Understanding SCIF ICD 705 Shielding & Construction Guide

Government construction builds are not like normal builds. You aren't making an office when you need to house classified documents or have a space to hold secret meetings. You are essentially building a shield against intelligence gathering in all its different dimensions.

The Sensitive Compartmented Information Facility (SCIF) has been developed to counter physical, acoustic, and signal intrusion and everything associated with spying. Building a SCIF HVAC components feels more like a spy movie set. 

So if you’re a first-time executive client, or an inaugural project manager, rest assured that it's totally normal to feel a bit intimidated by the complexities surrounding the requirements of SCIF construction.

Mastering the Basics: SCIF Fundamentals and ICD 705

A SCIF is a building or room built to hold Sensitive Compartmented Information (SCI) safely as you process and discuss it.

Intelligence Community Directive 705 (ICD 705) outlines the requirements for a SCIF. The Office of the Director of National Intelligence issues it. The creation of a SCIF is mandated by ICD 705 and all supporting construction of the defense and intelligence sector projects.

In this construction, the physical environment must be secured at every stage. To provide the mandated secrecy in construction, the integration of materials and systems differs significantly from traditional construction methods. Some of these differences include:

Reinforced Walls: The walls have 3 layers of 5/8" drywall with staggered seams and sound attenuation materials. They are designed to prevent structural breaches.

Heavy Door Assemblies: The access points are designed to have automatic locking, contact switches, intrusion alarm systems, and sound sealing and acoustical rating.

Acoustic Isolation: Encloses the human voice within the defined room perimeter.

Controlled Boundary Access:  Badge or biometric access control systems are used to govern access. Access is monitored.

Applying SCIF design standards, the room is treated as a unified envelope. A single flaw in a corner, ceiling grid, or floor track perimeter presents a risk to the entire structure.

Utility Penetrations: Stopping Sound and Signal Leaks

Building a solid perimeter wall is relatively simple. The real challenge in mission-critical facility design arises when you start running basic building utilities into the space.

Several crossings of copper water pipelines, metal electrical conduits, and steel air ducts within the secure perimeter maintain the room's function. There are, however, continuous metal pathways which act as antennas for electromagnetic waves and conduits for acoustic vibrations. Unshielded infrastructures allow both electronic and audio signals to pass unimpeded through standard drywall.

To stop compromise through physical infrastructure, specialized SCIF HVAC components and utility breaks must be designed directly into the building plans.

Every metallic penetration crossing the security boundary requires an RF-shielded piping penetration or a non-conductive dielectric union. By inserting a non-metallic segment right at the perimeter boundary, you sever the continuous conductive line. This stops audio resonance and RF signals from traveling outward along the pipe.

Mechanical systems also need their fair share of the spotlight too:

1. Duct Security Bars: For ICD 705 compliant HVAC duct penetrations that exceed 96 square inches, permanently welded steel security grilles must be installed along the duct perimeter on the inside to prevent physical access.

1. Acoustic Baffles & Silencers: Ductwork shall be provided with internal acoustic insulation and sound traps such that speech within a facility shall not be transmissible down the airflow path.

1. Dielectric Hose Line Breaks: A SCIF HVAC refrigerant line break is required to isolate the interior cooling hardware from the exterior compressors for special cooling units.

Complex behaviors of certain types of signals can defeat heavy structural shielding. Mechanical engineers must understand how to design buildings with such signals in mind. For example, they must design structures to prevent signal leaks from SCIFs through the HVAC pipes (ICD 705).

For facilities that call for tight electromagnetic isolation, a combination of a TEMPEST-compliant HVAC design and a complete shielding solution as described in ICD 705 will ensure that data processing equipment is safeguarded from external signals.

The Step-by-Step Accreditation Roadmap

Delivering a government secure facility construction project requires following a structured project lifecycle. Skipping phases or ordering long-lead components late can stall accreditation for months.

Phase 1: Concept approval to development (Weeks 0-16)

• Accrediting Official (AO) & Designated Security Authority (DSA).

• Decide on the purpose of the facility. Know which classification of security reviews applies. Know the aim of the project.

• Concept approval of the engineering design is sought.

Phase 2: Design & Engineering (Weeks 12-32)

• Work with experienced architects and security consultants

• Identify Physical barriers, sound barriers, security doors, and HVAC location.

• Design of FFSP, CSP, and TEMPEST shielding completed prior to construction.

Phase 3: Active Building(Weeks 24–52)

• Get special HVAC units, lock certs, buy GSA doors.

• 3 layers of drywall, acoustic seals, attenuation in ceilings 

• Dielectric pipes, grilles, and electrical grounds for all penetrations. 

Phase 4: Inspection & Accreditation: Weeks 48–64.

• Walkthrough: Fixed Facility Checklist (FFC)

• AO should be provided with drawings, logs, and certificates. 

• Go for a physical and electronic walkthrough to get your accreditation letter.

Phase 5: Operational Compliance: Ongoing.

• Always have intrusion logging and controls at your fingertips.

• CSA must approve any change to walls or utilities. 

• Retain documentation of the assessment of the facility conducted every five years.

Procurement Checklist for SCIF

Keep your team on track with this helpful checklist for procurement and design reviews.

Government Authorization

• Recognized Security Authority (CSA).

• Approval for the Concept Request (CAR) has been obtained.

2. Architectural & Perimeter Security

• Floor-to-ceiling walls with an inner layer of staggered 3-layer drywall. 

• STC sound-rated assembly used on all perimeter walls and doors

• Approved door assembly and lock hardware used

3. Mechanical & HVAC Systems

• Ductwork that is over 96 sq. in. will have internal steel security bars.

• Acoustic baffles/silencers for the air supply and return ducts will be installed.

• Non-conductive pipe breaks and dielectric unions will be installed for all metal lines.

• HVAC system that complies with ICD 705 for interior thermal management 

4. Electrical & Signal Shielding

• All penetrations through boundaries should be done 6 inches away from any grounded conduits.

• The cable tray and all signal and utility wiring have been marked and sealed.

• Integration of TEMPEST countermeasures and RF shielding (if applicable).

5. Documentation & Submission

• Construction Security Plan (CSP) and FFSP prepared

• Photograph log of construction activities and penetration log kept daily

• Final Fixed Facility Checklist (FFC) prepared for AO review

Strategic Project Execution

Planning accurately and consistently throughout a secure facility construction project helps ensure a well-executed finish, including anticipating a project’s consequences. Leaving out a single non-conductive break on a pipe or a documented run of a hidden duct can delay the approval process.

Treat the build as an integrated system from the start. Get your security consultants, general contractors, and mechanical engineers together during the design phase. Verify that each entry point/boundary for structural studs and your ICD 705 compliant HVAC equipment is planned and mapped. 

Be systematic and methodical, and the confusing and burdensome government security guidelines will have you doing a happy dance during the smooth and predictable rollout of the new facility.