What must be done before creating a SAPCA in a SCIF?

• A. Establish a CUA
• B. Notify all personnel
• C. Secure funding
• D. Conduct a feasibility study

Answer: (A)

Establishing a Controlled Unclassified Access (CUA) is essential before creating a Special Access Program Control Area (SAPCA) in a Sensitive Compartmented Information Facility (SCIF) because it sets the framework for how access to the SAPCA will be managed. The CUA outlines who can access specific classes of information, helping to ensure that only authorized personnel are granted access to sensitive areas where special program information is housed.

Establishing a CUA involves identifying the specific clearances and any additional requirements needed for personnel to be able to work in or have access to the SAPCA. Without this clearly defined access control, there is a risk of unauthorized access, which could compromise sensitive information and security protocols.

The other options may play a role in the broader context of establishing a SAPCA, but the CUA is a foundational element that must be in place to safeguard sensitive accesses effectively. Notifying all personnel, securing funding, and conducting feasibility studies, while important, are subsequent steps that assume access requirements have already been clearly defined through the establishment of the CUA.