Security Executive Blog

  I’m Jeff Bennett and you probably know me as the founder of Red Bike Publishing and our store, NISPOM Central. I want to share a few emails with you about professional development and if you need it, assist you with a clear path to NISPOM compliance or becoming and FSO. May I share with you my experience with professional development and path to FSO, author, speaker and consultant? If so, stay with me, because over the next few days I'll answer the question so many have asked: How do I become an FSO? We'll break down some basic skills and how to acquire them How do I grow in my career? We'll break down training and certification opportunities that will help you establish credibility. Over the next few days I'll send out my plan. The plan covers the following topics: NISPOM foundation Developing education goals Engaging with professional development opportunities Creating influence and credibility in the community Becoming invaluable to your organization On to Topic 1 ...

  By: Jeffrey W. Bennett, SAPPC, SFPC, ISOC, ISP Many cleared employees conduct  derivative classification  in the performance of their contracts. Derivative classification can be conducted in the organization or at customer locations. Derivative classification includes, paraphrasing, incorporating, restating or regenerating classified information into a new form. Since contractors are not performing original classification, most of their work would involve using classified sources to create new classified products. Here's the important part, no training; no work. Executed National Industrial Security Program Operating Manual (NISPOM) training and documentation is the difference between performing on classified work and not being able to meet contractual requirements. Cleared contractors must plan to train cleared contractor employees who perform derivative classification responsibilities. The NISPOM outlines requirements for derivative classification train...

  By: Jeffrey W. Bennett, SAPPC, SFPC, ISOC, ISP FSOs and security specialists should understand the NISPOM requirements enough to guide their organizations through compliance issues. It takes a tremendous understanding of NISPOM and requirements to prepare for and pass the the annual security review. Additionally, defense contracts can require exquisite performance services and products testing even the most experienced. How does one gain an understanding of NISPOM? With revieing, training, testing and use. Cleared employees should have a copy of NISPOM, DD Forms 254, and other resources describing security requirements. The NISPOM provides the protection standards. How will one understand NISPOM if they don't read, study and apply? With practice, you can develop a keen understanding of NISPOM. If you are serious about advancing in your field, work on your knowledge of NISPOM. Who knows, it may also set you up to prepare for certification. First, download your copy of NISPOM....

By: Jeffrey W. Bennett, SAPPC, SFPC, ISOC, ISP    Today, we delve into an often overlooked yet crucial aspect of corporate security programs: the dynamics between the Senior Management Official (SMO) and the Facility Security Officer (FSO). This topic is an extremely important part of the  FSO's professional developmen t. This relationship is vital for maintaining not just basic security compliance but achieving greater recognition and trust from agencies like the Defense Counterintelligence and Security Agency (DCSA). As presented, there is a substantial opportunity for organizations to enhance their security posture by nurturing this professional relationship. Understanding the Roles The FSO is tasked with executing a cleared facility's security program, ensuring policies, procedures, and programs are in place to manage and protect classified information. Conversely, the SMO, a key management person, oversees the broader security compliance and isn't just a figureh...

  By: Jeffrey W. Bennett, SAPPC, SFPC, ISOC, ISP Demonstrating NISPOM compliance requires both an in-depth knowledge of NISPOM requirements and the ability to grasp administrative tasks. For example, the cleared company’s Senior Management Official (SMO) and Facility Security Officer (FSO) implement the NISPOM within their organization to address risk to classified information. While these leaders oversee and execute NISPOM requirements, there may be issues with demonstrating how they are meeting compliance. With a bit of organization, compliance can be easily demonstrated with the correct artifacts and documentation. In my newsletter, I tackle NISPOM compliance and lead with three pillars. One of which is a continuous study of NISPOM and application of FSO and  NISPOM professional development ; both critical to technically proficiency. The other resource is the  Self-Inspection Handbook for NISP Contractors , which covers all NISPOM topics. Using the handbook as a p...

