NHB 1620.3C NASA Security Handbook
NASA NHB 1620.3C, (PART 2)
HANDBOOK Effective Date February 1, 1993
_________________________________________________________________
Responsible Office: JL
Subject: NASA Security Handbook (PART 2 of 5)
PREFACE
CHAPTER 13: ACCOUNTABILITY AND CONTROL OF CLASSIFIED INFORMATION
1300 MATERIAL SUBJECT TO ACCOUNTABILITY
1. Top Secret information shall be transmitted under a
chain of receipts covering each individual who gets
custody.
2. Secret information shall be covered by a receipt when
transmitted between NASA Installations or to other
addressees. There is no requirement for internal
receipting of Secret information within a NASA
Headquarters Office or Field Installation. An
Installation may incorporate such a system, if
required.
3. Receipts for Confidential information are not required.
4. Restricted Data shall be transmitted in the same manner
as other information of the same security
classification. COMSEC information shall be
transmitted in accordance with National COMSEC
Instruction 4005. Classified information originated by
the North Atlantic Treaty Organization (NATO) shall be
safeguarded in accordance with DOD Directive 5100.55.
5. Receipts must be returned to the originator no later
than 30 calendar days after receipt.
1301 DESIGNATION AND RESPONSIBILITY
1. Top Secret Control Officer and Alternate. The Chief,
Headquarters Security Branch (Code JBF), for NASA
Headquarters and the Director of each Field
Installation will designate individuals having Top
Secret clearances to serve in the following
capacities:
a. Top Secret Control Officer (TSCO); and
b. Alternate Top Secret Control Officer (ATSCO).
The TSCO will establish and maintain Installation
central accountability records for all Top Secret
information. Normally, the TSCO will control the
receipt and dispatch of all Installation Top Secret
documents and material. The ATSCO will assist the TSCO
and serve as such in the absence of the TSCO.
2. Accountability Records Custodians. Each Installation
will designate one or more Accountability Records
Custodians responsible for ensuring the recording of
all other accountable information within the
Installation. All such personnel will be cleared to at
least the category of security classification of the
information they process and will be adequately
indoctrinated with respect to the general provisions of
this Handbook and the specific requirements of this
Chapter.
1302 PROCESSING ACCOUNTABLE MATERIAL
1. General. Records of classified material subject to
accountability will be afforded secure storage and will
include the following data, as applicable:
a. An unclassified description of the information by
title, subject, or other unique description
(including short title);
b. Date originated or reproduced;
c. Date received or dispatched;
d. Category of security classification involved;
e. Control number or identification symbol;
f. Number of copies, series, and copy number, if
applicable;
g. Identity of person or office from which received
and/or to whom distributed within the Installation
or transmitted outside the Installation.
h. Downgrading or declassification action and date of
such action; and
i. Date of destruction.
Disposition of accountability records will be made in
accordance with the provisions of NHB 1441.1, "NASA
Records Disposition Handbook."
2. Top Secret
a. Routing. Normally, all Top Secret information
dispatched from and received by a NASA
Installation will be received and appropriately
recorded by the TSCO. If a NASA official
personally accepts or transmits a Top Secret
document from or to another Government agency or a
NASA Installation or facility, that official or an
appropriate designee will notify the TSCO of such
acceptance or transmission. This notification may
be made by telephone and only the identity of the
office of origin, the NASA custodian, and the date
and the unclassified title of the document will be
given to the TSCO. In the event the title of the
document is classified and the document does not
indicate an unclassified title, the holder will
devise an unclassified short title for such
telephonic notification. The content of a Top
Secret document need not be disclosed to personnel
making a record of its receipt or dispatch,
witnessing its destruction, or verifying its
presence. In either case, acceptance or
transmission, the TSCO and the official will take
action as set forth in subparagraphs (1) and (2).
