Industrial Security & You: The FSO & Physical Security

AJ's Consulting

* Industrial Security * Marketing * Training *

Industrial Security & You

The FSO & Physical Security

March 2009

Greetings!

Government/Industrial security professionals protect a variety of special categories of classified information in accordance with the National Industrial Security Program (NISP). (ASIS' Career Opportunities in Security).

Among many organizations, the FSO is responsible for other corporate roles like Human Resources, Accounting, Contracts, Administration, Facilities, and Project Manager in addition to Physical Security, Information Security, Personnel Security, and Information Systems Security.

In other facilities where the aspects of the above security roles have been spread out, the FSO or SSO work with staff in many departments -- including Information Technology, Human Resources, Contracts, Facilities, and Health and Safety.

As a team player, the FSOs and SSOs must have credibility and market themselves and their initiatives or policies to both management and other staff. Sometimes all it takes is management and staff understanding the whys and wherefores of the DoD Security Program -- i.e., The Defense Security Agreement (Form 441), DD-254s, contract sections H, G, and sometimes K, and Award Fees or possible loss of contracts.

This issue we will look at the physical security aspect of the FSO role.

Enjoy,

She's fabulous! I'm so thankful to have had this [JPAS] training. I would highly recommend her to anyone.
Jennifer Schulmeier

San Antonio, TX

Our Focus This Month

Beware the Ides of March

Prohibited Items & Physical Inspections

Updates & Reminders

JPAS Q & A

Training was great. The reference book provided has been a lifesaver.

Joseph Cole

Pepperell, MA

Beware the Ides of March

Ceasar was warned to "beware the Ides of March." Ceasar was betrayed by friends and acquaintances -- remember his "Et tu Brutus?" His betrayal and death occurred on the 15th of March on the steps of the Roman Senate.

Jesus Christ was betrayed in the Garden of Gethsemane by Judas Iscariot, one of his closest followers.

Both of the above and other similar stories have made it into our literature in various forms to inform us and our descendants that the greatest betrayal comes from within and usually from someone we believe holds our best interest as close as their own.

Insider betrayal is not new. We and our companies' employees are warned by the FBI and other government agencies to watch, report, and protect the following types of information:

National Security Information (also known as classified information)
Trade Secrets
Proprietary Information
Leading Edge Technology and Knowledge
Privacy Information

While a large part of our role as an FSO or CSO is to protect information and train our staff to protect information, sometimes it is a person or a select group of folks who need protection. Or maybe your facility requires additional physical security measures to better facilitate or maintain a higher facility clearance or storage capability.

Would you know where to start in determining what kind of physical security measures you need or might want to look into? Do you currently have measures in place to identify and protect your treasures from the insider who wishes to betray you?

Seek out other local FSOs and attend local ASIS or NCMS meetings so you can find a local expert in the physical security area or several who have faced the same questions and can assist you in developing a guide for your own needs.

Or you can call or email requesting a consultation from AJ's Consulting.

The [JPAS] class was outstanding - I really enjoyed the hands-on approach to the class. I would highly recommend this class and the instructor.

Kevin Cloud

Austin, TX

Prohibited Items & Physical Inspections

NISPOM 5-103. Perimeter Controls is where DoD Contractors authorized to store classified are instructed to "establish and maintain a system to deter and detect unauthorized introduction or removal of classified material without proper authority."

This same section is where we are also instructed to post, conspicuously, that all persons who enter will be subject to an inspection of their personal effects, "except where the possibility of access to classified material is remote." Of course subsection a indicates that inspections are to be limited to buildings or areas where classified work is being performed and that wallets, change purses, clothing, cosmetics and other objects of a person nature are not required.

So what items are we to look for?

Hidden Thumbdrives/Flashdrives
- in a lanyard?
- in a pen?
- in a watch?
Hidden audio and/or visual recorders
- in a pen?
- in a cell phone or other Bluetooth enabled device
- in a watch?
- a button or fashionable jewelry?
Diskettes/Digital Media
Papers or notes with classified, proprietary, or trade secret markings

The above does not rule out training your cleared personnel to be aware of their surroundings and to be careful not to discuss classified, proprietary or trade secrets within earshot of Foreign Nationals (whether they have been granted a Green Card or not), employees, or visitors who may or may not have a Need-To-Know.

