AJ's Banner

Industrial Security & You: To New Beginnings & New Chances to Succeed

Seasons Greetings & Happy Holidays --
 
Hopefully your celebrations were merry and bright and you are getting ready to celebrate and welcome the new year.
 
New years are like new beginnings - a chance to better ourselves and our security programs.  A chance to provide service that our companies and agencies can count on and come to see as more than just a block in the road or a negative nuisance.  And a look forward to the promised changes (some of which are already active): New Security Review Matrix, New NISPOM, required Electronic Fingerprints, and more JPAS changes.
 
Lest we forget where we have been, we must remember our history and how it relates to our future.  And we must not forget why we do what we do - Provide risk management and security for our nations secrets.
 
Remember Local Heros
JPAS Updates & Notices

Announcing

Access to JPAS after January 14, 2012 will require you to have a CAC card, a PIV card, or an ECA card or token that has already been registered and/or connected to your username and password.

 

Changes To Be Aware of:

  • Over 600 Key Management Personnel (KMPs) have not submitted their Periodic Reinvestigations (PRs) -- this could result in a loss of Facility Clearance for those facilities.
  • Fingerprint cards are now due within 14 Days of the Approved PSQ/Released PSI notice in JPAS (Policy)
    • Fingerprint cards are required for initial investigations
    • Fingerprint cards are also due for upgrade investigations
  • CAC cards have now been approved for use in accessing JPAS (Policy)

 

Remember:
  • Periodic Reinvestigations (PRs) are due:
    • 4.5 years after the Investigation Closed Date for S level Personnel Clearance Levels (PCLs)
    • 9.5 years after the Investigation Closed Date for TS level PCLs
    • When the government customer asks for a periodic reinvestigation.
    • Failure to submit a PR within the proper timeframe can result in JPAS indicating a 'Loss of Jurisdiction' for Eligibility.
  • When bringing someone into your PSM Net in JPAS:
    • If the person has had a break in service of over 24 months (2 years), they require a PR before being granted access.
    • Check to see the debrief date or date person was separated from the previous facility who granted them access
Interested in finding out more regarding JPAS?  Register now for the Got JPAS -- Now What? webinar, a JPAS & e-QIP training session: JPAS & e-QIP Immersion or JPAS & e-QIP Proficiency & Troubleshooting, or contact me for a On-Demand JPAS Support Services quote at ajsconsulting@earthlink.net.
Clean Up Your JPAS Personnel Report

by Charles Clendenen, ISP (Consultant@FSOCS.com)

 

The JPAS Personnel report no longer Conceptsproduces a nicely formatted Adobe .pdf document, because the report generation for large organizations was taking hours to complete (or so the story goes).  The report generator now produces a personnel report in .csv (comma separated values) format.  This is excellent in many ways, but it is also an annoyance if you just want a simple report to view.  Formatting the downloaded report can take several minutes, because the report includes many columns that you do not want (and the column headers are often too wide).  Throwing all of these away takes time.  What to do?

 

Let a macro do the heavy lifting for you.  Macros are like small computer programs that perform repetitive tasks for you.  They can be very powerful, but the upside is that you don't have to do any programming to create a macro.  In fact, you do not have to be very technically savvy to create and use a macro.  Modern software has simplified this process for you.  Provided below are instructions for cleaning up the Personnel report in Microsoft Excel. (I have tried creating the same macro in OpenOffice Calc, but it does not work for me.)  Creating this macro takes only a few seconds more than cleaning up the report one time, but the macro can be used over and over.

 

First, log into JPAS and generate the Personnel_by_Eligibility_and_Access.csv report and save it to your hard drive.  Then, open up Excel and follow the instructions below.  The instructions assume that you have already run a report at some time and cleaned it up before.  If you have not, you might want to step through that process a time or two before recording the macro.

 

Excel Instructions

 

These instructions are geared towards Excel 2007, but they should work for just about any version.

 

First, locate the Macro Recording function in your software.  In Excel 2007 it is found under the Developer tab.  No Developer tab on your Excel?  Then enable it.  Click the Office Button at upper left.  In the dialog box that opens up click on Excel Options (just to the left of Exit Excel at bottom right).  Check the box show Developer tab in the Ribbon, and then click OK.

 

Figure 1 JPAS PR Report

 

Open the Personnel_by_Eligiblity_and_Access.csv file you saved, and then click the Developer tab.  At upper left you will see a button labeled Record Macro.  Click it and name your macro PersClean (or Ralph, or whatever you like).

