CI vs. Full-Scope Polygraph:
Which Programs Require Which, and What Each One Asks
The CI poly and the full-scope poly are different tests gating different work. Which agencies and programs require each, what each covers, and how to prepare.
July 21, 2026
Security Clearance
The Defense Department retired the phrase “full scope polygraph” in writing. Its polygraph instruction defines the exam readers mean, then adds five words in the glossary: “Previously known as full-scope polygraph.” The government-wide directive did the same. Energy’s rulebook never followed.
Key takeaways
- Three issuances rename the exam ESS or ESP and log “full scope” as an alias; DOE’s rule still uses the phrase outright.
- The CI exam covers 5 topics; the expanded exam covers those five plus 3 more (DoDI 5210.91, Change 2 effective 2020).
- DoD names 5 typical categories of screening-polygraph work (DoDI 5210.91); 9 components may conduct exams (DoDD 5210.48, 2020).
- Energy re-evaluates covered employees at least every 5 years, but the polygraph inside that evaluation is discretionary (10 CFR Part 709).
- An examiner may render 5 technical opinions. “Pass” and “fail” are not among them.
What is a “full scope polygraph” actually called now?
Two names, one exam. DoD calls it Expanded-Scope Screening (ESS); the government-wide Security Executive Agent directive calls it the Expanded Scope Polygraph (ESP). Each records “full scope” as an older label.
Keep saying “full scope” to recruiters; it remains the working vocabulary. The policy text has moved on.
DoD Instruction 5210.91 defines ESS as the CSP questions plus “falsification of security forms, involvement with illegal drugs, and criminal activity. Previously known as full-scope polygraph.” Date-stamp that: base instruction 12 August 2010, Change 2 effective 30 March 2020, unchanged since. It directs that exams be recorded in JPAS, which DoD has since replaced with DISS, the personnel-security system of record DCSA runs.
Security Executive Agent Directive 2 (Revised), effective 1 September 2020, puts all three names in one sentence: the ESP “has also been referred to as a Full-Scope Polygraph (FSP) or an Expanded-Scope Screening (ESS) examination in some organizations.” “Lifestyle polygraph” gets less: no issuance reviewed here names such an exam. Shorthand, not policy.
What does the counterintelligence-scope polygraph ask?
Five topics, all national-security conduct: espionage, terrorism, sabotage, mishandling of classified information, and unauthorized foreign contacts. DoD calls the CSP “a screening polygraph examination that uses relevant questions limited to prescribed CI issues.”
“Limited” is the load-bearing word. Enclosure 4 scopes each area.
- Espionage or foreign intelligence service involvement. Whether you have spied, know anyone who has, have “ever been approached, trained, or tasked” to spy, or failed to report someone who did.
- Terrorism against the United States. Acts of violence for political purposes, support of terrorism “in any way,” knowledge of others planning it, failure to report.
- Sabotage. Damage to any U.S. Government information or defense system. One method is named outright: whether you “deliberately placed malware in or otherwise manipulated a Government computer system without proper authorization.” This exam is not only about foreign handlers. It is about the network.
- Mishandling classified information. Deliberate removal from approved facilities, disclosure to an unauthorized person, or storage outside approved facilities.
- Unauthorized foreign contacts. Scoped to unreported contact “in accordance with individual DoD Component reporting requirements,” so the reporting threshold under SEAD 3 decides what counts as unreported.
The IC adds a detail DoD omits. Under ICPG 704.6, dated 4 February 2015, an “unauthorized recipient” includes “any member of the media.” It is the most recent public IC polygraph guidance; a newer version may exist unpublished.
What does the expanded-scope exam add?
Three subjects, verbatim in DoD policy: falsification of security questionnaires and forms, serious criminal conduct, and illegal drug involvement. Everything in the CI exam stays.
That is the whole technical difference, and it explains why the two feel unalike. The CI exam asks whether you worked against the United States. The expanded exam asks who you have been. Form falsification makes your SF-86 testable material, so be exact about fiddly calls like whether a relative can serve as a reference.
| CI-Scope (CSP) | Expanded Scope (ESP / ESS) | |
|---|---|---|
| Topics | 5: espionage, terrorism, sabotage, mishandling classified, foreign contacts | All 5, plus form falsification, criminal conduct, illegal drugs |
| Status | The baseline for polygraph “in support of personnel security vetting” (SEAD 2) | The exception. In DoD, needs the DoDI 5210.91 tie or a USD(I&S) exception |
| Named DoD trigger | Designated positions involving Top Secret or SAP information, sensitive intelligence activities, foreign-national access | Two limbs: access to classified information, or unescorted access to cryptologic spaces |
| Reciprocity | Accepted where the receiving agency requires a CSP of that age | Accepted where a CSP is required; a CSP does not satisfy it |
Which jobs actually trigger a screening polygraph?
