Security First & Associates, LLC Security First & Associates, LLC logo
 

Glossary


Following are some terms and definitions you may find useful as you navigate the world of personnel and corporate security.

A | B | C | D | E | F | G | H | I | J | K | L | M
N | O | P | Q | R | S | T | U | V | W | X | Y | Z

A
Access:
The ability and opportunity to obtain knowledge of classified information. An individual may have access to classified information bybeing in a place where such information is kept provided the security measures in effect do not prevent him from doing so.

Accountable Classified Material: Classified material for which control and accounting records must be maintained by the Document Control Center indicating receipt, reproduction, current location and/or disposition for each item, and supported by a continuous internal receipting system. This includes all TOP SECRET material as well as SECRET and CONFIDENTIAL Requests for Proposal (RFP) and Requests for Quote (RFQ) specifying return to originator requirements.

Adjudication: The process directly following a background investigation where the investigation results are reviewed to determine if a candidate should be awarded a security clearance.

Adverse Information: Information which reflects adversely upon the integrity or general character of an employee; or which indicates that the employee's ability to safeguard classified information may be impaired because of the questionable conduct. Examples of adverse information, based on incidents that occur within or outside the company, and which should be reported to the Facility Security Officer include: criminal activities, treatment for mental or emotional disorders, excessive use of intoxicants, use of illegal controlled substances such as marijuana, heroin, cocaine, hashish, etc., and excessive indebtedness or recurring financial difficulties. These examples are not all-inclusive.

AIS Security: The combination of security safeguards required to provide an acceptable level of protection for an Automated Information System and the classified data processed on that system. Safeguards encompass: all hardware/software functions, accountability control, operational and access control procedures, and physical security measures.

Application Software: Computer software program(s) specifically designed to produce usable products or services. (e.g. inventory control system).

Authorized Person: An individual who has a "need-to-know" about certain classified information and is properly cleared to receive the information. Responsibility for determining whether an individual's duties require possession or access to classified information, and whether the individual is authorized to receive it, rests upon the individual who has possession, knowledge, or control of the information involved, and not upon the prospective recipient.

Automated Information System (AIS): An assembly of computer hardware,software, and firmware configured for the purpose of automating the function of calculating, sequencing, storing, retrieving, displaying, communicating or otherwise manipulating data, information and textual material.

C
Classification Guides: Guidance issued by an authorized original classifier that prescribes the level of classification and appropriate declassification instructions for specific information to be classified on a derivative basis. Classification guides are normally provided in the form of a Contract Security Classification Specification.

Classification Management: That function of the Security Organization that is the internal point of contact on all matters relating to the proper assignment of security classification(s) to national security information.

Classified Contract: Any contract that requires, or will require,access to classified information for its performance. A contract may be classified even though the contract document is not classified.

Classified Draft Material: Working Paper(s) refers to handwritten,typed, printed or otherwise produced manuscripts, reproduced excerpts, computer printouts, magnetic tapes, sketches, drawings, illustrations, and artwork that are needed in the production of an item and which contain classified material.

Classified Hardware: Bulky classified material, apparatus or machinery, which require, because of physical characteristics or makeup, special procedures for handling and storage.

Classified Information: See "National Security Information," "Restricted Data," and "Formerly Restricted Data."

Classified Material: Any document, product, or substance on, or in whichclassified information may be recorded or embodied and which requires protection in the interests of national defense, (e.g., books, papers, reports, correspondence, memoranda, charts, maps, photographs, drawings, sketches, sound or voice recordings, photographic negatives, slides; exposed still or movie films, etc.).

Classified Material Storage Container: There are two types, either of which must be approved by the Facility Security Officer prior to being placed in use. A multiple-drawer container with a changeable, built-in, dial-type combination locking device and a General Services Administration (GSA) approved label affixed to the locking drawer. A steel file cabinet with an affixed steel bar, secured by an approved three-position dial-type, changeable combination padlock.

Classified Procurement: Any request for proposal pricing information,advance procurement action, subcontract or purchase order in which access to classified information will, or may be required, during the consummation of the procurement effort.

Classified Waste Material: All incomplete material of a classified nature, e.g. stenographic notes, worksheets, and similar material. Pending destruction, classified waste must be marked and safeguarded according to its classification.

Classified Information Procedures Act: A law passed by Congress that provides a mechanism for the courts to determine what classifiedinformation the defense counsel can access during criminal proceedings.

Classifier: An individual who makes a classification determination andapplies a security classification to information or material. A classifier may be a classification authority or may derivatively assign a security classification based on a properly classified source or a classification guide. Within this context, the company may apply security classification based upon classified source material or a Contract Security Classification Specification.

