NCMS, Inc.

What is MAPS?

MAPS is a compilation of forms, working aids, tools, briefings, samples, and various other security-related documents donated to this site by the members of the NCMS. The intent of MAPS is to provide you with some boilerplate documents around which you can tailor a product that meets your particular needs with only a minimum amount of effort.

The Society sincerely appreciates the efforts of those members and Chapters who have contributed to the MAPS Project. A special kudo is extended to Mr. Neil Self from the Mid-South Chapter who originally suggested the MAPS idea. MAPS is a living collection of documents and will be updated as needed. New contributions to the MAPS collection are always welcome. Contact the Executive Secretary for instructions on how and where to send your submission.

In what format will I find the MAPS documents?

We have tried to provide the documents in a limited but consistent and common format - thus you will find them in Power Point, Microsoft Word, or Rich Text. Most presentation and word processing software packages will convert these formats to one you may need.

How do I use the MAPS?

The MAPS collection of documents is organized to mirror the sequence of the NISPOM. That sequence is as follows:

• Chapter 1 General Provisions and Requirements
  
• Chapter 2 Security Clearances
  
• Chapter 3 Security Training and Briefings
  
• Chapter 4 Classification and Markings
  
• Chapter 5 Safeguarding Classified Information
  
• Chapter 6 Visits and Meetings
  
• Chapter 7 Subcontracting
  
• Chapter 8 Automated Information System Security
  
• Chapter 9 Special Requirements (RD and FRD, CNWDI, and Intelligence Information)
  
• Chapter 10 International Security Requirements
  
• Chapter 11 Miscellaneous Information (TEMPEST, DTIC and IR&D)
  

• Self-Inspection Guide for Collateral Operations
  
  
• Order Defense Hotline Posters
  
  
• Computing Your Facility Category
  
  
• Administrative Inquiry Checklist

• Request for Cleared Facility Status The request for cleared facility status can be obtained from DSS via their website (click above). Once on the page, go to "Central Verification Activity (CVA) to find the necessary information on cleared facilities, including Clearance Level, Mailing Address, FSO Information, and Classified Storage Level. This information is only provided to the following groups: Cleared facilities, Department of Defense elements, government agencies under the NISP, and military contracting and security authorities. A password is required to access the CVA. Apply for one via email at account_request@mail.dss.mil. Include your name, organization, phone number, and mailing address. A cleared facility under the NISP should provide a CAGE Code. Phone inquiries can be made at 1-888-282-7682.
  
  
• Form for Listing Key Management Personnel
  
  
• Sample Resolution for Exclusion of Certain Directors or Officers Sometimes Key Management Personnel, as determined by the CSA, may be excluded from classified access at a facility. When this is the case, the FSO will initiate action to have the formal exclusion resolution reflected in the minutes of the Board of Directors or similar executive body. This is a sample resolution for exclusion.
  
  
• Security Staff Training: Security Clearances and Personnel Security
  
  

• NATO Briefing
  
  
• "The Foreign Intelligence Threat"
  • Sometimes your cleared employees will be attending Seminars where foreign nationals will be in attendance, or they will be traveling overseas, or you just want to raise the level of their awareness of the intelligence collection threat. To do this, you should provide the employees with a "Defense Threat Briefing". Two good resources to support a defensive threat briefing is the DSS' "Annual Technology Collection Trends in the US Defense Industry" (which you can find on their web page) and the NACIC's "Annual Report to Congress on Foreign Economic Collection and Industrial Espionage" (which can be found on their web page). A third resource, prepared by DSS folks is this "Introduction to the Foreign Intelligence Threat" paper. If there is a definite reason for administering a Defense Threat Briefing (e.g., the person is attending a conference which will be frequented by foreign nationals or he/she is traveling overseas), you might want to think about documenting the fact that you gave them a briefing and place a memo in their file.
  
