30 April 1997
Sources: http://www.dis.mil/divs/nisb/nispom/manual.htm
and printed publication

The entire manual is available Zipped: http://cryptome.org/nispom/nispom.zip (203K)


DoD 5220.22-M

National Industrial Security Program
Operating Manual
(NISPOM)

·

January 1995

·

Department of Defense
Department of Energy
Nuclear Regulatory Commission
Central Intelligence Agency

For sale ($11.00) by the U.S. Government Printing Office
Supperintendent of Documents, Mail Stop: SSOP, Washington, DC 20402-9328

ISBN 0-16-045560-X


TABLE OF CONTENTS


CHAPTER 1. GENERAL PROVISIONS AND REQUIREMENTS (32K)

     Section 1. Introduction                                1-1-1
     Section 2. General Requirements                        1-2-1
     Section 3. Reporting Requirements                      1-3-1


CHAPTER 2. SECURITY CLEARANCES (55K)

     Section 1. Facility Clearances                         2-1-1
     Section 2. Personnel Clearances                        2-2-1
     Section 3. Foreign Ownership, Control, or 
                Influence (FOCI)                            2-3-1


CHAPTER 3. SECURITY TRAINING AND BRIEFINGS (4K)

     Section 1. Security Training and Briefings             3-1-1


CHAPTER 4. CLASSIFICATION AND MARKING (37K)

     Section 1. Classification                              4-1-1
     Section 2. Marking Requirements                        4-2-1


CHAPTER 5. SAFEGUARDING CLASSIFIED INFORMATION (78K)

     Section 1. General Safeguarding Requirements           5-1-1
     Section 2. Control and Accountability                  5-2-1
     Section 3. Storage and Storage Equipment               5-3-1
     Section 4. Transmission                                5-4-1
     Section 5. Disclosure                                  5-5-1
     Section 6. Reproduction                                5-6-1
     Section 7. Disposition and Retention                   5-7-1
     Section 8. Construction Requirements                   5-8-1
     Section 9. Intrusion Detection Systems                 5-9-1


CHAPTER 6. VISITS and MEETINGS (12K)

     Section 1. Visits                                      6-1-1
     Section 2. Meetings                                    6-2-1


CHAPTER 7. SUBCONTRACTING (8K)

     Section 1. Prime Contractor Responsibilities           7-1-1


CHAPTER 8. AUTOMATED INFORMATION SYSTEM SECURITY (53K)

     Section 1. Responsibilities                            8-1-1
     Section 2. Accreditation and Security Modes            8-2-1
     Section 3. Controls and Maintenance                    8-3-1
     Section 4. Networks                                    8-4-1


CHAPTER 9. SPECIAL REQUIREMENTS (23K)

     Section 1. Restricted Data and Formerly 
                Restricted Data                             9-1-1
     Section 2. DoD Critical Nuclear Weapon Design 
                Information                                 9-2-1
     Section 3. Intelligence Information                    9-3-1


CHAPTER 10. INTERNATIONAL SECURITY REQUIREMENTS (86K)

     Section 1. General and Background Information          10-1-1
     Section 2. Disclosure of U.S. Information to 
                Foreign Interests                           10-2-1
     Section 3. Foreign Government Information              10-3-1
     Section 4. International Transfers                     10-4-1
     Section 5. International Visits and Control of 
                Foreign Nationals                           10-5-1
     Section 6. Contractor Operations Abroad                10-6-1
     Section 7. NATO Information Security Requirements      10-7-1


CHAPTER 11. MISCELLANEOUS INFORMATION (12K)

     Section 1. TEMPEST                                     11-1-1
     Section 2. Defense Technical Information Center        11-2-1
     Section 3. Independent Research and Development        11-3-1


APPENDICES

     Appendix A. Organizational Elements for Industrial
                 Security (12K)                             A-1

     Appendix B. Foreign Marking Equivalents (6K)           B-1

     Appendix C. Definitions (35K)                          C-1

     Appendix D. Acronyms (10K)                             D-1


INDEX (58K) [Not in printed version]


SUPPLEMENTS TO THE NISPOM [None]

     Document
     NISPOM Supplement   TBD


FOREWORD


On behalf of the Secretary of Defense as Executive Agent, pursuant
to Executive Order 12829, "National Industrial Security Program"
(NISP), and with the concurrence of the Secretary of Energy, the
Chairman of the Nuclear Regulatory Commission, and the Director of
Central Intelligence, I am pleased to promulgate the inaugural
edition of the NISP Operating Manual (NISPOM). The NISPOM was
developed in close coordination with industry and it represents a
concerted effort on behalf of hundreds of individuals throughout
the Executive Branch and industry.

I believe the NISPOM represents the beginning of a new industrial
security process which is based on sound threat analysis and risk
management practices and which establishes consistent security
policies and practices throughout the government. I also believe it
creates a new government and industry partnership which empowers
industry to more directly manage its own administrative security
controls.

The President has recently created a Security Policy Board to
ensure the protection of our nation's sensitive information and
technologies within the framework of a more simplified, uniform and
cost effective security system. The Security Policy Board and the
Executive Agent will continue the process of consultation with
industry on the NISPOM to make further improvements, especially in
the complex and changing areas of automated information systems
security and physical security.

All who use the NISPOM should ensure that it is implemented so as
to achieve the goals of eliminating unnecessary costs while
protecting vital information and technologies. Users of the NISPOM
are encouraged to submit recommended changes through their
Cognizant Security Agency to the Executive Agent's designated
representative at the following address:

     Department of Defense
     Assistant Secretary of Defense for 
     Command, Control, Communications and Intelligence
     ATTN: DASD(I&S)/CI&SP, Room 3E160
     6000 Defense Pentagon 
     Washington, D.C. 20301-6000

The NISPOM replaces the Department of Defense Industrial Security
Manual for Safeguarding Classified Information, dated January 1991.


John M. Deutch
Deputy Secretary of Defense