(1) Incoming Documents. Upon notification from a
NASA official of the acceptance of a Top
Secret document from another NASA
Installation or facility, the TSCO will
prepare, for the official's signature, the
necessary receipts to establish
accountability. If the document is received
from another agency, the TSCO will, in
addition to preparing the required receipts,
assign a Top Secret control number to the
document. The official or a designee will
place the control number on the document as
prescribed in subparagraph c.
(2) Outgoing Documents. The official
transmitting the document will have the
necessary receipts prepared for the proposed
recipient's signature. To be relieved of
accountability, the official must forward an
executed copy of this transfer to the TSCO.
b. Receipts
(1) A Classified Material Receipt (NASA Form 387)
will be prepared for each copy of a document
or item of material classified Top Secret
that is received, generated, or transmitted
by a NASA Installation. Receipts will
indicate the identity of the addresser and
addressee, the date and title or description
of the document or item, and the NASA
Installation's Top Secret control number. No
classified information will appear on the
receipt. This may be accomplished by the use
of an indicated short title or a short title
or acronym devised by the addresser,
recipient, or the TSCO.
(2) The transfer of Top Secret information will
be covered by the execution of a receipt at
all times. To be relieved of accountability
when a transfer occurs, the custodian must
forward an executed copy of the transfer
receipt to the TSCO. Receipts will be
retained for a 2-year period.
(3) The TSCO, dispatching Top Secret information
outside a NASA Installation, will obtain from
the individual who receives the envelope or
package, an executed receipt for the envelope
or package only (envelopes or packages may be
numbered for accounting purposes). This
interim receipt will be retained by the TSCO
until the signed addressee copy of NASA Form
387, which identifies the information, is
returned.
c. "Top Secret" Control Numbers
(1) Each NASA Installation will establish and
maintain an internal Top Secret control
numbering system for all Top Secret material
originated, classified, received, or
reproduced by that Installation. Such
internal control numbers will be used
regardless of any control numbers previously
assigned to the material by another
Government agency or agencies. The numbering
system will be developed by the Installation
TSCO and coordinated with and agreed to by
the Installation Security Officer.
(2) Installation personnel originating,
classifying, receiving, or reproducing Top
Secret material will obtain the necessary
control numbers from the TSCO. Immediately
upon issuance of the control numbers, the
TSCO will establish accountability for the
material by preparing a receipt for the
custodian's signature. The Installation Top
Secret control number will identify the
material as long as it remains in the custody
of the NASA Installation concerned.
d. Downgrading or Declassification Action. Upon
notification from the office of origin to take
downgrading or declassification action, a
custodian of Top Secret information will perform
the following actions:
(1) Re-mark the information or material as
prescribed in Chapter 12; and
(2) Notify the TSCO by memorandum of the action
taken.
(3) Secret Information. Administrative
procedures shall be established by each NASA
Installation for controlling Secret
information and material originated or
received. Secret material does not require
accountability. However, such measures may
be warranted for all, Limited Dissemination
(LIMDIS), or other Secret information so
deemed by the Installation Director.
Accountability and/or control measures shall
be outlined in the Installation Security
Plan.
(4) Confidential. Nonaccountable but controlled
in accordance with this Handbook.
1303 INVENTORY OF ACCOUNTABLE MATERIAL
1. Top Secret
a. Semiannual. The TSCO will physically inventory
all Top Secret information on or about February 1
and July 1 each year. A report of inventory will
be furnished no later than February 15 and July 15
to the ICS. In the event any Top Secret document
or material is missing or otherwise unaccounted
for, the ICS and the Chief, NASA Security Office,
NASA Headquarters, will be notified immediately.
Inventories prescribed by other Government
departments or agencies for their Top Secret
information will be conducted as prescribed by the
department or agency concerned.
b. Replacement of the TSCO. Prior to the relief of
a TSCO from accountability and custodial
responsibilities, a joint inventory will be
performed by the incumbent and the replacement.
The inventory will be recorded and a copy
furnished to the ICS within 15 days from the date
of inventory. Prior to any absence that will
exceed 30 days, the TSCO will be relieved in the
manner indicated above.