DoD’s authorized-uses table gives five typical categories for a screening polygraph not predicated on a specific allegation: designated intelligence positions, special access programs, adjudicative resolution of foreign relationships, accelerated SCI access, and foreign-national classified access.
Read that table carefully. It calls the categories “typical,” so a job absent from the list is not thereby exempt; reading it as a closed list is wrong. The binding limit sits elsewhere: DoDI 5210.91 lets a component head “require CSP examinations for persons who occupy designated positions” involving Top Secret information. Holding TS does not summon a polygraph; occupying a designated position does. Much cleared work never reaches that threshold, and public trust positions sit outside it.
“Adjudicative resolution of foreign relationships” settles a question raised by a close and continuing relationship with a foreign national. “Accelerated SCI access” moves you before the investigation finishes, like an interim clearance.
For the expanded exam, the authorizing sentence has two limbs; most write-ups quote only the second. DoDI 5210.91 covers ESS exams evaluating eligibility “for access to classified information, or unescorted access to controlled spaces where sensitive cryptologic information is produced, processed, or stored.” Only the second limb names a category of work; the first is broad. Beyond them a component needs a USD(I&S) exception, and one upgrading a class of applicants must state in writing whom it will test and its “predicted rates of non-selection.”
Which agencies require which polygraph?
No agency publishes its polygraph scope. That is the honest answer, and it contradicts most of what is written on the subject. CIA and FBI hiring pages name a polygraph without naming its type.
The claim that CIA and NSA require a full scope polygraph is repeated everywhere and traces to no agency primary source.
CIA’s minimum requirements ask candidates to complete “a background investigation, a polygraph interview, and a physical and psychological examination.” FBI eligibility requires a background investigation “including a polygraph, to receive an FBI Top Secret Security Clearance.” Scope: unstated, in both. DoD Directive 5210.48 lists nine components approved to conduct exams, among them NSA/CSS, DIA, NGA and NRO. That tells you who runs exams, not which scope.
The sharpest clue sits in statute. 10 U.S.C. 1564a establishes the DoD counterintelligence polygraph program, then exempts four categories: CIA detailees, NSA employees and detailees, people in cryptographic spaces, and staff of a DoD reconnaissance-collection office. The organizations most associated with the expanded exam are exactly the ones carved out of the CI-scope statute: evidence they run separate programs under separate authority, not evidence of what those programs ask. One caveat: the statute’s SAP trigger cites section 4.4(a) of Executive Order 12958, revoked in 2009, though it also reaches “a successor Executive order,” today EO 13526.
How do DOE, State and the IC differ?
Three separate regimes. The IC recognizes three exam types, not two: alongside the CSP and ESP sits the Specific Issue Polygraph, for resolving a particular matter.
Energy’s program is the most concretely written, and the most misread. Under 10 CFR Part 709, as codified, a counterintelligence evaluation is required for covered persons in six categories, among them a counterintelligence program office, SCI access, and “regular and routine” access to Top Secret Restricted Data, with incumbents re-evaluated at least every five years. Read the verb. That evaluation “may include” a polygraph, and on this mandatory track DOE requires one only in its “sole discretion,” on a foreign-nexus finding or at another agency’s request. The five-year cycle is an evaluation cycle, not a polygraph cycle. The random track is blunter: it authorizes an evaluation “including a CI-scope polygraph examination,” naming “any system administrator with access to a system containing classified information.” A cleared sysadmin can be pulled without cause. A “covered person” includes “an applicant for employment with DOE or a DOE contractor.” Part 709 is where the reader’s phrase survives: DOE may waive its CI-scope exam for anyone another agency certifies has completed “a full scope or CI-scope polygraph examination administered within the previous five years.” DoD retired the term. Energy still spends it. Vintage note: the source is 71 FR 57392, September 2006; the rule still names DOE offices that no longer exist, though the categories remain operative.
State is the useful counterexample, with a catch. 12 FAM 251 provides that requests to polygraph a Department contract employee “generally will not be approved” unless, “in addition to meeting the requirements of these provisions,” the employee has Top Secret access or another Employee Polygraph Protection Act exemption applies. Top Secret access is a precondition, not a green light. Its last-resort rule, no polygraph until “all other reasonable investigative steps have been taken,” then carves itself out, and the carve-out is the reader’s own case. It does not reach exams under 12 FAM 251.4-3(B), which authorize polygraphs for initial and, on a random basis, continued eligibility of employees and contractors in IC-joint programs. So State does screen. When it does, the FAM caps the exam at counterintelligence topics.
