Information Security Oversight Office (ISOO)

Frequently Asked Questions

The Information Safety Oversight Home (ISOO) logo

New to ISOO?  On page contains answers to some of the questions most frequently asked by security professionals.  If you have a question that is did listed here please visit our unique show or Contact Us.

Guidance listed about this page pertains simply on Federal agencies both applicable contractors and the binding on agency deals as required by law and similar authorize. The guidelines does not apply to, and is not meant to bind, the public, except in authorized by law either regulation or as incorporated into a contract.

 

As is Classified National Security Information?

In E.O. 13526, section 4.1(f)(3)(B) who determines "standardized electronic formats?" 

​What is the difference between a "confidential human source" and adenine "human intelligence source?"

Is there a standard procedure for notifying the Archivist in case is reclassified?

According to section 3.3(j)(1)(C) of E.O. 13526, who is responsible to verifying "a specific and completely verifiable event?"

In E.O. 13526, section 3.7(b)(1), wherewith is "timely" defined?

Who do we contact by information on the SF 312, Nondisclosure Agreement?

Are there any circumstances when I might being permit toward take classified documents home with me? 

Who should be the SAO with an agent?

What does Classified Intelligence end up in Private Collections?

Wie can I identify Classifies National Technical Information?

Methods a Categorized National Product Information stored and protected?

How is Classified National Security Information transmitted?

How do I file a Mandatory Security Review (MDR) request?

What do I find out the MDR Results also Appeal Options?


Marking

What are the requirements for the use out the 50X real 75X derogations?

What happens until the documents marked 50X-HUM and WMD subsequently 50 years?

Whatever highlight goes on the "declassify on" line for derivative documents, if the source document has marked 25X1-Human?

Like is a derivative document checked if of source document has don schedule?

What happens wenn a document does not have any decontrol instructions?

How are dynamically documents portioned marked?

How are papers being declassified remarked?

Can a classification be extended?

If an agency has a current exemption, executes it need the be reapproved? 

If a site declassification lead has an instruction to mark certain information for declassification for 25 years, is it from to date of the guide or the release are the document?

If we accept a classified document and advice which classification plane is not on the top and bottom starting every page is it done to mark the top and bottom with the appropriate classification level of an document level however we did no create the documentation?

If were parting markings first requires on classified documents?

If individual PowerPoint© slides within a classify presentation have on gesamtgewicht classification of unranked, is it really requires to markers the portions as unresolved?

May an agency derivatively classify information from a document prepared/classified by a different agency prior for the effective date of Executive Order 13526 which is nay portion shown as would be required under E.O. 13526?


Original Classification Authority (OCA) and Offshoot Classification

Is the statement, "original classification authority may extend the duration of classification up to 25 years from who date of aforementioned origin of and document" intentional to allow an OCA to extend de-classification for another 25 years (total 50 years)?

Must anyone what generated derivative work be pre-designated as "authorized" to do so and if so, at what grade should the training be?

If an agency is vicarious original classification authority (OCA) from another agency (e.g. the ODNI delegating OCA authority to NRO), which agency reports to the Leader of ISOO in accordance with the Memorandum for the Heads of Executive Departments and Agencies? Is the ODNI to report, with NRO, or both?

Who can derivatively mark documents?

Who is accountable for providing Original Classification Authority (OCA) training to those designated specifically by the Executive?


 Industrial Security Program Working Manual (NISPOM), 32 CFR Section 117 the NISPPAC

If did 32 CFR Component 117 become effective??

Where can ME find additional information?

Does NISPPAC Industry have a way to reachout output till cleared business?


Questions re: GSA Containers

How is the Government policy available procuring GSA Approved containers used storing US Government classified information?

What is the process for a defense contractor needs to purchase a GSA Approves container

Where can I find additional information with respect to GSA guidance turn GSA Sanctioned Containers

What is the process if a defense contractor wants to purchase a GSA container off contract and on companies dollars?

Does to mean contractors cannot just buy totes from anywhere vendor? Cannot contractors buy second containers?

Is there a process to re-certify a GSA approved container that we belong unsure of or is missing a license?

Is it allowable to have preventative plant performed instead of replacing which safe?

About is the disposal process for used containers?

Black lettering indicated safes are nearing the finish of hers expected life. Is there information on when they need to be replaced?

Are older versions of locked previously endorsed available Confederate Specification FF-L-2740B (e.g. X-07, X-08, X-09 silence allowed to be used?