 

Figure 2 JPAS PR Report

 

Excel will now record every click and key stroke.  Click the Home tab, and start cleaning up your worksheet.  For example, I do not want Column A, SMO Relationship Indicator.  To get rid of it, click the A at the top to highlight the entire column, and then click the Delete button at upper right.  Poof!  That column is gone.  The next column is titled "Organization UIC".  That is too wide.  Shorten it to "Org" or "UIC".  I change " Formatted SSN" and "Formatted Name" to "SSN" and "Name" respectively.  As a column name, 'Eligibility" is too wide, so I change it to "Elig".  "Eligibility Date" becomes "Elig Date".  The dates in this column are also in an unusable format with a time stamp, so I click the F at the top to highlight the entire column, right-click inside the highlighted column and select Format Cells... from the context-sensitive menu that pops up.  I select Date from the list under the Numbers tab, and I choose the 3/14/01 format from the type at right to get the shortest version of the date.  Repeat your re-formatting effort for all columns.  Last, highlight all remaining columns and click the Format button to the right of Delete at upper right , and choose AutoFit Column Width.  Stop recording the Macro.

 

Figure 3 JPAS PR Report

 

Now, carefully (!) highlight the sheet and delete all contents.  You should have a blank spreadsheet.  Save As (not just Save!)  PersClean.xls or PersClean.xlsx as a macro-enabled Excel workbook.  You now have a spreadsheet with your very own macro embedded in it.  I would recommend that you now close Excel.  Make a backup copy of your macro when you have it just the way you want it.

 

The next time you get ready to download your report, open up Excel first.  IMPORTANT: Macros are very powerful, and bad people write macros to cause damage, so Excel will issue a Security Warning every time you open a spreadsheet with an embedded macro.  Your spreadsheet is, of course, harmless.  You created it yourself, so tell Excel to enable this content.  With Excel open and your macro enabled, you can download your Personnel report, run your macro, and in 1-2 seconds (and no additional effort), you will have a formatted report.

 

Charles Clendenen, ISP, is a member of the NCMS Lone Star Chapter and facilitates our Austin Area FSO Brown Bags.

 

Comments or feedback on this article?  Email ajsconsulting@earthlink.net.

Opportunity to Share

QuestionsIf you have always wanted to share your expertise on a security related topic and believe you can concisely state your points in a way that is understandable and enlightening to both newbie and experienced FSOs, please forward me your topic and a brief description of how you wish to address it and your article may be included in my next newsletter.

 

Have a suggested topic you would like to see addressed?  Email ajsconsulting@earthlink.net.

Working with Contracts & Human Resources

BudgetThe importance of working with your facility's Contracts and Human Resources departments must be understood by both you and management.  How do you train management, Contracts, and Human Resources to realize it is also in their best interest to work with you and your Security department?

 

You could start with outlining the contractual reporting requirements of a DoD Contractor and management --

  • Any Facility Changes including name, ownership, Key Management Personnel, address, foreign national influence (ownership, contracts, or loans), ability/no ability to safeguard classified information, loss of contracts, new contracts, and desire to no longer be a DoD Contractor must be reported to Defense Security Services (DSS) via the FSO as soon as the discussions begin:
    • Security Agreement between Facility & US Government -- DD Form 441 & DD Form 441-1
    • Certificate Pertaining to Foreign Ownership and Influence -- SF 328
    • NISPOM and Industrial Security Letters
    • Policy Memorandums published on the DSS website (www.dss.mil)

Secondly, you could point out how you and your security department being involved can assist in determining the actual costs of a contract during the proposal stage including areas that might be direct billable to the client if included in the original estimate.

  • Overhead Security Costs including compliance with the NISPOM and Industrial Security Letters --
    • Minimum staff required -- FSO, and/or ISSM/ISSO (if a classified information system is required)
    • Minimum time for security briefings --
      • Initial Security Briefing
      • Annual Security Briefing
      • Refresher Security Briefing due to policy violations
      • Specialty Briefings including NATO, COMSEC, CNWDI, RD/FRD, etc.
      • Contractor/Visitor Security Briefings
    • Minimum time for Other Security Duties
      • Administrative Paperwork
      • Liaisoning with Government Representatives
      • Required Training for FSO and/or ISSM/ISSOs
      • Maintaining JPAS Records
        • Cost of access to JPAS
        • Sending/Receiving and Vetting visitor via JPAS
        • Initiating & Reviewing e-QIPs
        • Debriefing & Removing Individuals from JPAS
      • Reviewing & Generating DD-254s
        • Received from Primes or Government Agencies
        • Sending DD-254s to Subcontractors
    • Minimum time to ensure other laws incorporated with the NISPOM are complied with including ITAR, EAR, Import/Export requirements, and the Privacy Act
  • Other Direct Costs are those costs that are contract specific and over-and-above compliance with the NISPOM and Industrial Security Letters
    • Can be found in just about any section of the contract
    • Can be found on the DD-254
    • Are usually project/contract specific
    • Might just be billable to the client

Being able to assist in determining estimated costs can save your company from over or under bidding, can possibly result in some of security's hours being direct billed versus remaining completely on overhead, and can assist in proper planning of the future including the appropriate reports to DSS on time rather than at the last minute. 

 

You might even be able to assist in obtaining award fees based upon how your security department assists in fulfilling of the contract.

 

Reducing unplanned costs and gaining insight in to how your security department can help pursue the mission of your company or agency should always be your goal.