2. Secret and Confidential. It is not required to
inventory Secret and Confidential material unless so
deemed by the Installation Director.
1304 ACCOUNTABLE INFORMATION NOT UNDER ACCOUNTABILITY
Each person who receives or has in possession classified
material that has not, but should have, been entered into
the accountability system of the Installation will promptly
notify the ICS.
1305 RESTRICTIONS ON POSSESSION OR USE OF CLASSIFIED INFORMATION
1. Classified material at each NASA Installation will be
either placed under the immediate, continuing control
and supervision of an authorized person or stored in an
approved manner as provided in paragraphs 1401 or 1402
of this Handbook. The same requirements apply, without
exception, to classified material that is removed from
a NASA Installation for use at official conferences,
transmittal to authorized recipients, or other
necessary official purposes.
2. Classified material will not, under any conceivable
circumstances, be removed from a NASA Installation or
facility and retained in the temporary or permanent
residence of a NASA employee.
3. Classified material will not be exposed or utilized
under circumstances that present an opportunity for
access by sight or sound to its contents by an
unauthorized person. Exposure or use of classified
material in public areas, including public areas on
common carrier vehicles, is specifically prohibited.
4. Whenever classified material is in actual use by an
authorized person, the material will be handled in the
following manner:
a. Kept under the immediate, continuing control and
supervision of an authorized person;
b. Covered, with an approved cover sheet, placed in
security storage equipment or in a controlled
area, or otherwise adequately protected whenever
an unauthorized person is present; and
c. Placed in security storage equipment or in a
controlled area as soon as practical after use.
1306 USE OF CLASSIFIED COVER SHEETS
1. Top Secret. Each Top Secret document within a NASA
Installation will have a Top Secret cover sheet
(Standard Form 703) securely attached so as to
completely cover the top surface of the document at all
times, unless the document is actually being prepared
for immediate destruction or transmission outside the
Installation.
2. Secret. Each Secret document within a NASA
Installation will have a Secret cover sheet (Standard
Form 704) securely attached so as to completely cover
the top surface of the document at all times, unless
the document is actively being prepared for immediate
destruction or transmission outside the Installation.
3. Confidential. Each Confidential document within a NASA
Installation will have a Confidential cover sheet
(Standard Form 705) securely attached so as to
completely cover the top surface of the document at all
times when the document is not safeguarded within
security storage equipment or maintained in a
controlled area, unless the document is actively being
prepared for immediate destruction or transmission
outside the Installation.
4. Files. A file or group of physically connected
documents will be classified at least as high as that
of the most highly classified document therein and will
have a cover sheet of that category or classification
securely attached to the top surface of that file or
group.
1307 RECORD OF DISSEMINATION AND DESTRUCTION
1. Top Secret. Originators and custodians of Top Secret
information will maintain a record of all individuals
who are afforded visual or verbal access to such
information. In the event Top Secret information is
disseminated to a large group, a roster of the group
will be attached behind the cover sheet.
2. Destruction
a. Records of destruction are required for Top Secret
information.
b. Records of destruction of Secret and Confidential
information are not required except for NATO
Secret and some limited categories of specially
controlled Secret information.
c. Each NASA Installation shall establish at least
one clean-out day each year for the purpose of
destroying unneeded classified holdings.
1308 ACCESS TO CLASSIFIED INFORMATION
1. General
a. A person is eligible for access to classified
information if the ICS has determined his or her
trustworthiness and such access is essential to
the accomplishment of lawful and authorized
Government purposes.
b. Prior to granting access to classified
information, the individual releasing the
information, without exception, will establish the
following:
(1) The identity of the proposed recipient;
(2) That the security clearance of the proposed
recipient is at least as high as the
classification of the information involved;
and
(3) That the proposed recipient has a valid need-
to-know the information in the performance of
official duties.
c. No person is entitled access to classified
information based solely on that person's rank,
position, or security clearance.
