" and a follow-on page listing the citations is attached if the sources are too numerous to fit in the block.
   iii. "Declassify On" line contains the furthest date or event on the classification block(s) of the source document(s).
   
   

4. Documents lacking any of the markings above, except for the declassification instruction, cannot be used as sources for derivative classification.

5. Documents that lack a declassification instruction must have a date calculated 25 years from the creation of the source document or, if that date is missing, then a date calculated 25 years from the date of the creation of the derivative document.

6. If the document has declassification instructions, like X1-X8, Originating Agency’s Determination Required (OADR), or Manual Review (MR), consult 32 CFR 2001.22(e).

(2) A CNSI addendum is used whenever CNSI constitutes a small portion of an otherwise unclassified document to allow for dissemination at the lowest classification level possible or in unclassified form. The unclassified portion of the document can then be distributed freely; the CNSI portion must be distributed to authorized holders in accordance with this IRM.

(3) Dissemination control and handling markings based on the source documents must carry over to the derivative document.

(4) Date of origin of the document must be indicated in a manner that is apparent at the top of the first page.

(5) Transmittal documents, or ‘cover letters,’ that transmit CNSI documents shall indicate on the face the highest classification level of any CNSI attached or enclosed. It must also have one of the following, as appropriate:

1. "Unclassified when classified enclosure removed" or

2. "Upon removal of attachments, this document is (Classification Level)."

(1) Emails containing CNSI must be sent only on approved systems for the level of CNSI (e.g., TSDN for up to Secret) being sent by an authorized holder.

(2) Ensuring all the requirements for marking paper documents from IRM 10.9.1.4.2 are met, along with the following specifics:

1. The subject line of the email must be portion marked, but not reflective of the classification markings of the email content or attachments and should be kept unclassified.

2. If attachments exist, the titles of the attachments must be portion marked and should be kept unclassified. The title of the attachment and associated portion mark does not reflect the classification of the attachment.

3. The overall/banner classification of the email must be marked at the top and bottom (after the derivative classification block) of each individual email.

4. When forwarding or replying to an email, authorized holders must ensure that, in addition to the markings required for the content of the reply or forward email itself, the markings must reflect the overall classification and declassification instructions for the entire string of emails and attachments. This will include any newly drafted material, material received from previous senders, and any attachments.

5. Portion marking unclassified emails that reside on an CNSI system is required.

6. Marking in the electronic environment, to include web pages, URLs, dynamic documents, relational databases, classified wikis, instant messages or chats shall be in accordance with 32 CFR 2001.23.

7. Classification Authority Block must occur after the signature line but before the bottom banner marking.

(1) Working papers are documents (e.g., notes, drafts, prototypes), materials (e.g., presentation boards or models), or other electronic media created during development and preparation of a finished product. Working papers and materials are not intended or expected to be disseminated. Working papers and materials containing CNSI must be:

1. Dated when created.

2. Marked with the highest classification of any information contained therein.

3. Safeguarded as required for the assigned classification.

4. Conspicuously marked "Working Paper" on the cover and/or first page of the document or material or comparable location for electronic media/items (e.g., on the CD itself or on the most visible part of an item) in larger typeface than existing text.

5. Destroyed when no longer needed.

(2) Working papers or other working materials must be destroyed in the same manner as CNSI.

(3) Working papers must be marked and controlled as finished products of the appropriate classification when retained more than 180 calendar days from date of origin (regardless of if they are complete), filed permanently, or released outside the IRS.

(4) Working papers must only be shared between authorized holders internal to the IRS or between agencies of the same working group, either physically or electronically, without controlling them as permanent documents only when the working materials are shared information (e.g., collaborative documents or coordinating drafts) in the development process.

(1) SF 706, 707, and 708 are labels required to identify equipment approved for processing CNSI. Labels are color-coded in the same manner as document cover sheets:

1. SF 706: Orange for Top Secret

2. SF 707: Red for Secret

3. SF 708: Blue for Confidential

(2) Additional SF labels exist for equipment and are also required:

1. Purple for "classified but level determination pending," protection must be at the Top Secret level (SF 709).

2. Green for "unclassified" (SF 710). In environments in which CNSI and unclassified is stored, the "unclassified" label must be used to positively identify equipment/electronic media authorized for unclassified use only.

(3) Once applied, the label must not be removed.

1. A label to identify a higher classification level may be applied on top of a lower classification level, if the classification content changes.

2. A lower classification label must never be applied to equipment already containing or processing a higher level of CNSI.

(4) Authorized holders working with or processing CNSI are responsible for properly labeling and controlling equipment in their custody.

(5) All removable electronic and magnetic media used to process CNSI will be physically labeled with the highest level of CNSI contained therein.

1. Removable electronic media must be physically detached from the processing equipment at the close of business each business day and secured in a security container.

2. An exception to the requirement to physically remove and store such electronic media items is authorized when the equipment and processing occurs in a TSDN LA or SCIF that has been equipped with minimum security standards prescribed in this IRM or Intelligence Community Directives (ICD), then approved by Treasury.

3. Removable electronic media will always be safeguarded when not in use or under the supervision of an authorized holder.

(6) Failure to apply the appropriate labels is a security infraction. If the failure results in improper storage, loss, unauthorized access, or compromise of CNSI, it is a security violation.

(1) Automatic Declassification Review: All CNSI contained in records that are more than 25 years old and that have been determined to have permanent historical value under Title 44 U.S.C. is automatically declassified, unless it meets the requirements of EO 13526 Section 3.3 paragraphs (b)-(d) and (g)-(j). The 25-year automatic declassification process is a sliding scale as records age and applies annually to CNSI on December 31.

1. Information exempted from automatic declassification remains subject to the mandatory and systematic declassification reviews.

2. CNSI cannot be automatically declassified because of an unauthorized disclosure of identical or similar information.

3. Prior to public release, all declassified records must be appropriately marked to reflect the declassified status of the information.

(2) Systematic Declassification Review: This function is carried out by the agency with the OCA responsible for the classification of a given piece of CNSI. Detailed information can be found in EO 13526, Section 3.4.

