NISPOM Revised to Incorporate DSS and GCA Requirements
Client Alert | 1 min read | 08.08.18
On August 1, 2018, DoD published the National Industrial Security Program: Industrial Security Procedures for Government Activities (“Volume 2”), which finally replaces the 1985 Industrial Security Regulation much as the original National Industrial Security Program Operating Manual (NISPOM) had replaced the Industrial Security Manual applicable to contractors. Volume 2 prescribes security practices applicable to U.S. government activities and includes an extended discussion of facility security clearances (FCLs), including examples of documentation that sponsoring agencies can use to justify an FCL, an exception for continued FCL processing even if it cannot be completed in time to qualify the company for participation in a procurement action, and uniform criteria for identification of key management personnel for various business structures. Volume 2 also establishes detailed procedures for DSS oversight of contractor investigations of compromised information, DSS processing of limited access authorization, and DSS requirements for international security programs including foreign government and contractor access to U.S. classified information.
Contacts
Insights
Client Alert | 2 min read | 04.10.26
On April 7, 2026, six federal agencies (FBI, CISA, NSA, EPA, DOE, and U.S. Cyber Command – Cyber National Mission Force) published a joint advisory warning that Iranian-affiliated threat actors are targeting internet-facing OT devices, particularly PLCs. In some cases, the threat actors have caused operational disruptions and financial losses at U.S. critical infrastructure organizations by manipulating software files that contain configuration settings as well as showing false data on hardware and software dashboards and displays.
Client Alert | 4 min read | 04.09.26
Client Alert | 2 min read | 04.09.26
OMB Issues New Policy on Federal IT Transparency and Acquisition Oversight
Client Alert | 3 min read | 04.09.26
Preserve It or Lose It: A Missing Jury Instruction Costs Columbia University $94M in Damages


