GSA-approved security containers are the filing cabinets, safes, and specialized enclosures certified by the U.S. General Services Administration for storing classified national security information when a vault or secure room isn’t available. Their construction, locks, and use are governed by 32 CFR Part 2001, which implements Executive Order 13526 on classified information protection.1eCFR. 32 CFR Part 2001 – Classified National Security Information Two classes are currently manufactured, Class 5 and Class 6, and both may hold material at any classification level. The rules extend well past the container body: labels, locks, forms, combinations, and repairs each have their own requirements, and a failure in any one of them can pull the container out of compliance.
How to Tell If a Container Is Approved
Every authorized container carries a GSA Approved Security Container label, a silver tag with black lettering on the front of the top drawer, control drawer, or door.2DoD Lock Program. GSA-Approved Security Containers If the label is missing, damaged, or shows signs of tampering, the container is no longer approved for classified storage. Purchase records and manufacturer paperwork don’t substitute for the label.
Restoring a container that has lost its label requires a formal inspection and recertification by a GSA Certified Safe and Vault Technician, someone who has passed written and practical exams at a GSA-approved training institution. No one else can return a container to service.3DoD Lock Program. GSA Certified Safe and Vault Technician Training
Class 5 and Class 6: The Difference That Matters
Both classes are authorized for all classification levels, and both are tested against the same four categories of attack. The dividing line is forced entry.
- Surreptitious entry (no visible evidence): 20 hours of resistance for both classes.
- Covert entry (evidence concealed afterward, though possibly still detectable): 30 minutes for both.
- Forced entry (direct physical attack with tools): 10 minutes for Class 5; no requirement at all for Class 6.
- Radiological examination (X-ray or similar imaging): 20 hours for both.4Center for Development of Security Excellence. Storage Containers and Facilities Student Guide
Class 5 containers are built heavier and will physically resist a skilled attacker with tools for at least ten minutes. Class 6 containers provide no guaranteed resistance to brute force, which is why they are more commonly deployed in environments with strong supplemental security like alarms or guard forces.2DoD Lock Program. GSA-Approved Security Containers
Both classes are available as two-drawer and four-drawer filing cabinets and as map and plan containers for oversized documents. Class 6 also comes in field safe and special-size configurations, including shipboard models for naval vessels. Every configuration must pass the qualification tests under its federal specification before receiving the GSA label.
Storage Rules by Classification Level
Putting classified material inside a GSA-approved container isn’t always the end of the compliance picture. The supplemental controls required depend on the classification level.5eCFR. 32 CFR 2001.43 – Storage
Top Secret
Top Secret material in a GSA-approved container requires at least one of three additional protections: two-hour physical inspections by a cleared employee at the Secret level or above; an intrusion detection system meeting ISOO-approved standards with responders arriving within 15 minutes; or Security-In-Depth (layered coverage of the surrounding area), but only when the container has a lock meeting Federal Specification FF-L-2740.
Secret
Secret material stored in a GSA-approved container or a vault built to Federal Standard 832 needs no supplemental controls beyond the container itself. In other approved configurations, such as open storage areas, the facility must provide four-hour inspections by a cleared employee or an IDS with responders arriving within 30 minutes.
Confidential
Confidential material follows the same storage options as Secret and Top Secret, but no supplemental controls are required.
Approved Locks
A container’s lock has its own compliance test, independent of the container body. If the lock doesn’t meet the applicable federal specification, the container cannot store classified material no matter how robust the shell.
Electromechanical combination locks on containers must meet Federal Specification FF-L-2740. Currently approved models include the X-07, X-08, X-09, X-10, S&G 2740, and S&G 2740B.6General Services Administration. Federal Specification FF-L-2740B – Locks, Combination, Electromechanical7Center for Development of Security Excellence. DoD Locks Approved to Safeguard Classified and Sensitive Materials Locks installed on pedestrian doors fall under a separate specification, FF-L-2890, met by the CDX-07 through CDX-10 and the S&G 2890 PDL. The CDX series and X series look similar but are not interchangeable across applications.
New containers also ship with a mechanical combination lock meeting FF-L-2937, such as the S&G 2937. As those mechanical locks become damaged or unserviceable, replacements must also meet FF-L-2937.
Required Forms
Three standard forms carry the administrative side of container security. Missing or incomplete forms are among the most common findings in federal security inspections, and they are entirely preventable.
