nooks logo text

NOOKS TurboFCL

Facility Security Officer

Roles & Responsibilities

The Facility Security Officer (FSO) plays a critical role in ensuring the security of classified information at a facility, particularly when applying for and after being granted a Facility Clearance (FCL). The FSO is the primary point of contact between the facility and the government, ensuring compliance with security regulations and safeguarding classified materials.

FSO Toolkit at CDSE.edu

The CDSE is the Center for Development of Security Excellence

During the FCL Application Process

1. Completing the FCL Sponsorship Package

FCL Sponsorship: A representative from the U.S. Government or a Prime Contractor is responsible for submitting an FCL request (formally, using the form DD-254). This request is submitted to the Defense Counterintelligence and Security Agency (DCSA) for almost all cleared contracts (although some clearances are granted by Department of Energy or other Cognizant Security Offices, in rare circumstances). Sponsorship involves identifying the necessary classification levels involved, the locations at which classified work will be performed, and justifying the need for an FCL based upon the work to be performed.

Once DCSA has processed the sponsorship, they will require significant documentation of the company's background, operations, and legal status. The facility's FSO is responsible for preparing the necessary documentation and filling out the SF-328 and DD-441 forms on behalf of the facility, and managing communication with DCSA.

Identify key personnel: The FSO ensures that key personnel, such as the company's executives and other individuals with access to classified information, complete the appropriate background checks (e.g., National Agency Check with Inquiries or other required investigations).

2. Assessing and Addressing Security Requirements

Prepare facility security plan: The FSO will develop or update the facility's security plan to ensure it meets the requirements set by the Department of Defense (DoD) or other federal agencies. This includes designing physical security measures, establishing personnel security protocols, and ensuring compliance with safeguarding and access control regulations.

Coordinate with security contractors: If necessary, the FSO may work with contractors or third-party security vendors to implement physical and information security measures, including installation of security equipment (e.g., alarms, cameras, safes).

3. Training and Awareness

Conduct security training: The FSO must ensure that employees are briefed on security protocols and educated about their responsibilities for protecting classified information. Training typically includes understanding security clearances, handling classified material, and emergency procedures.

Conduct self-assessments: Prior to submission, the FSO will often conduct internal audits or assessments of the facility's current security posture to identify gaps or areas that need improvement before formal review.

4. Coordinate with Government Agencies

The FSO will collaborate with the security representatives from the government agencies requesting the FCL. They will respond to any queries or requests for additional information, including audits or site visits from security officials.

The FSO may assist the agency with any on-site visits or inspections as part of the FCL approval process.

Training

For Possessing FCL

FSOs are required to take and pass the corresponding CDSE STEPP training course for their non-possessing or possessing contract:

For Non-Possessing FCL

This eLearning curriculum provides students with the information needed to prepare them for the duties and responsibilities of an FSO in a contractor facility participating in the National Industrial Security Program (NISP).

  • Length: 26.5 hours (includes courses and exams)
  • Exam Requirements: Passing score of 75% on exams and performance exercises at the end of the course in order to print a certificate of successful completion.
  • System Requirements

Annual Training

See CDSE Security Awareness HUB for frequently assigned courses, includes mandatory annual training, no registration needed

After the FCL is Granted

1. Maintain Security Program Compliance

Enforce the Facility Security Plan: Once the FCL is granted, the FSO ensures that the facility adheres to the security plan and complies with all federal, DoD, and agency-specific security regulations. This includes ensuring that access to classified information is controlled, personnel security is regularly maintained, and classified materials are properly safeguarded.

Monitor for changes: The FSO must continuously monitor the facility's operations to ensure compliance, particularly if there are any changes in personnel, physical infrastructure, or security threats.

2. Personnel Security Management

Manage security clearances: The FSO maintains and updates records of all individuals with access to classified information. This involves submitting clearance requests, ensuring employees are appropriately cleared for access, and handling any issues related to the revocation or modification of clearances.

Conduct personnel security briefings and debriefings: The FSO provides initial security briefings for employees before they are granted access to classified material and conducts debriefings when they leave the organization or no longer require access.

3. Safeguarding Classified Information

Control access to classified materials: The FSO ensures that classified materials are stored, handled, and transported according to required security protocols (e.g., use of safes, proper labeling, and limited access).

Oversee classification and declassification processes: The FSO may be responsible for reviewing and determining whether information should be classified or declassified in accordance with agency guidelines.

4. Ongoing Training and Education

Security awareness programs: The FSO organizes ongoing security training for all personnel, ensuring they are updated on current threats, regulations, and best practices in information security.

Conduct refresher courses: These may include topics like handling of classified materials, recognizing and reporting security incidents, and understanding the consequences of security violations.

5. Audits and Inspections

Prepare for government inspections: The FSO is responsible for preparing the facility for regular security inspections by government representatives. This could include ensuring that security systems are functional, classified materials are properly stored, and the personnel security program is up-to-date.

Conduct internal audits: The FSO often performs internal reviews and audits to ensure ongoing compliance with the security regulations.

6. Incident Reporting and Response

Respond to security incidents: If a security breach or incident occurs, the FSO is responsible for investigating the situation, implementing corrective actions, and reporting the incident to the appropriate authorities (e.g., DCSA, law enforcement).

Maintain incident response protocols: The FSO ensures that the facility has a robust incident response plan in place, including reporting procedures, notification requirements, and follow-up actions.

7. Ongoing Facility Clearance Maintenance

Renewal and updates: The FSO ensures that the FCL remains valid and up to date. This could involve submitting required updates to personnel clearances, physical security measures, or any changes to the facility's security posture.

Compliance with changing regulations: The FSO stays updated on any changes to security regulations and ensures the facility complies with new or revised guidelines.