d. Except as provided by directives issued by the
President through the National Security Council,
classified information originating in one agency
may not be disseminated outside any other agency
to which it has been made available without the
consent of the originating agency. For purposes
of this section, the Department of Defense (DoD)
will be considered one agency. By tripartite
agreement, this applies to Restricted Data only
when it is to be disseminated outside NASA and the
DoD, the Department of Energy (DOE), and the
Nuclear Regulatory Commission (NRC). (Refer also
to paragraph 1501.)
e. The release of classified information to a foreign
government or foreign representative will be in
accordance with the provisions of Chapter 18 of
this Handbook.
f. Prior to granting any person access to classified
information from a foreign government or
international pact organization, all NASA
personnel are cautioned to contact the
Installation Security Office for details
concerning specialized security requirements
pertaining to this information.
g. At the time classified information is orally
disclosed, the recipient(s) will be informed of
the category of classification of the information
involved.
h. Classified information will never be discussed in
public places, conveyances, or any place within
the hearing distance of an unauthorized person.
i. Classified information will not be revealed in
telecommunication conversations, except as
authorized by paragraph 1602-1a(4).
j. NASA employees and its contractors, licensees, and
grantees will be subject to appropriate sanctions
in the following cases:
(1) If they knowingly, willfully, or negligently
disclose to unauthorized persons information
properly classified under "The Order" or
predecessor orders;
(2) If they knowingly and willfully classify or
continue classifying information in violation
of "The Order" or any implementing directive;
or
(3) If they knowingly and willfully violate any
other provision of "The Order" or
implementing directive.
Sanctions may include reprimand, suspension
without pay, removal, termination of
classification authority, loss or denial of
access to classified information, or other
sanctions in accordance with applicable laws.
k. Except as authorized in pertinent NASA directives,
or by competent authority, no recipient of
classified information will make a speech, write
for publication, or give a course of instruction
dealing with such classified information.
l. Access to Restricted Data and Formerly Restricted
Data will be as prescribed in Chapter 17 of this
Handbook.
m. Access to cryptographic information will conform
with the requirements of current National Security
Agency (NSA) directives. Copies of these
directives may be obtained by request to the
Chief, NASA Security Office.
2. Access by Historical Researchers and Former
Presidential Appointees
a. Persons engaged in historical research projects
and persons who have previously occupied NASA
policymaking positions to which they were
appointed by the President may be authorized
access to classified information. Access by
former Presidential appointees will be authorized
by the Executive Officer, NASA Headquarters.
Access by historical researchers may be granted by
the History Office, NASA Headquarters. Such
access is subject to the conditions stipulated
below:
(1) A written agreement is obtained from the
requester to safeguard the information to
which access will be given and for NASA to
review all notes and manuscripts for the
purpose of determining that no classified
information is contained therein;
(2) The Security Office has determined that
access to the classified information or
material is consistent with the interests of
national security;
(3) A determination of the trustworthiness of the
requester has been made as a precondition to
access; and
(4) Such access is limited to specific categories
of information over which NASA has
classification jurisdiction.
b. If the access requested by historical researchers
and former Presidential appointees requires the
rendering of services for which fair and equitable
fees may be charged. The requester should be so
notified and the fees imposed pursuant to NMI
9080.1, "Review, Approval, and Imposition of User
Charges."
c. An authorization for access will be valid for the
period required but for no longer than 2 years
from the date of the issuance unless renewed.
Historical researchers and former Presidential
appointees will execute an appropriately annotated
"Security Termination Statement" (NASA Form 839)
upon completion of their access to classified
information or material.
3. Administrative Withdrawal of Security Clearance.
Security clearances granted pursuant to this Handbook
may be administratively withdrawn by the granting
authority when it is determined that the person no
longer requires access to classified information or
material in connection with the performance of official
duties. Likewise, when a person no longer needs access
to information of a particular security classification
category, the security clearance will be adjusted to
the classification category still required for the
performance of that person's duties and obligations.
