Security Executive Blog

When Facility Security Officers and security specialist build security programs, we tend to use tools to remind employees of their responsibilities. We use security training to get the information out, enforce clean desk policies and post reminders of classified information in progress. Each tool notifies the holder of classified information that they are in possession of classified information, to protect that information and properly dispose of it when they are done. They can also be used to protect proprietary data, intellectual property and personnel information. But sometimes even tools become mundane, no longer giving the impact they once did. Sometimes tools are misused, never giving the impact they were  originally  designed to give. Let's look at a few tools from a risk management perspective with some "out of the box suggestions. What unique ways can you employee traditional security methods. Security training- Cleared employees performing on classifi...

Olympic competition is just another step in the journey of a world class athlete. The competitors didn’t just wake up and perform spectacular feats; they incorporate winning performance into their daily rituals. They won a seat on the team because of conditioning, determination and dedication. If an athlete breaks records or fails to qualify, the success or failure isn’t the onetime performance. They didn’t just wake up as champions, they prepared. Leaders are successful for the same reason. Consider the following questions about leaders: What makes them successful? Why are ideas they present more contagious than mine? How are they able to influence major decision makers? Successful Facility Security Officers (FSO) and other security executives are no different. Just as a world class athlete performs to win; the FSO demonstrates world class security programs designed to protect classified information. These champions impact organizational policy, generate buy in at all levels...

 I could write the same old same old about government and National Industrial Security Operating Manual (NISPOM) requirements. However, such hammering would overshadow a great opportunity. Sure the NISPOM requires that cleared contractors perform self inspections sometime between Cognizant Security Office (CSO) reviews, but that is not the compelling reason or many of the supporting rewards for those who capture results of self inspections. The Defense Security Services (DSS, the CSO for the Department of Defense) will look for self inspection results during regularly scheduled security reviews. If you have a possessing cleared facility, then DSS will review annually. If non-possessing, then this review will occur every 18 Months. The NISPOM requires a self review be performed midway between CSO reviews. Now that we have the regulatory guidance out of the way, we can focus on the real reasons to perform the self reviews. The Facility Security Officer (FSO) tying security into the ...

Required forms for facility security clearances Aside from the SF 328, another required form for the facility security clearance process is the Department of Defense Security Agreement ( DD Form 441 ). The Cognizant Security Office (Defense Security Services (DSS) for the Department of Defense) will advise the contractor on how to fill out the forms and answer any questions the contractor may have. Department of Defense Security Agreement, DD Form 441 The DD Form 441 is a security agreement between the contractor and the DoD and documents responsibilities of both the cleared contractor and the government in the protection of classified information. For example, the contractor agrees to implement and enforce the security controls necessary to prevent unauthorized disclosure of classified material in accordance with the National Industrial Security Program Operating Manual ( NISPOM ). The contractor also agrees to verify that the subcontractor, customer, individual and any other ...

Facility Security Officers (FSO) may find themselves addressing many types of security incidents. How would you handle the following? 1.  You are an FSO of a growing defense contractor. One of the executives approaches you about the need for more space to conduct classified work. He is agreeable to implementing your recommendation to use a restricted area and would like you to prepare a security briefing for his team. Prior to your briefing, you conduct the necessary research. Describe the reason for a restricted area and when cleared employees would use a restricted area. Keep in mind access control and storage requirements. 2. You have just sat down to eat lunch and receive a phone call from a cleared employee. She tells you that the security container’s drawers are closed, but the dial on the combination lock has not been engaged. She explains further that according to the SF 702, the container had been locked and checked...

Leaders at all levels can promote a better security environment and professionalism. Whether full time employees devoted to protecting national security or a VP of contracting, leaders set goals for their employees. Part of those goals should help help understand how to create incredible security programs. Focusing on training, interaction with other cleared employees, self-improvement and institutional education should be part of professional development. Those who write security evaluations for direct reports create goals to challenge them to become better at their jobs, more impactful in their careers and hopefully, groomed to become leaders themselves. Challenging employees and team members to achieve personal and professional goals breeds success. The ISP Certificatio n is one goal FSO's could take as a goal as well as encourage other employees to achieve for several reasons. 1. The employee gains from such education and a prestigious career milestone. 2. The defense co...

Acronyms BL Bill of Lading CAGE Commercial and Government Entity CIA Central Intelligence Agency CM Configuration Management COMSEC Communications Security CSA Cognizant Security Agency CSO Cognizant Security Office DAA Designated Accrediting/Approving Authority DGR Designated Government Representative DNI Director of National Intelligence DoD Department of Defense DoE Department of Energy DSS Defense Security Service EAA Export Administration Act FBI Federal Bureau of Investigation FCL Facility (Security) Clearance FGI Foreign Government Information FOCI Foreign Ownership, Control or Influence FSO Facility Security Officer GCA Government Contracting Activity GSA General Services Administration IS Information System ISOO Information Security Oversight Office ISSM Information System Security Manager ISSO Information System Security Officer ITAR International Traffic in Arms Regulations LAA Limited Access Authorization MFO Multiple Facility Organization NACLC ...