SCIF Access Control & Management System

The SCIF Access Control & Management System replaces paper entry logs and spreadsheets with a digital record of who entered a Sensitive Compartmented Information Facility, when, why and under whose escort. It tracks visit access requests from receipt to approval, shows intrusion detection system events as they are received from your alarm system, and records opening and closing checks. Every entry, decision and event is kept in an append-only audit trail that supports the facility management requirements of ICD 705.

The problem it solves

Many SCIFs still run on paper: sign-in sheets at the door, binders of visit requests, handwritten opening and closing checklists, and alarm records kept in a separate system. Special Security Officers spend hours reconciling them before an inspection, and answering a simple question such as who was inside on a given afternoon means reading several logs side by side. Paper can be lost, altered or illegible, and it does not tell anyone that a visitor's approved access has expired.

Who it’s for

• Special Security Officers and SCIF managers in defense and intelligence organizations
• Facility security officers at cleared contractors operating accredited SCIFs
• Entry control and security staff who staff the door
• Program security leads who sponsor visitors
• Inspectors and security officials who review facility records

1. RequestVisit access requests are recorded when the security office receives them, checked against the facility's rules, and approved or rejected by the SSO, so the door knows in advance who is expected.
2. EnterAt the entry point, staff check each person against the access roster or the approved visit, record entry and exit, and assign an escort where required.
3. MonitorEvents from your intrusion detection system are received and shown alongside the access log, so security staff can see alarm, access and secure states in one place and record the response.
4. Close and reviewOpening and closing checks are recorded digitally, and the SSO reviews logs, events and exceptions on a schedule and before inspections.

Digital access log

Every entry and exit recorded with person, time, purpose and escort, replacing paper sign-in sheets.

Visit access requests

Incoming visit requests tracked from receipt through sponsor confirmation and SSO approval, with validity dates.

Access roster

The list of people authorized for unescorted access, maintained by the security office with the date each entry was last verified.

Escort tracking

Escort assignments recorded for each escorted visitor, with handovers between escorts logged.

IDS event display

Alarm, tamper and access-mode events received from your intrusion detection system and shown with the zone and time.

Alarm response records

Who responded to each alarm, what they found and how it was resolved, kept with the event.

Opening and closing checks

Digital opening, end-of-day and container checks that replace paper checklists, with a second-person confirmation where required.

Prohibited items acknowledgment

Visitors' acknowledgment of the facility's rules on personal electronic devices and other prohibited items recorded at entry.

Append-only audit trail

Records cannot be edited or deleted; corrections are added as new entries that reference the original.

Facility document library

Accreditation documents, the fixed facility checklist, standard operating procedures and inspection reports stored with version history.

Inspection readiness

Views that bring together logs, events, checks and exceptions for a chosen period, ready for an inspector.

Multi-facility view

Organizations with several SCIFs see each facility separately, with roles limited to the facilities a person supports.

Special Security Officer

Owns the facility's security records, approves visits and reviews exceptions

Entry controller

Checks people in and out, assigns escorts and records acknowledgments

Visit sponsor

Requests and confirms visits for their program and arranges escorts

Alarm responder

Records responses to IDS events and their outcomes

Facility custodian

Completes opening, closing and container checks

Inspector or auditor (read-only)

Reviews logs, events and checks without changing them

Physical access control system

Badge reader events from your access control system can be recorded with the access log, so badge entries and manual entries sit side by side.

Intrusion detection system

Alarm, tamper and access-mode events from the IDS monitoring interface, mapped to zones during implementation.

Personnel security system

Eligibility and access information from your personnel security system, including Moraph's Personnel Security (PerSec) Clearance Tracker, to support roster verification.

Single sign-on

Staff sign in through your identity provider (SAML or OpenID Connect), including CAC or PIV authentication.

Security monitoring

Audit events forwarded to your security information and event management tool.

Work API

Access logs, visits and events available to your reporting tools through the Moraph Work API.

Single sign-on

Staff sign in through your identity provider with CAC, PIV or your multi-factor policy.

Role-based access

What each person sees and does follows their role and their facilities; approving a visit is separate from sponsoring one.

Append-only audit trail

Every entry, view, change and export is logged with the person and time, and records cannot be edited or deleted.

Encryption and keys

Data is encrypted, with keys Moraph staff cannot use without explicit, time-bound authorization.

Cleared US-person support

Support tickets for defense and intelligence clients are handled only by Moraph staff who are US citizens with active clearances.

US-only hosting

When hosted by Moraph, data stays in the United States region. Deployments in your own environment run under your authority.

Moraph cloud (US)

Hosted and operated by Moraph in the United States region for unclassified facility management data.

Your environment

Installed in your own environment, including networks operated under your authority, with Moraph providing software and support as you allow.

Dedicated environment

A single-tenant environment for organizations whose policies require isolation, scoped in the proposal.

Facility setup

Facilities, entry points, zones and checklists are configured from your standard operating procedures. We need your SSO and facility documents.

Roles and roster

Roles are mapped to your identity provider and the access roster is loaded and verified by your security office.

IDS and badge integration

Event feeds from your IDS monitoring interface and access control system are connected and mapped to zones, with your alarm vendor's involvement where needed.

Procedures review

Visit approval, escort and closing procedures are configured to match yours, and two-person rules set where you require them.

Parallel running

Paper and digital logs run side by side for a period you choose, and differences are reviewed with the SSO.

Training and go-live

Entry staff, custodians, sponsors and responders are trained on their own tasks before paper logs are retired.

• It does not accredit a facility or replace the accreditation process. Accreditation decisions belong to the accrediting official.
• It is not an intrusion detection system or alarm monitoring station. It receives and records events from your IDS; alarm monitoring and response remain as your procedures require.
• It does not grant clearances or decide need-to-know. Eligibility and accesses come from your security office and personnel security system.
• It does not store safe or door combinations. Combination changes can be recorded as having occurred, but not the combinations themselves.
• It is not a physical access control system and does not open doors. It records badge events from the system you have.
• The Moraph-hosted service handles unclassified facility management information only. Operation on classified networks takes place in your environment, under your authority and accreditation.
• Moraph does not claim accreditation for the product. Moraph maps controls and supports your own assessment and authorization.
• Integrations depend on the interfaces your IDS and access control vendors provide.

• Check a visitor in and out at a test entry point and review the log entry it creates
• Walk a visit request from receipt to SSO approval and confirm the sponsor cannot approve it
• Connect a test IDS event feed and record a response
• Complete a closing check with a second-person confirmation
• Try to edit a recorded entry and review how corrections are handled
• Produce an inspection pack for a sample period and review it with your SSO