You Have Your Facility Clearance, Now What?


 

I've spend a lot of time writing about the security clearance process and how to protect classified information. I write the security clearance process with the newly cleared or yet to be cleared defense contractors in mind. The latter, I write for established contractors as they maintain their classified contracts. 

So, that's exactly how I am writing the two track book for FSOs. Its important to consider some challenges that newly appointed are faced with, as well as advising legacy FSOs on professional development or career enhancement opportunities. Many newly appointed FSOs have worked tirelessly with DCSA for the FCL milestone; it's a major accomplishment. Many legacy FSOs have not been through the process. However, now all FSOs have something in common after the FCL grant, the "what next"?

I’ve covered the what next part in books including The Insider's Guide to Security Clearances and How To Get U.S. Government Contracts and Classified Work. This article goes further to describe some FSO tasks. This will be further explored in my yet to be titled book. While my earlier books covered NISPOM requirements, the next book will cover FSO tasks. Similarly this article will cover the same topic.

Once the security clearance is awarded and you begin to work on classified information, your responsibility is to establish the security program and protect classified information the way you promised your government customer you would. Soon enough, your industrial security representative from DCSA will be by to verify those security practices.

Essential Tool - The FSO Workbook

The FSO Workbook should be your tailored solution and roadmap to NISPOM compliance. Every organization has some variation that the FSO develops to assist with FSO tasks.

Preparation for the visit begins with understanding your responsibility to prepare the facility to safeguard classified information. This can be done through building policy and infrastructure. The most time consuming preparation is with the FSO Workbook. It includes everything the FSO requires to both comply with NISPOM and demonstrate that compliance. The workbook includes policy development, procedures, processes forms, training, etc to build a security conscious program within the organization's DNA .

The FSO Workbook is a critical element that the FSO uses to demonstrate a successful program to the internal compliance oversight, Senior Management Official (SMO) and external, DCSA.

For videos, classes and discussions about the elements, application and building your own FSO Workbook, join our NISPOM Central Community. FSO Professional Development,

Our out of the box solution.

If you do not have an FSO Workbook or need assistance we can help. We have boxed your FSO workbook for you and is available for you to download and implement.

In-depth NISPOM compliance products to help FSO build and demonstrate a successful program. This product is an assembly of our various products. You can purchase in this package or build your own using our individual product selection.

Exclusive products and tools required to demonstrate NISPOM Compliance.

The FSO workbook is your key to your program. Develop your FSO program and capturing in FSO Workbook. The elements are:

Required Cleared Employee Training PowerPoints and Videos

  • Security Awareness Training
  • Insider Threat Training
  • Derivative Classifier Training
  • CUI Training

Essential FSO Forms for facility and personnel clearance maintenance including but not limited to:

  • The Foreign Travel Form
  • The Facility Security Officer (FSO) Appointment Letter
  • The Insider Threat Program Senior Official (ITPSO) Appointment Letter
  • The Security Clearance Justification and Request Form 
  • Insider Threat Program Policy
  • Security Executive Agent Directive 3 (SEAD 3)
  • Standard Practice Procedures: This Standard Practices and Procedures (SPP) 
  • Visit Request Forms
  • Security clearance justification and processing forms
  • KMP forms
  • FCL forms
  • PCL forms
  • More

Essential Insider Threat Program Forms

  • The Insider Threat Program Senior Official (ITPSO) Appointment Letter
  • Insider Threat Program Charter 
  • ITPWG Meeting Agenda
  • Insider Threat Program Policy
  • Information Inventory Management and Risk Matrix

Contact us for questions about the FSO Workbook or if you would like for us to develop for you.

Comments

Post a Comment

Popular posts from this blog

Appointing the Threat Program Senior Official (ITPSO)

Image
This article continues the series covering the Self-Inspection Handbook For NISP Contractors and guidance found in the National Industrial Security Program Operating Manual (NISPOM) Incorporating Change 2 .   Since the NISPOM update adds to requirements, there is now a sixth element to the “Elements of Inspection” that are common to ALL cleared companies participating in the National Industrial Security Program (NISP).   As mentioned in the first article in the series, all should be incorporated into your customized self-inspection check list: (A) Facility Security Clearance (FCL), (B) Access Authorizations, (C) Security Education, (D) FOCI, (E) Classification, and (Y) Insider Threat . Question: Has the company appointed a U.S. citizen employee, who is a senior official, as a key management personnel (KMP) who will serve as the Insider Threat Program Senior Official (ITPSO)? NISPOM Reference: 1-202b, 1-202c, 2-104   1-202b. The contractor ...
Read more

How Contractors Get Facility Security Clearances

Having a Facility Clearance (FCL) makes a business attractive, but that desire does not provide the needed justification for obtaining a security clearance. The FCL is strictly contract based and demonstrates an enterprise’s trustworthiness. A company is eligible for a facility security clearance after the award of a classified contract. The FCL is a result of a lengthy investigation and the subsequent government’s determination that a company is eligible to have access to classified information. A company can bid on a classified contract without possessing a facility clearance, but is sponsored for a clearance after the contract is awarded. The interested company cannot simply request its own FCL, but must be sponsored by the Government Contracting Activity (GCA) or a prime contractor. Once the need to conduct classified work is determined, the next requirements are administrative. The company has to submit proof that they are structured and a legal entity under the laws of th...
Read more

Protecting CUI on work Computers

Image
It’s a common practice to allow employees to use enterprise computers outside of the enterprise. This has become more common where employees are increasingly working at home. Though a common practice, these occurrences are not always best practices. Anytime an employee leaves work with a company computer, the expectation is that all information is vulnerable. Malware, ransom ware “supply chain attacks”, hacking and other threats are prevalent. In many cases this can be controlled through applying NIST standards and strong cybersecurity measures. This article will focus on limiting use of loaned laptops and not on technical cybersecurity application. The organization should assign a strong risk assessment based on use prior to assigning company computers for at home use. This risk assessment should limit the information to be provided and for specific purposes. For example, if a user works on a specific project, then the laptop might only contain information for that specific use. The l...
Read more