ISP Security Policies & Legal Compliance 2

Question 1

Which federal law establishes the baseline requirements for protecting classified national security information in industry?

Accepted Answer

National Industrial Security Program Operating Manual (NISPOM)

Answer

The NISPOM (32 CFR Part 117) is the primary federal regulation governing the protection of classified information in the defense industrial base.

Question 2

Under NISPOM, what is the term for a company that has been granted authority to access classified information by the U.S. government?

Accepted Answer

Cleared Defense Contractor (CDC)

Answer

A Cleared Defense Contractor (CDC) is a company that holds a Facility Clearance (FCL) and is authorized to access classified information.

Question 3

Which executive order originally established the current framework for classifying, safeguarding, and declassifying national security information?

Accepted Answer

Executive Order 13526

Answer

Executive Order 13526, signed in 2009, is the current authority governing the classification system for national security information.

Question 4

A security policy states that all classified materials must be stored in GSA-approved containers. What type of policy requirement is this?

Accepted Answer

Mandatory control

Answer

GSA-approved container requirements are mandatory controls derived from federal regulation, not discretionary guidelines.

Question 5

Under the Privacy Act of 1974, what right do U.S. citizens have regarding federal agency records about them?

Accepted Answer

The right to access and request amendments to their records

Answer

The Privacy Act gives individuals the right to access federal records about themselves and request corrections to inaccurate information.

(ISP) Industrial Security Professional Certification Practice Test