CDCR Security Threat Group Designation and Validation Process

The CDCR Security Threat Group validation process is how the California Department of Corrections and Rehabilitation formally labels an incarcerated person as a member or associate of a prison gang or other designated group. An institutional investigator must assemble at least 10 points of documented evidence from three or more independent sources, disclose that evidence to the person, hold an interview where the person can rebut each item, and then route the package through the Office of Correctional Safety and a classification committee before the label becomes official. Once attached, a validation reshapes housing placement, programming access, and parole prospects for years.

What CDCR Must Do Before Validating Anyone

The group itself has to be recognized first. Under California Code of Regulations Title 15, Section 3378.1, a Security Threat Group is any formal or informal organization of three or more people with a common name or identifying symbol whose members collectively engage in prohibited conduct, including planning, organizing, or committing unlawful acts or institutional misconduct.¹ The Office of Correctional Safety (OCS) conducts the threat assessment that decides whether a group meets the definition.²

Groups fall into two tiers. STG-I covers groups CDCR considers the most severe institutional threat based on a history and propensity for violence or influence over other groups; these go through formal certification by OCS. STG-II covers street gangs or disruptive groups whose members may play a subordinate role to STG-I organizations; recognition exists but does not require the same formal certification.² The tier matters at the individual level: STG-I validation requires at least one piece of evidence showing a direct link to a current or former validated member or associate of that specific group.³

The Evidence Point System

Everything turns on a scored evidence framework. Each item falls into a defined category with a specific point value. To validate someone, investigators need at least three independent source items that together total 10 or more points.³ Multiple sources describing the same single act count as one item. That rule stops investigators from inflating a score by documenting one incident from several angles.

The categories and values in Section 3378.2 are as follows:⁴

Tattoos and body markings depicting CDCR-certified group symbols: 6 points
A disciplinary finding that an offense was committed to benefit, promote, or further a group: 6 points
Self-admission by verbal or written statement: 5 points
Photographs showing the person with group insignia, certified symbols, or validated affiliates: 4 points
Staff observations of group-related behavior, including disruptive or controlling conduct: 4 points
Communications (letters, notes, greeting cards) with explicit or coded references to group activity: 4 points
Visits from people known to promote or assist group activities: 4 points
Police reports, crime reports, or arrest reports from outside agencies: 4 points
Written materials in personal possession (membership lists, enemy lists, codes, training materials): 4 points, or 2 points if the materials identify the person but are not in their possession
Association with validated affiliates: 3 points
Informant reports, which must include the date, a confidentiality designation, and an evaluation of the informant’s reliability: 3 points
Debrief reports from another person’s debriefing that reference specific group-related acts: 3 points
Certified group symbols short of tattoos, such as hand signs, distinctive clothing, or graffiti: 2 points

Each item has to be independently verified. If two pieces of evidence rest on the same underlying facts, they fold into one item for scoring. That forces investigators to build a case from genuinely separate sources rather than stack a single incident.

Member, Associate, or Suspect

The regulations create three categories based on how much evidence actually exists.

A member is someone accepted into membership, confirmed through the full validation process with at least 10 points from three or more independent sources plus behavior indicative of actual membership. An associate is someone periodically or regularly involved with group members, validated through the same 10-point threshold but with behavior patterns consistent with association rather than full membership. A suspect has accumulated more than one point but fewer than ten; suspects are tracked by investigative staff but are not formally validated and do not face the same housing restrictions.⁵

The split between member and associate has long tails. Members must wait 11 years of clean conduct before status can be terminated; associates face a 6-year clock.

The Procedural Steps

Once an institutional gang investigator believes the evidence meets the 10-point threshold, Section 3378.2 lays out the formal sequence.⁴

Evidence Disclosure

The investigator delivers a formal disclosure using CDCR Form 128-B4, which lists every source item being used and identifies which items serve as the direct link to a validated affiliate. Copies of all non-confidential documents go to the incarcerated person. Confidential information is disclosed through a separate confidential disclosure form. The identity of a direct-link individual may be withheld if release would compromise someone’s safety.

The 72-Hour Preparation Period

After receiving the disclosure, the person gets at least 72 hours to review the evidence and prepare a response before the validation interview. That period can only be shortened by a written waiver.

Validation Interview

The STG investigator or a designee conducts a face-to-face interview where the person can challenge the reliability of individual evidence items and offer context or rebuttals. Before the interview, the person’s mental health status is evaluated, and staff assistance is assigned if needed. The investigator must evaluate each rebuttal and document the conclusion on a validation chrono (CDCR Form 128-B5). If a source item is found to lack merit on review, the investigator notes that on the form. A copy of the completed chrono goes to the person within 14 calendar days and before the package moves to OCS.

Investigative Employee Assistance

The STG Unit Classification Committee chairperson assigns an investigative employee to help the person prepare for the committee hearing. The employee screens prospective witnesses, gathers information, and submits a written report to the chairperson that may include witness statements and an evidence summary. This is not legal representation, but it builds some structured support into a process the person cannot otherwise navigate with counsel.

