Security Program Management & Responsibilities Flashcards

Under the NISPOM insider threat requirements, when must cleared employees receive insider threat awareness training?

Answer: Before access to classified information, and annually thereafter

Initial training precedes access and refresher training occurs annually.

What must the Insider Threat Program Senior Official (ITPSO) be?

Answer: A cleared U.S. citizen employee who is a KMP

The ITPSO must be a cleared employee designated as KMP and is responsible for the program.

How should a contractor document its insider threat program?

Answer: Maintain a written program plan and self-certify its implementation to the CSA

A written plan is required and implementation must be self-certified to the CSA.

A subcontractor will need access to classified information. What must the prime contractor verify first?

Answer: That the subcontractor holds an appropriate facility clearance

The prime must confirm the subcontractor's FCL before releasing classified information.

Which of the following must employees report under security executive agent requirements for cleared personnel?

Answer: Foreign travel and certain foreign contacts

Cleared personnel must report foreign travel and relevant foreign contacts under SEAD 3.

An FSO discovers that classified information may have been lost. What is the first required action?

Answer: Immediately report to the CSA and begin a preliminary inquiry

Loss, compromise, or suspected compromise requires immediate reporting and an inquiry.

Which statement about the FSO's access to the company's senior leadership is correct?

Answer: The SMO must ensure the FSO has authority and resources to carry out the security program

Management must support and empower the FSO to run the security program.