  Welcome to the New Year. Like most of us, you might have some new years resolutions. Fitness, excellence, service and professional new years resolutions abound. If you made "becoming an FSO of excellence", "learning the NISPOM", "undertaking professional development", or other resolution, we hope you might start with us. These are three great books that go well together to teach NISPOM and help you meet your resolutions head on. NISPOM  - Of course it's the fundamentals and you should always have one at hand.  Get knowledge. How To Get Government Contracts and Classified Work  - Beyond fundamentals, this book describes FSO tasks, shows how to demonstrate compliance and helps you build your security program.  Apply your knowledge ISP and ISOC Master Exam Prep  - Sure, it was designed for certification, but it's actually a book loaded with hundreds of questions from the NISPOM.  Measure your knowledge. NISPOM Central Link to FSO Professional Develo...

  By: Jeffrey W. Bennett, SAPPC, SFPC, ISOC, ISP Have you noticed the lack of books for security specialists and FSO Professional Development? Sure, you can find books on security and loss prevention, but they do not tackle the tough NISPOM and FSO requirements. Many FSOs rely on professional organizations and other sources to provide the education they need. However, building a library of books is very difficult. Most information for FSOs remain in various online locations. However, an FSO library can include some low hanging fruit that you can download from DCSA and other government and professional organization websites. We recommend that you download the following as foundations to your FSO Library: NISPOM ITAR DoD Instruction 5200.48 Controlled Unclassified Information (CUI) 32 Code of Federal Regulations, Part 2002 Controlled Unclassified Information NIST Special Publication 800-53, Revision 5 Security and Privacy Controls for Federal Information Systems and Organization...

  Jeff provides excellent FSO consultation and build NISPOM compliant programs to defense contractors with 100 or more employees.  Our consultation enables cleared defense contractors build, strengthen, and sustain compliant, resilient, and inspection-ready security programs.  We specialize exclusively in Facility Security Officer (FSO) consulting—combining deep regulatory expertise with practical, execution-focused solutions. What We Do Thrive Analysis Group partners with FSOs, security managers, and executive leadership to design and operate security programs that meet and exceed NISPOM requirements. Our services are built around three core pillars: FSO Consultation & FSO Workbook Self-Inspection Program for Security Program Development & Maturation Gold Standard Criteria through Proprietary Compliance Tools While others do everything for you, we provide Fractional FSOs to consult, support and train you to do it yourself with AMAZING results. We Provide FSO Cons...

  I've spend a lot of time writing about the security clearance process and how to protect classified information. I write the security clearance process with the newly cleared or yet to be cleared defense contractors in mind. The latter, I write for established contractors as they maintain their classified contracts.  So, that's exactly how I am writing the two track book for FSOs. Its important to consider some challenges that newly appointed are faced with, as well as advising legacy FSOs on professional development or career enhancement opportunities. Many newly appointed FSOs have worked tirelessly with DCSA for the FCL milestone; it's a major accomplishment. Many legacy FSOs have not been through the process. However, now all FSOs have something in common after the FCL grant, the "what next"? I’ve covered the what next part in books including  The Insider's Guide to Security Clearances and How To Get U.S. Government Contracts and Classified Work.  This a...

J Join our  reader list  for more articles.  Jeffrey W. Bennett, ISP is the owner of NISPOM Central   . He regularly consults, presents security training, and recommends export compliance and intellectual property protection countermeasures. He is an accomplished writer of non-fiction books, novels and periodicals. Jeff is an expert in security and has written many security books found at NISPOM.com

  The Opportunity Defense contractors fulfilling CMMC requirements should also consider developing an information control plan. While the CMMC certification evaluates systems, the plan will address information residing on the systems and networks. Where NIST provides technical guidance and NISPOM might address the protection of classified information, there is still a need to address adequate protection of other information such as TAR, CUI, FGI and proprietary. The Problem Take a look at this paraphrase from Allen Dulles' book The Craft of Intelligence: In the 1950's the US Congress was concerned that there was just too much technical information available on government programs. From that concern, they commissioned researchers to assemble as much information from public domain about a particular program as they could. The group scoured libraries, newsstands, TV, radio and other media common to the decade and provided a report. As a result, the government determined the in...