Security Executive Blog

www.redbikepublishing.com This article continues the series covering the Self-Inspection Handbook For NISP Contractors and guidance found in the National Industrial Security Program Operating Manual (NISPOM) Incorporating Change 2 .   When shipping classified information, the sender is responsible for requesting approval to use commercial carriers. The DSS or other Cognizant Security Agency (CSA) approves the use of commercial carriers. For overnight shipping, the Government Services Administration (GSA) provides a list of approved .  Question Does the contractor use a qualified carrier, authorized by the Government, when shipping classified material? 5-408. SECRET Transmission by Commercial Carrier. SECRET material may be shipped by a cleared commercial carrier that has been approved by the CSA to transport SECRET shipments. Cleared Commercial Carriers Department of Defense contractors may use government approved commercial carriers to transport SECR...

Are you studying for the ISP Certification Exam? If so, try these questions. There are 440 more just like them in Red Bike Publishing's Unofficial Study Guide for: ISP Certification 1. Subcontracted guards must be under a classified contract with which of the following: a. GCA, CSA b. CSA, DSS c. Cleared contractor facility, Installing alarm company d. Monitoring station, Installing alarm company e. All the above 2. Contractors who extract classified information are making _____ decisions: a. Reasons for classification b. Security Classification Guidance c. Derivative classification d. Classification e. Classified document 3. A U.S. contractor’s requirement to maintain custody, control and storage of classified information abroad is the responsibility of: a. GCA b. U.S. Government c. CSA d. State Department e...

Here are actual questions from the book  ISP Certification-The Industrial Security Professional Exam Manual . The questions here are all about NISPOM Chapter 8. G o ahead, test your knowledge: 80. Level of concern reflects the sensitivity of the information and  the consequences of the loss of confidentiality, availability, or  _____. a. Truth b. Equipment c. Integrity  d. Values e. Ethics 81. Who has responsibility for accrediting information systems  used to process classified information in industry? a. CSA  b. FSO c. ISSM d. ISSO e. Contractor 82. The CSA can grant interim approval to operate an IS for up to: a. 120 days b. 90 days c. 180 days d. 1 year e. 45 days 83. Systems operate at Protection Level 3 when: a. All users have required approvals for access to all information on system b. All users have required clearance, but at least one lacks need to know c. All users have required...

Try these 5 challenging questions from Red Bike Publishing's  "ISP Certification-The Industrial Security Professional Exam Manual" , by Jeffrey W. Bennett, ISP, SFPC. 1. A facility at which only one person is assigned shall establish procedures for CSA notification after _____ or _____. a. Death, incapacitation b. Termination, resignation c. Compromise, unauthorized disclosure d. Bomb threat, natural disaster e. New hire, replacement 2. Contractors shall conduct formal self inspections at intervals consistent with: a. Risk management principals b. DSS inspection dates c. FSO determination d. Previous results e. All of the above 3. Concerning the Information Sensitivity Matrix for confidentiality, what qualifiers match the Basic level of concern? a. TOP SECRET and SECRET Restricted Data b. Confidential c. SECRET and SECRET Restricted Data d. UNCLASSIFIED e. FOUO 4. In the Protection Profile Table for Integrity, which Backup and Restoration of Data...