30 April 1997
Sources:
http://www.dis.mil/divs/nisb/nispom/manual.htm
and printed publication
The entire manual is available Zipped: http://cryptome.org/nispom/nispom.zip (203K)
DoD 5220.22-M
·
January 1995
·
Department of Defense
Department of Energy
Nuclear Regulatory Commission
Central Intelligence Agency
For sale ($11.00) by the U.S. Government Printing Office
Supperintendent of Documents, Mail Stop: SSOP, Washington, DC 20402-9328
ISBN 0-16-045560-X
TABLE OF CONTENTS
CHAPTER 1. GENERAL PROVISIONS AND REQUIREMENTS (32K) Section 1. Introduction 1-1-1 Section 2. General Requirements 1-2-1 Section 3. Reporting Requirements 1-3-1 CHAPTER 2. SECURITY CLEARANCES (55K) Section 1. Facility Clearances 2-1-1 Section 2. Personnel Clearances 2-2-1 Section 3. Foreign Ownership, Control, or Influence (FOCI) 2-3-1 CHAPTER 3. SECURITY TRAINING AND BRIEFINGS (4K) Section 1. Security Training and Briefings 3-1-1 CHAPTER 4. CLASSIFICATION AND MARKING (37K) Section 1. Classification 4-1-1 Section 2. Marking Requirements 4-2-1 CHAPTER 5. SAFEGUARDING CLASSIFIED INFORMATION (78K) Section 1. General Safeguarding Requirements 5-1-1 Section 2. Control and Accountability 5-2-1 Section 3. Storage and Storage Equipment 5-3-1 Section 4. Transmission 5-4-1 Section 5. Disclosure 5-5-1 Section 6. Reproduction 5-6-1 Section 7. Disposition and Retention 5-7-1 Section 8. Construction Requirements 5-8-1 Section 9. Intrusion Detection Systems 5-9-1 CHAPTER 6. VISITS and MEETINGS (12K) Section 1. Visits 6-1-1 Section 2. Meetings 6-2-1 CHAPTER 7. SUBCONTRACTING (8K) Section 1. Prime Contractor Responsibilities 7-1-1 CHAPTER 8. AUTOMATED INFORMATION SYSTEM SECURITY (53K) Section 1. Responsibilities 8-1-1 Section 2. Accreditation and Security Modes 8-2-1 Section 3. Controls and Maintenance 8-3-1 Section 4. Networks 8-4-1 CHAPTER 9. SPECIAL REQUIREMENTS (23K) Section 1. Restricted Data and Formerly Restricted Data 9-1-1 Section 2. DoD Critical Nuclear Weapon Design Information 9-2-1 Section 3. Intelligence Information 9-3-1 CHAPTER 10. INTERNATIONAL SECURITY REQUIREMENTS (86K) Section 1. General and Background Information 10-1-1 Section 2. Disclosure of U.S. Information to Foreign Interests 10-2-1 Section 3. Foreign Government Information 10-3-1 Section 4. International Transfers 10-4-1 Section 5. International Visits and Control of Foreign Nationals 10-5-1 Section 6. Contractor Operations Abroad 10-6-1 Section 7. NATO Information Security Requirements 10-7-1 CHAPTER 11. MISCELLANEOUS INFORMATION (12K) Section 1. TEMPEST 11-1-1 Section 2. Defense Technical Information Center 11-2-1 Section 3. Independent Research and Development 11-3-1 APPENDICES Appendix A. Organizational Elements for Industrial Security (12K) A-1 Appendix B. Foreign Marking Equivalents (6K) B-1 Appendix C. Definitions (35K) C-1 Appendix D. Acronyms (10K) D-1 INDEX (58K) [Not in printed version] SUPPLEMENTS TO THE NISPOM [None] Document NISPOM Supplement TBD
FOREWORD
On behalf of the Secretary of Defense as Executive Agent, pursuant to Executive Order 12829, "National Industrial Security Program" (NISP), and with the concurrence of the Secretary of Energy, the Chairman of the Nuclear Regulatory Commission, and the Director of Central Intelligence, I am pleased to promulgate the inaugural edition of the NISP Operating Manual (NISPOM). The NISPOM was developed in close coordination with industry and it represents a concerted effort on behalf of hundreds of individuals throughout the Executive Branch and industry. I believe the NISPOM represents the beginning of a new industrial security process which is based on sound threat analysis and risk management practices and which establishes consistent security policies and practices throughout the government. I also believe it creates a new government and industry partnership which empowers industry to more directly manage its own administrative security controls. The President has recently created a Security Policy Board to ensure the protection of our nation's sensitive information and technologies within the framework of a more simplified, uniform and cost effective security system. The Security Policy Board and the Executive Agent will continue the process of consultation with industry on the NISPOM to make further improvements, especially in the complex and changing areas of automated information systems security and physical security. All who use the NISPOM should ensure that it is implemented so as to achieve the goals of eliminating unnecessary costs while protecting vital information and technologies. Users of the NISPOM are encouraged to submit recommended changes through their Cognizant Security Agency to the Executive Agent's designated representative at the following address: Department of Defense Assistant Secretary of Defense for Command, Control, Communications and Intelligence ATTN: DASD(I&S)/CI&SP, Room 3E160 6000 Defense Pentagon Washington, D.C. 20301-6000 The NISPOM replaces the Department of Defense Industrial Security Manual for Safeguarding Classified Information, dated January 1991. John M. Deutch Deputy Secretary of Defense