Clearance: A term used to denote an administrative decision by thegovernment that an individual is eligible for access to classified information of a certain category (and all lower categories).

Closed Area: A controlled area established to safeguard classified material which, because of its size or nature, cannot be adequately protected while in use or be stored in a security container during non-working hours.

Cognizant Security Agency: Agencies of the Executive Branch that have been authorized by E.O. 12829 to establish an industrial security program for the purpose of safeguarding classified information under the jurisdiction of those agencies when disclosed or released to U.S. Industry. These agencies are: The Department of Defense, the Department of Energy, the Central Intelligence Agency, and the Nuclear Regulatory Commission. The Secretary of Defense (SECDEF) has been designated as Executive Agent for the NISP. Heads of the Executive Branches are required to enter into agreements with the SECDEF that establish the terms of the SECDEF's responsibilities on behalf of these agency heads for administration of industrial security on their behalf.

Cognizant Security Office: The office or offices delegated by the Head of a Cognizant Security Agency to administer industrial security in a contractor's facility on behalf of the agency.

Communications Intelligence: Technical and intelligence information derived from foreign communications by other than the intended recipient.

Communications Security (COMSEC): COMSEC refers to protective measures taken to deny unauthorized persons information derived from U.S. governmenttelecommunications relating to national security and to ensure the authenticity of such communications.

Company: Includes the Officers, Directors, Executive Personnel and all other employees.

Compromise: The disclosure of classified information to unauthorized persons.

Compromising Emanations: Unintentionally transmitted intelligence-bearing electronic signals which, if intercepted and analyzed, disclose national security information transmitted, received, handled or otherwise processed by any information-processing equipment (see TEMPEST).

Computer Facility: Comprised of one or more Automated Information Systems (AIS) within a single area.

Computer Hardware: Any physical equipment or device used in theconfiguration and operation of an Automated Information System (AIS). All of the physical components of an AIS – the mainframe housing the CPU, the peripheral devices and cables connecting the system – are collectively referred to as hardware.

Confidential Information: See paragraph 3.73.3

Consultant: A person who is contracted to perform professional ortechnicalservices and who in the performance of those services will require access to classified information.

Continental Limits of the United States: United States territory, including the adjacent territorial waters, located within the North American continent between Canada and Mexico.

Contracting Officer: A designated officer or civilian employee of any government agency with the authority to enter into and administer contracts and make determinations and findings with respect to those contracts. This authority may be delegated to a duly authorized representative and, for the purposes of Security Policies and Procedures, reference to the Contracting Officer shall imply reference to his representative as well.

Contractor: Any industrial, educational, commercial, or other entity that has been granted an facility security clearance by a Cognizant Security Agency.

Control Number: Numerals, letters, and symbols used to identify classified material over which the company maintains control in accordance with government requirements.

Courier: An authorized person designated by the Facility Security Officer to carry classified material to other companies or government agencies.

Critical Nuclear Weapon Design Information (CNWDI): CNWDI is the TOPSECRET Restricted Data or SECRET Restricted Data revealing the theory of operation or design of the components of a thermonuclear or implosion-type fission bomb, warhead, demolition munitions or test device.

CRYPTO: CRYPTO is a marking or a designator identifying all COMSEC keying material that is used to secure or authenticate telecommunications carrying classified, or sensitive but unclassified, government or government derived information, the loss of which could adversely affect the national security interest. This CRYPTO marking also identifies COMSEC equipment and/or computer software containing operational keying variables.

Custodian: Authorized and properly cleared personnel who possess classified material for work and/or storage in their own area. These individuals are accountable for all classified documentation in their possession.

D
Declassification: The determination that classified information no longer requires, in the interest of national security any degree of protection against unauthorized disclosure, together with a removal or cancellation of the classification designations.

Department of Defense: Office of the Secretary of Defense (including all boards, councils, staff and commands), Department of Defense agencies, and the Departments of the Army, Navy and Air Force (including all their
activities).

Differs from Systems: Software which encompasses operating system software and other routines used in an automated information system.

Document: Any recorded information regardless of its physical form orcharacteristics, including, without limitation, written or printed matter, and tapes, maps, charts, paintings, drawings, engravings, sketches, working notes and papers, reproductions of such things by any means or process, and sound, voice, magnetic or electronic recordings in any form.

Document Control Center: A central control station established to record the receipt, distribution, reproduction, transfer, downgrading, incorporation, dispatch and destruction of classified material.

Downgrade: A determination that classified information requires, in the interest of national security, a lower degree of protection against unauthorized disclosure than currently provided, together with a change of the classification designations to reflect such lower degree of protection.