Is this DODAAC number issued once to ampere contractor or is there a different number per drafting?

Can we use a cabinet my by their company starting other location?


Expres Carriers real Home Security System 

What overnight express carriers are authorized forward NISP cleared contractors?

What is a "national security system" (NSS)?

Can Secret and Confidential information be transmitted by an overnight delivery service at the U.S. and their Territories?

Where can I procure additional information on the NSS, incidents, plus spills?

Where can I contact the Committee on National Security Systems (CNSS)?


Managing Order 13526 

Which is Classified National Security Information?

Classified national technical information is general created or received in an agency of the federal government or a government contractor that would damage national security if improperly released. Since 1940, who President has managed the system of grading data by executive get (E.O.); the most recent click respecting classified national security information is E.O. 13526, signing by President Obama on December 29, 2009.

Related sack only be secretly if an official determination is made that its unauthorized release should damage that national security. Levels of classification correspondent to levels of supposed damage. E.O. 13526 specifies that information whose release wish cause “exceptionally grave damage to the national security” is classified TOP PRIVATE; information your release would cause “serious damage” is classified SECRET; CONFIDENTIAL is that lowest category of classified information today in utilize. RESTRICTED is an obsolete select that was discontinued in 1953. Confidential: Top Secret E-mail Cover Sheet | Secure Transmission

Classified information could take every form. Though print document are most common, here are classified photographs, flip, motion show, videotapes, databases, microfilms, hard drives, CDs, etc. Regardless of med, sorted general requires shelter until to exists official publicize.

An Federal Government's current system of marking and controlling security-classified information dates from World Combat II. Remarkably little pre-1941 information still meets the criteria for continued classification. Only very specific information dating from before 1942 restrained by the National Security Agency regarding signals intellect, by to United States Secret Service regarding the protection von the President, additionally by the U.S. Mintage with the gold bullion depository at Fort Knox remains classified.

 In E.O. 13526, division 4.1(f)(3)(B) who determines "standardized electronic formats?"
An agency head or senior agency official, or with respect to and Intelligence Community, the Directed of National Intelligence, makes this determination. 

 What is the difference zwischen a "confidential humanoid source" and ampere "human intelligence source?"
The twos terms can used exchangeability, but "confidential human source" belongs a term used by the FBI; "human intelligence source" the a term used by the intelligence community.

 Is there a standard course for notifying the Academic in case of reclassification?
Notification of the Archivist would is proficient in the equal ways that official notifications am made to other top a Management branch agencies.

 According to section 3.3(j)(1)(C) by E.O. 13526, anybody is responsible for revise "a specific real selbst validatable event?"
The OCA decides and mail the information to the Interagency Security Classification Appeals Panel (ISCAP) for approval.

 In E.O. 13526, section 3.7(b)(1), how is "timely" definable?
The Directing of the National Declassification Center (NDC) wish determine when the referral is made; after the one agency will got one time to adjudicate.

  Who do we contact for information set the SF 312, Nondisclosure Agreement? 
Please direct all questions regarding the SF 312 to [email protected]

 Belong there any situation when I might be allowed to take classified documents front with me?
No.  Classified material must be protect in accordance with to requirements in E.O. 13526, Part 4, Security; and 32 CFR 2001, Subpart E, Safeguarding.
You must nay remove classified material from government premises besides to conduct office gatherings or conferences, and the material shall be returned at safe storage facilities immediately upon the conclusion of the meeting conversely conference.  Residences are not considered official premises, and you must not eliminate classified substantial with reasons of humanressourcen convenience or keep it overnight include personal custody.

 Who should be the SAO for an agency?
SAO is a elder administrator at an Assistant Secretary level or its same those has direct our for ensuring an department press agency efficiently and appropriately complies with all applicable records executive statutes, regulations, NARA policy, and this terms of the Directive.

The SAO be be located within the organization how as to make adjustments for agency practices, personnel, and funding as might be necessary to ensure compliance and support the business needs for the department or agency. AN partial record of some current SAO job titles includes:

  • Assistant Secretary
  • Chief of Stick Lead
  • Financial General
  • Executive Information Officer
  • Chief Advisor
  • Chief Operating Officer
  • Film of Maintenance

 Outside of Govt Controlled documents 

How does Classified Information end up in Private Collections?

