Security Executive Blog

NISPOM With Change 1 Available at www.RedBikePublishing.com Well, it’s here, just this side of six years after the release; Change 1 to the National Industrial Security Program Operating Manual. Over the recent three years there have been draft versions of NISPOM submitted, reviewed and resubmitted, but for the most part the NISPOM has remained unchanged. A testimony to an efficient product or policy? Could be. Too many higher level executive order and policy changes? Maybe. Though there has not been a major re-write or even revision, Change 1 does incorporate some important considerations, to include both domestic and international concerns. As programs and research efforts expand globally, Facility security officers (FSO) should know how to protect it in house and train cleared employees to do the same; this includes new markings and storage requirements. The major revision is in NISPOM Chapter 4, Classification Markings, Paragraph 1, Derivative Classification. Prima...

When Facility Security Officers and security specialist build security programs, we tend to use tools to remind employees of their responsibilities. We use security training to get the information out, enforce clean desk policies and post reminders of classified information in progress. Each tool notifies the holder of classified information that they are in possession of classified information, to protect that information and properly dispose of it when they are done. They can also be used to protect proprietary data, intellectual property and personnel information. But sometimes even tools become mundane, no longer giving the impact they once did. Sometimes tools are misused, never giving the impact they were  originally  designed to give. Let's look at a few tools from a risk management perspective with some "out of the box suggestions. What unique ways can you employee traditional security methods. Security training- Cleared employees performing on classifi...

National Industrial Security Program (NISP) Enhancement Category 6 is: Classified Material Controls/Physical Security. DSS can quantify a cleared contractor’s ability to track classified information throughout its lifecycle, implement countermeasures to deny access to sensitive information, and provide accountability of all classified information through this process. The FSO’s ability to demonstrate such capability is impactful and can help DSS determine whether or not the cleared facility is going “above and beyond NISPOM requirements.  Below are three ways an FSO can demonstrate going above and beyond the NISPOM requirements: 1.  Track location and disposition of classified information-This can be done on the cheap or with a decent Information Management System (IMS) such as software provided by vendors like SIMSSoftware . The point is for the FSO to not only know what they know about classified information moving within and without of the cleared facility, but to also de...

Dear FSO, I was wondering if you could have your folks move my desk for me. The executive assistant recommended that I contact you since you are the "facilities officer".  ***** Move M. Emuch Dear Move, Chapter three of the NISPOM lists training requirements that all cleared employees must take. The FSO's challenge is to ensure that the cleared employees understand their requirements, understand the training, implement what they learned and of course sign the training record. When you invest in security training your employees will benefit. Required training topics include NISPOM requirements:   Threat Awareness Defensive Training (foreign travel briefing) Overview of the Security Classification System Employee Reporting Obligations and Requirements Security Procedures and Duties Applicable to the Employee’s Job Marking Classified Material Safeguarding Classified Material Control and Accountability Storage and equipment Transmission Origina...

From ISP Certification Exam Manual Sample Test Questions Before taking your ISP Certification Exam, why not test drive a few questions. You can find more at http://www.redbikepublishing.com 1. Which of the following are eligibility requirements for an FCL? a. The company must be an organization of at least 25 people b . The company must have potential for classified access c. The company must have a reputation for integrity d. The company must make its bottom line for three consecutive quarters e. The company is the only one who can perform the work 2. When can a contractor disclose classified information to another contractor? a. Furtherance of contract b. Furtherance of business development c. When directed by FSO d. When directed by CSA e. Just as long as other contractor is cleared 3. Unless restricted by GCA, SECRET material may be reproduced as follows EXCEPT: a. In performance of a prime contract b. In performance of subco...

The FSO designs a policy to maintain strict control over classified material. The NISPOM requires control of classified information at the TOP SECRET level. However, all material entering the facility, produced, reproduced or entering the facility in any fashion should be brought into possession for control, audit and inventory purposes. The NISPOM does address the cleared contractor responsibility of maintaining an information management system to protect and control classified information. This control and accountability facilitates visibility of the classified material and allows for preventative measures against unauthorized disclosure or identification of security violations. Once the material is received and the delivery inspected against the receipt, the FSO or security specialist can input the information into the information management system or in other words, a retrievable database. This database can be something as simple as logging the information into a notebook or...