Security Executive Blog

Cleared Defense Contractors , employees, and government workers review classified information, but may not understand how or why the markings are applied. Sure, it's obvious that the markings do warn of the classification level and how to protect it, but the markings also show so much more. Classification markings are applied by the Original Classification Authority and provided for many reasons to include, warning of classification level, determining what is classified, the length of the classification duration, and who made the classification decision. Marking classified material is a method of warning and informing of classification level, the exact information to be protected, of downgrading and declassification instructions, reasons for classification and sources of classification, and special access, control or safeguarding requirements.  In classified documents, the classification level is applied to the front and back covers, top and bottom of pages, paragraph...

Cleared defense contractors provide the technology and know-how that delivers products and services to our defense industry. CDCs and be a prime contractor or subcontractor and are contracted to support government organizations. The designation of CDC indicates that the organization is a government contractor with a facility clearance and is made up of employees with personnel security clearances. With classified contracts, the CDCs are required to protect their government customer’s classified information while performing on classified contracts. The CDCs are part of the National Industrial Security Program (NISP). The National Industrial Security Program Operating Manual (NISPOM) provides guidance on how to perform on classified contracts. The guidance includes topics such as employee responsibilities, required training, continuous evaluation, maintaining security clearance, and much more. The Defense Counter-Intelligence and Security Agency (DCSA) formally known as DSS provid...

After years of fighting what he had assumed as bad practice, a Facility Security Officer (FSO) confidently confided that he now welcomes “piggy backing” as acceptable. Entering a protected facility while using the credentials of another employee also known as “piggy backing” is now being proven an efficient means of enterprise ingress. “With each employing needlessly scanning their badges, when someone else had already triggered the authorization at first seemed redundant.” said the FSO. “Now we know that there is so much more benefit. Now we see a realized cost savings involved as they now only trigger the device once, saving destructive wear and tear on locking and opening hardware. Also, holding the door open for multiple employees to enter simultaneously reduces the number of times the door is opened and closed, thus also creating cost savings for heating and air conditioning expenses”, he continued. The progressive cleared defense contractor began a month long pilot ...

Cleared Defense Contractors (CDC) should operate security programs designed to protect classified information from receipt to disposition. This article addresses the safe and secure destruction of classified information. The article is based on the Self Inspection Handbook for NISP Contractors , and uses the format to walk through the self-inspection criteria. We begin the topic question, the NISPOM reference, an explanation of requirements, and finally how to inspect compliance. Topic Question(s): Is retention authority requested as required? 5-701, 5-702 Is classified material destroyed as soon as possible after it has served its purpose? 5-704 Is an effective method of destruction employed that meets NISPOM standards? 5-705 Is classified material destroyed by appropriately cleared authorized personnel who fully understand their responsibilities? (may include appropriately cleared subcontractor personnel) 5-706 Is classified waste properly safeguarded until its t...

Try these NISPOM based questions and see how you do. You may find some answers in the NISPOM, but some you might just have to think about. 1. TOP SECRET information can be transmitted by which of the following methods within the U.S. and its territories? a. Defense Courier Service, if authorized by GCA b. A courier cleared at the SECRET level c. By electrical means over FSO approved secured communication devices d. By government vehicle e. By U.S. Postal Service Registered Mail 2. SECRET information can be transmitted by which of the following means? a. Registered mail b. Cleared commercial carrier c. As designated in writing by GCA d. Commercial company approved by CSA e. All the above 3. Contractors who designate cleared employees as couriers shall ensure all EXCEPT: a. They are briefed on responsibilities to safeguard classified information b. They p...

This article continues the topic of the Self-Inspection Handbook for Defense Contractors. The handbook is a tool provided by Defense Security Services for cleared defense contractors to improve security at cleared facilities throughout the National Industrial Security Program. Facility Security Officers at cleared facilities can use the tool to evaluate their own security programs, make improvements, and prepare for the annual security review. These articles are written to provide security awareness training and help the FSO interpret and apply the NISPOM requirements and evaluate their programs while using the manual as a checklist. This topic is Storage of TOP SECRET information.  The question: 5-302 Is TOP SECRET classified information stored only in GSA- approved security containers, approved vaults, or approved Closed Areas with supplemental controls? The NISPOM requires cleared contractors to maintain accountability and control of TOP SECRET information. Sin...

1.      In order to protect fragile intelligence resources and methods, SCI has been established as the SAP for: a.            NSA b.            GCA c.             DNI  d.            CSA e.             GSA 2.      Interim TOP SECRET FCLs or PCLs are valid for access to COMSEC at the ____ and ____ levels. a.            SECRET, TOP SECRET b.            TOP SECRET, CONFIDENTIAL c.             CONFIDENTIAL, FOUO d.          ...

As published by clearancejobs.com  http://news.clearancejobs.com/2013/04/04/an-elite-club-the-special-access-program/ A Special Access Program (SAP) is established to control access, distribution, and provide protection for sensitive classified information beyond that normally required. This is a high state of enforced need-to-know, and only a minimum number of cleared employees are given access to SAP information. For example, those with SAP access have clearances at the SECRET and TOP SECRET levels. Conversely, not all those cleared for SECRET and TOP SECRET have access to SAP information. An authority grants access to SAPs based on need-to-know and eligibility for SECRET, TOP SECRET or SCI security clearances. What makes SAP access unique is the need-to-know. To better understand the concept, consider school clubs. Schools provide opportunities for exceptional students to join any number of available clubs including running, robotics, chess, and debate. Though these clubs ar...