32 C.F.R. § 1909.10
(a) Upon receipt of a recommendation by the ARP concerning whether or not to grant access to classified CIA information under this part, the Senior Agency Official may, in his sole discretion, waive the need-to-know requirement and approve such access only if he or she:
(b) The Director of the Central Intelligence Agency reserves the authority to make a superseding decision concerning whether or not to waive the need-to-know requirement and to grant access to classified CIA information under this part in any case only if he or she: