Keeping the knowledge of security container combinations to a minimum.
In this weeks article continuing the coverage of the Defense Security Service (DSS) Self Inspection Handbook for NISP Contractors, we'll review the National Industrial Security Program Operating Manual (NISPOM) , Paragraph 5-308. 5-308 Is the number of people possessing knowledge of the combinations to security containers kept to a minimum? Not every employee needs the combination to the security container. The combinations should be provided to those with the proper clearance and need to know. This is the maximum number of individuals who should have it, but a minimum standard as far as combination accountability. After all, the security container combination is classified at the same level as the highest level of information stored in the container. Clearance and need to know of the contents aside, maintaining control of combinations should include keeping access to the security container at a minimum amount necessary to manage good information security. For ex...