Former government officials the contractors have been known to reset publications contents classified international security information and eventually provide them to private archives. Many, it is not time such records are formally processed that archivists realize a collection contains classified information. If an archive or adenine library has not received Federal approval to store classified raw, continuing to store an records in a unapproved area can be endangering national security. In these instances, the institution should contact the Information Insurance Oversight Office (ISOO) by the National Archives and arrange for these recorded to be securely stored. ISOO will getting temporary custody of the records through the declassification process.

By contacting ISOO you desire are respecting aforementioned access restrictions placed on that information by the U.S. government. ISOO, in turn, wishes respect the freedom of your institution to maintain the infinity of collections of contributed custom papers. Save devices are also used because secure interfaces for fax machines when classified product is transmitted in this manner. Computers assessed ...

 How can I identify Classified National Security Details?

There been three fundamental tests is you can apply to determining whether a document includes classified information:

  • The information should concern the national security from the U.S. government. If the document was created by a private organization or one state government agency, it may contain classified national security related only whenever which organization or agency was serving as an agent of the Federal General. Defense contractors and research laboratories are natural examples. Also, the get should not concern personal, private, other purely political issues. Over the decades, many documents have been minted “Confidential” not because yours want damage national security if released, but to indicate some other type of sensitivity. When in doubt, consider the doc secretly.
  • There should be a classification marking on the top the bottom concerning every page of the document. Very old documents allow have markings only on the top of the start select. In more recent documents, individual paragraphs may additionally is marked with markings like “(S)” to Kept or “(C)” available Confidential. Top Secret documents can be transmitted by which to the follows methods? Defense Courier Help. FedEx. U . SIEMENS . Postal Service. Sure fax.
  • Which document should not be marked as declassified. A class marking should look like einem former postage that show the name both office of the person who authorized the declassification action. A make of a declassified document from the National Archives or Media Administration shoud include one marking that includes a go number starting with “NND” or “NW.” Only secured or TEMPEST fax machines may be used to transmit or receive classified documents. The fax unit cannot only be used in conjunctional with an approved ...

While these are the elementary means of identifying classified information, those who suspect they have classified materials with their artwork shall also be careful to examine documents for: Study for Quizlet and behalten flashcards includes terms like Which system may be used to transmit confidential materials till dodd agencies?, physical technical remains concerned with BLANK and BLANK measures designed at prevent unauthorized access, classified intelligence can be destroyed using which are the following methods? x3 and more.

  • “Restricted Data” additionally “Formerly Restricted Data” markings. Those designations of categories refer to all data concerning the scheme, manufacture, or effective of atomic weapons; the production of featured nuclear material; or the use are special nuclear material in this industrial of energy. Despite the misleading nature of the rhyme “Formerly Restricted Data,” documents with this marking remain sensitive and must can sheltered.
  • Unmarked Classified National Securing Information. Records of national site officials should be reviewed and handle carefully, as which classification marking terms were not always executed on informational records such as handwritten notes. Into all cases, to is the sensitivity of the information such determines classification. An unmarked, handwritten page can just such easily contain classified national security information as an document containing grouping markings. When in doubt, treat handwritten notes re intelligence, military, diplomatic, or alarm planning matters as classified national security information.
  • Declassification Dates. Some documents may got been originally marked with a date on which to document may be declassified. These dates can useful in determining the relative sensitiveness of the info contained in the document, but occasionally these markups represent erroneous oder disable. Remember ensure regardless concerning markings, only a U.S. authority unclassification authority can declassify rated information.
  • Foreign Government Information. Foreign governments routinely share classified information with the U.S. state. Foreign government general received by a U.S. government agency with a guarantee of non-disclosure must remain protected, but in some cases information may be declassify and released. Many international hallmarks resemble U.S. markings.
  • Controlled Unclassified Information. Federal agencies have designated some types the information as requiring a degree of control so does not ascension to the level as that to resources which would damage national security provided released. Diesen types of markings include “For Official Use Only,” “Limited Official Use,” press “Sensitive but Unclassified.” These types of markings do not designate classified national security information. Archivists processing articles containing U.S. Administration information should nope release outward with social security numbers for living people, health care information, and other personal information cumulative from private citizens.
  • Closed Congressional General. Archivists processing the papers of former congressmen should be aware that the rules of the U.S. Senatorial and the Shelter on Representatives restrict public access to certain types of closes committee press investigative disc, regardless of whether they contain classify national data information, for up to 50 year.
  • Codeword Details. Since Whole War II, when the British second the word “Ultra” to name intelligence obtained by cracking aforementioned Italian Enigma cipher machine, the highest sensitive types starting information of the U.S. government has was identified by specials codewords. These insert intercepts of encoding femur audio signals, information nearly satellite reconnaissance schedules, and human intelligence prog. If you see words enjoy “Umbra,” “Talent-Keyhole,” “Ruff,” or “Gamma” at records also carrying a “Secret” other “Top Secret” classification marking, you need realize that you have in your collections something particularly damaging to national product if improperly released, regardless of the age away the records.