In both instances, such action will be without
prejudice to the person's eligibility for a security
clearance should the need again arise.
CHAPTER 14: STORAGE OF CLASSIFIED MATERIAL
1400 GENERAL
All classified documents and material under the jurisdiction
of NASA will be stored only in facilities or under
conditions sufficient to preclude unauthorized access.
1401 STORAGE OF TOP SECRET MATERIAL
Top Secret documents and material will be stored in a GSA
approved, safe-type, steel file cabinet having a built-in,
three-position, dial-type combination lock or within an
approved vault, or vault-type room, or other storage
facility that meets the standards published by the GSA.
NASA ICS's will prescribe such additional controls as may be
appropriate to restrict unauthorized access to areas where
Top Secret documents or materials are stored. A Top Secret
storage facility must be approved by the ICS prior to its
use.
1402 STORAGE OF SECRET AND CONFIDENTIAL MATERIAL
Secret and Confidential documents and material may be stored
in a manner and under the conditions prescribed for Top
Secret material. A steel file cabinet, equipped with a
rigid steel lock bar and a GSA-approved changeable,
three-position, dial-type combination padlock, may be used
on an interim basis for storage. Because these file
cabinets do not furnish optimum security, they should be
phased out as soon as possible, but no later than July 1,
1998. It is recommended that, if possible, only
Confidential material be stored in the lock bar containers.
ICS's may establish more stringent storage requirements
where deemed warranted due to the sensitivity of the
material involved or the vulnerability of storage
containers.
1403 STORAGE OF CLASSIFIED CRYPTOGRAPHIC MATERIAL
Classified cryptographic material will be stored in
accordance with the requirements of current National
Security Agency (NSA) directives.
1404 STORAGE OF RESTRICTED DATA AND FORMERLY RESTRICTED DATA
Restricted Data and Formerly Restricted Data will be stored
in accordance with the requirements outlined in paragraph
1401 or 1402, as appropriate, for the specific level of
security classification as indicated on the material
involved.
1405 STORAGE OF HAZARDOUS OR BULKY CLASSIFIED MATERIAL
When, due to its content or size, it is hazardous or
impractical to store classified material in accordance with
requirements of paragraph 1401 or 1402, the material will be
stored in a secure area that has been specifically approved
for this purpose by the ICS's in accordance with provisions
of paragraph 1103-2. For protection of bulky Secret or
Confidential material in strong rooms or closed areas,
access openings will be secured by at minimum, a changeable
combination padlock approved by the GSA. Classified
material will be removed from the secure area only under
conditions specifically approved by the ICS.
1406 STORAGE OF CLASSIFIED WASTE AND REPRODUCTION MATERIAL
Pending the actual destruction of waste and reproduction
materials containing classified information, all such waste
and material will be stored in accordance with storage
requirements outlined in paragraphs 1401 and 1402 above, as
appropriate, for the specific level of the security
classification involved.
1407 STORAGE OF CLASSIFIED NATO DOCUMENTS
1. North Atlantic Treaty Organization (NATO) Secret and
Confidential documents will be stored in facilities
required for the storage of United States Secret and
Confidential information.
2. NATO documents classified Restricted or higher will not
be filed or intermingled with other types of classified
documents and, if stored in the same facilities, their
segregation from other types of documents will be
maintained.
3. Documents and material containing NATO Restricted
information may be stored in locked filing cabinets,
desks, or other similar closed spaces to preclude
access by unauthorized personnel. This does not,
however, preclude a more secure means of storage if
deemed appropriate.
1408 UTILIZATION AND PURCHASE OF SECURITY STORAGE EQUIPMENT
1. Security storage equipment should not be used
exclusively for storage of unclassified documents or
other materials. Each NASA supervisor should establish
and maintain a program that provides for, at a minimum,
the annual review of classified material, the purpose
of which review is to reduce, to the absolute minimum,
the quantity of such material on hand at any given
time.
