1 SFPC EXAM REVIEW QUESTIONS AND ANSWERS , 100% ACCURATE / VERIFIED / What is CPI? - ✅✅ -According to DODI 5200.39, Critical Program Information is capability elements that contribute to US warfighters technical advantage a nd that if compromised could undermine US military preeminence. What are the two types of CPI? - ✅✅ -Organic CPI and inherited CPI. Organic is unique, original CPI that is owned and generated by a Research Development Test & Evaluation program. Inherited is like organic except it is incorporated into or used by another. If your program has approved CPI, where is it documented? - ✅✅ -the Program manager will document it in the Program Protection Plan (PPP). CPI Lifecycle - ✅✅ -First, program managers identify CPI, then select and implement appropriate CPI protection measures, document it in their PPP, they monitor the CPI. CPI process - part 1 - ✅✅ -Identify CPI: Initiate: early in the acquisition life cycle, when a significant change or event occurs. Output an approved list of CPI CPI process - part 2 - ✅✅ -Select/Implement CPI Protection: Determine and apply appropriate CPI protection measures. Initiate: After CPI has been identified or a significant change or event occurs. Outpu t is protection measures that have been determined, applied, and are actively protecting CPI CPI process - part 3 - ✅✅ -Monitor CPI: Determine if/when CPI identification and the selection/implementation of protection measures need to be reexamined. Initiate : When CPI has been informally and formally identified and protection measures have been implemented. Output: A determination that one of more of the CPI Analysis processes require reexamination Horizontal Protection - ✅✅ -Sometimes different programs have the same or similar CPI technologies. Horizontal ensures these programs apply a similar level of protection to mitigate the loss of their CPI. DD FORM 254 - ✅✅ -Is required to be issued with every classified contract within the Dept of Defense. Its purpos e is to specify the classification requirements for a contract. DGR - ✅✅ -Designated Government Representative - responsible to ensure that a contractor sending classified shipments does so in a secure manner iaw export regulations. Fulfills an important ro le in the sending and receiving of classified material On which document does the DGR review facility information? - ✅✅ -DSP-85 Export License The National Industrial Security Program Operating Manual (NISPOM) provides specific requirements, restrictions, and safeguards for industry to prevent unauthorized disclosure of U.S. classified and export -
controlled information or technology to foreign interests. - ✅✅ -NISPOM Foreign ownership, control or influence (FOCI) is a state that may affect a company'sabili ty to qualify for or maintain a Facility Security Clearance (FCL). - ✅✅ -FOCI The process of determining FOCI begins when a company submits Standard Form (SF) 328, the Certificate Pertaining to Foreign Interest - ✅✅ -SF 328 A Security Control Agreement (SC A) is used when a company is not effectively owned or controlled by a foreign entity but when the foreign interest is entitled to representation on the company's governing board - ✅✅ -SCA A Special Security Agreement (SSA), is used when a cleared company i s effectively owned or controlled by a foreign entity. - ✅✅ -SSA As part of the FOCI mitigation requirements, the GSC plays an important role in the management of the company under FOCI and in ensuring compliance with the provisions and security measures of the FOCI agreements. - ✅✅ -GOVERNMENT SECURITY COMMITTEE (GSC) The National Industrial Security Program Operating Manual (NISPOM) defines a document as "any recorded information, regardless of the nature of the medium or the method or circumstances of recording." The NISPOM requires you to use the same processes to pr otect electronic classified
controlled information or technology to foreign interests. - ✅✅ -NISPOM Foreign ownership, control or influence (FOCI) is a state that may affect a company'sabili ty to qualify for or maintain a Facility Security Clearance (FCL). - ✅✅ -FOCI The process of determining FOCI begins when a company submits Standard Form (SF) 328, the Certificate Pertaining to Foreign Interest - ✅✅ -SF 328 A Security Control Agreement (SC A) is used when a company is not effectively owned or controlled by a foreign entity but when the foreign interest is entitled to representation on the company's governing board - ✅✅ -SCA A Special Security Agreement (SSA), is used when a cleared company i s effectively owned or controlled by a foreign entity. - ✅✅ -SSA As part of the FOCI mitigation requirements, the GSC plays an important role in the management of the company under FOCI and in ensuring compliance with the provisions and security measures of the FOCI agreements. - ✅✅ -GOVERNMENT SECURITY COMMITTEE (GSC) The National Industrial Security Program Operating Manual (NISPOM) defines a document as "any recorded information, regardless of the nature of the medium or the method or circumstances of recording." The NISPOM requires you to use the same processes to pr otect electronic classified
