Security Executive Blog

I’ve been asked the question several times and the answer I usual provide is: “it depends.” Many job announcements in the industrial security / security specialist / facility security officer (FSO) career field list the duties to be performed, and then jumps into qualifications. The job descriptions center on working within a security program designed to protect classified information at a department of defense or other department or agency and their supporting contractor location. The qualifications usually require a minimum of a predetermined number of years’ performing security tasks and a four year degree. Most of the time the four year degree can be substituted for demonstrated experience. Rarely if ever is demonstrated job performance able to be substituted. So, in this scenario, I would answer that the certification weighs heavier than the college degree. As an example, let’s look at an applicant for a new FSO position. She is a veteran who had received an honor...

With proper preparation, you can pass this test. If you are serious about advancing in your field, get ISP certified. Some are reluctant to take the test, but they just need the confidence earned through practice. Here's a way to get 440 practice questions. First, to meet minimum test requirements an applicant should have five years experience working in the  NISPOM  environment. If that’s you, then you are a technical expert and know the business of protecting classified information. Second, study this book to practice, practice, and practice. It can help you prepare for the test. Using practice tests to augment your ISP exam preparation will help. This book is the only one featuring four complete test length practice exams available for the ISP Certification. It teaches insightful study tips designed to show you how to: form study groups, network, seek out opportunities, learn your way around the NISPOM and includes four exam length practice tests. According to reader...

Have you ever found yourself trying to quickly find Defense Security Service (DSS) interpretation of NISPOM guidance? Mining this information has been difficult, but no longer. DSS has just added a tool to their website that covers industrial security letters. This tool takes the guesswork out of how many ISLs exists, NISPOM reference, ISL subject, status and a hyperlink to the actual ISL. Now you can easily pull up the table crosswalk your copy of the NISPOM to the applicable ISL. Here's the link:  http://www.dss.mil/isp/fac_clear/download_nispom.html Jeffrey W. Bennett, ISP is the owner of Red Bike Publishing Red Bike Publishing . He regularly consults, presents security training, and recommends export compliance and intellectual property protection countermeasures. He is an accomplished writer of non-fiction books, novels and periodicals. Jeff is an expert in security and has written many security books including: "Insider's Guide to Security Clearances" an...

NISPOM Derivative Classification Training While some cleared defense contractors perform non-technical services, other cleared contractors conduct derivative classification in the performance of their contracts. Derivative classification in general terms includes, paraphrasing, incorporating, restating or regenerating classified information into a new form. Since contractors are not performing original classification, most of their work would involve using classified sources to create new classified products. Here's the important part, no training; no work. Properly executed National Industrial Security Program Operating Manual ( NISPOM ) training and documentation is the difference between performing on classified work and not being able to meet contractual requirements. Cleared contractors must plan to train cleared contractor employees who perform derivative classification responsibilities. The NISPOM outlines requirements for derivative classification training. Wh...

1.      In the Protection Profile Table for Confidentiality, which Data Transmission is required for PL1? a.            Trans 1  b.            Trans 2 c.             Trans 3, 4 d.            Trans 5 e.             Trans 6 2.      Which entity is required to review and revise Contract Security Classification Specification when change occurs? a.            CSO b.            GCA  c.             CSA d.            FSO e...

The unofficial ITAR has been updated. The three affected parts are: Part 120, Part 123 and Part 126. Some of the changes include paragraphs that were formerly categorized as "reserved". The changes equal 20 additional pages to a 5 x 6 book publication of the ITAR. That's pretty significant. In fact Part 126.16 is such a paragraph formerly marked as "reserved" and now is filled with 5500 words of text. Let's take a look at the exemption to the Defense Trade Cooperation Treaty between the United States and Australia. This paragraph defines transfer, export, retransfer, reexport, Australian Community, United States Community and other relevant terms. It also explains which exports qualify for licensing exemptions. Though the information addresses transfer of export controlled items between the US and Australia, this article is written to  provide a rule of thumb in handling all cases of export controlled information, articles and services. Paragrap...

NISOM The Standard Form (SF) 312 is revised In July 2013 the SF 312, Classified Information Nondisclosure Agreement, was updated to reflect language from the 2011 Public Law 112-74, Financial Services and General Government Appropriations Act and 2012 Public Law 112-199, Whistle blower Protection Enhancement Act (WPEA). The WPEA (law) lays out protection in place for those employees who report instances of fraud, waste and abuse and the language is being added to many forms include non-disclosure agreement. Cleared employees are required to report adverse information concerning themselves and other cleared employees. This adverse information is anything that would question a person’s loyalty and ability to protect classified material. Additionally, cleared employees should report any information concerning changes in protective measures at a cleared facility that would indicate classified information would not be adequately protected as originally intended. So, why is ...