Special Access Programs: Categories, Read-In, and Penalties

A Special Access Program is an extra layer of secrecy the federal government places on top of the ordinary Confidential, Secret, and Top Secret classification levels. Special Access Programs exist because some information — advanced weapons designs, intelligence sources and methods, nuclear weapon vulnerabilities — is considered too sensitive to protect with a normal clearance alone. Access is limited to individually approved people, work happens inside purpose-built facilities, and some programs have no publicly acknowledged existence at all. Only a handful of senior officials can authorize a new one, and federal law requires at least a narrow form of congressional review even for the most tightly held.

Who Can Create One, and Why

The creation authority comes from Executive Order 13526, signed in 2009 and still in force. Section 4.3 limits that authority to the Secretaries of State, Defense, Energy, and Homeland Security, the Attorney General, and the Director of National Intelligence, or the principal deputy of each.¹ The DNI has exclusive authority over programs involving intelligence sources, methods, and activities. The Secretary of Defense controls military operational, strategic, and tactical programs.

Standing up a new program requires two specific findings: that the threat to or vulnerability of the information is exceptional, and that the normal criteria for granting access to information at the same classification level are not sufficient to prevent unauthorized disclosure.¹ The order also directs these officials to keep the total number of programs “at an absolute minimum.” Inside the Department of Defense, DoD Directive 5205.07 sets the day-to-day policy.²

The Three Categories

Programs are sorted into three categories, and the category determines how visible the program is to Congress and the public.

An acknowledged program is one the government confirms exists, although its technical details stay classified. Its funding usually appears as an identifiable line item in the defense budget.²

An unacknowledged program is one whose very existence is classified. The Defense Department will not confirm, deny, or debate it. Its funding is buried in the classified portion of the budget, informally called the black budget. For fiscal year 2025, the intelligence community’s total budget alone reached $101.1 billion, though that figure does not break out unacknowledged programs specifically.²³

A waived program is the most restricted subset of unacknowledged programs. The Secretary of Defense determines, case by case, that even the ordinary congressional notification requirements would risk national security, and waives them.⁴

What It Takes to Be Read In

A Top Secret clearance is a starting point, not a ticket. Getting access to a Special Access Program adds several screening steps on top of the standard personnel vetting, and any one of them can independently disqualify a candidate.

Baseline Clearance and Investigation

A candidate must hold an active security clearance, Secret or Top Secret depending on the program, with a current investigation.⁵ For Top Secret and most SAP positions, the underlying investigation is a Tier 5, which replaced the older Single Scope Background Investigation in 2016. A Tier 5 includes record checks, field interviews, and an enhanced subject interview. The Defense Counterintelligence and Security Agency has also been moving all clearance holders onto Continuous Vetting, which monitors criminal records, financial activity, and foreign travel on an ongoing basis instead of relying on reinvestigations every five or ten years.

The Nomination Package

Someone already briefed into the program submits a Program Access Request package for the nominee, along with a SAP Personnel Security Pre-Screening Questionnaire.⁵ The package must justify two things: that the nominee has a genuine need to know and that they will make a material contribution to the program. If the pre-screening questionnaire surfaces previously unreported derogatory information, such as an arrest, a foreign contact, or a financial problem, the nominee is referred back to the adjudication process before the SAP nomination moves forward.⁶

Polygraph

Many programs require a polygraph. The intelligence community uses three types. A Counterintelligence Scope Polygraph covers espionage, sabotage, terrorism, unauthorized disclosure of classified information, and unreported foreign contacts. An Expanded Scope Polygraph, sometimes called Full Scope, adds criminal conduct, drug involvement, and falsification of security forms.⁷ A Specific Issue Polygraph targets a single concern raised during vetting. Which type applies depends on the sensitivity of the information.

Where the Work Happens

SAP work takes place inside accredited facilities built to prevent surveillance, signal leakage, and unauthorized entry. Terminology matters. A Sensitive Compartmented Information Facility (SCIF) is designed for SCI material. A SAP Facility (SAPF) is accredited specifically for SAP work. They are distinct spaces, sometimes located in the same building, and can have different security managers reporting to different authorities.⁸ SAPFs still meet construction standards equivalent to SCIF specifications, including reinforced perimeters, acoustic protections, and TEMPEST countermeasure reviews to guard against electromagnetic emanations.⁹

When a facility hosts more than about 25 people, a formal badging system is required because personnel can no longer personally recognize everyone with access. Badges used for access control in government-controlled SAP spaces must comply with Homeland Security Presidential Directive 12 standards. Electronic access devices such as card readers and combination locks control entry to compartmented areas inside the facility.⁹ When unoccupied, facilities must be alarmed and secured with approved combination locks. Someone cleared for one program in a building still cannot wander into a compartmented area for a different program.

On the network side, historical practice relied on air-gapping. Current policy has moved beyond that alone, combining air gaps with encryption, access logging, and layered countermeasures.¹⁰ Program-specific code words replace descriptive titles on documents and hardware. For the most sensitive materials, such as certain cryptographic keying material, a two-person integrity protocol applies: no single individual can access or transport the material alone, and each of the two authorized people must be capable of detecting improper handling by the other.¹¹

How Congress Sees These Programs

Even the most tightly held programs face congressional scrutiny, and the level of scrutiny follows the category. Under 10 U.S.C. § 119, the Secretary of Defense must submit an annual report to the defense committees by March 1. That report must include the total amount requested for all special access programs in the upcoming budget, a description of each program, its cost history, its major milestones, and estimated costs for the current year plus four future years.⁴ A separate report on any newly designated programs is due by February 1. The Special Access Program Oversight Committee within the Office of the Secretary of Defense reviews every program annually, weighing cost, schedule, and performance, and deciding whether the program still needs its compartmented status.²

For waived programs, the Secretary can exclude specific information from the annual reports if disclosure would harm national security. That waiver triggers a narrower notification: the Secretary provides the withheld information and the justification jointly to the chairman and ranking minority member of each defense committee.⁴ With four defense committees (the Armed Services and Appropriations committees in each chamber), that is up to eight senior members. This is sometimes confused with the “Gang of Eight” from covert action oversight, but they are different groups. The Gang of Eight includes congressional leadership and the intelligence committee chairs, while waived SAP briefings go to defense committee leaders.

Obligations That Follow You After You Leave

Leaving a program does not end the obligations that come with it. Before receiving SAP access, every individual signs a Sensitive Compartmented Information Nondisclosure Agreement, Standard Form 4414, which imposes a lifetime prohibition on disclosing program information to unauthorized people. The wording is explicit: the signer will “never divulge” the information, regardless of whether they still work for the government, and the obligation continues “at all times” unless released in writing by an authorized official.¹² All classified materials remain government property and must be returned on demand or when employment ends. Failure to return them can violate 18 U.S.C. § 793.

Anyone who had access to DoD information and signed a nondisclosure agreement must also submit any writing intended for public release to the Defense Office of Prepublication and Security Review before publication. That covers books, articles, conference papers, speeches, and even fictional novels drawn from operational experience. This obligation is lifelong and does not expire when you leave government service.¹³ The office recommends against signing publishing contracts until clearance is complete, because it does not work around publishers’ schedules. Under Form 4414, the reviewing agency must respond within 30 working days of receiving the submission.¹²

Penalties for Unauthorized Disclosure

The criminal consequences for leaking SAP-protected information are severe and can come from more than one statute depending on what was disclosed. Under 18 U.S.C. § 793, anyone who willfully retains or communicates national defense information to an unauthorized person faces up to ten years in prison.¹⁴ A separate provision, 18 U.S.C. § 798, targets the disclosure of classified information about cryptographic systems and communication intelligence, also carrying a maximum of ten years.¹⁵ The maximum fine for either offense is $250,000 under the general federal sentencing statute.¹⁶

Convictions under § 793 also carry mandatory forfeiture of any proceeds received from a foreign government as a result of the violation. Beyond criminal prosecution, unauthorized disclosure or mishandling can result in immediate revocation of all security clearances, termination of employment, and administrative sanctions under federal personnel regulations. Officials who fail to provide Congress with required reports face their own disciplinary exposure.

1
National Archives. Executive Order 13526 – Classified National Security Information
2
Department of Defense. DoD Directive 5205.07 – Special Access Program (SAP) Policy
3
Office of the Director of National Intelligence. IC Budget
4
Office of the Law Revision Counsel. 10 USC 119 – Special Access Programs: Congressional Oversight
5
Center for Development of Security Excellence. Special Access Program Nomination Process Job Aid
6
Center for Development of Security Excellence. Special Access Program Personnel Security Official (SPO) Training Course
7
Office of the Director of National Intelligence. ICPG 704.6 – Conduct of Polygraph Examinations for Personnel Security Vetting
8
Whole Building Design Guide. UFC 4-010-05 SCIF/SAPF Planning, Design, and Construction
9
Department of Defense. DoDM 5205.07 – Special Access Program Security Manual
10
Defense Counterintelligence and Security Agency. Joint Special Access Program (SAP) Implementation Guide (JSIG)
11
National Institute of Standards and Technology. Two-Person Integrity
12
Office of the Director of National Intelligence. Sensitive Compartmented Information Nondisclosure Agreement (Form 4414)
13
Defense Office of Prepublication and Security Review. PrePublication and Manuscripts
14
Office of the Law Revision Counsel. 18 USC 793 – Gathering, Transmitting, or Losing Defense Information
15
Office of the Law Revision Counsel. 18 USC 798 – Disclosure of Classified Information
16
Office of the Law Revision Counsel. 18 USC 3571 – Sentence of Fine