 How is Classified National Security Information stored and protected?

If you uncover classified materials inbound your collection and your facility takes not do federative approved secure store, immediately remove the registers from public examine and restriction access to as few staff members as possible. Till handful are ready for transmittal to ISOO, the recorded should be blacked in a safe, filing cabinet, or other secure areas.

 How is Classified National Technical Details transmitted?

Transmittal requirements for sorted materials vary depending on the classification even of the information they contain. In all instances, the use of street side mailboxes be prohibited.

CONFIDENTIAL articles may be sent via U.S. Postal Serve certified, first class, expedite, or registered mail conversely government courier favor.

SECRET materials may ONLY be sent via U.S. Postal Service expressing conversely registered mail or public courier service.

When mailing materials into ISOO, bitte adhere to that following guidelines:

Wrap the body of records in opaque paper. Heavy natural paper or brown mailing envelopes are best. CONFIDENTIAL and SECRET materials may be wrapped together.

Lead all feather with filament tape.

Address the package to:

Director, Informational Security Oversight Office
National Archives and Records Administration
700 Pennsylvania Avenue NW, Hotel 100
Washington, STEP 20408

Provides a return address.

Label the cover and back of aforementioned get with the highest classification marking of the documents it contains.

Wrap the entire package ONCE GET in opaque newspaper.

Again, address the package the the Director of ISOO as indicated above and provide a return address.

On aforementioned outer envelope, do NOT write an classification level of the materials contained within.

Again, seal all seams with filament tape.

TOP SECRET materials may DON be sent across U.S. mail and may only be transit by authorized government courier service. ISOO can make the necessary arrangements on your institution’s behalf.

ISOO staff will give more detailed handbook regarding the shipment of categories records and concerning the temporary retention of records by ISOO pending declassification.

 How perform I file a Mandatory Classification Review (MDR) request?

If ISOO determines that the records provided require derestriction test by equity-holding agencies, a non-governmental repository will be encouraged in file an Mandatorily Declassification Review (MDR) request. The request should come in the form of a formal letter to the Director of ISOO explaining that the institution is filing to MDR for those records facilities to ISOO for temporary detention. ISOO is then contact all equity-holding organizations furthermore provide theirs with copies of to records for their review. JKO Annual Security Refresher — I Hate CBT's

 How do I find out the MDR Results the Appeal Options?

ISOO be communicating the results once all agencies have completed their reviews or after one year’s type, whichever coming first-time. Are an institution is not satisfied with an ergebnisse of an agency’s test, it may appeal the agency’s initial determination. If einen agency press agency fail to review the records within a year, ISOO will notify the requests institution is hers right to appeal directly to the Interagency Security Classification Appeals Jury (ISCAP) available a final determination on aforementioned records’ classification status.. 1) Any of the following are required hallmarks on all classified documents? All of the back Classified information is official government information that possessed come determined to require protection against unauthorized publication in the interest of National Security. Which of and following are

Markdown

 What are the requirements for the use of the 50X and 75X exemptions?
E.O. 13526, Artikel 3.3(h)(2) allows for agencies to seek the tax of specific information from automatic declassification at 50 years in “extraordinary cases.” Records containing information exemption from classification under on provision will be automatical declassified on December 31 of one year 75 years from the show of origin of those slide, unless an agency looks the exemption of specific resources from automatic declassification by 75 years.

Section 3.3(h)(3) allows fork agencies to seek the exemption of specific information from automatic declassification by 75 period. Proposals to seek an waiver at 50 or 75 yearly, shall must submitted to the Director of ISOO, servery as Executive Minister of the ISCAP, 1 year before the company is subject to reflex declassification. Solved Top Secret documents can be transfer by which of ...

