« Protected Critical Infrastructure Information (PCII) Program

---

Who Can Access Protected Critical Infrastructure Information (PCII)

• Access Policy
• Protected Critical Infrastructure Information (PCII) Accreditation Program
• Training Requirements

Protected Critical Infrastructure Information (PCII) may be accessed by federal, state or local government employees and their contractors who meet the requirements of the PCII Program standard access policy.

Access Policy

Before accessing PCII, individuals must:

• complete training on the proper handling and safeguarding of PCII,
• have homeland security responsibilities, 
• have a need-to-know the specific information,
• sign a non-disclosure agreement (non-federal employees only); and
• be certified by the PCII Program Manager or PCII Officer (contractors only).

The PCII Officer manages the PCII program in an accredited entity and ensures that all PCII received is used, safeguarded, stored and disseminated in accordance with specific procedures. Accredited entities must have a PCII Officer.

Government contractors must also modify relevant contracts to comply with requirements of the PCII Program. Contract modification is not a prerequisite to accessing PCII; however, the contractor must contractually acknowledge his or her responsibilities with respect to PCII as soon as practicable. The PCII Officer certifies that contractors are engaged in activities supporting their accredited entity.

Back To Top

Protected Critical Infrastructure Information (PCII) Accreditation Program

All government organizations must become accredited to ensure consistent application of uniform PCII Program standards. The following accreditation requirements may be completed in any order:

• Submit an application.
• Execute a Memorandum of Agreement (MOA) with the Department of Homeland Security,
• Nominate a PCII Officer who will be trained to manage the entity's use of PCII, and 
• Draft a standard operating procedure (SOP) in accordance with the PCII Program Office guidelines.

To centralize and streamline the PCII Program, accreditation is generally granted to the highest governing body. This allows local and tribal government entities to be covered under the overarching PCII state accreditation. Individuals within an accredited entity must still meet the standard access requirements before accessing PCII.

For more information on the PCII Accreditation Program, e-mail pcii-info@dhs.gov.

Back To Top

Training Requirements

The PCII Program Office requires that only trained users can access PCII. This ensures that users receive standardized instruction on safeguarding and handling procedures.

There are two types of training:

• PCII Authorized User Training: Required computer-based training that must be completed by all government employees and contractors before accessing PCII.
• PCII Officer Training: Required one-day instructor-led course for all nominated PCII Officers followed by a written certification exam. Upon successful completion of the certification exam, the candidate will be appointed by the PCII Program Manager as his or her entity's PCII Officer.

To request PCII training, e-mail pcii-training@dhs.gov.

Back To Top

This page was last modified on December 11, 2007