(3) Mandatory Declassification Review: This function is carried out by the OCA responsible for the classification of a given piece of CNSI. Detailed information can be found in EO 13526, Section 3.5.

(1) In order to access CNSI, the individual must be an "authorized holder" that meets requirements listed in (1) a) - d) as follows:

1. A favorable determination of eligibility for access. An individual is eligible for access to CNSI only after a positive showing of trustworthiness as determined by the proper IRS authority based upon an investigation and favorable adjudication in accordance with national personnel security standards and accompanying Treasury guidance.

2. A signed SF 312.

3. A need-to-know the CNSI, defined as a determination in accordance with directives issued pursuant to EO 13526 that a prospective recipient requires access to specific CNSI to perform or assist in a lawful and authorized USG function.

4. Participate in mandatory Integrated Talent Management Item, "Annual Security and Derivative Classification Brief," instituted by the CNSI PM on the proper safeguarding of CNSI and on the criminal, civil, and administrative sanctions that may be imposed if the CNSI is not protected from unauthorized access.

(2) No employee must be deemed to be eligible for access to CNSI merely by reason of:

1. Federal service or contracting, licensee, or certificate holder

2. Grantee status

3. As a matter of right or privilege, or because of any title, rank, position, or affiliation

4. Solely having a clearance

(3) IRM 10.23.3, Personnel Security, Personnel Security/Suitability for Employment and Personnel Security Operations, must be followed in matters of personnel security, which include but not limited to: requesting security clearances, transfer of clearances to attend meetings, etc.

(4) Prior to allowing access to CNSI, verify security clearances at least seven business days in advance:

1. IRS or contractor employees via hco.ps.national.security.programs@irs.gov.

2. Visitors reference requirements in IRM 10.23.1.18, National Security Positions and Access to Classified Information.

(1) Each authorized person is responsible for safeguarding CNSI from possible loss, compromise, or unauthorized disclosure. The knowledge and physical custody includes ensuring:

1. That CNSI is protected over the course of its lifecycle, regardless of what action is being taken with it.

2. That it is not communicated over unclassified voice, email, or any other system (e.g., TSDN for up to Secret or Treasury Foreign Intelligence Network (TFIN) for up to TS/SCI), nor in public conveyances or places (to include hallways or unsecured conference rooms, even in a government facility), or in any other manner that potentially permits interception by unauthorized personnel.

3. Failure to protect CNSI is recognized as a security incident. Any potential or actual security incidents must be reported to the local Classified Document Custodian immediately after ensuring that CNSI is protected.

(2) Authorized holders transmitting CNSI are responsible for ensuring that intended recipients are authorized persons with the capability to store CNSI at the level being sent, regardless of the method of transmission (e.g., electronic, hand-carry).

(3) STEs located in an area owned by CI are certified by CI to prevent access to both the equipment and unauthorized disclosure of the conversation or a certified Security Area will be used for conducting classified discussions.

(4) CNSI approved for destruction must be destroyed in accordance with this IRM.

(5) CNSI may not be removed from IRS premises without a courier letter or card and authorization, as appropriate (e.g., removal for purposes of disclosure to a foreign entity, etc.).

(6) An IRS authorized holder leaving IRS may not remove CNSI from IRS control or direct that information be declassified to remove it from IRS control.

(7) To maintain the ability to access CNSI there must be a requirement for the employee to maintain the clearance. The justification of continued need must be documented in the Position Description.

(8) Access to CNSI must be terminated when an employee no longer has a need for CNSI to accomplish their duties; the employee’s management must ensure the transition to a Public Trust Position Description (PD). Access must also be terminated as required in the IRM 10.23 series, Personnel Security.

(9) In the event of immediate threats (i.e., fire, earthquake, bomb threat, etc.) or anticipated threats (i.e., hurricane, flood), if time permits, immediately secure all CNSI on site in an approved security container. If adequate storage is not available in the Security Area, the Security Container Custodian (if a security container) or Responsible Party (if Security Area) must have pre-arranged a security container in another space for the items.

(1) Security containers used for storage of CNSI material must conform to standards specified by the General Services Administration (GSA).

1. For documents, the requirement is a Class 5 or 6 container with a lock meeting FF-L-2740 standard.

2. GSA approved security container meeting Federal Standard (FED STD) AA-C-2786 to store Information Processing Systems (IPS).

3. GSA-approved field security containers are intended for storage of CNSI in situations where normal storage is not possible such as on ships, in vehicles, or in military field operations; they may not be used in an IRS facility.

(2) Whenever a new security container is procured, it must be compliant with the requirements and purchased through GSA Global Supply, and the Classified Document Custodian responsible must input the container into the Security Container Tracker.

1. Contact the CNSI PMs via *FMSS Classified Information Security Team for information and instructions on the purchase of a new container.

(3) CNSI must be stored under conditions designed to deter and detect unauthorized access.

(4) Storage at overseas locations must be at USG facilities, unless it is otherwise stipulated by the U.S. government security authority for that area (e.g., State Department Chief of Mission or Regional Security Officer).

(5) The SF 702 must:

1. Have the information section (e.g., room number, building, container number, month/year) filled out appropriately.

2. Be completed each time the security container or Security Area is accessed and/or checked every business day, regardless of whether it was opened.

3. The SF 702 must be kept for 90 calendar days.

(6) Firearms, monetary assets or evidentiary matter cannot be commingled with CNSI in the same drawer; unclassified or SBU information may be commingled only if the unclassified or SBU is part of the classified document.

(1) Before being given access to a security container or Security Area, the individual’s status as an authorized holder must be established.

(2) Dial-type electromechanical locks must meet the FF-L-2740 standard and combinations are considered classified at the highest level of CNSI that is protected by the lock. This applies to the locks installed on a container or door of a Security Area.

(3) Key-operated high security padlocks are not authorized to secure CNSI.

(4) Pedestrian doors to Security Areas must have an FF-L-2740 lock and meet all life-safety requirements. Additionally, pedestrian door lock extensions must meet FF-L-2890, Lock Extensions (Pedestrian Door Lock Assembly Preassembled, Panic and Auxiliary Deadbolt) standards.