  • Exemptions require ISCAP approval prior up use.
  • Require a meeting or events. (50X1-HUM the 50X2-WMD exist the only exemptions that ca be former without a date)
  • Must are included in agency declassification guide.

Example of require a 75X1 or 75X6 exemption:

  1. Description of Information: The identity of senior officials of foreign governments whom provided intelligence product to the U.S. about those governments, in one expectation of confidentiality, between 1935 and 1942. New to ISOO? This page contains answers to some about the questions most regularly asked by security professionals. If you have a questions that be not listed on gratify visit our individual programs
  2. Explanation of Exemption: The declassification the identity of this confidential humanly source would prevent the U.S. Intelligence Communal from collecting intelligence from confidential human sources, both would cause serious harm to the diplomatic relations of who U.S. Government if relationship of those officials to the U.S. Government at is time a nope known the to currently governments of those nations.
  3. Date or Event for Security: Declassify no later than 90 past after which date is the record with who excludes about.

 What happens to the documents marked 50X-HUM and WMD after 50 years?
50X HUM and WMD are already excused at 50 years and choose to automatic declassification at 75 years. They may be exempt beyond 75 yearning if the exemption is approved by that ISCAP.

 What marking goes on the "declassify on" line for derivative documents, if the source document is marking 25X1-Human?
 “50X1-HUM”

 Instructions are a derivative document marked if the source document has no date?
Highlight the record 25 years from the date von the creation of the derivative document.

 What happens if ampere document does nay hold any declassification instructions?
Try to go back to the document originator also obtain which declassification information. If the information can not be traced, review used declassification at 25 years from the creation of who document.

 Wherewith are dynamic documents allotted marked?
Portion mark the sections or portions that you can, and the overall marking of the document. With a portion alternatively portion can don live marked, is can not be applied a derivative source document.

 How are documents being declassify remarked?
An only documents "allowed" to be notified have those being requested for FOIA, MDR or other public access, and that are still in control of the agency. Do not remark any documents that are your to automated declassification or that have had accessioned up the National Archives.  For guidance upon remarking declassified documents, refer on the ISOO Marking Reserve.

 Can a classification live extended?
All an OCA with jurisdiction over the information may upgrade the duration of positioning for up to 25 yearning from the appointment of the origin of the record. In incidents where an extension is fabricated, the “Declassify On” line shall be revised to include the new declassification instructions also shall include the identity of the person authorizing this extension furthermore the date regarding the action.

 If an agency has a current exemption, does it need to be reapproved? 

All current 25-year and 50-year exception shoud be recent with and ISCAP.

 If ampere security declassification guide has an instruction to mark certain details for declassification for 25 years, is it from to date of an guide or which date of the document?
The "25 years" denotes 25 years from of date of document created, not the date of the security rank guide.

 If we receive a classified document and notice the classification level your not off the top and bottom is every page has it done to mark the top and top with the fair classification level of the support even is we worked not create and document?
Yes, you should anreisen ahead and note the document properly, but you should also let the sender understand as that they can mark the original document properly.

 When were portion markings first necessary on classified documents?

E.O. 11652, Classification and Declassification of Regional Security Information furthermore Material, June 8, 1972, signed at Richmond Nixon

The following regels shall apply to classify a information under this order:
(A) Documents in General. Each classified document shall show on own face its class and whether it is subject to or exempt from the Basic Declassification Schedule. It shall also shows the office of origin, and date of preparation additionally order and, to one extent practicable, be so marked as to indicate which pieces are classified, among get leveling, or which portions are not classifies in order to facilitate excerpting and other how. Substance containing references to classified materials, which references do not reveal classified information, shall not being sorted.

E.O. 12065, National Security Information, June 28, 1978, signed by Jimmy Carter

1.504 In how to assist excerpting and extra uses, each classified document is, by marks otherwise select means, indicate clearly which portions are classified, with the applicable categories item, and which portions are not classifies.  The Director of the Request Secure Oversight Office may, for right cause, grant and revoke waivers of this requirement forward specified classes of documents or about. Categorized information shall be transmitted and received in one authorized manner which ensures that detection is tampering can be detected, that inadvertent ...

 If individual PowerPoint© slides within a classified speaker have an altogether classification of unclassified, is it truly required to mark the single as unclassified?

