CHAPTER 6.  CONTROLLED CRYPTOGRAPHIC ITEMS (CCI)                 
                                                                               
                                                                               
      130.  PURPOSE AND BACKGROUND.                                            
                                                                               
           a.  The Controlled Cryptographic Item (CCI) category applies        
      to specified, unclassified, secure telecommunications and                
      information handling equipments and associated cryptographic             
      components.  The intent is to promote the broad use of secure            
      telecommunications and information handling equipments for the           
      protection of national security (classified), and other sensitive        
      information which should be protected in the national interest.          
                                                                               
           b.  Secure telecommunications and information and handling          
      equipments and associated cryptographic components which are             
      designated "Controlled Cryptographic Item" or "CCI" use a                
      classified cryptographic logic; it is only the hardware or               
      firmware embodiment of that logic which is unclassified.  The            
      associated cryptographic drawings, logic descriptions, theory of         
      operation, computer programs, and related cryptographic                  
      information remains classified.                                          
                                                                               
           c.  Procedures for controlling CCI secure telecommunications        
      and information handling equipments and associated cryptographic         
      components are required to guard against preventable losses to an        
      actual or potential enemy.                                               
                                                                               
                (1)  In keeping with the spirit of expanded use of             
      these equipments, minor lapses in carrying out control procedures        
      shall be referred to the responsible manager as a matter of              
      administrative discretion.  FAA employees can be held liable for         
      the loss, damage, or destruction of Government property caused by        
      their negligence, willful misconduct, or deliberate unauthorized         
      use.                                                                     
                                                                               
                (2)  More serious infractions of CCI control procedures        
      may constitute sabotage, loss through gross negligence, theft, or        
      espionage that would be punishable under various sections of the         
      United States Code or the Uniform Code of Military Justice.              
                                                                               
      131.  DEFINITIONS.                                                       
                                                                               
           a.  Controlled Cryptographic Item (CCI).  A secure                  
      telecommunications or information handling equipment, or                 
      associated cryptographic components, which is unclassified but           
      controlled.  Equipments and components so designated shall bear          
      the designator "Controlled Cryptographic Item" or "CCI".                 
                                                                               
           b.  Secure Telecommunications and Information Handling              
      Equipment.  Equipment designed to secure telecommunications and          
      information handling media converting information to a form              
      unintelligible to an unauthorized intercepter and by reconverting        
      the information to its original form for authorized recipients.          
      Such equipment, employing a classified cryptographic logic, may          
      be stand-alone-crypto-equipment, as well as telecommunications           
      and information handling equipment with integrated or embedded           
      cryptography.                                                            
                                                                               
           c.  Crytopgraphic Component.  The hardware or firmware              
      embodiment of the cryptographic logic in a secure                        
      telecommunications or information handling equipment.  A                 
      cryptographic component may be a modular assembly, a printed             
      circuit board, a microcircuit, or a combination of these items.          
           d.  Access.  The ability or opportunity to obtain, modify,          
      or use.  External viewing of a CCI does not constitute access.           
                                                                               
      132.  CONTROL REQUIREMENTS.  The following subparagraphs set             
      forth the minimum requirements for controlling unkeyed CCI               
      equipments and components utilized by the FAA.  Where such               
      equipments and components contain classified key they shall be           
      protected in accordance with the requirements of Chapter 5 of            
      this Order.  Also, depending upon the application, other more            
      stringent requirements may be prescribed.                                
                                                                               
           a.  Access.  A security clearance is not required for access        
      to unkeyed CCI equipments and components.  However, access shall         
      normally be restricted to U.S. citizens whose duties require such        
      access.  Access may be granted to permanently admitted resident          
      aliens who are U.S. Government civilian employees or active duty         
      or reserve members of the U.S. Armed Forces whose duties require         
      such access.  ACO-300 may grant waivers to permit non-U.S.               
      citizens unescorted access to installed CCIs, regardless of the          
      release status of the CCI, under conditions listed below:                
                                                                               
      NOTE:  The approval of the National Managers must be obtained by         
      ACO-300 through AFCSC/SRMP before allowing such access by non-           
      U.S. citizens in Communist block or other countries listed in the        
      Attorney General Criteria Country List.  Such requests shall be          
      routed through the servicing security element to ACO-300 together        
      with complete justification and explanation of operational need.         
                                                                               
                (1)  Unkeyed CCI's:                                            
                                                                               
                     (a)  Such access is in conjunction with building          
      maintenance, custodial duties, or other operational                      
      responsibilities normally performed by such personnel unescorted         
      in the area now containing the CCIs before their installation;           
      and                                                                      
                                                                               
                     (b)  The CCI is installed within a facility which         
      is a U.S.-controlled facility or a combined facility with a              
      permanent U.S. presence, as opposed to a host nation facility,           
      even through the primary staffing is by host nation personnel;           
      and                                                                      
                                                                               
