Special Access Program (SAP) Overview
UPDATED Exam Questions and CORRECT
Answers
SAP definition in simplest terms - CORRECT ANSWER - A classified program with
enhanced safeguarding and access requirements
Executive Order 13526 definition of SAP - CORRECT ANSWER - A program established
for a specific class of classified information that imposes safeguarding and access requirements
exceeding those normally required for information at the same classification level
When SAPs are established - CORRECT ANSWER - When the program is required by
statute, or upon the finding of exceptional vulnerability of, or threat to, specific information, and
if the normal criteria for determining access to information classified at the same level are
insufficient
SAP levels of classified information - CORRECT ANSWER - Top secret, secret, and
confidential
Require an assigned nickname and/or codeword and identification of any special handling
procedures
SAPs in the 1980s - CORRECT ANSWER - Were called "Black Programs" which were
generally restricted to protecting DOD acquisition programs. Called that due to the fact they
were close-held to where people were unaware of their existence
During the 1990s, they were officially called Special Access Programs and modified protection
to also include intelligence programs and operations and support programs
Misperceptions of SAPs - CORRECT ANSWER - 1. SAPs are used as a means to hide
money spent on certain programs (They are used to ensure the security and accountability of a
specific project is maintained to the highest level)
, 2. SAPs are used to avoid taxpayer scrutiny (Taxpayer understanding and awareness is often a
key to an acknowledged program's success)
3. Believed to lack Congressional oversight (Congressional oversight increased significantly and
now requires reports on every DOD SAP be submitted to Congress annually)
Importance of SAPs - CORRECT ANSWER - 1. Protect technology breakthroughs and
ensure the U.S. maintains its leading technological edge
2. Ensure once we discover and exploit an adversary's vulnerabilities, the knowledge of the
exploitation remains secure and the adversary does not develop a countermeasure
3. Ensure sensitive operational plans are completed without disclosure
4. Protect intelligence information
Protecting SAPs - CORRECT ANSWER - SAPs employ enhanced security measures
beyond those required in baseline regulations and directives
1. Number of personnel who have access to a SAP is kept to an absolute minimum
2. If an individual will not materially and directly contribute to a SAP, that person is not
authorized access. Access to SAPs is not granted on a convenience basis
3. Records of individuals who have or have had access to a SAP are maintained. Record-keeping
capability that far exceeds what is required for collateral programs
4. Need-to-know a key piece of maintaining the security of SAPs
Need-to-know - CORRECT ANSWER - Determination made by an authorized holder of
classified information that a prospective recipient requires access in order to perform or assist in
a lawful and authorized government function.
Fundamental principle in the protection of classified information and the protection of SAPs. It is
not enough just to have the appropriate clearance and formal approval to access a SAP. A person
must have a need-to-know that pertains to the specific information
UPDATED Exam Questions and CORRECT
Answers
SAP definition in simplest terms - CORRECT ANSWER - A classified program with
enhanced safeguarding and access requirements
Executive Order 13526 definition of SAP - CORRECT ANSWER - A program established
for a specific class of classified information that imposes safeguarding and access requirements
exceeding those normally required for information at the same classification level
When SAPs are established - CORRECT ANSWER - When the program is required by
statute, or upon the finding of exceptional vulnerability of, or threat to, specific information, and
if the normal criteria for determining access to information classified at the same level are
insufficient
SAP levels of classified information - CORRECT ANSWER - Top secret, secret, and
confidential
Require an assigned nickname and/or codeword and identification of any special handling
procedures
SAPs in the 1980s - CORRECT ANSWER - Were called "Black Programs" which were
generally restricted to protecting DOD acquisition programs. Called that due to the fact they
were close-held to where people were unaware of their existence
During the 1990s, they were officially called Special Access Programs and modified protection
to also include intelligence programs and operations and support programs
Misperceptions of SAPs - CORRECT ANSWER - 1. SAPs are used as a means to hide
money spent on certain programs (They are used to ensure the security and accountability of a
specific project is maintained to the highest level)
, 2. SAPs are used to avoid taxpayer scrutiny (Taxpayer understanding and awareness is often a
key to an acknowledged program's success)
3. Believed to lack Congressional oversight (Congressional oversight increased significantly and
now requires reports on every DOD SAP be submitted to Congress annually)
Importance of SAPs - CORRECT ANSWER - 1. Protect technology breakthroughs and
ensure the U.S. maintains its leading technological edge
2. Ensure once we discover and exploit an adversary's vulnerabilities, the knowledge of the
exploitation remains secure and the adversary does not develop a countermeasure
3. Ensure sensitive operational plans are completed without disclosure
4. Protect intelligence information
Protecting SAPs - CORRECT ANSWER - SAPs employ enhanced security measures
beyond those required in baseline regulations and directives
1. Number of personnel who have access to a SAP is kept to an absolute minimum
2. If an individual will not materially and directly contribute to a SAP, that person is not
authorized access. Access to SAPs is not granted on a convenience basis
3. Records of individuals who have or have had access to a SAP are maintained. Record-keeping
capability that far exceeds what is required for collateral programs
4. Need-to-know a key piece of maintaining the security of SAPs
Need-to-know - CORRECT ANSWER - Determination made by an authorized holder of
classified information that a prospective recipient requires access in order to perform or assist in
a lawful and authorized government function.
Fundamental principle in the protection of classified information and the protection of SAPs. It is
not enough just to have the appropriate clearance and formal approval to access a SAP. A person
must have a need-to-know that pertains to the specific information
