Question 1

What is the primary purpose of the National Industrial Security Program (NISP)?

Accepted Answer

The NISP ensures that cleared industry safeguards classified information in its possession. [Source: CDSE — Introduction to Industrial Security (IS011.16) Student Guide — "The National Industrial Security Program, or NISP, is a Government-Industry partnership established in 1993 by Executive Order 12829. The NISP ensures that cleared industry safeguards classified information in its possession." https://www.cdse.edu/Portals/124/Documents/student-guides/IS011-guide.pdf]

Question 2

What is the role of the NISP Operating Manual (NISPOM)?

Accepted Answer

The NISPOM defines the requirements, restrictions, and safeguards that industry must follow. [Source: CDSE — Introduction to Industrial Security (IS011.16) Student Guide — "The 32 Code of Federal Regulation (or CFR) Part 117, more commonly referred to as the National Industrial Security Program Operating Manual, or NISPOM, defines the requirements, restrictions, and safeguards that industry must follow." https://www.cdse.edu/Portals/124/Documents/student-guides/IS011-guide.pdf]

Question 3

Who are Cognizant Security Agencies (CSAs) and what is their function?

Accepted Answer

CSAs are agencies authorized to establish industrial security programs and oversee security requirements. [Source: CDSE — Introduction to Industrial Security (IS011.16) Student Guide — "CSAs are those agencies authorized by Executive Order 12829 to establish industrial security programs and oversee and administer security requirements." https://www.cdse.edu/Portals/124/Documents/student-guides/IS011-guide.pdf]

Question 4

What is the responsibility of the Defense Counterintelligence and Security Agency (DCSA) in the NISP?

Accepted Answer

DCSA administers the NISP; provides security guidance, oversight, and policy clarifications; and conducts periodic security reviews. [Source: CDSE — Introduction to Industrial Security (IS011.16) Student Guide — "As the CSO, DCSA administers the NISP; provides security guidance, oversight, and policy clarifications; and conducts periodic security reviews to ensure adherence to the NISPOM and contract guidelines." https://www.cdse.edu/Portals/124/Documents/student-guides/IS011-guide.pdf]

Question 5

What is the main responsibility of the Facility Security Officer (FSO)?

Accepted Answer

The FSO has ultimate responsibility for the administration, oversight, and day-to-day operation of the contractor security program. [Source: CDSE — Introduction to Industrial Security (IS011.16) Student Guide — "The FSO has ultimate responsibility for the administration, oversight, and day-to-day operation of the contractor security program." https://www.cdse.edu/Portals/124/Documents/student-guides/IS011-guide.pdf]

Question 6

What does the Information System Security Professional/Security Control Assessor (ISSP/SCA) do?

Accepted Answer

ISSP/SCAs work closely with IS Reps and contractor personnel on all matters related to the authorization and maintenance of authorized contractor classified ISs. [Source: CDSE — Introduction to Industrial Security (IS011.16) Student Guide — "ISSPs/SCAs work closely with IS Reps and contractor personnel on all matters related to the authorization and maintenance of authorized contractor classified ISs." https://www.cdse.edu/Portals/124/Documents/student-guides/IS011-guide.pdf]

Question 7

What is the role of the Counterintelligence Special Agent (CISA) in the NISP?

Accepted Answer

CISAs provide advice, oversight, and training regarding counterintelligence issues and work with contractors to identify potential threats. [Source: CDSE — Introduction to Industrial Security (IS011.16) Student Guide — "CISAs provide advice, oversight, and training regarding counterintelligence issues and work with contractors to identify potential threats to U.S. technology, including insider threats." https://www.cdse.edu/Portals/124/Documents/student-guides/IS011-guide.pdf]

Question 8

What is required for a contractor to access classified information under the NISP?

Accepted Answer

Contractors must implement the applicable NISPOM requirements needed to protect classified information. [Source: CDSE — Introduction to Industrial Security (IS011.16) Student Guide — "Based on their classified involvement in the NISP, industry has one major responsibility: they must implement the applicable NISPOM requirements needed to protect classified information." https://www.cdse.edu/Portals/124/Documents/student-guides/IS011-guide.pdf]

Question 9

What must contracts involving classified information specify according to the NISP?

Accepted Answer

Contracts must identify the security requirements and how the contractor will be reimbursed for associated costs. [Source: CDSE — Introduction to Industrial Security (IS011.16) Student Guide — "For both classified information and CUI, contracts must identify the security requirements and how the contractor will be reimbursed for associated costs." https://www.cdse.edu/Portals/124/Documents/student-guides/IS011-guide.pdf]

Question 10

How does the NISP ensure that security can be implemented uniformly across contractors?

Accepted Answer

The NISPOM provides guidance that is general enough to be customized for each contractor's situation and needs. [Source: CDSE — Introduction to Industrial Security (IS011.16) Student Guide — "The NISPOM provides guidance so that security can be implemented uniformly across a wide range of contractors, but it is also general enough that it may be customized for each contractor's situation and needs." https://www.cdse.edu/Portals/124/Documents/student-guides/IS011-guide.pdf]

introduction to industrial security

Know questions we're missing?

Study these as flashcards