How to Gain an Absolutely Unfair Advantage at Developing Your FSO Library

 


By: Jeffrey W. Bennett, SAPPC, SFPC, ISOC, ISP

Have you noticed the lack of books for security specialists and FSO Professional Development? Sure, you can find books on security and loss prevention, but they do not tackle the tough NISPOM and FSO requirements.

Many FSOs rely on professional organizations and other sources to provide the education they need. However, building a library of books is very difficult. Most information for FSOs remain in various online locations.

However, an FSO library can include some low hanging fruit that you can download from DCSA and other government and professional organization websites. We recommend that you download the following as foundations to your FSO Library:

  • NISPOM
  • ITAR
  • DoD Instruction 5200.48 Controlled Unclassified Information (CUI)
  • 32 Code of Federal Regulations, Part 2002 Controlled Unclassified Information
  • NIST Special Publication 800-53, Revision 5 Security and Privacy Controls for Federal Information Systems and Organizations
  • NIST Special Publication 800-171, Revision 2 Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations
  • NIST Special Publication 800-172 Enhanced Security Requirements for Protecting Controlled Unclassified Information
  • DoDM 5200.01 Vol 1-3 (DoD Information Security Program)'

Supplemental FSO Library Items

We noticed the gap too. We noticed that there are no textbooks or DIY books for FSOs. You can order security and risk management books, but they do not apply to DoD Contractors. While there are some transferrable skills and tasks, they do not cover NISPOM compliance.

Consequently, we began filling the gap with impactful books that address FSO and NISPOM requirements.

Our books are great for FSOs who want to read and learn how to build compliant programs and sharpen their skills. Consequently, our books demonstrate how FSOs can implement NISPOM in their organizations.

Some resources are available from government or professional organization websites that require memberships and that’s a disadvantage for many. So we have created a place where you can learn without “paying dues”.

FSO Professional Development Gap Problem Solved

Now you have access to print copies of NISPOM, ITAR, FSO books as well as resources for explanation and training. 

NISPOM Central is your one stop shop for NISPOM Compliance books and resources. This is a great place for buying corporate to equip your employees.


Visit NISPOM Central for books and training resource

Comments

Post a Comment

Popular posts from this blog

Appointing the Threat Program Senior Official (ITPSO)

Image
This article continues the series covering the Self-Inspection Handbook For NISP Contractors and guidance found in the National Industrial Security Program Operating Manual (NISPOM) Incorporating Change 2 .   Since the NISPOM update adds to requirements, there is now a sixth element to the “Elements of Inspection” that are common to ALL cleared companies participating in the National Industrial Security Program (NISP).   As mentioned in the first article in the series, all should be incorporated into your customized self-inspection check list: (A) Facility Security Clearance (FCL), (B) Access Authorizations, (C) Security Education, (D) FOCI, (E) Classification, and (Y) Insider Threat . Question: Has the company appointed a U.S. citizen employee, who is a senior official, as a key management personnel (KMP) who will serve as the Insider Threat Program Senior Official (ITPSO)? NISPOM Reference: 1-202b, 1-202c, 2-104   1-202b. The contractor ...
Read more

How Contractors Get Facility Security Clearances

Having a Facility Clearance (FCL) makes a business attractive, but that desire does not provide the needed justification for obtaining a security clearance. The FCL is strictly contract based and demonstrates an enterprise’s trustworthiness. A company is eligible for a facility security clearance after the award of a classified contract. The FCL is a result of a lengthy investigation and the subsequent government’s determination that a company is eligible to have access to classified information. A company can bid on a classified contract without possessing a facility clearance, but is sponsored for a clearance after the contract is awarded. The interested company cannot simply request its own FCL, but must be sponsored by the Government Contracting Activity (GCA) or a prime contractor. Once the need to conduct classified work is determined, the next requirements are administrative. The company has to submit proof that they are structured and a legal entity under the laws of th...
Read more

Protecting CUI on work Computers

Image
It’s a common practice to allow employees to use enterprise computers outside of the enterprise. This has become more common where employees are increasingly working at home. Though a common practice, these occurrences are not always best practices. Anytime an employee leaves work with a company computer, the expectation is that all information is vulnerable. Malware, ransom ware “supply chain attacks”, hacking and other threats are prevalent. In many cases this can be controlled through applying NIST standards and strong cybersecurity measures. This article will focus on limiting use of loaned laptops and not on technical cybersecurity application. The organization should assign a strong risk assessment based on use prior to assigning company computers for at home use. This risk assessment should limit the information to be provided and for specific purposes. For example, if a user works on a specific project, then the laptop might only contain information for that specific use. The l...
Read more