(5) Keys for pedestrian door lock extension that are required to meet local life-safety requirements on Security Area pedestrian door protecting CNSI must be afforded the same level of protection as the information being protected. Additional administrative procedures for key control and accountability will include the following:

1. Great Grand Master key systems are not authorized for Security Area.

2. Keys may not be duplicated.

3. The Security Section Chief must issue keys to the Responsible Party for the Security Area as Key Custodian, this will be documented via Form 1930-D, Key Custody Receipt (KCR). The Key Custodian may only issue keys to other Security Area Responsible Parties or Authorized Personnel when life-safety or emergent reasons arise. Keys may not be taken out of the building.

4. Keys will have a unique identifier either attached to the key or engraved on the key head. Unique serial numbers for keys may be used as the identifier. The key must also be engraved with the words "U.S. Government - DO NOT DUPLICATE."

5. Lost or stolen keys:
   
   i. Contact the Classified Document Custodian, Security Area Responsible Party, and CNSI PM at *FMSS Classified Information Security Team of a possible security incident in an unclassified manner promptly after the discovery of the potential loss.
   ii. Contact all Authorized Personnel with access to the key to ascertain if it is in their possession; follow up with the Classified Document Custodian, Security Area Responsible Party, and CNSI PM.
   iii. Perform immediate inventory of all CNSI documents.
   iv. GSA approved technicians must be contacted promptly to replace core.
   v. If applicable, after the core is replaced all the remaining original keys must be destroyed so they cannot be confused with replacements.
   
   

6. Key Inventory Log. A locally developed log to record the inventory of Security Area keys. The Key Custodian will conduct a physical inventory at least quarterly. Key Inventory Logs must be retained for six months for Interagency Security Committee (ISC) Facility Security Level (FSL) I-III; ISC FSL V facilities for three years. The Key Inventory Log will document the following:
   
   i. Date and Time of inventory.
   ii. Full name and signature of Key Custodian conducting the inventory.
   
   

7. Key Control Register. A locally developed register to record the issuance of Security Area keys to Authorized Personnel. The Key Control Register will be inspected at least quarterly to ensure compliance with this IRM. Key Control Registers must be retained for six months for Interagency Security Council (ISC) FSL I-III; ISC FSL V facilities for three years. The Key Control Register will document the following:
   
   i. Unique key identifier.
   ii. Date and time key issued.
   iii. Issued by Full name and signature of Key Custodian issuing the key out.
   iv. Issued to Full name and signature of other Responsible Party or Authorized Personnel signing the key out.
   v. Date and time key was signed out and in.
   vi. Received by Full name and signature of Key Custodian receiving the key.
   

(6) Combinations will be changed only by personnel with a security clearance, verified prior to the change occurring by emailing hco.ps.national.security.programs@irs.gov, commensurate with the level of CNSI in the container and who have knowledge as to how to appropriately change the combination. The combinations will not be sequential numbers, or the standard combination, 50-25-50; additionally, combinations must be either high-low-high or low-high-low (e.g., 75-38-61 or 23-55-31).

1. Contractors must not be used to change combinations, unless they are GSA certified technicians, or it is in the scope of work of the contract and the contract meets NISP requirements. Contact the CNSI PM with the contract documents. If no contract was established, and the service is bought via credit card, it is the Business Units responsibility to ensure the technician is GSA certified and has the appropriate clearance prior to the combination being changed.

2. Combinations must be changed when:
   
   i. The container is first placed into service with the end-user.
   ii. An authorized holder knowing the combination no longer requires access to it unless existing controls prevent unauthorized access to the security equipment (e.g., container is in a SCIF or other Security Area with prescribed access control restrictions preventing the authorized holder access).
   iii. A combination has been subjected to possible compromise, actual compromise, or unauthorized disclosure.
   iv. The equipment is taken out-of-service.
   v. At least every 3 years, unless conditions dictate sooner, such as the need to store a particular type of CNSI or material. The minimum time frame is to ensure combinations have an official termination point and to avoid an infrequently opened security container’s combination being lost.
   

(7) An individual that has authorization to access the security container must be present to specify the desired combination and verify the change.

(8) Combinations to security containers storing CNSI must be recorded on a new SF 700, sealed, then stored in a different GSA approved security container with the same or higher level of classification.

1. Part 1, the tear-away, carbon-copy portion that lists the name and contact information of individuals with access to the security container must be placed on the inside of the drawer with the lock on it in a conspicuous place or on the secure side of the Security Area entry door.

2. Part 2A, the tear-away, perforated portion for the combination, must be placed in the envelope portion, Part 2, of the SF 700. This is the portion of the form that must be stored in another security container.

(9) Excessing, Recycling, or Scrapping: Containers should be processed if no longer needed by the Business Unit for any reason (e.g., not currently used/no planned future use, inoperable, etc.). Prior to an Employee Resource Center (ERC) ticket being submitted for the security container, the following steps must be followed in order:

1. The lock for the container may need to be removed for demilitarization if the container is inoperable or potentially going to be excessed, so the CNSI PMs must be contacted with the make/model of the lock prior to proceeding with the steps below.

2. The Classified Document Custodian or Security Custodian Customer will ensure that all the CNSI in the container has been destroyed or moved to another GSA approved container.

3. The Classified Document Custodian or Security Container Custodian will open all drawers to the container one at a time and, using a flashlight, inspect:
   
   i. That it is empty of all documentation,
   ii. That a light is shined in the spaces surrounding the pulled-out drawer to ensure that there is no material in the crevices,
   iii. If material appears to be present, that the drawer is removed, and the material is retrieved.
   
   

4. The Classified Document Custodian or Security Container Custodian will ensure the combination for the container is changed to the standard default of 50-25-50. Contact *FMSS Classified Information Security Team if there are issues with setting the combination.

