IT-II Security Clearance: Investigation and Trusted Workforce 2.0

An IT-II security clearance is not actually a clearance. It’s a federal position sensitivity designation that marks a job as moderate-risk because the person doing it has enough access to government IT systems or sensitive data to cause serious harm if that access is misused. The label tells you a background investigation is coming. Whether that investigation ends in a security clearance depends on whether your specific duties require access to classified information.

What IT-II Really Means

IT-II is the current name for what used to be called ADP-II under the older Automated Data Processing classification system.1FedCAS. Security Clearance Glossary Both refer to the middle tier of a three-level scale that ranks IT-related federal positions by how much damage a person in that seat could cause. IT-I is the top tier (critical-sensitive), IT-III is the bottom (nonsensitive), and IT-II sits in the middle.2U.S. Department of State. 3 FAM 2220 – Position Sensitivity Designations

In the current federal framework, IT-II maps to either a noncritical-sensitive position (if it involves national security duties) or a moderate-risk public trust position (if it doesn’t). Federal jobs are evaluated on two separate axes: sensitivity, meaning potential damage to national security, and risk, meaning potential harm to the integrity of government operations. The Office of Personnel Management and the Office of the Director of National Intelligence run the Position Designation System that agencies use to sort every job into the right slot.3OPM. Position Designation System and Tool The rules live in 5 CFR Part 1400 for national security sensitivity and 5 CFR Part 731 for risk to the service.4eCFR. 5 CFR 1400.201 – Sensitivity Level Designations and Investigative Requirements

A noncritical-sensitive designation automatically carries at least a moderate-risk public trust designation, unless the agency decides a higher risk level is warranted.3OPM. Position Designation System and Tool That’s why IT-II shows up in two different contexts and sometimes causes confusion.

When IT-II Leads to a Security Clearance and When It Doesn’t

The single most common misunderstanding: IT-II by itself does not mean you have a security clearance. In many IT-II roles, you never will. The label often describes moderate-risk public trust jobs that involve sensitive but unclassified information, and the vetting is a suitability determination rather than a clearance.5ClearanceJobs. Security Clearance Glossary In that case, you’ll fill out an SF-85P (Questionnaire for Public Trust Positions).

If your duties do require access to classified information at the Secret or Confidential level, the position is designated noncritical-sensitive, and you’ll fill out an SF-86 (Questionnaire for National Security Positions) instead. That investigation can lead to Secret clearance eligibility.6NIH Office of Research Services. Understanding Background Investigations Every position requiring Secret or Confidential access is noncritical-sensitive, but the reverse doesn’t hold: plenty of noncritical-sensitive positions don’t touch classified material at all.7ClearedJobs.Net. Security Clearance FAQs

The practical way to read your offer: if the position description says IT-II and calls for an SF-86, expect a clearance track. If it says IT-II and calls for an SF-85P, expect a suitability determination, not a clearance.

The Background Investigation You’ll Go Through

Under the current five-tier investigative framework, IT-II positions require one of two investigation types depending on which side of the sensitivity line they fall on.

For noncritical-sensitive positions (national security), the requirement is a Tier 3 (T3) investigation submitted on an SF-86. Before 2012, the equivalent was called the ANACI, or Access National Agency Check with Inquiries.8DCSA. Position Designation Investigation Type Chart Completing a T3 makes you eligible for a Secret clearance if the job requires one.6NIH Office of Research Services. Understanding Background Investigations

For non-sensitive moderate-risk public trust positions, the requirement is a Tier 2 (T2) investigation submitted on an SF-85P. The pre-2012 equivalent was the MBI, or Moderate Background Investigation.8DCSA. Position Designation Investigation Type Chart

Both investigations cost $455 at the FY2026 DCSA billing rate.9DCSA. Billing Rates and Resources The agency pays, not you.

Timing is longer than most applicants expect. For Tier 3 investigations completed through April 2025, DCSA reported an average of 138 days start to finish: 18 days to initiate the case, 73 days for the investigation itself, and 47 days for adjudication.10Federal News Network. DCSA Backlog of Security Clearance Investigations Down 24% Plan for a wait of several months between accepting the position and receiving full access.

How the Designation Gets Assigned

You don’t pick your designation, and neither does the hiring manager on a whim. Agencies are required to use OPM’s Position Designation System and its interactive companion, the Position Designation Tool, to work through what an incumbent could do or fail to do that might compromise national security or the efficiency of government operations.11DCSA. Position Designation System and Position Designation Tool The tool’s output determines the investigation tier.

Agencies are supposed to review designations periodically and adjust them when duties change.12OPM. Streamlining Vetting Processes in Support of the Merit Hiring Plan If you move into work that touches classified systems, expect your paperwork to catch up.

Contractor personnel go through the same process. The contracting agency’s program office works with security and IT security officials to set the position’s risk and sensitivity, applying the same criteria used for federal employees. A contractor in a moderate-risk IT-II slot goes through the same investigation tier as a federal employee in an equivalent role.13NASA. NPR 1600.3 – Chapter 2

What’s Changing Under Trusted Workforce 2.0

The vetting system you enter today may not be the one that governs your next reinvestigation. The federal government is rolling out Trusted Workforce 2.0, which replaces the five-tier model with three tiers:14GAO. Trusted Workforce 2.0 Review

  • Low Tier for low-risk, non-sensitive positions and credentialing.
  • Moderate Tier for moderate-risk public trust and noncritical-sensitive positions, including Secret and Confidential eligibility.
  • High Tier for high-risk public trust, critical-sensitive, and special-sensitive positions, including Top Secret and SCI.

For an IT-II position, the practical result is that both flavors — the public trust version and the national security version — collapse into the single moderate tier.15CDSE. Three-Tier Investigative Model Reference As of FY2026, roughly 34% of the federal vetted population has transitioned to the three-tier model.16Performance.gov. FY2026 Q1 Personnel Vetting Quarterly Performance Review

Continuous Vetting Replaces Five-Year Reinvestigations

The old model reinvestigated people every five years. Continuous vetting uses automated records checks and event-based monitoring to flag issues closer to real time. DCSA began enrolling the non-sensitive public trust population in continuous vetting in August 2024 and estimated that problematic behavior in moderate-risk positions surfaces about seven years earlier under continuous vetting than under periodic reinvestigations.16Performance.gov. FY2026 Q1 Personnel Vetting Quarterly Performance Review Agencies were directed to complete enrollment of the full non-sensitive public trust population by September 30, 2025.12OPM. Streamlining Vetting Processes in Support of the Merit Hiring Plan

A New Form: The Personnel Vetting Questionnaire

The SF-86, SF-85, and SF-85P are being replaced by a single Personnel Vetting Questionnaire, or PVQ, approved by OMB in November 2023.17Federal News Network. Goodbye SF-86: OMB Approves New Personnel Vetting Questionnaire Initial collection began in FY2026, though adoption has been slow. OPM has set a goal of using the PVQ for all vetting scenarios by September 2027.16Performance.gov. FY2026 Q1 Personnel Vetting Quarterly Performance Review The PVQ separates marijuana use from general illegal drug use and narrows most mental health questions to a five-year lookback.

Until the transition is complete, agencies continue to operate under the legacy five-tier system. Which framework applies to you depends on where your agency is in the rollout when your investigation or reinvestigation begins.