|
Every day, thousands of people are fighting against layoffs. Those who continue to work are those who have figured out how to add value to their companies. Speaking the language of business, learning how to conduct risk assessment and recommending security issues are all marks of someone who adds value to their companies. You've spent a lot of time, effort and training to be in the position you are in today. You probably spent personal time taking courses, college and attending professional seminars. You are learning and growing, and working hard to implement successful security programs in your companies. Along the way -- without even knowing it -- you created something else, too: Valuable relationships with business units, engineers, contracts managers and other departments. The relationships don't necessarily show up in your budget items, risk assessment plans or your policies. You work hard to forge relationships and get full commitment to your security program, hand out training incentives, put up posters...and on...and on. Well, today, I'm here to help you become more influential in your field and create successful security programs. I'm here to introduce you to proven methods to become more influential at work, no matter what your career or position. Be confident, support national security plans and create relationships that facilitate top down emphasis on security programs. I’ll show you what I have learned through my risk management experience, compliance training and MBA program. Employing these methods is simple and without much effort. This comprehensive and thought-provoking Security Expert Newsletter and eTraining Program is where we'll start. I’ll provide monthly newsletter and bi-weekly Blog input as well as questions and answers based on NISPOM, executive orders and federal regulations. Your knowledge will increase and your confidence will show. A side benefit is preparation for the ISP Certification exam. The ISP Certification is vital to career longevity and influence. You'll also discover more of what I'm about. That is, you'll know without a doubt when you're through that my goal for any business owner is to: * Create compelling security awareness * Build influence with your management and teams * Learn more about compliance issues * Conduct realistic risk management * Provide return on investment * Get others to help with security goals As you read each section of this Program, keep an open mind to the idea that virtually all security managers have force multipliers, assets and resources that should help foster a good security environment. Fill out the following form to get keep up to date. Our newsletter offers the latest information on security news, ISP Certification training and Jeff’s upcoming book “Managing the Security of Classified Information and Contracts”. We hope to see you there.
I could not have attained a high score on the ISP exam without your study materials. The study materials you provided helped me prepare for this certification. I am very happy to be a part of this elite group of professionals. Tony Cirafice, ISP Security Specialist “Right on target! Jeffrey Bennett’s exam manual is the perfect supplement to the NISPOM for anyone preparing to take the Industrial Security Professional certification exam. The approach is clear and easy to use. It’s definitely worth the price and more.” William H. Henderson, author, The Security Clearance Manual “This study guide has been a tremendous help in preparing me to take the ISP exam. I feel that I now have a much better understanding of what to expect.” Polly Rupe, Facility Security Officer, Va
|
|
Follow me on Twitter Linkedin Profile Join the Linkedin Industrial Security Professional Group Join our newsletter
See Jeff’s Interview |
|
We’re glad you are here. Please scroll down to view a sample newsletter and sign up for our newsletter service. |
Though this was my first of hopefully many export regulations seminars, I noticed the similar need in the compliance field. Regardless of the discipline, compliance works best when driven from the top down. No matter the program a compliance officer intends to build or support, Influence is key when developing it whether security, privacy protection, safety, export, etc. Experience and technical savvy are great to have however, minus influence; the person is just an administrator playing catch-up in a crucial game.
Like other compliance disciplines, export compliance first and foremost helps companies and individuals successfully earn profits while playing by the rules. Our government encourages international business. The opportunities for lucrative business and growing employee experience pools make international trade an attractive endeavor. The benefits are huge as long as enterprises know the rules and are able to implement them into every program. The reality is that a license will most likely be granted when given the time and consideration required. Unfortunately, the routes people take to avoid licenses probably take more energy and export violations cause significant damage to our defense and economy
Influence comes in where the whole team understands the mission and each business unit and employee role. The compliance officer trains the company and keeps the empowered official abreast on licensing and technical assistance issues. They also establish trigger mechanisms to ensure international travel, business, or employment opportunities come to their attention early in any endeavor involving technology transfer.
