ISOO and NISP
- Monitoring the NISP
- ISOO's Third Survey Report - 2003 Report on Industry Perspectives
- Steps that ISOO is Taking to Help Revitalize the NISP
Monitoring the NISP
In keeping with its oversight responsibilities under Executive
Order 12829, as amended, "National Industrial Security Program" (PDF Format
,) ISOO continues to evaluate the effectiveness of the NISP. In the past, this has been accomplished by conducting surveys with contractors and agencies.
- In Fiscal Year 1996, ISOO surveyed NISP participants in the Boston, MA area.
- During Fiscal Year 1998, ISOO expanded the focus of its evaluations to include contractors in the Southwest and Western regions of the United Sates, as well as contractors in the Greater Washington, DC area. The results of this survey were published in the report, The ISOO Second Report on Selected Aspects of the NISP.
- In Fiscal Year 2002, ISOO started their third survey of the NISP and expanded its focus even further. For the third survey, ISOO conducted an online survey of all contractors that had the ability to possess classified as well as site visits to 52 contractor facilities in the following areas: San Diego, California; Albuquerque, New Mexico; Huntsville, Alabama; Red Bank, New Jersey; King of Prussia, Pennsylvania; and the Washington, DC, metropolitan area. The report, 2003 Report on Industry Perspectives (PDF Format
) was released in Fiscal Year 2003.
ISOO's Third Survey Report - 2003 Report on Industry Perspectives
ISOO's third survey focused on industry's perceptions of the NISP and the results of the survey indicate that many of the issues that were identified in previous surveys of the NISP are still present and that some positive trends appear to have reversed and are now areas of concern for industry. Chief among the concerns were:
- Slow processing of personnel security clearances: Despite reworking the personnel security clearance process several times, industry is still reporting cases that take several years to be processed.
- Limited reciprocity in regard to facility and personnel security clearances: Government employees still have more flexibility when dealing with clearances and reciprocity than industry employees, despite repeated discussions to resolve the issues.
- NISPOM guidance remains inadequate for some: Many in industry, especially those new to the program, express frustration with vague guidance.
- Rewrite of Chapter 8 has improved the processing of classified information on Automated Information Systems, but it does not fully meet the needs of industry: Industry is asking for more detailed guidance on how to design such systems and write plans for their accreditation.
- Threat information is timely but needs to be more relevant: Survey participants overwhelmingly report that the information they receive is not seen as relevant and applicable to their situations. Additionally, many in industry feel that too much emphasis is placed on the external threat, when in many instances the real threat is cleared personnel.
- No uniform instruction for the handling of Sensitive But Unclassified (SBU) information creates confusion for the end user: Different agencies use different language for what is essentially the same information, causing confusion for industry when dealing with multiple agencies.
Steps that ISOO is Taking to Help Revitalize the NISP
Despite a general acknowledgment that the initial momentum of the NISP has tapered off, there remains a genuine consensus, particularly at the grass roots level, that a revitalized NISP is essential to continue the dialogue between Government and industry. There has been some disagreement as to how the NISP can be revitalized and, in particular, whether ISOO should increase its role within the NISP, but the Order outlines several areas where ISOO feels it should assist in the implementation and monitoring of the program. For this reason, ISOO has begun to take the following steps in order to better focus and coordinate Government and industry's efforts:
- ISOO required all executive branch agencies that are participants in the NISP submit their implementing regulations, internal rules, or guidelines pursuant to E.O. 12829, Sec.102 (b)(3) by August 15, 2003;
- Pursuant to E.O. 12829, Sec. 102(b)(1), ISOO developed, in consultation with the agencies, a draft directive for implementation of this Order. Following subsequent formal coordination and promulgation, subject to approval of the National Security Council, this directive shall be binding on the agencies;
- ISOO will conduct on-site reviews of the implementation of the NISP by each agency, contractor, licensee, and grantee that has access to or stores classified information and to require of each agency, contractor, licensee, and grantee those reports, information, and other cooperation that may be necessary to fulfill the Director of ISOO's responsibilities pursuant to E.O. 12829, Sec. 102(b)(4); and,
- ISOO will host Town Hall meetings to continue the dialog between Government and industry on prevailing issues.
PDF files require the free Adobe Reader.
More information on Adobe Acrobat PDF files is available on our Accessibility page.