Which statement about non-working hours protection for TOP SECRET storage is correct?

Which statement about non-working hours protection for TOP SECRET storage is correct?

• A. Supplemental protection or security-in-depth is required regardless of container.
• B. No protection is required if the container is a vault.
• C. Only guards are required.
• D. Alarm systems alone are sufficient.

Answer: (A)

Non-working hours protection for TOP SECRET storage relies on supplemental protection or security in depth, regardless of container. This means you don’t rely on the container alone—the highest level of risk requires multiple, overlapping safeguards that together reduce the chance of a breach. In practice, that mix includes physical safeguards (like secure rooms or vaults with proper hardware), alarm and monitoring systems, and presence or rapid response by guards or security personnel, all reinforced by access controls and procedures such as dual control. The idea is that access would have to defeat several independent barriers, not just one. Relying on a vault alone isn’t enough because, after hours, the risk environment changes and you still need detection and response capabilities. Guards alone don’t provide the full protection without supporting alarms and access controls. And alarms by themselves aren’t sufficient without physical barriers and a timely response.

Non-working hours protection for TOP SECRET storage relies on supplemental protection or security in depth, regardless of container. This means you don’t rely on the container alone—the highest level of risk requires multiple, overlapping safeguards that together reduce the chance of a breach. In practice, that mix includes physical safeguards (like secure rooms or vaults with proper hardware), alarm and monitoring systems, and presence or rapid response by guards or security personnel, all reinforced by access controls and procedures such as dual control. The idea is that access would have to defeat several independent barriers, not just one.

Relying on a vault alone isn’t enough because, after hours, the risk environment changes and you still need detection and response capabilities. Guards alone don’t provide the full protection without supporting alarms and access controls. And alarms by themselves aren’t sufficient without physical barriers and a timely response.