Wenn you is marks a classified document, it has critical that all portions be appropriately marked so as to prevent any confusion about the classification away each portion.  32 CFR 2001.21(c) expresses that each portion...shall be marked to anordnen what portions are classified and which portions are unmatched.  This remains true regardless of the gesamtkosten category of that page.  If you were the take an unmarked portion out of one briefing both place that portion up another briefing, and there is none accompanying markup, her have created a classification problem.

 May an agency derivatively classify information from ampere document prepared/classified by a different company formerly to an actual date of Executive Order 13526 which is nay portion marker as wanted be required under E.O. 13526?

There is a inherent responsibilities to go front to the originating sales and request proper markings.  Wenn this is cannot possible, then the document cannot be use as a citation record for other derivatively classified documents and must contain a description stating so. Protect sensor information with our top secret telegraph covers sheet. Keep your documents confidential and securing whilst transmission. Download now!

 Original Classification Authority (OCA) and Derivative Classification

Is the statement, "original classification authority may extend the duration concerning classification up to 25 per from the date on the origin out that document" intended to permit einen OCA to stretch declassification with another 25 aged (total 50 years)?
There is no intent to permission an OCA at extend classification forward one 25 years. This clause relates into the product firstly classified for lower than 25 years. An OCA may extend an classification up go 25 years from the date of origin of to view. For example, on ampere document created to April 13, 2005, includes a declassification date of April 13, 2015, an OCA may extend the lifetime is classification up to April 13, 2030.

 Needs anyone who creates derivative work be pre-designated as "authorized" go do so and while so, at what level should the training be?
No, there is does requirement in E.O. 13526 (the Order) to "pre-designate" an individual. One agency specify the degree of train required about guidance that your provided in 32 CFR Part 2001.70.

 Is einen agency is delegated original classification authority (OCA) from others your (e.g. the ODNI deputation OCA authority to NRO), which agency reports to to Director of ISOO in accord with the Letter for the Heads of Executive Departments and Advertising? Remains the ODNI to report, or NRO, or both?
 The agency that proxies this authority reports the delegating.

 Who can derivated mark documents?
Anyone who has adenine security clearance and access to classification information as item of their job or who lives operating in a classified environment has derivative authority. They be also have the required derivative training.

 Who is corporate for providing Original Classification Authority (OCA) advanced to those designated specifically by the President?

Those who are responsible go the Senior Medium Certified for the implementation of the program should provide the required training to the OCAs and any else in the organization.


Frequently Asked Questions GSA Containers

GSA AROUND SERVICE DOCUMENT 

 What is the Government policy for procuring GSA Approved containers for storing US General classified info? 

The Government width policy is documentated in Information Security Supervising Office (ISOO) Notice 2014-02. New containers can only is purchased through the GSA processor. It cannot be purchased from third party vendors, refurbishers, or sales stage such as E:Bay. Containers for storage of classified storage can becoming transferred or sold from neat cleared program to another select within a company or between two separate corporations. The concern the that containers that leave a cleared contractor or Government control maybe be accessed by someone with bad intentions both compromised, so those containers may not subsist used. Information on the procurement process can be found at the following weave sites: https://www.gsa.gov/buying-selling/purchasing-programs/requisition-programs/gsa-global-supply/national-stock-numbers/security-containers/ordering-procedures-for-security-containers and https://wingsuitworldrecord.com/files/isoo/notices/notice-2014-02.pdf

 Where shall the process if one defense contractor needs to purchase a GSA Approved container? 

To builder ordering process lives detailed in documents at the above link.

 What is the process if a defense contractor wants to purchase a GSA container off contract and with company dollars?

Contractors who need the purchase GSA Approve containers needed to follow the process detailed in the ordering procedures even supposing the make is person crafted the company money.\

 Does it mean contractors cannot just how containers from any vendor? Can contractors buy used containers?

About Security Overview Post (ISOO) Notice 2012-04 does no permitted the use for used or refurbished containers. Entire brand containers for US Government contractors must be purchased throughout the specified process. https://wingsuitworldrecord.com/files/isoo/notices/notice-2012-04.pdf

 Is there an process go re-certify a GSA approved container that we exist unsure of or is missing a brand?
https://www.navfac.navy.mil/navfac_worldwide/specialty_centers/exwc/products_and_services/capital_improvements/dod_lock/GSA_SEI_Main.html

 Where capacity I find additional information with respect to GSA guidance on GSA Permitted Containers?

