NAESOC Resources

The National Access Elsewhere Security Oversight Center (NAESOC) is a centralized office providing consolidated and consistent oversight and security management for select access elsewhere companies in the National Industrial Security Program (NISP). This office handles communications, guidance, and education for its assigned facilities and associated Government Partners. The relationships and partnerships created by the new oversight center optimize communications, threat reporting, and vulnerability identification and mitigation.

Companies assigned to the NAESOC are not assigned to an ISR. Instead, the entire NAESOC team provides assistance and oversight to the company. In order to send correspondence, you can send us a NISS message, reach us via phone at (878) 274-1800 or email us at DCSA.NAESOC.GeneralMailbox@mail.mil.

It is very important to identify your local CI Special Agent (CISA) in NISS Some of the information CI shares with Reps is for information only and should not be released to industry. CI issues should be directly coordinated with your local CISA. If you require assistance in locating your CISA, please reach out to the NAESOC Help Desk.

Instructions for updating you facility can be found in the NISS Knowledge Base with the Job Aid, “Submitting a Facility Profile Update Request”

• NAESOC FSOs will benefit from completion of FSO Orientation for Non-Possessing Facilities (IS020.CU) curriculum.

• Try the Industrial Security Short: You're a new FSO: Now What? ISS0047. CDSE updated this Industrial Security short that introduces the CDSE Facility Security Officer (FSO) program (minimum of 13 eLearning courses required for all FSOs). This short also provides newly appointed FSOs a high-level overview of their responsibilities and guides them to essential resources. (https://www.cdse.edu/Training/Security-Shorts/Industrial-Security-Shorts/)

• Here is a collection of Industry tools at your fingertips.

• And you can find the FSO Toolkit here

 

You can start with a Best Practice of using the "Self Inspection Handbook for Contractors" which can be found at https://www.dcsa.mil/mc/isd/tools/. In it you will find eight checklists that are common to ALL NAESOC companies:

- Procedures [117.7]
- Reporting Requirements [117.8]
- Entity eligibility determination for access... [117.9]
- (Contractor) eligibility for access to classified... [117.10]
- Foreign Ownership, Control, or Influence (FOCI) [117.11]
- Security training and briefings [117.12]
- Classification [117.13]
- Visits and meetings [117.16]

Feel free to review the entire handbook before you begin it.  It is full of Best Practices and ideas about how to ensure you understand and can support your security program.
The NISS Knowledge Base has a NISS guide for submitting the self-inspection. It can be found here:

• Log into NISS
• Select the Knowledge Base from the list of "Quick Links"
• In the search bar, type "Self"
• Open the link "Submitting an Annual Self-Inspection (Dec 2021)" to access these instructions.

Remember: In accordance with 32 CFR Part 117 NISPOM Rule, 117.7(h)(2)(ii), you must prepare a formal report describing the self-inspection, its findings, and resolution of issues found.

In order to be briefed for NATO, CNWDI or COMSEC access, you must have an active, valid DD Form 254 showing justification for the access requirement.
A reminder for the volume of facilities requesting recurring updates (Initial NATO Brief for the FSO, CNWDI, etc.): It may speed up your request if you use the Facility Profile Update (FPU) tool to maintain a current list of active classified contracts in your NISS profile. The FPU is listed in the Quicklinks on the NISS homepage. Simply click the link and browse to the "Customers and Programs" section to manage your list of DD254s.
Once the Facility Profile Update is completed, please send a signed Initial NATO briefing, COMSEC briefing, Controlled Cryptographic Information (CCI) briefing or CNWDI to the NAESOC via email or NISS message. Include the reference number for the DD Form 254 which authorizes it.

Access the Foreign visit Brochure. You can also email us for specific guidance.

The change condition package shall include the purchase agreement/Member Interest transfer, an updated operating agreement, updated legal organization chart, exclusion resolutions (as applicable) as well as any additional business documentation to support subsequent changes to the facility post acquisition. If there is any foreign ownership associated with the acquiring company, please provide immediate notice so that we can begin the FOCI action plan prior to the close of the acquisition.

Monthly briefings will take place on the second Thursday of each month, with locations remaining unchanged unless there are IT issues. Themes are subject to change, and attendees are requested 30 days before the event. A registration page will be sent listing venues hosting the SVTC.

Please continue to monitor the DCSA website for updated information. The following FAQ is the current guidance: "Are contractors in states that have enacted laws authorizing the medical use of marijuana, or in states that have enacted laws authorizing the use, possession, production, processing and distribution of marijuana, required to report use, possession, production, processing, or distribution of marijuana by cleared contractor personnel? YES, any of these activities must be reported as adverse information in accordance with NISPOM paragraph 1-302.a." The same guidance applies for CBD.

No. However, all new DD Form 254s must reflect NAESOC and the NAESOC address.

You will need to request the FCV Industry role in NISS to have ability to verify FCLs. You will then be able to verify that FCL within NISS.

Resources for Controlled Unclassified Information (CUI) have been published. You can find those here.

Answer on the Cybersecurity Maturity Model Certification (CMMC) can be found on the DCSA website at: Controlled Unclassified Information.

If necessary. Assignment to the NAESOC is based on many factors, including risk criteria. If specific thresholds are exceeded, your facility will be considered for assignment to a local field office.

32 CFR section 117.12 Security Training and Briefings