5. If the container is inoperable, remove the GSA label by using a razor blade or flathead screwdriver.

6. The ERC ticket must state the following in the Purpose Box: "Please remove the security container as it (no longer meets the requirements to secure CNSI material/no longer needed by the office). The security container is (operable/not operable). The security container is open. (The lock is not operable and has been removed and returned to FMSS for demilitarization with the Department of Defense Lock Program or re-use within IRS. The combination is affixed to the lock and the lock has been set to default.) The container has been verified as clear of CNSI by (Insert name of POC, contact phone #, email). Thank you."

7. Once the container has been picked up for dispositioning, the Classified Document Custodian must update the Security Container Tracker.

8. The IRS Property Officer will determine what to do with the security container based on its condition and the needs of the USG.

(10) If repairs to the Class 5 or 6 security container or FF-L-2740 lock are required, the technician hired to address them must be GSA certified. The Business Unit must remove CNSI from the defunct container and place it in another Class 5 or 6 container. If the technician is not GSA certified, then the security container must be decommissioned (i.e., not used to store CNSI) until a GSA certified technician can recertify it. The two organizations mentioned in a) and b) maintain lists of certified technicians worldwide, as well as provide GSA certified training:

1. Lockmasters Security Institute
   1014 South Main Street
   Nicholasville, KY 40356
   Phone: 866-574-8724 (USA Toll Free)
   Phone: 859-887-9633
   
   

2. MBA USA, Inc.
   200 Orchard Drive
   Nicholasville, KY 40356
   Phone: 888-622-5495 (USA Toll Free)
   Phone: 859-887-0496

(11) Movements of a security container between rooms or facilities, to include decommissioning to a warehouse or excessing, must be tracked by the Classified Document Custodian with responsibility for the container via the Security Container Tracker. The tracker should note which other security container is used for holding the SF 700.

(1) CNSI may only be processed on approved equipment (e.g., TSDN, TFIN, or accredited systems housed in other agencies).

(2) Information systems approved for CNSI processing cannot be connected to any system not approved for classified operation. Systems approved for CNSI processing will not share peripherals with unclassified processing equipment except through NSA/CSS approved switching devices. Approval for the use of switching devices must be included in the security authorization documentation.

1. Prior to using the switch, the individual must be taught appropriate protocols by the IRS or DO IT department. The switch must be labeled on both the unclassified and CNSI side with the appropriate stickers: SF 710 for unclassified and SF 706, 707, or 708 for CNSI at the respective level.

(3) Refer to TD P 85-01 Volume II and TD 15-03 and/or contact the Treasury Office of the Chief Information Officer (OCIO) for information on uniform procedures to ensure automated information systems, including networks and telecommunications systems, that:

1. Collect, create, communicate, compute, disseminate, process, or store CNSI.

2. Prevent unauthorized access, ensure information integrity.

3. Use common information technology standards, protocols, and interfaces that maximize the availability of, and access to, the information to authorized holders who meet the standards set by EO 13526 for access to CNSI.

(1) Rooms being used to process CNSI on electronic systems, or discuss CNSI, must be built to specific standards and follow detailed operational requirements. There are four types of rooms that IRS Authorized Personnel may use to process CNSI; three Collateral Security Areas (Open Storage of Secret, TSDN LAs, Top Secret Space) and SCIFs.

1. Open Storage of CNSI up to the Secret level is used only in circumstances where there is:
   
   i. Up to Secret level equipment that is required to be stored,
   ii. Insufficient space in GSA approved security containers,
   iii. Not a need to process via secure system.
   
   

2. TSDN LAs can process up to Secret CNSI and can be compared to Treasury’s Secure Work Areas. Treasury does not permit TSDN LAs to openly store CNSI documentation.

3. Top Secret Spaces can store Top Secret paper and host Top Secret conversations, they cannot host TFIN.

4. SCIFs are utilized when storing and processing TS/SCI information, such as TFIN.

   Note: Prior to any of these areas being constructed the AD, Security, must approve the upgrade using a form provided to the requesting Business Unit by the CNSI PMs.

(2) Security Area Daily Maintenance: This subsection applies to Open Storage of up to Secret, TSDN LA and Top Secret Spaces. SCIFs have additional protocols that are detailed during the certification process. During the workday, care must be taken to ensure that CNSI always remains protected.

Accessing:

1. Only a Responsible Party or Authorized Personnel, who will be termed "Opener", can know the combination required to open the Security Area; as such, discretion must be used as to the number of individuals given the responsibility.

2. All persons must have a current and ongoing need-to-work in the Security Area at minimum of one time per month prior to seeking access. IRM 10.2.18.10.4 must be followed to document access requests. This request must contain the individual’s given name, verification that individual has appropriate clearance level, verification the individual has a need-to-know and requires consistent access to the Security area, and whether the individual is a Responsible Party or Authorized Personnel.
   
   i. Personnel Security must be given a minimum of seven business days to verify the individual’s clearance.
   ii. The Responsible Party must ensure that all Authorized Personnel are trained on the appropriate procedures for opening, closing, workday maintenance, alarm response, etc. prior to being given their own IDS code and the combination to the FF-L-2740 compliant lock.
   
   

3. At the beginning of business hours, the opener will enter the combination into the FF-L-2740 compliant lock, read their SmartID on the access control device (ACD), and enter their PIN.
   
   i. All electronic devices (smartwatch, cellular phone, tablet, computer, Bluetooth, or wireless headphones, etc.) must all be placed in the cell phone locker prior to entry. The introduction of prohibited items into the Security Area is a security incident.
   
   

4. Should an Authorized Personnel need to have a wireless/Bluetooth device for health reasons, such as a pacemaker, notification to the Responsible Party and the CNSI PM must be made.

5. The SF 702, kept on the outside of the entry door, must be filled out.

6. The magnetic sign on the door must be flipped to ‘open,’ if the signage is available.

7. Once inside the Security Area, the opener must disarm the IDS and push the life safety switch on the back of the FF-L-2740 lock to prevent lock in.

1. Visitors must be sponsored into the Security Area by that area’s Responsible Party or Authorized Personnel, henceforth termed "sponsoring individual".