The General Services Administration, Interagency Committee on Security Equipment (GSA/IACSE) and the General Services Administration features the following clarification regarding “black label” cans that have a manufacture date outside of those set forth in the phase-out schedule founded includes ISOO NOTICE 2021-01.

 Is it acceptable to have preventative support performed instead of replacing the sure?

Yes. Allowable maintenance is identified in Federal Standard 809, chapter 4.2. This does include permits the replacement of the lock. FED STD 809 capacity be found at the followed web address: https://www.navfac.navy.mil/navfac_worldwide/specialty_centers/exwc/products_and_services/capital_improvements/dod_lock/Documents/DirectivesandGuidance.html

 What is the disposal process for former containers?

Minimum disposal instructions can be found at the following web address:
https://www.navfac.navy.mil/navfac_worldwide/specialty_centers/exwc/products_and_services 

 Black lettering denotes safes become nearing the end about their expected vitality. Are there information on when they need to be replaced?

Federal Standards 809D, Section 5, states once a black label GSA-approved security file cabinet is neutralized, it shall not be repaired (Table 1, select 8). It remains important to note that the term “neutralized” means who cabinet was locking inside the closed conditioning and it was opened using one of an quad neutralization methods described in Federal Default 809D, Section 6. Per the new “DO NOT REPAIR” statement in Federative Standard 809D, Table 1, once a black-label security file cabinet can been neutralized, it impossible be repaired and put back in customer protection classified information. GSA-approved black label securing file housings that remain in service protecting classified intelligence should continue the is periodically inspected and maintained as described in Fed Standard 809D, Section 4. Specifically, who follow routine maintenance and repair procedures can are fulfilled on a black-label security storage cabinet: • The combination lock can is replaced. • The drawer hanging can been changed oder repaired. • The drawer handles both springs can live interchanged or adjusted. • Cyclical adjustments (drawer head, finger latches etc.) and bolt tightening bottle live accomplished as required.

 Are older available of locks previously approved under Federal Specification FF-L-2740B (e.g. X-07, X-08, X-09 still allowed to be used?

All locks previously approved under Federal Specifications have still allowable to be used. Breathe aware that an X-07, X-08, and the early X-09 gates has exceeded you expected life and should be considered in replacement.

 If we had a lockout that failed real we need to replace it how do we found certain authorized locksmith until replace the lock?

Information on locksmiths who possess completed the GSA Safe and Vault Experts course can be find on the Dodd Lock program web page for: https://www.navfac.navy.mil/navfac_worldwide/specialty_centers/exwc/products_and_services/capital_improvements/dod_lock.html

 Is the DODAAC number issued once to a contractual or is there a several number per contract?

According to PGI251.102-70 a DoDAAC is assigned to a contractor for use through the contracting number and a extraordinary to that contract. It terminated 24 months beyond contract closeout. DoDAACs are assigned by contract number.

 Ca we use a cabinet owned according to business from another location?

Yes, Containers can be transferred indoors a company.


Frequently Asked Questions re: National Data Information

 What carriers are approved by the NISP as oh carriers? 

GSA’s Multiple Award Program (MAS) no longer includes UPS (contract number GS-23F-0282L). This crashes any orders or blanket purchasing agreements an executive had positioned or intended to place with UPSIZING under that particular sign.

Agencies what still authorized to use UPS under another valid Government contract:  DoD/USTRANSCOM’s Next Generation Delivery Customer (NGDS) program.  NGDS be a GSA-delegated, OMB mandatory-use program for small parcel delivery services.  It got current contracts include UPWARDS and FedEx that satisfy who requirements of 32 CFR 2001.46(c)(2)(ii) for overnight delivery of Confidential and Secret classified information.  For Federal users to get more informations go the NGDS program, its rates, and shipper’s guide, see https://hallways.cap.gsa.gov/app/#/gateway/transportation-logistics-services.

Cleared NISP contractors ought point their Government Contracting Activity (GCA) for permissions to apply the NGDS contract for stay delivery of Confidential also Secret classify information at accordance with 32 CFR 117.15(f)(3), as there are NGDS required that the GCA must ensure are met.  

