Which policy does ICPG 704.4 establish within the Intelligence Community?

Which policy does ICPG 704.4 establish within the Intelligence Community?

• A. Policy for standardizing physical security of facilities.
• B. It establishes the policy for ensuring reciprocity of personnel security clearances and SCI access determinations among Intelligence Community agencies.
• C. Policy for export control classification.
• D. Policy for cybersecurity incident response.

Answer: (B)

Reciprocity of personnel security clearances and SCI access determinations across Intelligence Community agencies is the focus of ICPG 704.4. This policy creates a common framework so that when one IC agency grants a personnel security clearance and the associated SCI access eligibility, other IC agencies recognize and honor that decision. It streamlines interagency movement and collaboration by reducing duplicative adjudication and re-clearance, while maintaining safeguards through consistent standards, ongoing monitoring, and any agency-specific requirements. In practice, this means a clearance and SCI eligibility granted by one IC agency can be used by others, subject to the IC’s overall risk management and need-to-know controls. This policy is distinct from other IC policies that address physical security, export controls, or cybersecurity incident response, which are handled under different guidance.

Reciprocity of personnel security clearances and SCI access determinations across Intelligence Community agencies is the focus of ICPG 704.4. This policy creates a common framework so that when one IC agency grants a personnel security clearance and the associated SCI access eligibility, other IC agencies recognize and honor that decision. It streamlines interagency movement and collaboration by reducing duplicative adjudication and re-clearance, while maintaining safeguards through consistent standards, ongoing monitoring, and any agency-specific requirements. In practice, this means a clearance and SCI eligibility granted by one IC agency can be used by others, subject to the IC’s overall risk management and need-to-know controls. This policy is distinct from other IC policies that address physical security, export controls, or cybersecurity incident response, which are handled under different guidance.