Security Executive Blog

Why does everyone have to have the same training? Sure, every cleared employee receives the initial training and the annual refresher training , but do they have to be the same presentations? After all, we are not cut from the same cloth; we've got varying degrees of experience, right? New Employees, New Clearance Great questions and perhaps you have heard them from your employees. I know I have. In response, FSOs could consider dedicating more security awareness training to new employees who will have a security clearance for the first time. The rational is because they will be newly introduced to sensitive and classified government information under the National Industrial Security Program Operating Manual, they should learn the fundamentals: The nature of classified material and how to protect it Notice of their responsibilities to protect classified information and the consequences of unauthorized disclosure Recognizing and protecting U.S. and foreign government ...

Derivative classification is a required training event. Defense contractors who use classified source material to generate a new product perform derivative classification. According to the National Industrial Security Program Operating Manual (NISPOM) all derivative classifiers must receive this training every two years. Contractor personnel make derivative classification decisions when they incorporate, paraphrase, restate, or generate in new form, information that is already classified; then mark the newly developed material consistently with the classification markings that apply to the source information. Derivative classification includes the classification of information based on guidance, which may be either a source document or classification guide. Order your training here: Derivative decisions are made through: Incorporating-Programs that assemble classified parts or use integration of classified processes assemble those already classified parts into a new classified  pr...

Cover designed by Jeffrey W. Bennett. NISPOM available at Red Bike Publishing Why is the CLASSIFIED BY: Line so important? Let’s put it in perspective. Someone is responsible for classification decisions and that person may be accountable for their actions. This is also the person who can provide insight into security violation investigations and etc. The impact; this is the person to go to for research into the classification as well as who is accountable for classification decisions good or bad. Let’s face it; someone has to answer for their decisions. That’s why developing a process for deriving classified information is so important. So, we know the requirements in the BY line, all we now need is a tool or process to identify how to identify source documents for derivative classification. First, what tool do we have available to research derivative classification? According to DoD Security Clearance and Contracts guidebook, the NISPOM addresses the requirement to accoun...

Change 1 to the National Industrial Security Program Operating Manual ( NISPOM ) outlines requirements for derivative classification. Where the original classification authority receives training on the same topics annually, NISPOM requires derivative classification once every two years. According to NISPOM derivative classifiers should be trained…in the proper application of the derivative classification principles, with an emphasis on avoiding over-classification, at least once every 2 years. .. not authorized to conduct derivative classification until they receive such training. Here’s the important part, no derivative classifier training , no work. Proper NISPOM training and documentation is the difference between performing on classified work and not being able to meet contractual requirements. Make sure your cleared contractors performing derivative classification responsibilities are trained to standard. The standard is listed below with a few ideas on how to meet each of the cr...

W hat has changed? According to NISPOM Change 1, the cleared defense contractor has the responsibility to provide training for cleared employees who make derivative classification decisions. Where   NISPOM   used to state that training is the FSO’s responsibility, Change 1 omits the FSO as the responsible party and identifies only the contractor entity. Mere oversight or purposeful instruction? This designation represents an important distinction. Now the FSO can strengthen their role in the enterprise and ship from administrator to leader. It is great opportunity for the FSO to shift the training responsibility from performance to oversight. Who should perform the training? At a technical level, the derivative classification training is best provided by the subject matter experts actually performing on   classified contracts , programs and projects. For example, an experienced FSO or designated trainer with a strong security background may be ...

NISPOM With Change 1 Available at www.RedBikePublishing.com Well, it’s here, just this side of six years after the release; Change 1 to the National Industrial Security Program Operating Manual. Over the recent three years there have been draft versions of NISPOM submitted, reviewed and resubmitted, but for the most part the NISPOM has remained unchanged. A testimony to an efficient product or policy? Could be. Too many higher level executive order and policy changes? Maybe. Though there has not been a major re-write or even revision, Change 1 does incorporate some important considerations, to include both domestic and international concerns. As programs and research efforts expand globally, Facility security officers (FSO) should know how to protect it in house and train cleared employees to do the same; this includes new markings and storage requirements. The major revision is in NISPOM Chapter 4, Classification Markings, Paragraph 1, Derivative Classification. Prima...