FSOs should submit reports for personnel with a security clearance, in-process for a clearance, or a that have a clearance eligibility that could be reinstated, in accordance with the reporting requirements in paragraph 1-302 of the National Industrial Security Program Operating Manual (NISPOM). DISS provides the incident report capability to facilitate this reporting. At this time, the FSO should mark report as "final" rather than "initial".
It is strongly recommended incident reports be submitted via DISS. The system was designed to accommodate incident reporting. Submitting incidents via DISS provides immediate assurance of receipt and eliminates the manual handling by multiple individuals when hard copy requests are received and entered into DISS by adjudication staff.
To facilitate quicker processing of incident reports, the report must include the basic information covering "who" (who was involved; for example: subject, law enforcement agency, court name), "what" (what is/was the incident), "where" (where did the incident happen; for example: city, state), and "when" (when did the incident occur). When submitting an incident report, refer to the questions on the SF-86 relating to the incident and provide as much of the information as possible relative to those questions. An adjudicator will review the submitted report and determine if the item may be closed and a new eligibility adjudication entered, or if a partial investigation is required to provide the adjudicator sufficient information to make an adjudication. After the incident report is reviewed by the adjudicator, the FSO may receive a request for the person to submit a new SF 86, Questionnaire for National Security Positions; this does not happen in all cases. If such a request is made, the FSO should initiate the request to the employee using DISS. If the request is not received by VRO within 30 days from the date of request, VRO will administratively withdraw the eligibility determination by changing the eligibility to Loss of Jurisdiction. At that time, all access must stop.
Sources from which an incident report may be received:
- Facility Security Officers (FSO)
- Other Government Agencies
- Investigative process
- Another CAF's decision to Deny, Revoke or Suspend a (Federal) security clearance
- Anyone who knows the person
If there is a question on the ability for the person to have continued access when an incident report is reflected, contact the Knowledge Center for assistance.