| Greetings!
Questions, answers, and resources -- Facility Security Officers (FSOs) of all levels of experience and expertise have these in common. This is why we gather together in local and national meetings, attend seminars, and workshops -- to obtain answers, learn more questions, and to gather more resources.
This month's newsletter is devoted to questions, answers, resources and hopefully will inspire some feedback for future topics of discussion.
Enjoy, |
Great facilities and instructor...Ann really was helpful and made the system easy to use. Very organized.
Kenneth Browning
Round Rock, TX |
Best money spent on consulting services in my career. Current Customer |
| Obtaining or Upgrading your Facility Clearance Level (FCL) |
 Have you been tasked with obtaining a Department of Defense (DOD) Facility Clearance Level (FCL) or with upgrading your current FCL?
First item you require is a contract where your client is either a government agency or a DoD Contractor with a FCL. As part of this contract you will receive a form called a DD-254. This form identifies your contract and the fact that your company must hold a FCL at a certain level in order to provide services or products to fulfill the obligations of your contract. The DD-254 also establishes other security needs and requirements you and your facility are expected to abide by.
Now you have a contract, a DD-254, and a Sponsor Letter -- a copy of the DD-254 and the Sponsor Letter is sent by your sponsor to the Facility Clearance Branch of DSS. Your second required item is to have a Commercial and Government Entity Code (CAGE Code), which can be obtained by visiting the Central Contractor Registration (CCR) website.
With the first two steps in progress, you can begin to prepare for your assigned Industrial Security Representative (IS Rep) to visit:
- Download and read the National Industrial Security Program Operating Manual (NISPOM) and the associated Industrial Security Letters from the DSS Website
- Gather together your organizational paperwork for review by the IS Rep (prepare a copy for him/her to keep on file)
- Specify Who the Key Management Personnel (KMP) are and if any will be excluded from having to obtain a clearance
- CEO/President
- Board Members
- Facility Security Officer (FSO)
- Prepare your KMPs to fill out the required electronic investigation paperwork in less than 30 days*
Fill out and sign the following forms
- DD Form 441 & 441-1 -- The Security Agreement and additional pages
- SF 328 -- The Certificate Pertaining to Foreign Interest (now must be completed via e-FOCI)
After your IS Rep's visit, I recommend you or your appointed FSO join the local NCMS Chapter and attend meetings. NCMS members are very familiar with the NISPOM and the various challenges your facility will soon be facing in the big world of DoD Contracting.
If you would like additional information regarding obtaining or upgrading your FCL or setting up your industrial security program, please do not hesitate to contact me.
*If your KMPs fail to complete and submit their investigation paperwork and fingerprints within 30 days the FCL process will stop and have to be restarted with another Sponsor Letter. |
|
Tailored the training to the areas I needed and provided me with updated Information. Awesome continuity book! Thanks for the great class!
Erin O'Connor
Peterson AFB, CO |
| Why We Care About Suspicious Contacts |
|

Have you noticed your staff are not sure what a Suspicious Contact is or how to report it? If this is the case or you have recently been chided by your IS Rep for a lack of suspicious contact reports, consider the following:
Suspicious contacts include, but are not limited to, any efforts to gain illegal or unauthorized access to classified information or to compromise a cleared employee. In addition, all contacts by cleared contractor employees with known or suspected intelligence officers from any country, or any contact which suggests that an employee may be the target of an attempted exploitation by the intelligence services of another country shall be reported to DSS, and to the FBI if actual, probable or possible espionage, sabotage, terrorism or subversive activities at any of its locations.
- Unsolicited and Direct requests for information:
- An unsolicited request for information is any request that was not sought or encouraged, for information from a known or unknown company, or from another country. The explosive growth of the Internet and abundance of free e-mail accounts has resulted in increased cases involving suspicious internet activity.
- A request for information dealing with your contracts, export controlled information or proprietary information.
Foreign Visits and Targeting: A suspicious contact can occur before, during, or after a visit.
- Last minute and unannounced persons added to the visiting party
- Wandering visitors who act offended when confronted
- Foreign entity attempts a commercial visit
- Visitors ask questions outside the scope of the approved visit (if they ask, report it, it doesn't matter if you did not give them any information)
- Visitors claim business-related interest but lack experience researching and developing technology
- Visitors ask to meet personnel from their own countries and attempt to establish continuing contact with them
Staff and Conferences:
- You receive an all expenses paid invitation to lecture in a foreign nation
- Entities want a summary of the requested presentation of brief 6-12 months prior to the lecture
- While in the foreign nation, you observe excessive or suspicious photography and filming of your technology and products
- Casual conversations during and after the event hinting at future contacts or relations
- Foreign attendees business cards do not match stated affiliations
Exploitation of Relationships. When working side by side, personnel sometimes get comfortable around foreign persons which can provide significant collection opportunities for foreign interests
Foreign Employment Offers or Resumes
It is our staff's responsibility to report any contact by foreign or unusual conctact by U.S. citizens to security. It then becomes our duty as FSOs to forward the information (name of contact, what was asked for/about, contact information of requestor, when/where/how approached, forwarded email header, etc.) to our IS Reps, the Counterintelligence Representive (CI Rep) in the local DSS Field Office, the FBI, and your client's security representative (especially if the client is a government agency). This information is collected, researched, followed up on and results in the identification of spies and/or identifying targeted technologies and information. We sometimes see the results in the news, but more often receive the Technology Collection Trends that DSS publishes and defensive briefings by our IS and CI reps on the threats to our companies.
Please do not hesitate to contact your local IS and CI reps for more information on how to identify and report suspicious contacts. The more we know, the more easily our information, technology, and warfighters are protected.

