Security Executive Blog

As a security manager in a National Industrial Security Program organization, you’ll get a lot of interesting questions. You should be prepared to answer them with confidence and ease. Many you’ll have to look up because they will probably come from outer field. However, there are some very popular questions asked many times over. Here are some of those questions: Where does classified information come from? The US Government created a system to classified and protect sensitive information In the National Industrial Security Program, classified information is marked CONFIDENTIAL, SECRET and TOP SECRET. TOP SECRET has more restrictions than SECRET and SECRET has more than CONFIDENTIAL. So, who determines the classification levels? Executive order 12958, As Amended provides instruction for appointment of trained government Original Classification Authorities (OCA). The OCAs evaluate programs and associated information, equipment, services and etc to determine whether or not they are c...

So, which companies will win the Cogswell Award this year? FSOs who take the time to develop a world class program designed to protect classified information are very deserving of the award. Here are four proven steps to help you demonstrate that your organization is going “above and beyond” NISPOM requirements: 1. Set security goals that everyone understands. These goals help create the organization-wide security culture that everyone can live with. 2.   Conduct institutional training that support these goals. Ensure the training encourages your employees to report any and all security violations, suspicious contacts, and foreign travel, which will further enhance those efforts. 3. Goals should be tracked and institutional training and expectations should be conducted   in preparation for the annual security inspection. Do this by implementing a daily security management process, which includes physical security, visitor control, and security education throughout the ye...

Training is increasingly important as those working in the National Industrial Security Program (NISP) employ security measures at cleared contractor facilities under the National Industrial Security Program Operating Manual ( NISPOM ). Challenges emerge as new technology provides increasing levels of difficulty while protecting classified information. The facility security officer (FSO) should foster an environment where training is encouraged and expected. Developing such relationships with cleared employees create an environment of cooperation. This environment facilitates the recruitment of all employees to protect national security. Those working in the enterprise can be the eyes, ears and muscle, acting as force multipliers, and extending the effectiveness of the security department. FSOs should conduct initial and refresher training and file reports as required by the NISPOM. Instead of conducting NISPOM training with compliance as the end goal, the training can be performed ...

Annual DSS Reviews as Metrics Inspections are typically conducted every 12 months for possessing and 18 months for non possessing facilities, but circumstances can require more or less frequent visits. DSS inspects the facility’s security program for the primary purposes of ensuring their programs provide the proper protection of classified information they are charged with protecting. Additionally, the inspection programs are designed to improve the effectiveness of the contractor’s security program. At the conclusion of the inspections, the contractor is given a rating ranging from unsatisfactory to superior:      • Unsatisfactory-indicates that the contractor has lost or is in the process of losing their ability to protect classified material.      • Marginal-indicates that a contractor is not meeting the requirements of NISPOM and has a substandard security program.      • Satisfactory-the m...

How do effective FSOs and security managers develop a culture of compliance with regulations and security programs? Quoting regulations only exasperates cleared employees and the very act does little to foster a climate of cooperation. However, developing relationships based on a good understanding of business, the company mission and influence goes a long way toward implement the successful security program. 1. FSO influences corporate culture-Security of classified information should be part of the organization's DNA. Instead of stove piping security functions, they should tie into the corporate mission. Though each office has a different product, funding or budget item, each fulfills their obligation in a chain of responsibilities necessary to get the product to market. When a business unit breaks down or fails to fulfill its mission, other business units are affected. 2. FSO performs a vital mission of protecting classified informa...

How do effective FSOs and security managers develop a culture of compliance with regulations and security programs? Quoting regulations only exasperates cleared employees and the very act does little to foster a climate of cooperation. However, developing relationships based on a good understanding of business, the company mission and influence goes a long way toward implement the successful security program. 1. FSO influences corporate culture-Security of classified information should be part of the organization's DNA. Instead of stove piping security functions, they should tie into the corporate mission. Though each office has a different product, funding or budget item, each fulfills their obligation in a chain of responsibilities necessary to get the product to market. When a business unit breaks down or fails to fulfill its mission, other business units are affected. 2. FSO performs a vital mission of protecting classified informa...

Classification markings are applied to the top and bottom, front and back of classified items. Markings are also found in internal pages, paragraphs and other locations inside documents, books, manuals and other paper based products. Here are the top reasons for marking classified information: Warn and inform a user that an item is indeed classified or sensitive Conveys what exactly needs protection  Identifies levels of classification or sensitivity Provides vital information and instruction on when to downgrade or declassify the material Gives sources and reason for classifying the item Warns of special access, control, dissemination or safeguarding requirements Find out more in DoD Security and Contracts Guidebook -What You Need to Know About Your Need to Know Jeffrey W. Bennett, ISP is the owner of Red Bike Publishing Red Bike Publishing . Jeff is an accomplished writer of non-fiction books, novels and periodicals. He also owns Red...