E
Embedded System: An automated information system that performs or controls a function, either in whole or in part, as an integral element of a larger system or subsystem such as, ground support equipment, flight simulators, engine test stands, or fire control systems.

Emergency Condition: A situation which has arisen as the result of a fire, flood, earthquake, civil disaster, bomb threat, or civil disturbance.

Escort: A cleared employee, designated by the contractor, who accompanies a shipment of classified material to its destination. The classified material does not remain in the personal possession of the escort but the conveyance in which the material is transported remains under the constant observation and control of the escort.

Executive Personnel: Those individuals in managerial positions, other than owners, officers, or directors, who administer the operations of the facility.

F
Facility Security Clearance: An administrative determination by the government that a facility is eligible for access to classified information of a certain category (and all lower categories). The clearance does not automatically cover all buildings belonging to, or being used by the company.

Facility Security Officer (FSO): A cleared contractor representative who is a U.S. citizen and is assigned responsibility for directing the company's National Industrial Security Program. The FSO, including his/her subordinates are required to complete minimal security training as deemed appropriate by the government.

Firmware: A method of organizing control of an automated information system through the use of a micro-programmed structure in addition to, or rather than, software or hardware. Micro-programs are composed of micro-instructions, normally resident in read-only memory, to control the sequencing of computer circuits directly at the detailed level of the single machine instruction.

Foreign Government Information: Information that is (i) provided to the United States by a foreign government or governments, an international organization of governments, or any element thereof with the expectation, expressed or implied, that the information, the source of the information, or both, are to be held in confidence; or (ii) produced by the United States, by a joint arrangement with a foreign government or governments, or any element thereof, that requires the information, the arrangement, or both are to be held in confidence.

Foreign Interest: Any foreign government, agency of a foreign government,or representative of a foreign government; any form of business enterprise or legal entity organized, chartered or incorporated under the laws of any country other than the U.S. or its possessions and trust territories, and any person who is not a citizen or national of the United States.

Foreign Nationals: Any person who is not a citizen or national of the United States.

For Official Use Only (FOUO): Information that has not been given asecurity classification pursuant to the criteria of an Executive Order,but which may be withheld from public disclosure under the criteria of the Freedom of Information Act.

Formerly Restricted Data: Classified information jointly determined by the DoE and its predecessors and the DoD to be related primarily to the military utilization of atomic weapons and removed by the DoE from the Restricted Data category pursuant to section 142(d) of the Atomic Energy Act of 1954, as amended, and safeguarded as National Security Information, subject to the restrictions on transmission to other countries and regional defense organizations that apply to Restricted Data.

G
Government Contracting Activity: An element of an agency designated by the agency head and delegated broad authority regarding acquisition functions.

Graphic Arts: Facilities and individuals engaged in performing any consultation, service or the production of any component or end products which contribute to, or result in, the reproduction of classified information. Regardless of trade names or specialized processes, it includes writing, illustrating, advertising services, copy preparation, all methods of printing, finished services, duplicating, photo-copying and film processing activities.

H
Home Office Facility (HOF): The headquarters facility of a multiple facility organization.

I
Industrial Security: That portion of information security which is concerned with the protection of classified information entrusted to U.S. industry.

Information Processing Equipment: Any equipment or device whichelectro-mechanically or electronically processes, reproduces, converts, or otherwise manipulates any form of information. The following equipment is typical: electric typewriters, reproduction copiers, word processors, composing and editing equipment, video displays, automated data processors and telecommunications equipment and systems; including teletype, facsimile and cryptographic equipment, all interfaces, power sources and interconnecting paths which are part of the system or equipment.

Information Security: The result of any system of administrative policies and procedures for identifying, controlling, and protecting from unauthorized disclosure, information the protection of which is authorized by executive order.

Information System Security Representative (ISSR): Contractor security representative responsible for the implementation of automated information system(AIS) security, and operational compliance with the documented security measures and controls at the contractor's facility.

Intelligence: Intelligence is the product resulting from the collection,evaluation, analysis, integration, and interpretation of all available information, that concerns one or more aspects of foreign nations or of areas of foreign operations, and that is immediately or potentially significant to military planning and operations.

Intelligence Information: Information that is under the jurisdiction and control of the Director of Central Intelligence or a member of the Intelligence Community.

Inventory: A physical sighting of each accountable classified document held by an employee, consultant, or resident visitor. Inventories may be conducted by the document custodian, an authorized agent, a security organization representative, or a government security representative, for the purpose of verifying precise accountability for each classified item recorded to the individual.

L
Letter of Consent (LOC): The form used by the Cognizant Security Agency to notify a contractor that a personnel security clearance or a Limited Access Authorization has been granted to an employee.