2. The sponsoring individual must coordinate with the visitor and IRS Personnel Security to ensure that the visitor’s clearance and need-to-know are verified prior to the visit taking place. Personnel Security must be given a minimum of seven business days to verify the individual’s clearance.
   
   i. Visits must be planned to allow for vetting to occur prior to the individual gaining access.
   ii. Cleaning and maintenance personnel must have been deemed suitable in accordance with 5 CFR 731 and given an ID via normal facility processes prior to entry into the Security Area. Cleaning and maintenance personnel must always be escorted.
   
   

3. The Security Area must be sanitized, and the occupants be made aware prior to the visit, to preclude unauthorized access to CNSI.

4. Visitors must sign in and out of the Security Area on IRS Form 5421. A one-year history of the Form 5421 must be maintained on-site.

5. Visitors must adhere to IRS and Treasury orders to ensure the safeguarding of classified information.

6. One Responsible Party or Authorized Personnel must always remain in the Security Area during the business day, otherwise the space will need to be closed, as discussed in the “Closing” subsection below.
   
   i. The SF 701 does not need to be filled out until the last Authorized Personnel leaves for the day. The Security Area does, however, need to be checked by the Responsible Party or Authorized Personnel to ensure no CNSI is left unsecured.

1. Any Responsible Party or Authorized Personnel can close the Security Area and is known in this subsection as the closer. The following must be initiated any time the space is left unoccupied, whether it be for a workday meeting or at the close of the business day.
   
   i. The closer must walk the Security Area to ensure that they are the last person in the space, all CNSI has been secured, the security containers are closed appropriately, and all TSDNs, as applicable, have been logged off.
   ii. The SF 702 must be filled out in the checked by column verifying that it was appropriately closed, regardless of whether the security container was opened on a given day.
   iii. The SF 701 must be filled out verifying that the Security Area was checked.
   iv. The closer must then arm the IDS system. Once the system begins the countdown, the closer knows it is time to leave the Security Area.
   v. Pull the life safety switch on the back of the FF-L-2740.
   vi. Upon leaving, the closer must verify the door is shut and spin the combination lock one full rotation in each direction, at minimum, and verify that the bolt is engaged by attempting to open the door.
   vii. Complete the SF 702 with the time exited and the magnetic sign must show ‘closed,’ if signage is available.
   viii. If no Responsible Party or Authorized Personnel enter the Security Area on a given duty day, it must be checked to verify that the FF-L-2740 lock is engaged on the door and noted on the SF 702 for the door under the checked by column.
   
   

1. If access to the Security Area is required after business hours, on weekends, or holidays, normal business day open and close procedures will be followed.

1. The names of the Responsible Party(ies) or Authorized Personnel designated to perform response duties, along with their business and personal contact information, must be provided to the monitoring entity to ensure response to alarm or disturbances. These individuals are known as responders. Coordination in advance of holidays or other periods where multiple responders may be unavailable must occur.
   
   i. Only a Responsible Party or a designated Authorized Personnel can respond to alarms or disturbances.
   
   

2. During Business Hours:
   
   i. Once notified of the alarm or disturbance, the responder has up to 15 minutes for Top Secret Spaces and 30 minutes for Open Storage of Secret or TSDN LAs to arrive.
   ii. After arriving at the Security Area, the responder, if not in fear for their safety, must enter and perform a thorough check to ensure that there has been no potential compromise or loss of CNSI in any of its forms.
   iii. If the responder has safety concerns, the monitoring entity must be notified immediately.
   iv. The responder must disable the IDS upon entry into the Security Area.
   v. Once the Security Area is clear, the monitoring entity must be notified so that they can clear the alarm.
   
   

3. After Hours:
   
   i. The monitoring entity must take appropriate action on all alarms and notify the responders for the Security Area; responders have up to 15 minutes for Top Secret Spaces and 30 minutes for Open Storage of Secret or TSDN LAs to arrive.
   ii. After arriving, the responder, if not in fear of their safety, must enter and perform a thorough check to ensure that there has been no potential compromise or loss of the CNSI in any of its forms.
   iii. If the responder has safety concerns, the monitoring entity must be notified immediately to facilitate an armed response.
   iv. The responder must disable the IDS upon entry into the Security Area.
   v. Once the Security Area is clear, the monitoring entity must be notified so that they can clear the alarm.
   
   

4. Facilities Emergencies:
   
   i. The monitoring entity must be notified in the event of an emergency (i.e., water leak, heating, and cooling issue, etc.) that is affecting the Security Area and requires entry to address, but the space is unoccupied.
   ii. The monitoring entity will notify the responders to open the Security Area.
   iii. Responders must respond within 15 minutes for Top Secret Spaces and 30 minutes for Open Storage of Secret or TSDN LAs to arrive.
   

(3) Open Storage of CNSI up to the Secret level:

1. Background: 32 CFR 2001.43 and .53 detail the requirements needing to be met prior to a Security Area being allowed to openly store CNSI equipment up to the Secret level. This type is not certified for classified conversations.

2. Requesting an Open Storage Area:
   
   i. Business Units requiring Open Storage must consider the amount of equipment being stored, length of time it will be stored, whether it can be disposed of, if there will be a recurring need to store CNSI equipment and whether there are multiple GSA approved containers in which to store the equipment.
   ii. If a Security Area is still required based on the considerations above, the AD, Security must approve prior to upgrade or construction starting.
   
   

3. Certification:
   
   i. The initial survey of the room will be conducted by the CNSI PMs against 32 CFR 2001 requirements.
   ii. The CNSI PMs will coordinate with the local SSC and requesting Business Unit to ensure gaps between the status of the room and CFR requirements are addressed. Additionally:
   
   1. No wireless devices of any kind are permitted into the Security Area unless authorized by Treasury.
   2. Each Responsible Party and Authorized Personnel must have their own, unique code to the IDS.
   
   iii. After-hours response must be coordinated with the SSC, monitoring entity and Business Unit.
   iv. Once the Security Area has been built, the CNSI PMs will perform a certification inspection. If the space meets requirements, the AD, Security will issue a certification letter.
   v. The Responsible Party of the Security Area must ensure that security protocols discussed above in subsection IRM 10.9.1.8.5(1) are established and maintained for the space, to include immediate provision of a response roster to the monitoring entity.
   