Even if you are not responsible for safeguarding classified at your corporate or branch facility -- do you oversee staff who do have access to classified, proprietary, and/or trade secrets at another location like a client site? If so, your staff rely on you to train them as well as the local security folks. Why leave it to chance and suffer a breakdown in security when it is just as easy to include this in either your annual or a mini-refresher briefing and be able to document training received "Above & Beyond" NISPOM compliance?

Please call me (512-650-4819 or ajsconsulting@earthlink.net) for a list of resources including videos and posters to change up your traditional briefings. Or request a customizable briefing from me for only $75 and receive a DVD valued at $100.00.

One on One training is the bomb!!! Labtime was very informative and All questions plus ones that I was thinking of were answered clearly. Really enjoyed the whole process.
Linda Wilson
San Antonio, TX

Updates & Reminders

DSS Website Updates:

(3/9/09) DSS Academy announces release of the new Security Classification Guidance Course:
This 2-hour course provides Original Classification Authorities (OCAs) and derivative classifiers who have some requisite knowledge of the DoD Information Security Program with what they need to know about developing and using classification and declassification guidance. If you already have a functional knowledge of the DoD Information Security Program, the new course is for you. If, however, you lack this experience you should complete the Basic Information Security Independent Study Course, IF001.18, or comparable course of study prior to taking this course. Students can access and complete the new course at anytime by registering through the DSS Academy's ENROL system
(3/5/09) Industrial Security Letter 2009-01 available:
Industrial Security Letter 2009-01 offers information on establishing appropriate uniformity, consistency, and standardization of security safeguards for contractor information systems (IS) used to process classified information. ISL 2009-01 is available here.
(02/02/2009) Upcoming Personnel Security Investigation (PSI) Projection Survey
On March 31, 2009 DSS will deploy the Spring 2009 PSI Projection Survey to the FSOs of all active, cleared facilities. This Survey will collect PSI projections for FY10-FY12. A full notice with updates to the Survey can be seen here and content and screenshot examples can be viewed here . Questions pertaining to the Spring 2009 PSI Projection Survey can be directed to DSSPSISurvey2009@dss.mil
(2/4/2009) DSS Academy announces the release of the Need-To-Know video:
The DSS Academy announces the release of the Need-To-Know video. This video provides a short refresher on the fundamental need-to-know security principle. It reviews a case history and provides guidelines on your responsibilities for applying the principle. To see the video, click here.

JPAS Breaking News:

A JPAS Train the Trainer session will be held in Seal Beach, CA during the week of March 23rd. Two individuals from the Lone Star NCMS chapter will be among the attendees -- Ed Fitzgerald and Ann Martick.
The JSAC 2-day Seminar in Dallas, TX in April 15-16th will also include a JPAS training session.
The Desktop Resource Manual for JCAVS/JPAS has been updated -- check it out here.

I just wanted to let you know how much I appreciate the help you always give when I call with questions or the need for advice. You are a fabulous resource.
Diane Gallatin

Manchaca, TX

JPAS Q & A

Please feel free to email your questions or tips and techniques to ajsconsulting@earthlink.net.

Q. How Do I View an Individual's Visit Request History in JPAS?

A. Please use the following steps:

Login as User (Level X)

Select 'Select Person' from the menu on the Left

Enter the SSN of the individual in question

Select the 'Display abbrev. Person Summary with VISIT Info' radio button

Click the 'Display' button

You will be able to view all Visit Requests entered into JPAS for this individual -- even those by other SMOs.

Feel free to contact me (ajsconsulting@earthlink.net) for customizable briefings for initial and refresher briefings.

Tailored the training to the areas I needed and provided me with updated information. Awesome continuity book! Thanks for the class.
Erin O'Connor

Peterson AFB, CO

Thank you for reading my newsletter. If you know of someone who could benefit from the information shared, please pass it on. If you know of someone who could use my expertise please tell them about me and pass their contact information to me at ajsconsulting@earthlink.net so I may assist them.

What I do best is assist you with solutions to difficult industrial security challenges. How may I assist you today?

Sincerely,

Ann J. Martick, ISP
AJ's Consulting

What I Do Best

AJ's Consulting

17+ years experience in the Industrial Security arena.

On-Demand JPAS & e-QIP Support
On-Demand FSO Surrogate Support
Industrial Security Training
- JPAS & e-QIP Immersion
- JPAS & e-QIP Proficiency & Troubleshooting
- FSO/SSO Personnel Security Administration
- Webinars
  - Got JPAS Access - Now What?
  - NISPOM Compliance - Reporting Responsibilites
- Customized Briefing Packages
Marketing
- Internal Newsletters
- External Newsletters