|
| She's fabulous! I'm so thankful to have had this training. I would highly recommend her to anyone.
Jennifer Schulmeier
San Antonio, TX |
| Require the Services of an FSO Surrogate? |
|

What kind of services do FSO Surrogates provide? Are FSO Surrogates an acceptable alternative to hiring additional security personnel? Must the FSO Surrogate be local or onsite?
DoD contractors are required to hire a U.S. Citizen employee for their Facility Security Officer (FSO) per NISPOM § 1-201. Many FSOs wear multiple hats and fill multiple roles. While an FSO Surrogate does not fulfill the FSO requirement in the NISPOM, one can assist the FSO with setting up a new security program, upgrading an existing program, perform research regarding specific security questions, or providing administrative support.
The kinds of services provided vary from FSO Surrogate vendor and are also dependent upon the needs of the hiring facility. Some examples of services provided are:
- Assisting with JPAS Record Maintenance and Validation
- Assisting with Initiating and Reviewing of e-QIPs
- Assisting with Visit Requests and Notifications
- Training or recommending training for security personnel
- Peer Reviewing of policies, procedures, and plans
- Providing on-site administrative support
An FSO Surrogate is usually a consultant or subcontractor and thus would only be able to have a User Account in JPAS. In the Procedures Governing the Use of JPAS by Cleared Contractors, item number five (5) allows for the subcontracting or obtaining of consultant support for administering security support via JPAS. With the downturn in the economy and the tightening of security budgets, it can be more economical to bring in FSO Surrogate support services rather than increasing security personnel.
Surrogate support can be provided either off-site (by phone and email) or on-site depending upon your needs. If you are considering obtaining FSO Surrogate support services, please contact me for a quote, references, and a list of FSO Surrogate vendors. |
One on One training is the bomb!!! :)
Lab time was very informative and All questions plus ones that I was thinking of were answered clearly. Really enjoyed the whole process.
Linda Wilson
San Antonio, TX | |
Thank you for reading my newsletter. If you know of someone who could benefit from the information shared, please pass it on. If you know of someone who could use my expertise please tell them about me and pass their contact information to me at ajsconsulting@earthlink.net so I may assist them.
What I do best is assist you with solutions to difficult industrial security challenges. How may I assist you today?
Sincerely,
Ann J. Martick, ISP AJ's Consulting
|
|
|
| What I Do Best |
 AJ's Consulting
18+ years experience in the Industrial Security arena.
-
On-Demand JPAS & e-QIP Support
-
On-Demand FSO Surrogate Support
-
Industrial Security Training
Customized Briefing Packages
Marketing
-
Internal Newsletters
-
External Newsletters
Call: (512) 650-4819 or email ajsconsulting@earthlink.net for a solution to your industrial security challenges. |
| Networking Opportunities |
Remember it is always who you know... |
Austin FSO Brown Bag
August 19, 2009
11:30-12:30
10000 Burnet Rd.
Austin, TX
|
 Lone Star Chapter 28
October 14, 2009
11:30-1:00
For More Information Contact:
|

On-Site & Local Training
FSO/SSO Personnel Security Administration (full day w/ lunch) $600.00/attendee
45-Minute Webinars ($75/Attendee -- a $99 Value)
NISPOM Compliance -- Reporting Responsibilities Request a Webinar
FSO Suggrogate Support Services
Contact me: ajsconsulting@earthlink.net or (512) 650-4819 |
| Ann Martick is an Industrial Security ace. Her professional credibility comes from her depth of experience and thorough knowledge of Industrial Security policies and procedures. Her expertise does not detract from her customer focus; this makes her an exceptionally effective consultant.
J. Graham King, CPP, PSP
Stationed in Iraq |
[Y]our class was the best thing this office could have done to get their security up and running.
Eugene Turner
Huntsville, AL |
| On-Demand Security |
Would you like to be able to request customized security briefings and newsletters on demand?
AJ's Consulting also does Briefings and Newsletters On-Demand. Save time and energy and let me do the research and compilations for your briefings, newsletter articles, and/or newsletters.
Call (512) 650-4819 today and find the format and topics that fit your needs best! | |
|