Security Executive Blog

This article continues the series covering the Self-Inspection Handbook For NISP Contractors and guidance found in the National Industrial Security Program Operating Manual (NISPOM) Incorporating Change 2.  Contractors depend heavily on reproducing, printing, or otherwise providing hard copy documents as contract deliverables or work products. Printers, copiers, and fax machines now have memory storage and are more information systems by nature than just “copy machines”. The NISPOM has been updated to address how to use and categorize equipment with storage capability. Question: Does the equipment used for classified reproduction have any sort of memory capability? If yes, the equipment may require accreditation as an Information System (IS). Answer:   The concern is that unless a copier with storage capability is treated as an Information System classified information residing in the storage could be at risk if improperly disposed of. According to the Self...

Here are actual questions from the book  ISP Certification-The Industrial Security Professional Exam Manual . The questions here are all about NISPOM Chapter 8. G o ahead, test your knowledge: 80. Level of concern reflects the sensitivity of the information and  the consequences of the loss of confidentiality, availability, or  _____. a. Truth b. Equipment c. Integrity  d. Values e. Ethics 81. Who has responsibility for accrediting information systems  used to process classified information in industry? a. CSA  b. FSO c. ISSM d. ISSO e. Contractor 82. The CSA can grant interim approval to operate an IS for up to: a. 120 days b. 90 days c. 180 days d. 1 year e. 45 days 83. Systems operate at Protection Level 3 when: a. All users have required approvals for access to all information on system b. All users have required clearance, but at least one lacks need to know c. All users have required...