Controlled Cryptographic Item (CCI)

Definition - What does Controlled Cryptographic Item (CCI) mean?

A Controlled Cryptographic Item (CCI) is a secure cryptographic component or hardware that performs a critical security communication function. CCIs are defined by the National Security Agency (NSA).

CCI components that are associated with cryptographic logic are classified, including related programs. CCIs follow prescribed regulations but are not always classified.

[WEBINAR] Plan for Success: Using Process Models to Achieve Business Goals

Techopedia explains Controlled Cryptographic Item (CCI)

An example of a cryptographic CCI component is cryptographic logic hardware, such as a printed circuit board. Normally, a security clearance is not required for unkeyed CCIs, which are assigned to custodians or other personnel that do not require a location escort. Only U.S. employees holding classified keys have key CCI access.

The NSA groups encrypted items into four different types:

Type 1: Sensitive or classified U.S. government information
Type 2: Unclassified and encrypted equipment for government information that requires safeguarding due to data sensitivity
Type 3: Algorithms for sensitive and unclassified information that is either owned by the U.S. government or commercially endorsed by the National Institute of Standards and Technology (NIST). Type 3 items are registered and published by the Federal Information Processing Standard (FIPS).
Type 4: Algorithms that are NIST registered but not published by FIPS