   1. A copy of the Security Area’s certification letter, Form 5421, and the SF 701 must be placed by the primary entry door on the secure side of the door.
   2. The SF 702 must be kept on the non-secure side of the Open Storage primary entry door and on other security containers, as applicable.
   3. Security Area Entry Door Warning Sign and current access roster on the non-secure side of all entry doors, found on the CNSI Website.
   4. Training of Authorized Personnel on appropriate access, closure, and alarm response procedures.
   

(4) TSDN LAs: Background: 32 CFR 2001 and the TD P 15-71, and the TD P 85-01 out the requirements for the protection of CNSI material and systems. The below is in addition to the LA guidance found in IRM 10.2.14, IRM 10.2.18, and the physical security requirements for TSDN LAs in the Physical Security Design Manual.

Requesting a TSDN and Milestones:

1. Business Units requiring a TSDN LA must review the Certification Process, subsection found directly below, prior to selecting a room for conversion into a Security Area. Additional considerations:
   
   i. Traffic flow by the room, whether the facility is leased, or what other entities (governmental or not) would be neighbors.
   ii. Consultations with local SSC and FMSS staff on most advisable room to convert given physical security requirements.
   
   

2. The following information must be sent to the CNSI PM:
   
   i. Justification stating the need.
   ii. The location (building address and office number).
   iii. Assurance that the Business Unit can provide adequate 24/7 coverage to respond to alarms, disturbances, or events in the Security Area. Those chosen for coverage must:
   
   1. Possess a valid Secret clearance.
   2. Be an IRS authorized holder.
   3. Understand requirements of secure operation.
   
   

3. After the information has been provided, the CNSI PM will work with the AD, Security, to ensure that all requirements are met. AD, Security must provide a response within 30 calendar days of the receipt of all information for the process to begin.

4. Business Units must discuss with and have the agreement of Treasury OCIO regarding the installation of TSDN in the prospective Security Area prior to coordinating with CNSI PM and SSC to start the process of construction/upgrade.

5. Treasury OCIO procures all portions of the TSDN system once the Business Unit’s requirements are finalized.

1. Approval to build the TSDN LA is submitted to the AD, Security by the requesting Business Unit. See “Requesting a TSDN LA and Milestones” subsection above.

2. The initial survey of the room will be conducted by the CNSI PMs ensuring that the OSP physical security requirements for TSDN LAs are met.

3. The CNSI PMs will coordinate with the local SSC and requesting Business Unit to ensure gaps between the current status of the room and OSP requirements are addressed:
   
   i. The Security Area must be equipped with NSA/CSS EPL shredder, GSA approved class 5 or 6 security container with FF-L-2740 lock, door signage that appropriately warns against unauthorized entry.
   ii. All trash and recycling bins removed.
   iii. A Technical Surveillance Countermeasures Survey may be required if unclassified equipment is to remain in place once the room becomes certified or if new unclassified equipment is added after certification. This survey typically occurs after certification but prior to installation of TSDN.
   iv. No wireless devices of any kind are permitted inside.
   v. Each Responsible Party and Authorized Personnel must have their own, unique code to the IDS.
   vi. If windows are present, then the screens for the TSDN system must face away from the windows or be equipped with a privacy screen.
   vii. Treasury OCIO will advise on proximity between TSDN and unclassified systems, lines, and equipment as required per national guidelines. The proximity must always be maintained.
   viii. TSDN systems must stay in the Security Area that was certified to hold them. The systems cannot be moved by IRS or others from where they are initially placed by Treasury OCIO without prior permission from DO OCIO.
   
   

4. After-hours response must be coordinated with the SSC, monitoring entity and Business Unit.

5. Once built, the CNSI PMs will perform a certification inspection.

6. If it meets requirements, the CNSI PMs will forward the inspection documentation to OSP for their assessment and, if the risk is acceptable, provision of the certification letter to the IRS.

7. After certification, the Business Unit must coordinate with Treasury OCIO for the installation of TSDN.

8. If the Security Area is certified for classified discussions by OSP, STE can be procured by the Business Unit from the IRS COMSEC POC.

9. The Responsible Party of the Security Area must ensure that security protocols discussed above in IRM 10.9.1.8.6(2) are established and maintained for the space, to include immediate provision of a response roster to the monitoring entity.
   
   i. A copy of the certification letter, IRS Form 5421, and the SF 701 must be placed by the primary entry door on the secure side of the TSDN LA.
   ii. The SF 702 must be kept on the non-secure side of the primary entry door to the TSDN LA and on other security containers as required.
   iii. Security Area Entry Door Warning Sign and current access roster on the non-secure side of all entry doors, found on the CNSI Website.
   iv. The SF 707 and 710 stickers must be placed on equipment as applicable.
   

(5) Top Secret Space: Background: 32 CFR 2001 outlines the requirements for the protection of CNSI material and systems. The below is in addition to the guidance found in 32 CFR 2001, IRM 10.2.14 and IRM 10.2.18. These spaces cannot host SCI in any form, but can host Top Secret conversations.

Requesting a Top Secret Space and Milestones:

1. Business Units requiring a Top Secret Space must review the Certification Process, subsection found directly below, prior to selecting a room for conversion into a Security Area. Additional considerations:
   
   i. Traffic flow by the room, whether the facility is leased, or what other entities (governmental or not) would be neighbors.
   ii. Consultations with local SSC and FMSS staff on most advisable room to convert given physical security requirements.
   
   

2. The following information must be sent to the CNSI PM:
   
   i. Justification stating the need for the Security Area and the storage of Top Secret.
   ii. The location (building address and office number).
   iii. The given name of a Top Secret Control Officer who will be responsible during upgrade/construction and upon certification, in line with subsection IRM 10.9.1.8.6(7) of this IRM.
   
   

3. Assurance that the Business Unit can provide adequate 24/7 coverage to respond to alarms, disturbances, or events in the Security Area. Those chosen for coverage must:
   
   i. Possess a valid Top Secret clearance.
   ii. Be an IRS authorized holder.
   iii. Understand security requirements of secure operations.
   
