SFPC - Security Fundamentals Professional Industrial Security Requirements Questions and Answers 1 — Questions and Answers
Question 1: A defense contractor needs to provide classification guidance to a subcontractor for a new classified project. Which document is specifically designed to convey these security requirements?
- DD Form 441, Security Agreement
- SF-328, Certificate Pertaining to Foreign Interests
- DD Form 254, Contract Security Classification Specification (Correct answer)
- A formal Memorandum of Understanding (MOU)
Correct answer: DD Form 254, Contract Security Classification Specification
The DD Form 254, Contract Security Classification Specification, is the official Department of Defense document used to convey security requirements and classification guidance for a classified contract to contractors and subcontractors.
Question 2: Which of the following BEST describes the primary role of the National Industrial Security Program (NISP)?
- To conduct background investigations for all federal employees.
- To serve as a single, integrated program for the protection of classified information shared with U.S. industry. (Correct answer)
- To exclusively manage the physical security of all Department of Defense facilities.
- To develop and publish all cybersecurity standards for the federal government.
Correct answer: To serve as a single, integrated program for the protection of classified information shared with U.S. industry.
The National Industrial Security Program (NISP), established by Executive Order 12829, is the single, integrated program that sets the standards for protecting classified information released to or generated by contractors, licensees, and grantees of the U.S. Government.
Question 3: A small tech company is bidding on a government contract that will require access to SECRET information. Before the company can be awarded the contract, the Defense Counterintelligence and Security Agency (DCSA) must grant what type of clearance?
- Personnel Security Clearance (PCL) for the CEO
- Facility Clearance (FCL) (Correct answer)
- Information Systems (IS) Accreditation
- Sensitive Compartmented Information (SCI) eligibility
Correct answer: Facility Clearance (FCL)
A Facility Clearance (FCL) is an administrative determination that a company is eligible for access to classified information at a specific level. It is a prerequisite for any company to perform on a classified contract.
Question 4: The governing regulation that provides the requirements, restrictions, and safeguards for contractors handling classified information under the NISP is known as the:
- Federal Acquisition Regulation (FAR)
- 32 CFR Part 117, the NISPOM Rule (Correct answer)
- Intelligence Community Directive (ICD) 705
- DoD Manual for Written Material (DoDM 5110.04-M-V1)
Correct answer: 32 CFR Part 117, the NISPOM Rule
32 CFR Part 117, also known as the National Industrial Security Program Operating Manual (NISPOM) Rule, is the primary regulation that outlines the standard procedures and requirements for all government contractors regarding the protection of classified information.
Question 5: Within a cleared facility, who is designated as the primary individual responsible for the day-to-day administration of the facility's security program in accordance with the NISPOM?
- The Senior Management Official (SMO)
- The Cognizant Security Agency (CSA) Representative
- The Insider Threat Program Senior Official (ITPSO)
- The Facility Security Officer (FSO) (Correct answer)
Correct answer: The Facility Security Officer (FSO)
The Facility Security Officer (FSO) is the Key Management Person (KMP) responsible for managing and administering the security program at a cleared facility, ensuring compliance with the NISPOM and all other security requirements.
Question 6: When a company is undergoing the Facility Clearance (FCL) process, the DCSA requires that certain company officials be processed for a Personnel Security Clearance (PCL) or be formally excluded from accessing classified information. What is the collective term for these individuals?
- Board of Directors
- Executive Leadership Team
- Key Management Personnel (KMP) (Correct answer)
- Cleared Employee Roster
Correct answer: Key Management Personnel (KMP)
Key Management Personnel (KMP) are the officials who have the authority and responsibility to direct the company's actions and policies. The DCSA requires specific KMPs, such as the FSO and Senior Management Official, to hold a PCL at the level of the FCL.
SFPC - Security Fundamentals Professional Industrial Security Requirements Questions and Answers 1
A defense contractor needs to provide classification guidance to a subcontractor for a new classified project.
Which document is specifically designed to convey these security requirements?