10 C.F.R. § 1017.17 Physical protection requirements.
Title 10 - Energy
(a) General. UCNI requires protection from unauthorized dissemination. UCNI must be protected and controlled in a manner consistent with that customarily accorded other types of unclassified but sensitive information (e.g., proprietary business information, personnel or medical records of employees, attorney-client information). Each Government agency and Government contractor authorized access to UCNI shall establish and maintain a system for the protection of UCNI in their possession or under their control that is consistent with the physical protection standards established in this section. Each Authorized Individual or person granted special access to UCNI under §1017.16(b) who receives, acquires, or produces UCNI or a document or material containing UCNI shall take reasonable and prudent steps to ensure that it is protected from unauthorized dissemination by adhering to these regulations and their implementing directives. (b) Protection in use or storage. An Authorized Individual or a person granted special access to UCNI under §1017.16(b) shall maintain physical control over any document or material containing an UCNI notice that is in use so as to prevent unauthorized access to it. When any document or material containing an UCNI notice is not in use, it must be stored in a secure container (e.g., locked desk or file cabinet) or in a location where access is limited (e.g., locked or guarded office, controlled access facility). (c) Reproduction. A document or material containing an UCNI notice may be reproduced to the minimum extent necessary consistent with the need to carry out official duties without permission of the originator, provided the reproduced document or material is marked and protected in the same manner as the original document or materials. (d) Destruction. A document or material containing an UCNI notice may be disposed of by any method which assures sufficiently complete destruction to prevent its retrieval (providing the disposal is authorized by the Archivist of the United States under 41 CFR 101–11.4 and by agency records disposition schedules). (e) Transmission. (1) A document or material containing an UCNI notice must be packaged to prevent disclosure of the presence of UCNI when transmitted by a means which could allow access to the document or material by a person who is not an Authorized Individual or a person granted special access to UCNI under §1017.6(b). The address and return address must be indicated on the outside of the package. (2) A document or material containing an UCNI notice may be transmitted by— (i) U.S. first class, express, certified, or registered mail; (ii) Any means approved for the transmission of classified documents or material; (iii) An Authorized Individual or a person granted special access to UCNI under §1017.16(b), when he or she can control access to the document or material being transmitted; or (iv) Any other means determined by the Assistant Secretary for Defense Programs to be sufficiently secure. (3) UCNI may be discussed or transmitted over an unprotected telephone or telecommunications circuit when required by operational considerations. More secure means of communication should be utilized whenever possible. (f) Automated Data Processing (ADP). UCNI may be processed or produced on any ADP system which is certified for classified information or which complies with the guidelines of Office of Management and Budget Circular No. A–71, “Security of Federal Automated Information Systems” or which has been approved for such use in accordance with the provisions of applicable DOE directives.
Title 10: Energy
PART 1017—IDENTIFICATION AND PROTECTION OF UNCLASSIFIED CONTROLLED NUCLEAR INFORMATION
§ 1017.17 Physical protection requirements.
