Security Executive Blog

Some NISPOM based questions that might augment your study for the ISP Certification exam. 1. In order to protect fragile intelligence resources and methods, SCI has been established as the SAP for: a. NSA b. GCA c. DNI d. CSA e. GSA 2. Interim TOP SECRET FCLs or PCLs are valid for access to COMSEC at the ____ and ____ levels. a. SECRET, TOP SECRET b. TOP SECRET, CONFIDENTIAL c. CONFIDENTIAL, FOUO d. SECRET, FOUO e. CONFIDENTIAL, SECRET 3. The COR establishes the COMSEC account and notifies the _____: a. CSA  b. GCA c. FSO d. NSA e. DIA 4. Contractors maintain TOP SECRET reproduction records for _____ years. a. Two years b. One year c. Five years d. Ten years e. None of the above Scroll Down for Answer ...

As we continue the series of articles on the self-inspection, we should understand that FSOs or designated inspecting officers may find themselves addressing “Elements of Inspection” that are common to ALL cleared companies participating in the NISP. Still, there are other topics that do not apply, but the opportunity to learn something new applies. There are a few more elements that might be applied at unique cleared facilities, but FSOs  in those situations can adapt these articles to those specific needs. As a recap, according to DSS’  The Self-Inspection Handbook for NISP Contractors, the five elements that pertain to ALL cleared defense contractors are: (A) Facility Security Clearance (FCL) (B) Access Authorizations (C) Security Education , (D) FOCI (E) Classification   Though not applicable to all cleared contractors, subcontracting is covered in NISPOM . This article will address the requirements of the subcontracting and how to set up both the pri...

What is A Standard Practice Procedure (SPP)? According to NISPOM,   Appendix C an SPP is a "document prepared by a contractor that implements the applicable requirements of this manual for the contractor's operations and involvement with classified information at the contractor's facility."  In other words it's your process for applying the NISPOM as you conduct classified work as it applies to your unique operation. The SPP should be tailored to your specific organization. To be effective, it should reflect performance requirements on classified contracts as reflected in the statement of work, DD Forms 254 and security classification guides. Who should have an SPP? NISPOM 1-202 states that, "The contractor shall implement all applicable terms of this Manual at each of its cleared facilities. Written procedures shall be prepared when the FSO believes them to be necessary for effective implementation of this Manual or when the CSA determines ...

Try your knowledge of the NISPOM and apply your experience as an industrial security professional with these challenging questions: 1. Recommendations for the downgrading of NATO classified information should be forwarded to: a. Originating activity b. CSA c. GSA d. CUSR e. FSCC 2. All of the following require accountability receipts EXCEPT: a. NATO SECRET b. NATO SECRET ATOMAL c. COSMIC TOP SECRET d. NATO CONFIDENTIAL e. NATO CONFIDENTIAL ATOMAL 3. Which form is used for registration of Scientific and Technical Information Services? a. DD Form 214 b. DD Form 254 c. DD Form 1540 d. DD Form 2345 e. DD Form 1234 4. An approved vault is constructed according to guidance in the NISPOM and approved by the: a. CSA b. GCA c. FSO d. ISSM e. GSA...

My new NCMS ISP Certification coin came in the mail. Another great reason for ISP Certification; thanks NCMS... Jeffrey W. Bennett, ISP is the owner of Red Bike Publishing Red Bike Publishing . He regularly consults, presents security training, and recommends export compliance and intellectual property protection countermeasures. He is an accomplished writer of non-fiction books, novels and periodicals. Jeff is an expert in security and has written many security books including: "Insider's Guide to Security Clearances" and " DoD Security Clearances and Contracts Guidebook ", " ISP Certification-The Industrial Security Professional Exam Manual ", and NISPOM/FSO Training".

As a recap from the last article, we can apply the “Elements of Inspection” that are common to ALL cleared companies participating in the NISP. There are a few more elements that might be applied at unique cleared facilities, but facility security officers in those situations can adapt these articles to those specific needs. According to DSS’ The Self-Inspection Handbook for NISP Contractors, the five elements that pertain to ALL cleared defense contractors are: (A) Facility Security Clearance (FCL) (B) Access Authorizations (C) Security Education, (D) FOCI (E) Classification Though not applicable to all cleared contractors, consultant agreements may apply to some. This article will address the requirements of the consultant agreement and how to basically treat consultants as part of the cleared contractor enterprise. According to the Defense Security Services (DSS) Facility Security Officer (FSO) Toolkit might look as follows (formatting and content can vary, but this is a templat...

*My article as published @ Clearancejobs.com http://news.clearancejobs.com/2014/03/28/justifying-clearance-need-know-may-become-new-norm/ Bradley Manning, Eric Snowden and Aaron Alexis. These are names of co-workers and fellow employees with security clearance who violated trust. After each incident reviews were established to discover: How did they get security clearances ? How, in the case of the spies, did classified information get taken? In the case of work place violence, how did such untrustworthy and threatening persons get security clearances? A Pentagon report released last week provided an independent review of the Navy Yard Shooting, and asked the critical question – are there currently too many individuals with access to classified information? CURRENT PRACTICE; DEFEND THE PERIMETER Proscribed security measures to protect classified information are in found in government agency security classification guides, policies, instructions and procedures. Where classified inf...