CDSE SPeD SFPC

CDSE SPeD SFPC What is the NISP and its purpose? - The National Industrial Security Program is a program to safeguard classified information entrusted to industry. The purpose of the NISP is to define the requirements, restrictions, and other safeguards in order to prevent unauthorized disclosure of classified information. What are three principle incident/ events required to be reported to DoD counterintelligence (CI) organizations? - • Espionage • Sabotage • Terrorism • Cyber List three indicators of insider threats. - • Failure to report overseas travel or contact with foreign nationals • Seeking to gain higher clearance or expand access outside the job scope • Engaging in classified conversations without a need to know • Working hours inconsistent with job assignment or insistence on working in private • Exploitable behavior traits • Repeated security violations • Attempting to enter areas without approved access • Unexplainable affluence • Illegal download of information/files List three elements that should be considered in identifying Critical Program Information. - Elements which if compromised could: (1) cause significant degradation in mission effectiveness, (2) shorten the expected combat-effective life of the system; (3) reduce technological advantage; (4) significantly alter program direction; or (5) enable an adversary to defeat, counter, copy, or reverse-engineer the technology or capability. List three elements that a security professional should consider when assessing and managing risks to DoD assets. - • Asset • Threat • Vulnerability • Risk • Countermeasures List three categories of Special Access Programs. - • Acquisition • Intelligence • Operations and Support List three different types of threats to classified information. - • Insider Threat • Foreign Intelligence Entities (FIE) • Cybersecurity Threat Briefly describe the concept of insider threat. - An employee who may represent a threat to national security. These threats encompass potential espionage, violent acts against the Government or the nation, and unauthorized disclosure of classified information. Describe the purpose of the Foreign Visitor Program. - To track and approve access by a foreign entity to information that is classi ed; and to approve access by a foreign entity to information that is unclassified, related to a U.S. Government contract, or plant visits covered by ITAR. Briefly define a Special Access Program. - A program established for a specific class of classified information that imposes safeguarding and access requirements that exceed those normally required for information at the same classification level. List three enhanced PERSONNEL security requirements for protecting Special Access Program (SAP) Information. - • Access Rosters • Indoctrination Agreement • Individual must materially contribute to the program in addition to having the need to know • All individuals with access to SAP are subject to a random counterintelligence-scope polygraph examination • Polygraph examination, if approved by the DepSecDef, may be used as a mandatory access determination • Tier review process • Personnel must have a Secret or Top Secret clearance