Security Executive Blog

Some defense contractors mistakenly assume that they can request a Facility Security Clearance (FCL) for business development purposes or to better position themselves future classified contract opportunities.  Though that is not how FCLs are awarded there is a process and methodology to justify the FCL.  The FCL justification is the trigger point for a Cognizant Security Agency like DSS to investigate a defense contractor for a security clearance. A well documented justification indicates that the contractor is or will be required to work on classified contracts .  The justification should include information regarding the nature of the classified work performance that requires the company to access classified information. Some examples are: 1.       A DD Form 254 – This lists exactly what a cleared company is expected to do and how they are to perform on the contract. It provides name of company, DSS covering organization, clearance ...

The Defense Industrial Security Clearance Office (DISCO) processes security clearances for organizations falling under the National Industrial Security Program ( NISP ). According to Executive Order 12968—Access to Classified Information, employees should not be granted access to classified information unless they possess a security clearance, have a need to know the classified information involved, received an initial security briefing and have signed a nondisclosure agreement. The Facility SecurityOfficer (FSO) is a position that the defense contractor must appoint during the Facility Clearance (FCL) approval process. The FSO implements a security program to protect classified in information. They also request investigations for employees who require a security clearance. What this means is, all cleared contractors must appoint an FSO. It could be the business owner in a small organization or an employee with an additional duty. The primary qualifications of an FSO are to be a US ...

Some would argue that self inspections are conducted ONLY at the midpoint between Defense Security Service (DSS) reviews. After all, that's the only requirement according to the National Industrial Security Program Operating Manual ( NISPOM ). For possessing cleared facilities, the midpoint is 6 months from the next annual review. For non possessing, then 9 months from the 18 month review. However, if you wait until the midpoint, then you might be missing a great opportunity to proactively assess the state of security within your cleared contractor facility. Facility security officers (FSO) can take the initiative to incorporate the security program into the organizations makeup. The following are Five valid reasons to conduct a self inspection: When a new FSO takes over-When I was in the army, we always held an inventory when someone on the hand receipt took over.   For example, when I took command, we walked through all the property to account for it being both on hand an...

Required forms for facility security clearances Aside from the SF 328, another required form for the facility security clearance process is the Department of Defense Security Agreement ( DD Form 441 ). The Cognizant Security Office (Defense Security Services (DSS) for the Department of Defense) will advise the contractor on how to fill out the forms and answer any questions the contractor may have. Department of Defense Security Agreement, DD Form 441 The DD Form 441 is a security agreement between the contractor and the DoD and documents responsibilities of both the cleared contractor and the government in the protection of classified information. For example, the contractor agrees to implement and enforce the security controls necessary to prevent unauthorized disclosure of classified material in accordance with the National Industrial Security Program Operating Manual ( NISPOM ). The contractor also agrees to verify that the subcontractor, customer, individual and any other ...

  The SF 328 is used by the contractor and the government to determine whether or not and to what extent the cleared contractor falls under Foreign Ownership Control and Influence (FOCI). The primary concern is always protecting classified information from unauthorized disclosure. As with determining the amount of control a company officer or board member has over classified contracts , the same holds true of foreign entitie s with which a company may become involved. In today’s changing world it is not unusual for a cleared company to be involved with international business. If classified contracts are under the control of a foreign entity, the classified information could be in jeopardy of unauthorized disclosure. If a contractor falls under FOCI, DSS will work with the GCA to evaluate the contractor’s ability to mitigate the extent of foreign influence concerning classified information and approve, deny or revoke the FCL. The SF 328 only has to be completed once unless cir...