                     (c)  The servicing security element has determined        
      that the risk of tampering with the CCI which could result in            
      compromise of U.S. information, classified or unclassified but           
      sensitive, is acceptable in light of the local threat and                
      vulnerability and the sensitivity of the information being               
      protected and indicated by its classification, special security          
      controls, and intelligence life; and                                     
                                                                               
                     (d)  Such access is not prohibited by Department          
      of State policies and procedures applicable to FAA operation in a        
      given geographic area.                                                   
                                                                               
                     (e)  The system doctrine for the CCI does not             
      specifically prohibit such access.                                       
                                                                               
                (2)  Keyed CCI's.  In addition to all of the                   
      requirements for unkeyed CCIs, the following apply for unescorted        
      access or use by foreign personnel:                                      
                                                                               
                     (a)  The foreign personnel are civilian employees         
      of the U.S. Government or assigned to a combined facility; and           
                     (b)  The CCI remains U.S. property, a U.S. citizen        
      is responsible for it, and the presence of such installed CCIs is        
      verified at least monthly; and                                           
                                                                               
                     (c)  The communications to be protected are               
      determined to be essential to the support of FAA or combined             
      operations; and                                                          
                                                                               
                     (d)  FAA and other U.S. users communicating with          
      such terminals are made aware of the non-U.S. citizen status of          
      the CCI user; and                                                        
                                                                               
                     (e)  Only U.S. personnel with classified U.S. keys        
      may key CCI's.  Authorized foreign personnel may key CCIs with           
      allied keys or unclassified keys.                                        
                                                                               
                (3)  Special Security Requirements.  If a CCI is to be         
      installed and operated in a foreign country at a facility which          
      is either unmanned or manned entirely by non-U.S. citizens,              
      additional special security measures, such as vault areas,               
      locking bars, safes, alarms, etc., are required.  Should an              
      installation of this nature be required to support FAA operations        
      it must be approved in advance by ACO-300 after coordination with        
      AFCSC/SRM on a case-by-case basis.                                       
                                                                               
                (4)  Moving CCI's.  CCI's will not normally be moved           
      from an environment where the tampering risk presented by non-           
      U.S. citizen access is acceptable to a more sensitive environment        
      where the risk is not acceptable.  If such action is an                  
      operational necessity, it must receive the prior approval of the         
      FAA servicing security element and in overseas areas the                 
      cognizant representative of the Department of State for the              
      particular geographic area.  All such CCI's must be examined for         
      signs of tampering by qualified COMSEC maintenance personnel.            
      Any evidence of tampering shall be reported as a COMSEC incident         
      and immediate action will be taken to remove the CCI from                
      operational use pending notification from the Director, National         
      Security Agency.                                                         
                                                                               
           b.  Courier.  Authorized FAA employees and contractor               
      employees (U.S. citizens) may courier CCI equipment and                  
      components.  Requirements for courier authorization are specified        
      in FAA Order 1600.2C, National Security Information.                     
                                                                               
                (1)  Authorized persons may transport CCI aboard both          
      Government and commercial aircraft, either handcarried or as             
      checked baggage.  If it is checked as hold baggage on commercial         
      airliners, it must be packaged in a container which is sealed in         
      a manner that will detect unauthorized access to the enclosed            
      material, such as tamper-detections tape, wire seals, etc.               
                                                                               
                (2)  CCI can be subjected to X-ray inspections;                
      however, if airport security personnel require physical                  
      inspection, the inspection must be limited to external viewing           
      only.  To avoid unnecessary delays and searches by airport               
      personnel, prior coordination with the servicing security element        
      shall be accomplished to ensure that airport personnel are               
      informed in a timely manner of the transfer of CCI material.             
                                                                               
           c.  Storage and Transportation.                                     
                                                                               
                (1)  General.  Store and transfer CCI equipment and            
      components in a manner that affords protection at least equal to         
      that which is normally provided to weapons, computers,                   
      electronics equipment, etc., and ensures that access and                 
      accounting integrity is maintained.                                      
                                                                               
                (2)  Storage.  Handle CCI's in connection with                 
      warehouse functions provided they are under direct supervision of        
      an individual who meets the access requirements of this chapter.         
                                                                               
                (3)   Transportation.                                          
                                                                               
                     (a)  General.  Ship CCI equipments and components         
      by a traceable means in accordance with the following:                   
                                                                               
                          1  Within CONUS:                                     
                                                                               
                             a  Commercial carrier providing DOD               
      Constant Surveillance Service (CSS)  (NOTE:  Contact the                 
      Transportation Officer of the nearest Defense Contract                   
      Administration Service Management Area (DCASMA) office for               
      information concerning the carriers servicing the specific               
      geographic area.  CSS is not available overseas.                         
                                                                               
                             b  U.S. registered mail provided the mail         
      does not at any time pass out of U.S. control.                           
                                                                               