Why can a defense contractor lawfully polygraph you?
Because federal law bans private-sector polygraph testing, then carves out defense and intelligence work by name. That is why a private company can send you to an exam illegal anywhere else.
29 U.S.C. 2006(b) exempts federal counterintelligence testing of “any expert or consultant under contract to the Department of Defense or any employee of any contractor of such Department”; a second exemption names NSA, DIA, NGA and CIA. 10 U.S.C. 1564a reaches “personnel of defense contractors” and applicants alike. Employer-side, that sits under the NISPOM requirements in 32 CFR Part 117. Nor is the exam one-time: DoDD 5210.48 authorizes both types at “periodic or aperiodic intervals,” inside the same machinery as continuous vetting.
Does your polygraph transfer to a new employer?
Only if type and age both match what the receiving agency requires. A CI-scope exam does not satisfy an agency requiring expanded scope, however recent.
SEAD 2 provides that a CSP or ESP “consistent with the type and age of examination required by the receiving agency, shall be reciprocally accepted.” Two gates. Wrong type fails. Right type but too old also fails.
What lets a new employer check is a database entry. Types and completion dates are recorded in Scattered Castles, JPAS or OPM’s Central Verification System, “or successor databases,” the phrase carrying the JPAS-to-DISS transition in the 2020 text. That record is what a gaining office sees; we compare the systems in Scattered Castles versus DISS.
What can the exam not ask, and is there a “pass”?
Questions about religious, racial or political beliefs and lawful affiliations not directly related to the investigation are prohibited. There is no “pass”: policy permits five technical opinions, none of them pass or fail.
SEAD 2 requires questions to cover only the topics defined for that exam type, “limited to adjudicatively relevant national security matters.” A CI-scope exam is not licensed to wander into drug or criminal history, which makes the distinction real. Statute adds notice, consent, counsel, and a relevance requirement on every substantive question.
An examiner may render only five technical opinions: No Deception Indicated, Deception Indicated, No Opinion, No Significant Response, and Significant Response. DoDI 5210.91 states that a field analysis “does not constitute an official result,” which becomes official “only after the QC authority examines the data and renders a final opinion.” What you were told in the room was not the decision.
If an exam cannot be resolved, you are to be offered another, and a temporary suspension of access “may not form the part of any basis for an adverse administrative action,” worth knowing when access is suspended. Appeals must be filed within 30 days. Refusal is not an automatic revocation: DoD says a person in a designated position who refuses “may be denied access, assignment, or detail.” SEAD 2 warns that non-cooperation “including confirmed polygraph countermeasures” may trigger an adverse determination. What emerges goes to an adjudicator, who weighs it under the whole-person concept. The polygraph feeds the decision; it is not the decision.
For 2026 the practical consequence is narrower than the folklore suggests. Before accepting a poly-gated offer, make the recruiter name the exam type instead of saying “full scope”: the answer decides whether the exam you hold transfers or whether you start over. If nobody can say which scope the job requires, that tells you how well they understand the clearance they are sponsoring.
Frequently Asked Questions
Is a “full scope polygraph” the same as a “lifestyle polygraph”?
Both are informal names for the same exam. Neither is defined in DoD or IC policy, and of the rules reviewed here only DOE’s Part 709 uses “full scope.” “Lifestyle” is shorthand for the three subjects the expanded exam adds: form falsification, serious criminal conduct, and illegal drugs.
Does a Top Secret clearance automatically require a polygraph?
No. DoDI 5210.91 permits a component head to require CI-scope exams for people in designated positions involving Top Secret information. The position must be designated, and many Top Secret roles never are.
Can I refuse a polygraph and keep my clearance?
Refusal does not automatically revoke a clearance. DoD policy states that someone in a designated position who refuses “may be denied access, assignment, or detail.” SEAD 2 adds that refusal without reasonable cause may lead to an adverse security determination.
Will a CI polygraph satisfy an employer requiring expanded scope?
No. SEAD 2 conditions reciprocal acceptance on the exam matching both the type and the age the receiving agency requires. Your type and completion date sit in Scattered Castles, JPAS or OPM’s Central Verification System, so the gaining office sees which you hold.
Did I fail if the examiner said there was a problem with my chart?
“Fail” is not a policy outcome. Examiners render one of five technical opinions, and DoDI 5210.91 states the field analysis “does not constitute an official result.” Quality control reviews the data first, and an unresolved exam earns another attempt.