   

4. After the information has been provided, the CNSI PM will work with the AD, Security to ensure that all requirements are met. AD, Security must provide a response within 30 calendar days of the receipt of all information for the process to begin.

1. Approval to build the Top Secret Space is submitted to the AD, Security by the requesting Business Unit. See “Requesting a Top Secret Space and Milestones” subsection above.

2. The initial survey of the room will be conducted by the CNSI PMs ensuring that the 32 CFR 2001 physical security requirements for Top Secret Spaces are met.

3. The CNSI PMs will coordinate with the local SSC and requesting Business Unit to ensure gaps between the current status of the room and 32 CFR 2001 requirements are addressed.
   
   i. The Security Area must be equipped with NSA/CSS EPL shredder, GSA approved class 5 or 6 security container with FF-L-2740 lock, door signage that appropriately warns against unauthorized entry.
   ii. All trash and recycling bins removed.
   iii. No wireless devices of any kind are permitted.
   iv. Each Responsible Party and Authorized Personnel must have their own, unique code to the IDS.
   v. If windows are present, then they must be equipped with blinds, full coverage shades or similar to preclude visual observation.
   
   

4. After-hours response must be coordinated with the SSC, monitoring entity and Business Unit.

5. Once built, the CNSI PMs will perform a certification inspection. If the space meets requirements, the AD, Security will issue a certification letter.

6. If certified for classified discussions by AD, Security, STE can be procured by the Business Unit from the IRS COMSEC POC.

7. The Responsible Party of the Security Area must ensure that security protocols discussed above in IRM 10.9.1.8.6(2) are established and maintained for the space, to include immediate provision of a response roster to the monitoring entity.
   
   i. A copy of the certification letter, IRS Form 5421, and the SF 701 must be placed by the primary entry door on the secure side of the Top Secret Space.
   ii. The SF 702 must be kept on the non-secure side of the primary entry door to the Top Secret Space and on other security containers as required.
   iii. Security Area Entry Door Warning Sign and current access roster on the non-secure side of all entry doors, found on the CNSI Website.
   iv. The SF 707 and 710 stickers must be placed on equipment as applicable.

(6) Sensitive Compartmented Information Facilities (SCIF) request for Approval. Note that this process is only for the approval phase.

1. Prior to any designs or construction being created, the approval to build a SCIF must be obtained from the Assistant Secretary (A/S) of Treasury’s Office of Intelligence and Analysis (OIA).

2. The requesting Business Unit must complete the request form provided by the CNSI PMs and include the following information, at minimum, on a Justification Memorandum on IRS letterhead:
   
   i. Definition of need and why other SCIFs in the surrounding area cannot be used in lieu of new construction,
   ii. Funding source for construction, protection, and maintenance,
   iii. Stated willingness to cover additional expenses for the guard contract to adequately protect the SCIF (e.g., 24/7 response within 15 minutes maximum),
   iv. Acknowledge necessity to appoint a trained primary and alternate Site Security Manager (SSM) during the construction phase, the CNSI PMs can provide the acceptable training. The SSM can serve as the SSO.
   v. Acknowledge necessity to have a dedicated, trained (trainings may require travel, contact CNSI PMs for list of acceptable courses) authorized holder within the Business Unit to serve as SSO once the SCIF has been accredited. Roles and responsibilities of SSO will be outlined by Treasury and in accordance with the ICDs upon accreditation.
   vi. Appointment of Top Secret Control Officer, who could also serve as the SSO upon the SCIF’s accreditation.
   vii. SCIF Facility Type: Secure Work Area, Temporary Secure Working Area, Continuous Operation, Temporary SCIF, Open Storage, or Closed Storage,
   viii. Whether the building, if leased, has been reviewed per Interagency Security Committee requirements,
   ix. If the facility is multi-tenant, list the tenant company names,
   x. Number of TFIN drops required.
   
   

3. The Justification Memorandum must be signed by the requesting Business Unit’s senior executive and sent to the AD, Security.

4. The Justification Memorandum is sent to the Chief, FMSS via the CNSI PMs through the AD, Security.

5. Chief, FMSS reviews and provides decision on SCIF packet. If approved the Chief, FMSS will forward the packet to the A/S of OIA via the Deputy Assistant Secretary for Intelligence and Analysis. If not approved, or if more information is needed, the packet goes back the CNSI PMs and over to the Business Unit.

6. Chief, FMSS briefs IRS Senior Leadership as required.

7. OIA will consider the request and provide an approval or disapproval to Chief, FMSS. The Chief, FMSS will return the packet back to the CNSI PMs.

8. CNSI PMs provide requesting Business Unit the final decision.

9. If approved, Treasury will provide information regarding the design, planning, and construction process in terms of whom the Cognizant Security Authority, Accrediting Official (AO), and SSO will be for the design, construction, and accreditation. The AO will be the primary POC for all security requirements to the CNSI PMs and Business Unit.

10. If the SCIF is disapproved, there is no appeal process- the requesting Business Unit must find an alternate SCIF in the area to use.

(7) Appointment of Top Secret Control Officer and Responsibilities:

1. The portions in parenthesis of the Top Secret Control Officer appointment language, below, must be replaced with the appropriate information before being sent to the appointee:
   
   i. In accordance with IRM 10.9.1, Classified National Security Information, (given name of person) is appointed to the position of Top Secret Control Officer for (name of Business Unit) at the (facility, campus, etc.). (Name) has been verified to have an active, in-scope (Top Secret clearance for Top Secret Space or TS/SCI clearance for a SCIF). (Name) is aware that it is (his/her) duty to understand and perform all the requirements noted in IRM 10.9.1 for the position of Top Secret Control Officer.
   
   

2. If a Top Secret Control Officer can no longer perform their duties, a replacement must be appointed promptly. It is requested that a replacement be appointed in advance, if possible.

