Classified Dissemination: NOFORN, SCI, Compartments, and SAPs

NOFORN, SCI, and compartments are three separate restrictions that sit on top of a document’s Secret or Top Secret classification, each doing a different job. NOFORN is a dissemination caveat that bars release to any foreign national. Sensitive Compartmented Information (SCI) is a parallel control system that protects how the most sensitive intelligence was collected. Compartments divide SCI further into named programs, so that even people cleared for SCI only see the specific programs they have been formally read into. A single document can carry all three restrictions at once, and each one shrinks the pool of people who can lawfully see it.

What NOFORN Restricts

The Not Releasable to Foreign Nationals marking, universally shortened to NOFORN, tells anyone handling a Secret or Top Secret document that its contents cannot be shared with any foreign government, foreign citizen, or international organization. It is not a classification level. It is a dissemination control that rides on top of one, and under Executive Order 13526 it is the default posture whenever no foreign release has been authorized.¹

The restriction does not bend for close allies. A British liaison officer embedded at a U.S. command, a NATO diplomat working a joint operation, and a foreign intelligence officer at a bilateral meeting are all foreign nationals for NOFORN purposes, and none of them can view the material. Discussing NOFORN content within earshot of a foreign national is also prohibited. Before sharing anything carrying the caveat, a federal employee has to verify the nationality of everyone in the room.

When Sharing Is Authorized: REL TO

When the government decides that a specific ally should see a piece of intelligence, it replaces NOFORN with a REL TO marking that names the countries or organizations authorized to receive it. A Foreign Disclosure Officer has to make the release determination first, and an international agreement or arrangement has to be in place.²

The marking uses standardized three-letter country codes, with USA listed first and the authorized recipients following in alphabetical order. A document banner reading “SECRET//REL TO USA, AUS, GBR” can be shared with appropriately cleared Australian and British personnel, and no one else. NOFORN and REL TO cannot appear together in a document’s banner marking. When both types of content appear in different portions of the same file, NOFORN controls at the document level.³

What SCI Protects

Sensitive Compartmented Information is not a level above Top Secret, though the assumption is common. SCI is a parallel control system layered onto Top Secret material to protect intelligence sources and collection methods. The concern isn’t only what the intelligence says. It’s how the intelligence was gathered. If an adversary learns that a particular channel is being monitored, they stop using it, and the collection capability goes dark.

SCI controls keep information about human sources, signals intercepts, and technical surveillance capabilities inside a tight circle of people who need that specific knowledge to do their jobs. A logistics analyst holding a Top Secret clearance does not automatically see SCI material about how a piece of intelligence was collected, even when the finished, lower-classified product built from that intelligence crosses their desk.

SCI material has to be accessed, discussed, and stored inside a Sensitive Compartmented Information Facility, or SCIF. These spaces are built with acoustic, electronic, and physical shielding to prevent eavesdropping and signal leakage, documents are stored in GSA-approved safes, and the internal networks are isolated from the public internet. Smartphones, personal laptops, fitness trackers, and other personal electronics are not permitted inside.⁴

How Compartments Divide SCI Further

Within SCI, intelligence is broken into compartments, each identified by a control system marking or a classified code word. Even among people cleared for SCI, nobody sees everything. Every compartment has its own access list, its own briefing requirements, and its own protective rules, so a compromise in one program does not expose the others.

The best-known example is TALENT KEYHOLE, abbreviated TK, established in 1960 to protect satellite reconnaissance capabilities and the intelligence derived from them.⁵ Modern code words work the same way, labeling specific collection platforms, human intelligence networks, or technical capabilities. The names themselves are often classified.

Two analysts in the same SCIF, both holding Top Secret/SCI clearances, can be working entirely different compartmented programs with no permitted overlap between them. Access to one compartment grants no visibility into any other, even at the same classification level. The siloing is deliberate and it limits the blast radius of any single compromise.

Read-In and Read-Out

Gaining access to a compartment requires a formal briefing called being “read in.” The briefing walks through the program’s scope and the specific responsibilities that come with the access, and it ends with additional nondisclosure agreements written for that compartment. The paperwork creates a documented record that the person understood the rules and the consequences of breaking them.

When access is no longer needed because of a job change, reassignment, or retirement, the person goes through a “read out.” That debriefing terminates the authorization and confirms in writing that the obligation to protect the information continues for life. The secrecy agreement does not expire when the clearance does.

SAPs Are Not the Same as SCI

Special Access Programs (SAPs) are often confused with SCI because both impose restrictions beyond the standard classification levels. They are governed separately. SCI protects intelligence sources and methods under the Director of National Intelligence through Intelligence Community Directives. SAPs protect specific military programs, weapons systems, and operations under DoD directives.⁶

SAPs fall into three categories with increasing secrecy:

Acknowledged SAPs, whose existence is publicly known even though details remain classified, with funding that is generally unclassified.
Unacknowledged SAPs, whose existence is itself classified, so that even confirming the program is a security violation. These are reported annually to congressional committees.
Waived SAPs, a subset of unacknowledged SAPs where the Secretary of Defense has waived the congressional reporting requirements under 10 U.S.C. § 119.