Limited Access Authorization (LAA): Security clearance authorization to CONFIDENTIAL or SECRET information granted to non-U.S. citizens who require such limited access in the course of their work.

M
Multiple Facility Organization (MFO): A legal entity (soleproprietorship,partnership, corporation, association or trust) that is comprised of two or more facilities.

N
National of the United States: A national of the United States is: (i) A citizen of the United States, or, (ii) A person who, though not a citizen of the United States, owes permanent allegiance to the United States.

National Security: The national defense and foreign relations of the United States.

National Security Information: Information that has been determined under Executive Order 12356 or prior orders to require protection against unauthorized disclosure and is so designated.

TOP SECRET: The designation assigned to national security information or material, the unauthorized disclosure of which reasonably could be expected to cause exceptionally grave damage to the national security.

SECRET: The designation assigned to national security information ormaterial, the unauthorized disclosure of which could reasonably be expected to cause serious damage to the national security.

CONFIDENTIAL: The designation assigned to national security information ormaterial, the unauthorized disclosure of which could reasonably be expected to cause damage to the national security.

NATO Information: Information bearing NATO markings, indicating the information is the property of NATO, access to which is limited to representatives of NATO and its member nations unless proper NATO authority has been obtained to release outside NATO.

Need-to-Know: A determination that a prospective recipient of classified information, in the interests of national security, has a clearance and a requirement for access to, knowledge of, or possession of the classified information in order to perform tasks or services essential to the fulfillment of a classified contract.

Network: An Automated Security System term meaning a network composed of acommunications medium and all components attached to that medium whose responsibility is the transference of information. Such components may include AISs, packet switches, telecommunications controllers, key distribution centers,and technical control devices.

No-Bid: A decision by management not to submit a bid (Proposal) in response to a Request for Proposal (RFP), or Request for Quotation (RFQ), or when the RFP/RFQ is withdrawn by the Contracting Officer prior to the submission of a proposal.

Non-Accountable Classified Material: SECRET and CONFIDENTIAL material that does not require central accountability through the Document Control Center.

Not Releasable to Foreign Nationals (NOFORN): No classified information is releasable to foreign nationals ( see paragraph 3.55 ), including employees who possess Canadian or United Kingdom reciprocal clearances, without written approval of the concerned Cognizant Security Agency. Classified information released by the U. S. is released only on a government to government basis. Information which is categorized as classified and NOFORN is noted as such to insure understanding on the part of contractor employees.

O
Operating System: An integrated collection of computer programs thatcontrols all resources of the automated information system, internally manages job flow through the computer, and plays a central role in assuring the secure operation of the system.

Operations Security (OPSEC): A Department of Defense program aimed atsafeguarding sensitive information, operations and activities which, if exploited by an adversary, would compromise U.S. intentions, military capabilities, and strategic plans.

OPSEC Indicators: Specific vulnerabilities and ways in which the Essential Elements of Friendly Information (EEFI), could be compromised or disclosed to an adversary.

P
Possessions: U.S. Possessions are the Virgin Islands, Guam, American Samoa, Swains Island, Howland Island, Baker Island, Jarvis Island, Midway Islands (this consists of Sand Island and Eastern Island), Kingman Reef, Johnston Atoll, Navassa Island, Swan Island, Wake Island and Palmyra Island.

Prime Contractor: A cleared facility granted a contract by a Government Contracting Activity.

Principal Management Facility (PMF): A cleared facility of a multiple facility organization which reports directly to the home office and whoseprincipal management official has been delegated the responsibility to administer the contractor's industrial security program within a defined geographic or functional area. This facility will function as a home office in relation to its area of responsibility and both cleared and uncleared facilities may be under its jurisdiction.

Protective Security Service: A transportation protective service provided by a cleared commercial carrier qualified by the Military Traffic Management Command (MTMC) to transport SECRET shipments.

Public Disclosure: The passing of information and/or materials pertaining to a classified contract to any member of the public in any manner.

R
Reference Material: Documentary material over which the Government Contracting Activity does not have classification jurisdiction, and did not have classification jurisdiction at the time such material was originated. Most material made available to contractors by the Defense Technical Information Center is reference material as defined.

Regrade: To assign a higher or lower security classification to an item of classified material.

Representative of a Foreign Interest: Citizens or nationals of the United States who are acting as representatives, officials, agents or employees of a foreign government, firm, corporation or person. However, a U.S. citizen or national who is a full time employee appointed by the company to be its representative in the management of a foreign subsidiary in which the corporation has majority ownership, is not considered a representative of a foreign interest.