OCS Review and the Committee Decision

The completed package goes to the Office of Correctional Safety for review. OCS checks that the evidence meets regulatory requirements and makes a recommendation. The file then moves to the STG Unit Classification Committee, which must see the person within 30 days of receiving the paperwork. The committee reviews the package, considers OCS’s recommendation, and makes the final determination based on the totality of the information.⁶ It verifies that documents match, source items are properly scored, confidential information disclosures were issued, and the evidence actually supports the findings. Once approved, the validation becomes a permanent part of the central file.

What Happens After Validation

A validated person placed in a Security Housing Unit enters the Step Down Program, a 24-month path back to the general population divided into four steps of roughly six months each.⁶ At each step, the Institution Classification Committee reviews the person at least every 180 days to decide whether to advance, hold, or move them backward.¹ Advancement depends on staying free of group-related disciplinary findings and participating in assigned programming. After the final step, the person transitions through a Transitional Housing Unit before a committee referral to a general population facility. Failure to complete the program triggers a committee review that may include referral to the Departmental Review Board.³

Validation also follows a person into parole. The Board of Parole Hearings uses a Structured Decision-Making Framework that treats association with others involved in criminal behavior as part of the Self-Control domain. If gang involvement was a factor in the commitment offense, hearing panels look at whether that risk factor remains currently relevant, meaning whether the person has addressed it through programming or personal change.⁷ A validated person is expected to develop a specific relapse prevention plan addressing negative peer associations. Debrief reports, importantly, are classified as confidential and are not available for the person to review in their central file, which complicates preparation for a hearing.

How to Challenge a Validation

If a validation is procedurally flawed or factually wrong, there are three different mechanisms, and they work on different clocks.

Grievance and Appeal

CDCR’s internal process runs in two stages. A written grievance must be filed within 30 calendar days of discovering the adverse decision, and the institutional Office of Grievances has 60 calendar days to respond in writing. If the grievance is denied, a written appeal must be filed within 30 calendar days of receiving the denial, and the Office of Appeals has another 60 calendar days to respond. Completion of the appeal exhausts administrative remedies within CDCR.⁸ Under the Prison Litigation Reform Act, 42 U.S.C. § 1997e, no federal lawsuit challenging prison conditions or classifications can proceed until all available administrative remedies are exhausted. Filing early gets the case dismissed rather than paused.⁹

Debriefing

Debriefing is the voluntary route for someone who wants to leave a group. Staff may ask whether a person wants to debrief, but the person can decline or stop at any point without penalty.¹⁰ Phase I is a written autobiography of group involvement; the person has 30 days to complete it after receiving instructions, and staff verify it for completeness and accuracy. Waiving the right against self-incrimination is not a precondition, because the information is provided for administrative purposes. If the person makes an incriminating statement, the investigator may pause, and further questioning on that topic requires a Miranda waiver. Phase II is an observation period, often in a Debrief Processing Unit or Transitional Housing Unit with others going through the same process. As soon as someone signals intent to disassociate, the investigator must place them in housing that addresses their safety.

Termination of Validated Status

Validation is not permanent, but removing it takes years. Associates become eligible for termination after six consecutive years with no guilty findings for group-related behavior and no new evidence totaling 10 or more points. Members become eligible after eleven consecutive years under the same conditions.⁶ The clock starts on the date the committee approved release from segregation for Step Down Program graduates, on the date the status-change form was filed for debriefed dropouts, or on the date of initial validation for people who remained in general population housing. A single guilty finding for group-related misconduct during the waiting period resets the clock entirely.

The Constitutional Floor

In Wilkinson v. Austin (2005), the U.S. Supreme Court held that inmates have a protected liberty interest in avoiding assignment to highly restrictive facilities. Due process requires written notice of the factual basis for the classification at least 48 hours before a hearing, a fair opportunity to respond orally or in writing, a short written statement of reasons, multiple levels of review, and periodic reassessment of the placement.¹¹ The Court was clear that these proceedings do not require the formality of a trial. Inmates do not have the right to call witnesses or conduct cross-examination; the model is informal and nonadversarial, with deference to prison administrators on security matters.

CDCR’s validation process, with its 72-hour notice period, interview with rebuttal rights, investigative employee assistance, and multiple committee reviews, generally exceeds those federal minimums on paper. A process that looks adequate on paper can still fail in practice when individual steps are skipped or documentation is sloppy, and that is where successful challenges typically find their footing.

1
Center for Constitutional Rights. California Department of Corrections and Rehabilitation – Security Threat Group Regulations
2
Legal Information Institute. California Code of Regulations Title 15 3378.1 – Security Threat Group Certification Process
3
California Department of Corrections and Rehabilitation (CDCR). Adopted Regulations Effective July 1, 2024
4
Legal Information Institute. California Code of Regulations Title 15 3378.2 – Security Threat Group Validation Process
5
California Department of Corrections and Rehabilitation. Adopted Regulations Effective March 5, 2025
6
California Department of Corrections and Rehabilitation (CDCR). Adopted Regulations – Security Threat Group Prevention, Identification, and Management
7
California Department of Corrections and Rehabilitation. California Parole Hearing Process Handbook
8
California Department of Corrections and Rehabilitation. Appeals Emergency Regulations
9
Office of the Law Revision Counsel. 42 USC 1997e – Suits by Prisoners
10
Legal Information Institute. California Code of Regulations Title 15 3378.5 – Debriefing Process
11
Legal Information Institute. Wilkinson v. Austin