What best defines CCI (Controlled Cryptographic Items)?

• A. Material that is unclassified but sensitive due to its nature and therefore controlled
• B. Material that is classified and restricted
• C. Material that can be shared openly with command authorization
• D. Material that is declassified after 5 years

Answer: (A)

Controlled Cryptographic Items are unclassified materials that require protection because of their sensitive nature and the potential impact if disclosure or misuse occurs. They include cryptographic equipment, devices, and related materials that perform security functions but are not themselves classified. The essential idea is securing access, storage, and handling due to sensitivity, not simply meeting a classification level.

That’s why this description fits best: the item is unclassified but sensitive and therefore kept under control. It isn’t about being classified and restricted, and it isn’t about open sharing with authorization, nor about a blanket declassification after a fixed time.