                             c  Authorized FAA or contractor courier.          
      For contractor couriers, the authorization to act as a courier or        
      escort for CCI equipment and components may be granted by the            
      servicing FAA security element in accordance with FAA Order              
      1600.2C.                                                                 
                                                                               
                             d  Diplomatic courier service.                    
                          2   Outside CONUS:  In foreign countries             
      where there are two or more FAA facilities where FAA personnel           
      are stationed, foreign nationals who are employed by the FAA may         
      transport CCI's provided:                                                
                                                                               
                             a  There is a signature record that               
      provides continuous accountability for custody of the shipment           
      from pickup to ultimate destination, and                                 
                                                                               
                             b  There is a constant U.S. presence (for         
      example, a U.S. person accompanies a foreign driver in couriering        
      the material), or                                                        
                                                                               
                             c  The material is contained in a closed          
      vehicle or shipping container which is locked and has a shipping         
      seal that will prevent undetected access to the enclosed                 
      material.                                                                
                                                                               
           d.  Accounting.                                                     
                                                                               
                (1)  Within the FAA, CCI equipments shall be delivered         
      to a primary FAA COMSEC account.                                         
                                                                               
                (2)  The COMSEC Custodian shall initially receipt for          
      the CCI equipment, and will be responsible for ensuring that             
      before further distribution is made the individual CCI items are         
      entered into the Property Management System for the using                
      facility, Region, or Center as appropriate.                              
                                                                               
      NOTE:  The custodian should coordinate with the responsible              
      property management officer to ensure that the requirements of           
      this order are met.                                                      
                                                                               
                (3)  CCI equipments shall be accounted for by serial           
      number.  CCI components, installed in this equipment, do not             
      require separate accountability.  Spares or other uninstalled CCI        
      components shall be accounted for by quantity.                           
                                                                               
                (4)  The accounting system must provide the following:         
                                                                               
                     (a)  Establish a central point designated by the          
      Property Management Officer for the using facility, region or            
      center for control of CCI equipments.                                    
                                                                               
                     (b)  The identification of CCI equipment and              
      components which are lost.                                               
                                                                               
                     (c)  Individual accountability in order to support        
      prosecution in cases which involve infractions that would be             
      punishable under the United States Code or the Uniform Code of           
      Military Justice.                                                        
                                                                               
                (5)  The manager having property management                    
      responsibility for the using facility region or center shall             
      ensure that procedures are followed to permit entering CCI               
      equipment into the Property Management System data base in such a        
      way that equipments can be accurately inventoried when necessary.        
                                                                               
      133.  INVENTORIES.                                                       
                                                                               
           a.  CCI equipments shall be inventoried at least annually.          
      This includes uninstalled CCI equipments.  An inventory should           
      also be accomplished whenever there is a change of personnel             
      responsible for the safekeeping or accounting of an                      
      organization's holdings of CCI equipments and components.                
      Reports of inventory shall be submitted to the central control           
      point established for control of CCI equipments.  Inventory              
      records shall be maintained current for as long as the using             
      facility, region or center maintains CCI assets.                         
                                                                               
           b.  Inability to reconcile an organization's holdings of CCI        
      equipments and components with the record of accountability at           
      the established central control point shall be reported as an            
      insecurity in accordance with this order and AFR 56-12.                  
                                                                               
      134.  REPORTING INSECURITIES.                                            
                                                                               
           a.  Users of CCI must be familiar with the criteria that            
      constitutes an insecurity as specified in AFR 56-12.                     
                                                                               
           b.  All insecurities involving CCI equipments or components         
      shall be reported through COMSEC channels in accordance with the         
      following:                                                               
                                                                               
                (1)  Keyed equipment.  Report insecurities involving           
      keying material according to AFR 56-12.                                  
                                                                               
                (2)  Unkeyed equipment.  Insecurities involving unkeyed        
      CCI equipments shall be reported in accordance with AFR 56-12 and        
      applicable FAA property management directives concerning the             
      responsibilities for safeguarding and protection of high value           
      U.S. Government property.                                                
                                                                               
      135.  ROUTINE AND EMERGENCY DESTRUCTION.                                 
                                                                               
           a.  The routine and emergency destruction procedures of AFR         
      56-5 apply to CCI equipments and components.                             
                                                                               
           b.  Routine destruction of CCI equipment and components by          
      FAA users is not authorized.  Equipment that is inoperative or no        
      longer required shall be reported to the FAA servicing security          
      element with a request for disposition instructions.  The                
      servicing security element will be responsible for coordinating          
      all such requests with ACO-300 prior to any disposition of the           
      equipment.                                                               
                                                                               
      136-144.  RESERVED.                                                      
                                                                               
                          FOR OFFICIAL USE ONLY                                
                        PUBLIC AVAILABILITY TO BE                              
                      DETERMINED UNDER 5 U.S.C. 552