As the security manager of a classified facility, you have many responsibilities including approving classified visits. Not a problems since most visit requests are handled through agency approved data bases such as JPAS. Besides, you have a very large staff and the process is pretty much routine until….
A program manager enters your office and informs you that her foreign customer wants to send an employee to work onsite on a classified program for six months. The program manager wants you to give her a visit request form that the foreign company can use to submit a visit request. You think about this for a moment and realize that though the situation is unusual, it should be a workable solution. Do you provide the visit request form? Why or why not?
In the course of business, it is not unusual for a foreign entity to request a visit to a U.S. company. Foreign business employees may desire to visit a U.S. contractor in furtherance of a contract. When the business is related to a classified contract, involves classified information or relates to a government to government agreed upon plant visit, the foreign entity requests the visit through their embassy. The only way these types of visits are authorized is through government to government channels. Unclassified visits are sent through commercial channels and are conducted through licenses with the Department of State or the Department of Commerce.
Visit requests submitted by a foreign entity pass through their government channels to the U.S. government for approval. The U.S. government agency having jurisdiction over the classified contract submits the request to the U.S. contractor for their approval. The request also includes guidance and limitations of the information and items the foreign national will be allowed to access. The contractor reviews the limitations and determines whether or not they concur with the request. The contractor has the final say of whether or not the foreign national will access their facility.
Security managers, exports compliance officers, technology control officers, etc will face more challenges as our market becomes global. The next topic we will discuss is once a visit is authorized. What does a contractor need to do in preparation for the visit? How does one prepare employees and the visiting foreign person from exporting unauthorized technical data.
By: Jeffrey W. Bennett, ISP
Keep in mind that out of all possible respondents less than a handful replied to each question. Additionally, the survey was in no way scientific. It was just a simple fielding of questions and not intended to be a representation of the industry in general. However, they do provide a sound training solution. How can one use such data to train the force? Well, thanks for asking.
First of all, followers of this newsletter can use the same questions while conducting walk around security or otherwise conducting a security survey. Field these questions to your teams. If they respond correctly give loud and public praise. If they answer incorrectly you have just created a training opportunity. Proceed with diplomacy. Use the data you collect as a foundation to design future training. These responses go a long way in identifying weaknesses in the overall understanding of the National Industrial Security Program. These weaknesses could prove a vulnerability to your security program if not addressed properly.
Another application is to use the answers I provide here to bring about discussion or add to your security education agenda. Again, no scientific study here. However, certain broad assumptions can be made about general knowledge of the National Industrial Security Program.
Now, the questions and answers:
1. Will your security clearances or the way we protect classified material be impacted by the new administration?
Answers:
a. "The President can de-classify any classified information."
b. "There should be some sort of "transition" in place for business that overlaps 4-year Admin tenures."
c. "I don't foresee any significant changes."
The reality: In recent history two sequential presidents have provided separate executive orders directing how to protect classified information. Presidents Clinton and Bush have issued policies directing what qualifies to receive a CONFIDENTIAL, SECRET or TOP SECRET classification.
Contractors and government agencies protect classified information based on the guidance from the executive orders. When changes occur, they affect storage capacity, employee manpower and resources toward re-marking or improving security. These resources are funded through overhead and impact profits. Organizations can project requirements and put a proactive plan in place to make necessary transitions easier.
2. Is a defense contractor allowed to advertise their facility security clearance level?
"It depends on what level you're advertising. YOu should be able to advertise clerance levels."
The reality:
According to the National Industrial Security Program Operating Manual (NISPOM , the contractor can not use their security clearance level to advertise for business.
NISPOM 2-100. General. An FCL is an administrative determination that a company is eligible for access to classified information or award of a classified contract.
c. A contractor shall not use its FCL for advertising or promotional purposes
As the lead security education provider, the Facility Security Officer has to break through perceptions. Those cleared employees should grasp a good understanding of their responsibilities to protect classified information. The FSO’s can ask simple questions to gage the effectiveness of the training and discover areas in which to conduct training.
By: Jeffrey W. Bennett, ISP
|
Sample Newsletter |