Evidence & Trial Practice Flashcards

A cleared employee's arrest becomes known to the FSO. What action is required?

Answer: Report it as adverse information to the CSA

Adverse information on cleared employees must be reported, not adjudicated by the contractor.

Which is a reportable suspicious contact?

Answer: An unsolicited request for classified or sensitive information from an unknown foreign party

Efforts to obtain unauthorized access to classified or sensitive information are reportable.

Who must certify that a facility's required self-inspection has been conducted?

Answer: The senior management official

The senior management official certifies self-inspections and that they were shared with the ITPSO and key staff.

Which individual is responsible for the contractor's insider threat program under NISPOM?

Answer: The designated ITPSO

A cleared contractor designates a cleared insider threat program senior official (ITPSO).

After a preliminary inquiry finds a compromise, the FSO must typically:

Answer: Submit a final report with corrective action to the CSA

A formal report of findings and corrective actions follows when a compromise is confirmed.

Culpability in a security violation refers to:

Answer: Whether an individual's actions were negligent or willful

Culpability determinations assess individual responsibility for the violation.

Why should security incident documentation be retained and organized?

Answer: It supports inspections, trend analysis, and any later investigation

Well-kept records show due diligence and reveal recurring weaknesses.