Security Executive Blog

Facility Security Officers (FSOs) wear many hats. Depending on the size of company and mission, they can be completely dedicated to security or serve as FSOs as one of many additional duties. Regardless of where their responsibilities lie, all FSOs should be very aware of NISPOM requirements . When it comes to training, FSOs should be able to effectively train cleared employees of these NISPOM and Contract Security Classification Specification (DD Form 254) requirements. Training requirements vary not only based on mission, but also depend on whether or not the facility is cleared as possessing or non-possessing. A possessing facility is authorized to store and work classified information in the cleared facility. A non-possessing facility cannot. Objectives of the FSO Program Management Course are to prepare the FSO to implement and direct a NISPOM based security program in their cleared contractor facility. DSS offers online courses to both possessing and non-possessing facilit...

Test your Knowledge with Problems From Chapter 6 DoD Security Clearance and Contracts Guidebook 1. As a document custodian, your responsibilities include receiving and inspecting documents for proper classification markings. You receive a properly wrapped classified document from a Government agency with the following characteristics:         • Contains UNCLASSIFIED, CONFIDENTIAL and SECRET information      • Created on June 21, 2007      • Reason for Classification is 1.4 (a)      • Contains 400 pages      • Classified by: Jon Wain, RBP, 1022 DDMA      • Classification guidance is found in the Gravy Security Classification Guide 1a. Based on the above description, what are the major areas you would expect to see classification markings? 1b. Write out the “By:” line describing who classified the material, reason for classification and the decla...

As a Facility Security Officer, you take the lead in creating a security program designed to protect classified information. You are at the cutting edge of your cleared contractor organization's capability of getting and keeping classified contracts. As such, you should also be the senior executive's right hand and have successfully established the required relationship to provide sage security council. Some topics relevant to your organization might be: Where are we heading? What type of classified storage might this require? What will be the cost and impact to the company? How is my security program poised to support current and new contracts? If a new or existing contract requires dedicated space to perform on and store classified information, a "Closed Area" may be required. A closed area is used to safeguard classified material of unusual "size, nature, or operational necessity, and cannot be adequately protected by the normal safeguards or stored during n...

Dear FSO, I was wondering if you could have your folks move my desk for me. The executive assistant recommended that I contact you since you are the "facilities officer".  ***** Move M. Emuch Dear Move, Chapter three of the NISPOM lists training requirements that all cleared employees must take. The FSO's challenge is to ensure that the cleared employees understand their requirements, understand the training, implement what they learned and of course sign the training record. When you invest in security training your employees will benefit. Required training topics include NISPOM requirements:   Threat Awareness Defensive Training (foreign travel briefing) Overview of the Security Classification System Employee Reporting Obligations and Requirements Security Procedures and Duties Applicable to the Employee’s Job Marking Classified Material Safeguarding Classified Material Control and Accountability Storage and equipment Transmission Origina...

Security in depth is a concept similar to peeling back the skin of an onion. Each layer you pull back reveals another layer. The more you peel back, the more layers remain. Eventually you wear it away, but it takes a while to get there. According to Defense Security Service DSS security training, "Security-in-depth is a concept that employs security measures in levels or steps."  This concept can be demonstrated in a walk through a virtual walk through a cleared facility. The cleared facility is approved to store secret information. As such, the only requirement is to keep the classified information in a General Services Administration GSA approved container or safe.  Let's begin at the security container. The container provides the deter and detect capability necessary to protect the secret information, documents or hardware. It is difficult, but not impossible to break the container open, but once you do, it will be difficult to hide the damage. Therefore, you'l...

Cleared contractors are required to brief their cleared employees every year. It’s easy when there is a Facility Security Officer (FSO) on site. However, companies consisting of one to a few hundred employees may have FSOs designated in addition to regular duties. COOs, engineers, CFOs, HR and other professionals don’t have time to create and execute training while performing on contract. That’s where Red Bike Publishing can help. An FSO can spend several hours designing training. At $35.00 per manager work hour, that could end up costing at least $150.00, not including the costs associated with brining the FSO off a contract. Our low cost, high value training package allows you to concentrate on your core competencies while we provide your required training. Our  NISPOM Training  contains requirements for the Annual Security Awareness and Initial Security Training. Just download our slides and lead the discussion, the notes are already filled out a...

A former engineer with Boeing Company has pleaded guilty to possessing classified information in an unauthorized location. Does anyone want to guess where? Yes, that’s right, his house. He thought he could take the information home with him and work on it there. You can read more about the information in the article Boeing Engineer is found guilty . While many security managers are focused on good training and may think that they have it in the bag, don’t rest just yet. Chances are that the involved engineer is not the only one breaking the rules of safeguarding classified material. Those who work on classified contracts need to be reminded again and again how to do so while following the laws of our country. Let’s break this case down. Engineer has access to computer processing. He then down loads the information to a data stick and brings it home with him. Though he probably meant no harm, his actions created tons of it and he will be punished for it. Chance...