Source: http://intelligencelaw.com/intelligence_law/law_library/admin/32_cfr_part_2004.html
Timestamp: 2017-10-23 08:01:11
Document Index: 317471858

Matched Legal Cases: ['art 2004', 'ART 2004', 'ART 2004', '§ 2004', '§ 2004', '§ 2004', '§ 2004', '§ 2004']

Administrative Law - CFR - 32 CFR Part 2004: National Industrial Security Program Directive No. 1
32 CFR PART 2004:
32 CFR PART 2004—NATIONAL INDUSTRIAL SECURITY PROGRAM DIRECTIVE NO. 1
32 CFR 2004.5: Definitions.
32 CFR 2004.10: Responsibilities of the Director, Information Security Oversight Office (ISOO) [102(b)].
32 CFR 2004.11: Agency Implementing Regulations, Internal Rules, or Guidelines [102(b)(3)].
32 CFR 2004.12: Reviews by ISOO [102(b)(4)].
32 CFR 2004.20: National Industrial Security Program Operating Manual (NISPOM) [201(a)].
32 CFR 2004.21: Protection of Classified Information [201(e)].
32 CFR 2004.22: Operational Responsibilities [202(a)].
32 CFR 2004.23: Cost Reports [203(d)].
2004.5: Definitions.
2004.10: Responsibilities of the Director, Information Security Oversight Office (ISOO) [102(b)].
2004.11: Agency Implementing Regulations, Internal Rules, or Guidelines [102(b)(3)].
2004.12: Reviews by ISOO [102(b)(4)].
2004.20: National Industrial Security Program Operating Manual (NISPOM) [201(a)].
2004.21: Protection of Classified Information [201(e)].
2004.22: Operational Responsibilities [202(a)].
2004.23: Cost Reports [203(d)].
2004.24: Definitions.
Executive Order 12829, January 6, 1993, 58 FR 3479, as amended by Executive Order 12885, December 14, 1993, 58 FR 65863.
71 FR 18007, Apr. 10, 2006, unless otherwise noted.
(c) “Contractor” means any industrial, education, commercial, or other entity, to include licensees or grantees that has been granted access to classified information. Contractor does not include individuals engaged under personal services contracts.
[71 FR 18007, Apr. 10, 2006. Redesignated and amended at 75 FR 17306, Apr. 6, 2010]
Bracketed references pertain to related sections of Executive Order 12829, as amended by E.O. 12885.
(a) Reviews and Updates.
All implementing regulations, internal rules, or guidelines that pertain to the NISP shall be reviewed and updated by the originating agency, as circumstances require. If a change in national policy necessitates a change in agency implementing regulations, internal rules, or guidelines that pertain to the NISP, the agency shall promptly issue revisions.
(b) Reviews by ISOO.
The Director, ISOO, shall review agency implementing regulations, internal rules, or guidelines, as necessary, to ensure consistency with NISP policies and procedures. Such reviews should normally occur during routine oversight visits, when there is indication of a problem that comes to the attention of the Director, ISOO, or after a change in national policy that impacts such regulations, rules, or guidelines. The Director, ISOO, shall provide findings from such reviews to the responsible department or agency.
(a) Designation of Cognizant Security Authority (CSA).
The CSA for a contractor shall be determined by the preponderance of classified contract activity per agreement by the CSAs. The responsible CSA shall conduct oversight inspections of contractor security programs and provide other support services to contractors as necessary to ensure compliance with the NISPOM and that contractors are protecting classified information as required. DoD, as Executive Agent, shall serve as the CSA for all Executive Branch departments and agencies that are not a designated CSA. As such, DoD shall:
Executive Branch departments and agencies that issue contracts requiring industry to have access to classified information and are not a designated CSA shall:
(c) National Interest Determinations (NIDs).
Executive branch departments and agencies shall make a National Interest Determination (NID) before authorizing contractors, cleared or in process for clearance under a Special Security Agreement (SSA), to have access to proscribed information. To make a NID, the agency shall assess whether release of the proscribed information is consistent with the national security interests of the United States.
(iii) The GCA(s) shall determine, within 30 days, per § 2004.22(c)(4)(i), or 60 days, per § 2004.22(c)(4)(ii), whether release of the proscribed information is consistent with national security interests unless the GCA requires additional time for the NID process due to special circumstances. The GCA shall formally advise the CSA, if special circumstances apply.
(iii) If the NID decision is not provided within 30 days, per § 2004.22(c)(4)(i), or 60 days, per § 2004.22(c)(4)(ii), the CSA shall intercede to request the GCA to provide a decision. In such instances, the GCA, in addition to formally notifying the CSA of the special circumstances, per § 2004.22(c)(1)(iii), will provide the CSA or its designee with updates at 30-day intervals. The CSA, or its designee, will, in turn, provide the contractor with updates at 30-day intervals until the NID decision is made.
[71 FR 18007, Apr. 10, 2006 as amended at 75 FR 17306, Apr. 6, 2010]