SAP material is handled in Special Access Program Facilities, distinct from SCIFs. When both SAP and SCI information have to exist in the same space, a Co-Utilization Agreement between the respective security authorities is required.⁶ SAP access requires a separate nomination and approval from a designated Access Approval Authority. SCI access does not carry over into a SAP, and SAP access does not carry over into SCI.⁷

What It Takes to Get Access

A standard clearance is not enough for any of this. Access to Top Secret information and SCI starts with a Single Scope Background Investigation, the most thorough personnel investigation the government conducts. Investigators review financial records, interview neighbors and former employers, examine court records, verify education and employment history, and look for foreign contacts or associations that could create leverage.⁸ Adjudicators then evaluate what they find against 13 guidelines covering allegiance to the United States, foreign influence, drug involvement, financial stability, criminal conduct, and related concerns. Eligibility is granted only when the facts clearly support it, and any doubt is resolved in favor of national security.⁹

Some intelligence community elements also require polygraph examinations. Intelligence Community Directive 704 lets the heads of IC agencies impose polygraphs when they determine it serves national security interests.¹⁰ A counterintelligence polygraph asks about espionage, unauthorized foreign contacts, and unauthorized disclosure. A full-scope polygraph adds questions about personal conduct and lifestyle, targeting areas where someone might be vulnerable to blackmail.

Before viewing any classified material, a person signs Standard Form 312, the universal classified information nondisclosure agreement. For SCI access, they sign an additional Form 4414 written for compartmented information.¹¹¹²¹³ Compartmented access adds another agreement at the read-in.

Even after the investigation, the polygraph, and the paperwork, no one gets to browse compartmented material at will. Every access requires a demonstrated need-to-know: a specific, authorized mission that requires the information. Security officers verify the requirement before granting access to any compartmented file. A cleared analyst has no right to look into another program’s files out of curiosity, and doing so can end a career even if no information leaves the building.

Ongoing Obligations Once You Have Access

Holding a clearance is not a one-time event. Under Security Executive Agent Directive 3, people with SCI access have to report bankruptcy, debts more than 120 days delinquent, any unexpected financial windfall of $10,000 or more, arrests, foreign travel, continuing contact with foreign nationals involving personal bonds, marriage, cohabitation, and the adoption of non-U.S. citizen children.¹⁴

Unofficial foreign travel requires submitting an itinerary and generally getting prior approval. If plans change abroad, deviations have to be reported within five business days of returning. Even unplanned day trips to Canada or Mexico trigger the reporting requirement.¹⁴

Self-reports are no longer the only backstop. Under Trusted Workforce 2.0, the old system of periodic reinvestigations at set intervals has been replaced by continuous vetting, which runs ongoing automated checks against public records, government databases, and agency-specific data and flags potential risks as they surface. The system identifies problematic behavior an average of three years earlier for high-risk positions and seven years earlier for moderate-risk positions than the old model did.¹⁵

Penalties for Breaking the Rules

The consequences for mishandling this material vary sharply with intent, and the gap is where prosecutors focus their charging decisions.

Losing track of a classified document through carelessness falls under 18 U.S.C. § 793 and carries up to ten years in prison. Willful disclosure of communications intelligence or cryptographic information under § 798 carries the same ten-year maximum. Unauthorized removal and retention of classified documents under § 1924 is punishable by up to five years.¹⁶¹⁷

Intentionally delivering defense information to a foreign government is a different order of offense. 18 U.S.C. § 794 authorizes any term of years, life imprisonment, or death, with the death penalty available when the espionage involved nuclear weapons, military satellites, war plans, or communication intelligence, or when it resulted in the death of a U.S. agent.¹⁸

Not every violation lands in a courtroom. Agency heads investigate incidents and can impose formal reprimand, suspension or revocation of the security clearance, or termination. When an agency contemplates action beyond a reprimand, legal counsel has to be involved.¹⁹ When willful conduct is involved rather than carelessness, the criminal statutes remain available.

1
The White House. Executive Order 13526 – Classified National Security Information
2
Center for Development of Security Excellence. Proper Use of NOFORN and REL TO Dissemination Control Markings
3
Center for Development of Security Excellence. NOFORN/REL TO Pamphlet
4
Office of the Director of National Intelligence. Technical Specifications for Construction and Management of SCIFs
5
Center for Development of Security Excellence. Sensitive Compartmented Information Refresher
6
Executive Services Directorate. DoD Manual 5205.07 Volume 1 – DoD Special Access Program Security Manual
7
Center for Development of Security Excellence. Special Access Program Types and Categories
8
eCFR. 32 CFR Part 147 – Adjudicative Guidelines – Attachment B – Single Scope Background Investigation
9
Office of the Director of National Intelligence. Security Executive Agent Directive 4 – National Security Adjudicative Guidelines
10
Office of the Director of National Intelligence. ICD 704 – Personnel Security Standards and Procedures for Access to SCI
11
Defense Counterintelligence and Security Agency. Job Aid for NDA Revisions and Processing
12
General Services Administration. Standard Form 312 – Classified Information Nondisclosure Agreement
13
Office of the Director of National Intelligence. Form 4414 – Sensitive Compartmented Information Nondisclosure Agreement
14
Office of the Director of National Intelligence. Security Executive Agent Directive 3 – Reporting Requirements for Personnel with Access to Classified Information
15
Performance.gov. Trusted Workforce 2.0 Quarterly Progress Report
16
Office of the Law Revision Counsel. 18 USC Chapter 37 – Espionage and Censorship
17
Office of the Law Revision Counsel. 18 USC 1924 – Unauthorized Removal and Retention of Classified Documents
18
Office of the Law Revision Counsel. 18 USC 794 – Gathering or Delivering Defense Information to Aid Foreign Government
19
eCFR. 32 CFR 2001.48 – Loss, Possible Compromise or Unauthorized Disclosure