Posts

Keeping the knowledge of security container combinations to a minimum.

Image
In this weeks article continuing the coverage of the Defense Security Service (DSS) Self Inspection Handbook for NISP Contractors, we'll review the National Industrial Security Program Operating Manual (NISPOM) , Paragraph 5-308. 5-308 Is the number of people possessing knowledge of the combinations to security containers kept to a minimum? Not every employee needs the combination to the security container. The combinations should be provided to those with the proper clearance and need to know. This is the maximum number of individuals who should have it, but a minimum standard as far as combination accountability. After all, the security container combination is classified at the same level as the highest level of information stored in the container.  Clearance and need to know of the contents aside, maintaining control of combinations should include keeping access to the security container at a minimum amount necessary to manage good information security. For ex...

NISPOM Based Questions

Image
Try these NISPOM based questions and see how you do. You may find some answers in the NISPOM, but some you might just have to think about. 1. TOP SECRET information can be transmitted by which of the following methods within the U.S. and its territories? a. Defense Courier Service, if authorized by GCA b. A courier cleared at the SECRET level c. By electrical means over FSO approved secured communication devices d. By government vehicle e. By U.S. Postal Service Registered Mail 2. SECRET information can be transmitted by which of the following means? a. Registered mail b. Cleared commercial carrier c. As designated in writing by GCA d. Commercial company approved by CSA e. All the above 3. Contractors who designate cleared employees as couriers shall ensure all EXCEPT: a. They are briefed on responsibilities to safeguard classified information b. They p...

Unclassified Controlled Technical Information

Image
What to protect; decisions, decisions. It seems that there are acronyms developed with the ingenuity and fluidity of American innovation. The same innovation that enhances our military capability also comes with a set of warnings and new titles and acronyms that demand increased attention. While new acronyms and technology protections are identified, reliance continues on fundamental protection measures that rarely change. More and more evident is the growing volume of U.S. defense information categories that demand protection and are not necessarily classified. If not identified and protected, unclassified U.S. defense information could be accessed by unauthorized persons. Unclassified defense information comes in many forms and acronyms includes military critical technology, proprietary information, intellectual property, company secrets, Export Administration Regulation (EAR), International Traffic in Arms Regulation (ITAR) controlled technology, controlled unclassified informat...

Approval of Open Storage-The Self Inspection Handbook for NISP Contractors

Image
HTTP://www.redbikepublishing.com In this installation of the Defense Security Service (DSS) Self Inspection Handbook for NISP Contractors, we’ll review the  National Industrial Security Program Operating Manual ( NISPOM ), Paragraph 5-306b. Here is the question:                                                     5-306b       Has DSS approval been granted for the open shelf or bin storage commonly known as “open storage” of documents in Closed Areas? Though we have covered the storage of classified information in earlier articles, this writing will address storage of classified information specific to these closed areas. See if you can find the differences. According to ...

NISP Self Inspection Handbook-Closed Area Construction

Image
Welcome to National Industrial Security Program Operation Manual ( NISPOM ) 5-306 portion of the Defense Security Service’s (DSS) Self Inspection Handbook for NISP Contractors. This section covers closed area construction as identified in the NISPOM.  Here is the question:                                             5-306 Are Closed Areas constructed in accordance with the requirements of the NISPOM? Where the size or operational environment of the classified material may prove unsuitable for storage in a GSA approved security container or vault, a closed area might be the right solution. If a closed area is needed, DSS and the contactor should agree to the construction of the closed area as early as possible in the contract or a qualifying an existing as soo...

Will the fallout of the Ashley Madison hacking cause a security clearance backlash?

Image
There it is, all the names of the men and women who registered to have   "Discrete Affair". Harmless right? At first it might seem so, that is until the threat of blackmail and the secret is out. The invitations to register are enticing, and the promise of a secret affair with other like-minded  adults make the offer seem like an appealing proposal. That is until a group hacked the company and exposed the data base for the world to see.  What was once a hi-brow hook up is now touted as a wall of shame. Suddenly high profile people are now humiliated, losing jobs, credibility, and some have committed suicide. The likes of Josh Duggar and even the Ashley Madison CEO are losing what they have worked so hard to build up. Josh lost his legacy and the business world lost confidence in a company's leader who promised discretion. The cloak that once hid the appealing invitation to participate in the exclusive playground has been removed, exposing it for what it really ...