 

Interested in learning more? Sign up now for one of JPWaller and Kenneth Sudol's Understanding NISPOM Requirements or Understanding the Personnel Security Program classes or my FSO Personnel Security Administration classesComments on this article are welcome.

 

 

Thank you for reading my newsletter and passing it on to others who may benefit. 
 

What I do best is assist you with solutions to challenging industrial security challenges.  How may I assist you today?

 

Regards,


Ann J. Martick, ISP
AJ's Consulting
 
In This Issue
JPAS Updates & Notices
Clean Up Your JPAS Personnel Report
Opportunity to Share
Working with Contracts & Human Resources
Newsletter Sponsors
Reports on Security Reviews
Quick Links 
  
~~~~~~~~~~~~~~
Ann Martick is an Industrial Security ace. Her professional credibility comes from her depth of experience and thorough knowledge of Industrial Security policies and procedures. Her expertise does not detract from her customer focus; this makes her an exceptionally effective consultant.
J. Graham King, CPP, PSP
Join Our Mailing List
Latest DSS Postings
 

Newsletter Sponsors

De-Mystifying Terrorism


Questioning Seminar

 

 

AJM_JPW_BC

 

 

JPW Security Solutions

Thank you...for the training, the information was timely as well as presented in an easy to understand professional manner. I enjoyed the pace as well as the instructor's styles and the one-on-one assistance that was given to all the trainees.
Nick Meyer
CTI Contracts Manager and AFSO
Articles of Interest
 

4 Types of Workplace Violence

 

5 Leadership Lessons from Tim Tebow's Game-Time Audio 

 

9 Things That Motivate Employees More Than Money 

 

2011's Biggest Security Snafus 

 

Bill Would Make TSA Screening of US Troops Faster 

 

Book Advises How to Protect Your Reputation Online 

 

Carrier IQ: A Privacy Tempest In Your Pants Pocket 

 

Chameleon Associates Blog: Questioning Success 

 

Coffee, Emails, and Smartphones

 

Congressman: Muslim Obama Advisor Leaked Secret Reports to Media 

 

Counterintelligence: A Quiet But Critical Mission 

 

Defense Bill Tackles WikiLeaks-style Insider Threats 

 

Digging into China's Nuclear Tunnels 

 

Diplomat in Miami Linked to Iran-Venezuela Cyber-terror Plot 

 

Do You Really Know Your Wi-Fi Network? 

 

Everyone Else Knows Your Credit Score 

 

Exclusive: CIA Spies Caught, Fear Execution in Middle East 

 

Exit of Apple's Security Chief Offers Lessons for Security Professionals 

 

Facebook is 'Building Shadow Profiles of Non-users', Says Complaint to Privacy Watchdog  

 

FBI to Launch Nationwide Facial Recognition Service

 

Feds Probing Possible Cyberattacks at Illinois, Texas Utilities 

 

Iranian Spy in US Military? 

 

IRS Found Vulnerable to Leaking Personal Info 

 

Master These Two Words to Advance Your Security Career 

 

Moscow Threatens Supply Line for US Troops 

 

Pearl Harbor at 70: A Survivor Remembers 

 

Real-Life "Minority Report" Program Gets a Try-Out 

 

TSA Screenings Aren't Just for Airports Anymore

 

Warning to Gossipy Grunts: DARPA's Eyeing Your e-Mails 

 

Your Facebook Comments, Coming Soon to a Google Search Near You

Join Our Mailing List
...Tailored the training to the areas I needed and provided me with updated Information. Awesome continuity book! Thanks for the great class!
Erin O'Connor
Peterson AFB, CO

Reports on Security Reviews

Smiley_Sheriff
Based upon reports received at the last Austin FSO Brown Bag, here are some tidbits to consider in preparing for your next Security Review:
  • DSS Headquarters now determines Facility Categories -- if your facility changes from a D to a C category, it can mean the difference between a Commendable and a Superior rating.
  • Suggestions for enhancements or adding points -
    • Hosting community security training
    • Sharing slides or writing newsletters with or for other security professionals
    • Bringing in a 3rd party to perform a 2nd Self Inspection
    • Setting up a call center for branch/division FSOs/security staff to call corporate FSO for assistance
    • Must prove that enhancement actually improved or enhanced your security program -- document by surveys or quizzes, etc.
  • Periodic Reinvestigations are due within the 9.5 years or 4.5 years of the previous investigation close date.
    • ~600 of the KMPs out of 1300 cleared facilities have not completed and submitted their Periodic Reinvestigations -- may soon result in invalidation of Facility Clearances
    • Failure to submit a Periodic Reinvestigation on time could result in an Eligibility Change of "Loss of Jurisdiction" 

Feel free to provide feedback -- do you like this type of article in this newsletter? Email ajsconsulting@earthlink.net.

All CTA should take this class. The instructor was great!! I love the manuals...I will keep it forever. I recommend this training.
Norfolk, VA