  
• "Debriefing From Access to Classified Information"
  • Although we are no longer required to document our debriefings on the SF312, we are still required to at least orally debrief our employees when they no longer need to access classified information. This debriefing is a sample of things to be addressed during the debriefing and can be used if you do want to document your debriefing."
  
  
• Year 2002 Annual Security Refresher Briefing (Word)
  
  
• COMSEC Briefing (Word)
  
  
• Year 1999 Annual Security Refresher Briefing (Word)
  
  
• Year 1999 Annual Security Refresher Briefing (booklet format - rtf)
  
  
• Year 2000 Security Refresher Briefing (Word)
  
  
• Year 2001 Security Refresher Briefing (Word)
  
  

• EO 12958 Classified National Security Information Handbook (Word)
  
  
• Security Staff Training: Marking Classified Document (Word)
  
  

• "Approved Shredders"
  
  • The National Security Agency (NSA) maintains a list of equipments which have been tested and approved as meeting the requirements for routine destruction of classified and sensitive paper, INFOSEC, COMSEC, and SIGINT materials, including high tensile strength paper tape, and paper-mylar-paper key tape. This list can be found in Annex B to NSTISSI No. 4004. Queries on these or other equipments should be addressed to NSA at (301) 688-6816. FYI, the tolerance for crosscut shredders used to destroy SCI is 1/32" X 1/2" with a 1/64" tolerance. Ensure the shredder you plan to buy meets the required cutting tolerances and is on the NSA's approved shredder list.
  
  
• Instructions For Changing Safe & Lock Combinations (Word)
  
  
• Security Staff Training: Safeguarding Classified Information (Word)
  
  
• Where to Get Clips for Your False (Drop) Ceiling in a Closed Area: (Word)
  
  

• Visits and Meetings (Word)
  
  

• Preparation of a Sub-Contract DD Form 254 (Word)
  
  
• Common Security Services Agreement (Word)
  
  

• AIS Security Seal Vendors and Guidelines (Word)
  
  
• Audit Checklist (Word)
  
  
• Central Florida ISAC NISPOM Chapter 8 PowerPoint
  
  
• Clearing and Sanitization Matrix (Word)
  
  

  Florida Association of Information Systems Security Reps (FAISSR)

  Acronyms and Definitions (rtf)

  System Protection File (rtf)
  
  Master System Security Plan (rtf)
  
  Government to Contractor MOU & Network Security Plan (rtf)
  
  Contractor to Contractor Network Security Plan (rtf)
  
  Plan Concordance (rtf)
  
  Trusted Downloading Procedures (rtf)
  
  

• Implementing the New NISPOM Chapter 8 (PowerPoint)
  
  
• Information System Security (Word)
  
  
• Information System Security for IS Security Offices and System Administrators (PowerPoint)
  
  
• Information System Security for Users of Classified Information Systems (PowerPoint)
  
  
• Master System Security Plan (SSP) Compliant with the NISPOM (rtf)
  
  
• Network Contamination Recovery Procedure (Word)
  
  
• Procedures for Producing Unclassified Files from a Classified AIS (Word)
  
  
• System Security Plan Checklist (Word)
  
  
• Technical Requirements (from the FAISSR) PowerPoint)
  
  
• Technical Requirements for Protection Level One (PowerPoint)
  
  
• Template for the FAISSR Version 7.1 Plan (Word)
  
  
• Writing a Master System Security Plan PowerPoint)
  
  

• Sample Emergency Action Plan for a SCIF (Word)
  
  
• CNWDI Briefing (Word)
  
  
• SSO/CSSO Self Inspection Guide (Word)
  
  
• SSO/CSSO Self Inspection Program Guide Checklist (Word)
  
  

• Handling Foreign Government Restricted Information (Word)
  
  
• Safeguarding Foreign Government Information Briefing (Word)
  
  
• Ten Things to Consider Before Making a Decision To Hire A Foreign National (Word)
  
  

Chapter 11 - Miscellaneous

• Sigma Categories (Weapon Data Access Designators) (Word)