Reproduction: Any duplicating process including photography and typed or manual copying, including the product of a duplication process.

Restricted Area: A controlled area containing classified material which can be adequately stored during non-working hours, but normally cannot be protected during working hours without access controls.

Restricted Data: All data (information) concerning (1) design,manufacture
or utilization of atomic weapons; (2) the production of special nuclear material; or (3) the use of special nuclear material in the product of energy, but not to include data declassified or removed from the Restricted Data category pursuant to Section 142 of the Atomic Energy Act.

S
Security: The safeguarding of classified information against unlawful or unauthorized dissemination, duplication or observation.

Security Agreement: A signed agreement between the company and the government establishing the necessary requirements to preserve andmaintain the security of the United States while the company is performing work using classified information provided by the government or developed by the company in accordance with government security classification direction.

Security Cognizance: The government office assigned the responsibility for acting for Cognizant Security Agencies in the discharge of industrial security responsibilities described in the National Industrial Security Program Operating Manual.

Security in Depth: A determination made by the Cognizant Security Agency that a contractor's security program consists of layered and complementary security controls sufficient to deter and detect unauthorized entry and movement within the facility.

Security Infraction: Any failure of an employee to comply with security procedures, whether by omission or commission and any security incident which does not meet the criteria outlined under "Security Violation."

Security Requirement Plan: A prepared summary/abstract of thoseportions of the government-furnished security classification guidance specifically pertinent to the identification, classification, marking and protection of classified material in connection with any given technical effort. This plan may include interpretive and amplifying information obtained from representatives of the customer.

Security Violation: Failure to comply with the policy and procedures established by the National Industrial Security Program Operating Manual, which reasonably could result in the loss or compromise of classified information.

Sensitive Compartmented Information: All intelligence information and materials requiring special controls for restricted handling within compartmented channels. These special controls are formal systems of restricted access established to protect the sensitive aspects of sources and methods and analytical procedures of foreign intelligence programs.

Short Title: An identifying combination of letters and numbers assigned to a publication or equipment for purposes of brevity.

Source Document: A document, other than a classification guide, from which information is extracted for inclusion in another document. The classification of the information extracted is determined by the classification markings shown in/on the source document.

Special Access Program: Any program that is established to control access,distribution, and to provide protection for particularly sensitive classified information beyond that normally required for TOP SECRET, SECRET, or CONFIDENTIAL information. A Special Access Program can be created or continued only as authorized by a senior agency official delegated such authority pursuant to E.O. 12356.

Standard Practice Procedures: A document(s) prepared by a contractor that implements the applicable requirements of the National Industrial Security Operating Manual for the operations and involvement with classified information at the contractor's facility.

Subcontractor: A cleared facility granted a contract by a prime contractor.

System Software: A set of computer programs, procedures and associated documentation that control, monitor or facilitate use of the automated information system. These include operating systems, programming languages, utility programs, security packages, and commercial application packages such as word processing and graphics design.

T
Technical Data: Information governed by the International Traffic in Arms Regulation (ITAR) and the Export Administration Regulation (EAR). The export of technical data that is inherently military in character is controlled by the ITAR, 22 CFR 120.1-130.17 (1987). The export of technical data that has both military and civilian uses is controlled by the EAR, 15 CFR 368.1-399.2 (1987).

TEMPEST: An unclassified short name referring to investigations and studies of compromising emanations. It is often used synonymously for the term "compromising emanations," e.g. TEMPEST tests or Tempest inspections.

Temporary Help Supplier: A subcontractor who dispatches personnel on his payroll to perform work on the premises of a cleared contractor or Cognizant Security Agency.

Transmission: The sending of information from one place to another by radio, microwave, laser, or other nonconnective methods, as well as by cable, wire, or other connective medium. Transmission also includes movement involving the actual transfer of custody and responsibility for a document or other classified material from one authorized addressee to another.

U
Unauthorized Person: A person not authorized to have access to specific classified information, according to the provisions of these procedures.

Unclassified: A term used in connection with classified material to identify certain information which does not require security protection.

Upgrade: A determination that certain classified information requires, in the interest of the national security, a higher degree of protection against unauthorized disclosure than currently provided, coupled with a changing of the classification designation to reflect the higher category.

W
Working Hours: The period of time when (i) there is present in the specific area where classified material is located, a work force on a regularly scheduled shift, as contrasted with employees working within an area on an overtime basis outside of the scheduled workshift; and (ii) the number of employees in the scheduled work force is sufficient in number and so positioned to be able to detect and challenge the presence of unauthorized personnel. This would, therefore, exclude janitors, maintenance personnel, and other individuals whose duties require movement throughout the facility.