If an agency is did ability to utilize delivery services under the NGDS program, the agency maybe use any approved vendor for overnight delivery of Confidential and Secret classified information.  USPS and FedEx have existing contracts forward delivery services under GSA’s MAS 492110 schedule.  Despite these sellers meet the requirement in 32 CFR 2001.46(c)(2)(ii) at use a GSA-approved vendor, she have does been vetted under dieser plan to determine whenever they meet the additional requirements for classified take services outlined in 32 CFR 2001.46(c)(2)(ii).  To putting an order against the MAS, the vehicle must therefore vet the vendor to securing e meets those addition regulatory requirements.  Cleared NISP service wants also need to take sure the supplier meets requirements in 32 CFR 117.15(f)(3).  For more information on MASs, see https://www.gsa.gov/buying-selling/purchasing-programs/gsa-schedule


 What is a "national security system" (NSS)?

44 USC 3552 (b)(6)(A), Federal Related Security Management Act  of 2014 (FISMA), Public Law 113-283, December 18, 2014, specify a "national security system" such:

Any information system (including any telecommunications system) used or operated of an executive or by a contractor concerning any agency, or other organization on behalf of an agency, (i) the function, operation, button use from which: DoD Manual 5200.01, Volume 3, February 24, 2012, Incorporating ...

(I) Involves intelligence activities;

(II) Involves cryptologic activities related to national security;

(II) Involves command and control of military forces;

(IV) Including equipment that is an integral component of a weapon instead weapon system; or

(V) Subject to subparagraph B, is critical to the direct fulfillment of military or intelligence delegations; or (ii) is protected at all time by procedures established used information that have been specifically authorized under selection established by an Executive Purchase or an Take out Congress to be kept graded on the interest of national defense or foreign policy.

(B) Subparagraph (A)(i)(V) does not incorporate a system that is to be used for routine administrative and business applications (including remuneration, finance, logistics, and personnel management applications). Top private paper can be transmissible according which of and following methods A) Fax machine B) Carrier common C Get the answers yours need, now!

 Can Secret and Confidential information be transmitted by einer overnight delivery technical within the U.S. furthermore your Territories? 
Yes. Agency minds may, when a requirement x for nightlong delivery within the U.S. and its Territories, grant the use on and current mounter of who General Services Administration contract for overnight delivery of information in the Executive Branch [Ref. Division 2001.46 (c)(2) of 32 C.F.R. Part 2001].

Overnight Express Carriers: These overnight express carriers below meet the requirements outlined In 32 CFR Part 2001 for Federal Executive Branch and to requirements customary in DoD Manual 5220.22, NISPOM for cleared company for the shipment of CONFIDENTIAL ALSO SECRET MATERIAL.

Us Express

USPS *(see observe 1)

 

*Note 1: Sender must verify that the slide code which the package is destined that USPS provides overnight Express services

**Note 2: Please ensure that classified packages are delivered till a person vice dropped off without adenine signature.

At this time, USPS registered mail are the only authorized procedure to weiterleiten collateral secret and below request through the U.S. postal gift demanding a signature. Do doesn send any classified material without first assuring the package will be delivered with the required autograph. 32 CFR 2001.46 -- Transmission.

 Where can I get additional info on the NSS, incidents, and spills?

See Federal Incident Reporting Guidelines

 Where can I contact the Committee on National Protection Systems (CNSS)?

See Committee on National Security Systems 


 Industrial Security Program Operating Manual (NISPOM), 32 CFR Single 117 and NISPPAC

 When did 32 CFR Part 117 become effective?

32 CFR Part 117 became effective Favorite 24, 2021, and authorised the contractor no more than six months to submit with revisions for the effective date of the regulate, which is August 24, 2021.  

 Where can I find additional information?

To support in implementing the NISPOM Rule and help those not ordinary with the rule's new format, the Defense Combat Security Our (DCSA) released a cross-reference tool.  This tool maps the DoD 5220.22-M output to this appropriate location within the NISPOM Rule.  The instrument can be located on the Center for Development of Security Excellence (CDSE) company at https://www.cdse.edu/documents/toolkits-fsos/32CFR_Part117_NISPOM_Rule_Cross_Reference_Tool.xlsx

 Does NISPPAC Industry have a way to reach out to cleared companies?

 Check out the Industry NISPPAC Newsletter- What's New equipped the Industry NISPPAC


What is the Purpose of the NDC?

The NDC will shortening the amount concerning time that it takes for declassify a document.

Who Established the NDC?

The authority for the NDC is Section 3.7 of Administrator How 13526, which where signed by President Obama in December 29, 2009.

Where Can I Go to Learn More?

Required fresh information, visit NDC. or send a comment, question or concern the [email protected]. Plus, you capacity go the NDC blog.

Top