SFPC Industrial Security Requirements 4

Question 1

A cleared U.S. subsidiary operates under a Special Security Agreement (SSA) because of foreign ownership. A new contract requires access to several types of classified information. For which one must the Government Contracting Activity get a National Interest Determination (NID) before the contractor can have access?

Accepted Answer

Restricted Data (RD)

Answer

Under an SSA, a contractor needs a National Interest Determination before it can access 'proscribed information': Top Secret, COMSEC (except Controlled Cryptographic Items), SCI, Special Access Program information and Restricted Data. Restricted Data is on that list. NOFORN marks a release restriction, not proscribed information. CCI is specifically carved out of the COMSEC category. Confidential-level FGI is not proscribed.

Question 2

A foreign investor owns 30% of a cleared company's voting stock. It does not effectively own or control the company, but its shares entitle it to a seat on the board. Which FOCI mitigation instrument fits this situation best?

Accepted Answer

Security Control Agreement (SCA)

Answer

A Security Control Agreement is used when the foreign interest does not effectively own or control the company but is entitled to representation on its board. A Board Resolution works only when the foreign interest has no right to board representation. Proxy and Voting Trust Agreements are the strongest measures. They are used when the foreign interest effectively owns or controls the company, and they transfer its voting rights to cleared U.S. trustees or proxy holders.

Question 3

The Cognizant Security Agency (CSA) has INVALIDATED a contractor's Facility Clearance (FCL), but has not terminated it. What does this mean for the contractor?

Accepted Answer

The contractor cannot receive new classified material while the FCL is invalid, but it must keep protecting the classified material it already holds

Answer

Invalidation is a temporary status, usually caused by changed conditions (for example, a FOCI change) that have not been resolved yet. While invalidated, the contractor cannot receive new classified material, and new classified work is held. It still has to safeguard the material it already holds until the CSA either reinstates or terminates the FCL. Returning or disposing of classified holdings and administratively handling employee eligibility are tied to termination, not invalidation.

Question 4

A contract that involved classified information has just ended. The contractor wants to keep some classified documents it generated for possible follow-on work. Under 32 CFR Part 117, what applies by default?

Accepted Answer

The contractor may keep the material for 2 years after the contract ends, unless the GCA says otherwise. Keeping it longer requires GCA retention authority.

Answer

The NISPOM lets a contractor keep classified material received or generated under a contract for 2 years after the contract is completed, as long as the GCA does not advise otherwise. Keeping it past 2 years requires retention authority from the GCA. Material the contractor generated itself is covered the same way, and the CSA does not grant retention authority. The GCA does.

Question 5

A cleared contractor sends a SECRET package to another cleared facility in the continental U.S. by USPS Priority Mail Express. Which action would make this transmission improper?

Accepted Answer

Completing the 'Waiver of Signature and Indemnity' block on the mailing label

Answer

USPS Priority Mail Express is an approved way to send SECRET material within the U.S. and its territories, but only if the 'Waiver of Signature and Indemnity' block is NOT completed. Completing it lets the carrier leave the package without a signature, which breaks the chain of custody. Using the facility's verified classified mailing address and double wrapping with markings only on the inner layer are both required. Confirming that someone can receive the package is a good practice, but skipping it does not by itself make the transmission improper.

SFPC - Security Fundamentals Professional Certification Practice Test

SFPC - Security Fundamentals Professional Certification Practice Test

SFPC Industrial Security Requirements 4