3. Responsibilities, these are in addition to the Responsibilities noted in subsection IRM 10.9.1.1.3(8).
   
   i. Review "TSCO Duties and Responsibilities" material on the CNSI Website and discuss with CNSI PMs, as applicable, to understand duties; if the position is Top Secret Control Officer of a SCIF, Treasury OIA training’s must also be received.
   ii. The Top Secret Control Officer must ensure that Top Secret is properly stored, shared, transmitted (to include use of required forms, double-wrapping, systems used, etc.) and that such information under their personal custody is destroyed under two-person control and the destruction is documented.
   iii. The Top Secret Control Officer must initially receive an open all Top Secret information in their organization, to include that delivered to the agency by outside courier and/or brought back to the agency by an authorized holder. All incoming Top Secret must be brought to (and logged in by) the Top Secret Control Officer by the next business day.
   iv. Maintaining the TD F 15-05.4, Document Control Register, for all Top Secret information held by the Business Unit. In maintaining the TD F 15-05.4, the Top Secret Control Officer must assign a Top Secret Control Number to all incoming and newly created documents in a calendar-year sequence (e.g., for CY2020: 20-001 and 20-002, where "20" is the calendar year when the document is initially recorded and the "01", "002" are the first and second documents, with numbers continuing sequentially). The control number must be noted on the front page of the document in a conspicuous place. Accountability records must be kept unclassified and can be stored in the security container housing the information so long as the Top Secret Control Officer maintains a backup.
   v. The results of the self-assessment will be provided in an unclassified, written report maintained by the Top Secret Control Officer for review during self-assessments. If there are documents that are unaccounted for, it is treated as a security violation, and the report includes a plan of action with identifiable milestones and dates for resolving whatever circumstances caused the material to be lost or missing.
   vi. Affix a TD F 15-05.10, Top Secret Document Record, as well as the TD F 15- 05.8, to all copies of Top Secret information leaving the immediate office/IRS prior to delivery to other offices for record/response.
   
   1. TD F 15-05.10 must be printed on green card stock and attached to all Top Secret documents. TD F 15-05.10 is in addition to TD F 15-05.4.
   2. The TD F 15-05.10 must be maintained for two years from the last, at which point it can be destroyed.
   3. In process TD F 15-05.8, Receipt of Classified Information, must be used to start tracer actions after 30 days if they have not been returned. Completed TD F 15-05.8 must be maintained for three years if no outstanding tracer actions exist.
   
   vii. Maintaining accountability records, receipts of the transmission and destruction of Top Secret information for three years from the last date noted.
   

(1) If CNSI must be couriered outside the building in which it is located for any reason, the employee performing that task must have either a courier letter or card.

(2) IRS employees performing courier duties must:

1. Have a final, favorable security clearance at the level they need to courier,

2. Proof of courier training completed within the last 30 days and

3. Not be currently detailed to another agency to request a courier card or letter from IRS.

(3) Authorized holders with a need to hand-carry CNSI must request a courier card via a TD F 15-05.12, Request and Receipt for Courier Card available on the CNSI website. Either a courier card or letter must be requested and submitted a minimum of 14 business days in advance.

1. If the authorized holder has a frequent and recurring need, (e.g., a minimum of 12 times per year) then a courier card will be applied for. Anything less frequent in terms of times per year, a courier letter will be applied for.

2. Treasury has delegated the issuance of courier cards for CI employees to CI. The CI Security Specialist must receive and process TD F 15-05.12 for CI employees.

3. For all other IRS employees, except CI, TD F 15-05.12 must be sent to the CNSI PM.

4. The AD, Security must sign all courier cards and letters.

(4) Authorized holders requesting a courier card must provide, with the TD F 15-05.12, Request and Receipt for Courier Card, a digitized color photograph on a plain background.

1. CI Security Specialist or CNSI PM must use TD F 15-05.7, Courier Card Badge, to create the courier card.

2. Upon receipt of the courier card, the authorized holder/courier must sign the TD F 15-05.12 and return it to the CI Security Specialist or CNSI PM.

3. CI Security Specialist and CNSI PM must maintain records of the TD F 15-05.12 until the card has expired.

(5) Authorized holders who must carry CNSI once or routinely on a non-recurring basis must request a courier letter via TD F 15-05.12, with specific attention paid to noting the dates of couriering on the "Frequency of Courier Responsibilities".

1. CI Security Specialist and CNSI PM must use Attachment 2 in the TD P 15-71, entitled "Sample Courier Letter Format," to create the courier letter.

(6) If the card or letter grants the authorized holder the ability to carry SCI, Treasury’s Special Security Office (SSO) must be the approving official. SCI cannot be stored in other than a SCIF.

(7) If the card or letter is expired or no longer needed (e.g., employee is terminating employment with the Business Unit, etc.), the card or letter must be returned to the CI or CNSI PM who issued it.

(1) Destruction of Top Secret information. Top Secret information, to include duplicates, working papers, etc. will be destroyed in the presence of two authorized persons; one authorized holder performs the destruction and the other person serves as a witness. Both individuals must sign the TD F 15-05.5, Classified Document Certificate of Destruction. The completed TD F 15-05.5 must be maintained on file for three years, after which it may be destroyed. No record of the destruction certificate itself is required. Questions regarding this process should be directed to the Top Secret Control Officer or CNSI PMs. Top Secret cannot be placed in a burn-bag.

(2) Destruction of Secret or Confidential Information. Secret or Confidential information, to include duplicates, working papers, etc., does not require a certificate of destruction.

(3) Burn-bags for Temporary Storage. Secret and Confidential only, may be placed in sealed opaque containers commonly designed as "burn-bags." Burn-bags feature multiple alternating groupings of red and white diagonal stripes, which can be purchased on GSA Advantage.

1. Burn-bags awaiting destruction must be protected while in the end-user’s custody. Burn-bags will only be collected, and contents immediately destroyed, by authorized holders.

2. When not in active use, burn-bags containing CNSI are protected commensurate with the level of CNSI within.

3. Use of burn-bags should be limited as CNSI requiring destruction should be shredded as soon as possible instead of stored awaiting for bulk destruction.

(4) The Security Container Custodian must ensure that a review of the information in the security container takes place annually by all those with access to ensure the removal and destruction of CNSI that is no longer needed. The review does not require documentation.