SF 700: Security Container Information
SF 700 records the current combination and identifies the people responsible. Part 1 stays attached to the container and displays custodian information along with employees to contact if the container is found open and unattended after hours. Part 2A is a tear-off tab where the actual combination is written, then sealed in an envelope safeguarded at the classification level of the material stored inside.8Center for Development of Security Excellence. Standard Form 700 – Security Container Information
SF 702: Security Container Check Sheet
SF 702 logs every opening, closing, and check. Each person initials with the date and time.9National Archives and Records Administration. Standard Form 702 – Security Container Check Sheet Completed forms must be retained at least 90 days after the last entry. Agencies may keep them longer, and forms tied to an ongoing investigation follow separate retention schedules.10National Archives and Records Administration. General Records Schedule 4.2 – Information Access and Protection Records
SF 701: Activity Security Checklist
SF 701 is the end-of-day record for the whole work area, not just the container. Security personnel use it to confirm that alarms are activated, doors and windows are secured, and all containers are locked.11National Archives and Records Administration. Standard Form 701 – Activity Security Checklist Activities that process or store classified information are required to establish a system of end-of-day checks, and SF 701 is the designated recording instrument.12Center for Development of Security Excellence. SF701 Short Student Guide The 90-day retention rule applies here too.
Closing the Container Properly
Most security failures happen at close-out rather than opening. After returning materials and firmly closing the drawer or door, you must clear the combination from the lock. On a mechanical lock like the S&G 2740, that means turning the dial at least half a revolution. On an X-10, the lock clears automatically once it powers down, but you should verify the display is blank before walking away.
A second authorized person should then verify the container is locked by attempting the handle or drawer. Both the operator and the verifier record the time and initial the SF 702. Skipping this two-person verification is a shortcut inspectors flag immediately, and it can lead to infractions against the facility.
Combinations: Classification and Change Triggers
The combination to a classified container is itself classified at the level of the material stored inside. That’s why the SF 700 combination tab is sealed and safeguarded accordingly. Only individuals cleared at or above the highest classification level in the container may change the combination.13eCFR. 18 CFR 3a.61 – Storage and Custody of Classified Information
A change is mandatory when any of the following happens:
- At least once per year, regardless of other circumstances.
- When anyone who knows the combination transfers to a different position or departs the organization.
- When the combination has been or is suspected of having been compromised.
- When the classification level of the material in the container is upgraded.
- Whenever the facility security officer determines a change is necessary.
The personnel departure trigger is the one that catches organizations off guard. In an office with frequent rotations, one departure can require combination changes on every container the departing employee could access. Inspectors specifically look for this by comparing SF 700 records against personnel transfer dates.
What Not to Store
A GSA-approved container is for classified material only. Money, personal valuables, and other high-value items should not be stored alongside classified information, both because they attract theft interest and because they complicate inventory accountability.14U.S. Department of State. 12 FAM 530 – Storing and Safeguarding Classified Material Classified material must remain on official premises in approved containers. Storing classified documents in desk drawers, personal bags, or any other unofficial location violates federal storage requirements regardless of clearance. Classified material also cannot be copied into personal diaries or non-official records.
Maintenance, Repair, and Recertification
Federal Standard 809 governs inspection, maintenance, neutralization, and repair of GSA-approved containers and vault doors. Only GSA Certified Safe and Vault Technicians, manufacturer-certified technicians, or U.S. government-trained and approved technicians may perform this work.15Naval Facilities Engineering Systems Command. Federal Standard 809E – Inspection, Maintenance, Neutralization and Repair of GSA Approved Containers, Lock Extensions and Vault Doors
When a container has to be opened by emergency means because a combination is lost or a lock has failed, the standard prescribes specific authorized methods, including drilling inside the dial ring, using a hole saw on the drawer face, or cutting with an abrasive saw. Each is designed to allow repair afterward. If a container is opened using an unauthorized method, it cannot be restored to service. The GSA approval label and the internal test certification label must both be removed, permanently retiring the container from classified storage.
The Black Label Exception
Older black label filing cabinets and map and plan cabinets follow a stricter rule. Once a black label container has been neutralized by any method, it can never be returned to service for classified storage. There is no waiver path. If your facility still has black label containers in use, losing the combination means losing the container.
When a Method Isn’t Covered by Federal Standard 809
If an opening or repair falls outside the procedures described in Federal Standard 809, the technician must submit a detailed description and justification to the GSA Interagency Committee on Security Equipment through the DoD Lock Program before the container can be returned to service. Approval is not automatic.