prevent overt or covert access. Provide the GSA description of the vault door lock (if applicable). Also describe
the security containers used in the facility.
(5) Describe how classified COMSEC items will be protected during nonworking hours. Also
describe their protection when not under the direct and continuous control of proper cleared and authorized
persons. Protection methods include approved containers, vaults, strong rooms, and so forth.
(6) State whether applicable standards for operating, storing, and destroying COMSEC material can
be met.
4.
Approving authority action.
a. INSCOM notifies the requesting commander and the ACCOR whether the facility request is
approved. This is based on information in the approval request and an INSCOM inspection.
b. If not approved, INSCOM states the actions needed to get approval. The CLSF will not issue
COMSEC material to a unit until its COMSEC account is set up.
5.
Cryptofacility reapproval.
a. A facility's approval is valid as long as its physical security features remain basically unchanged.
b. When those physical security features change, and the facility is still needed, a reapproval process
begins. The organization sends its request through channels to the approving authority, which is INSCOM.
c. A facility's approval may be invalidated. When this occurs, the approving authority notifies the
ACCOR and other agencies. This ensures COMSEC material is not sent to the facility in question until approval
is restored.
d. The approving authority may consider a facility's protection to be inadequate. If so, all COMSEC
material in the facility must be returned to the proper authority or securely stored.
6.
Summary.
a. A cryptofacility is any facility that is used for operating, maintaining and storing COMSEC material.
It can be fixed, mobile, or transportable.
b. External identification is limited to avoid advertising what is in a particular facility.
c. The commander submits the facility request.
SS0137
2-4