2. Prior to purchasing new security storage equipment,
every effort will be made to utilize existing equipment
available at the Installation through the disposition
of existing surplus and other materials.
3. Whenever new security equipment is procured, it shall
conform with applicable GSA standards and
specifications and will, to the maximum extent
possible, be of the type designated on the GSA Federal
Supply Schedule.
1409 INSPECTION OF SECURITY STORAGE EQUIPMENT AND AREAS
Personnel designated by the ICS at each NASA Installation
will thoroughly inspect security storage equipment and
security areas at times and under conditions prescribed by
the ICS to ensure that the equipment and areas are
adequately secured or otherwise protected during both work
and nonwork hours. If any security storage equipment,
security area, or classified material is found not to be
protected in accordance with the requirements of this
Handbook, the ICS will be notified and corrective action
taken in compliance with such procedures as the ICS may
establish. Standard Form 701-101, Activity Security
Checklist, and Standard Form 702-101, Security Container
Sheet, will be utilized on a daily basis.
1410 RESTRICTION IN USE OF SECURITY STORAGE EQUIPMENT
To minimize the possibility of compromise of classified
information or attempts to break into and enter security
storage equipment, such items as money, weapons, narcotics,
and precious metals will not be stored in any security
storage equipment in which classified information is stored.
This restriction does not apply to intrinsically valuable
materials that by their own nature are classified or are
properly a part or component of classified hardware. The
ICS may waive this restriction in an emergency, provided
action is initiated promptly to provide other storage
arrangements for the restricted item(s).
1411 DESIGNATION AND RESPONSIBILITIES OF CUSTODIAN OF SECURITY
STORAGE EQUIPMENT OR SECURITY AREA
The supervisor responsible for each unit of security storage
equipment and each security area will designate a primary
custodian. The same individual may be the custodian of a
group of such units. The supervisor will also designate at
least one alternate custodian who may act in the absence of
the primary designee. The names of the primary and
alternate custodian designees will be furnished in writing
to the ICS by each supervisor concerned and changes thereto
will be reported as they occur. Non-NASA employees assigned
to the Installation in direct support of a NASA activity may
be designated custodians, provided all pertinent
requirements of this Handbook are met. Each custodian will
be responsible for ensuring the following:
1. That the security storage equipment is securely locked,
or that the security area is properly maintained as
prescribed by the ICS, whenever the equipment or area
is not under the immediate, continuing supervision and
control of an authorized person. Standard Form 702,
Security Container Check Sheet, will be used for
certification purposes.
2. That locking devices are in good working order and
combinations are changed, as a minimum, in accordance
with the requirements set forth in paragraph 1415.
1412 PROTECTION OF COMBINATION PADLOCK
To prevent unauthorized removal or possible switching of
locks, each combination padlock used for security storage
equipment or a security area will be placed in a drawer or
locked to the hasp whenever the equipment or area is open.
When the lock is placed in a drawer for storage while the
container is open, the padlock should be in the locked
position.
1413 KNOWLEDGE OF LOCKING DEVICE COMBINATIONS
1. Knowledge of the combination of a locking device used
to secure classified material will be limited to the
minimum number of persons actually required to
effectively maintain normal business operations.
Non-NASA personnel may be given knowledge of a
combination provided all pertinent requirements of this
Handbook are met (e.g., need-to-know has been
established and appropriate level of clearance has been
verified) to the satisfaction of the appropriate NASA
Manager.
2. The name of all individuals having knowledge of the
combination to the security storage equipment will be
listed on a standard Form 700, "Security Containter
Information."
1414 RECORD OF LOCKING DEVICE COMBINATIONS
A record of lock combinations used in connection with the
storage of classified material may be made for emergency
situations or when it is not practical to memorize the
combinations due to the number of locking devices involved.
Such a record will be classified and stored in the following
manner:
1. Classified no lower than the highest category of
classified material authorized for storage in any of
the equipment concerned and classified higher if the
overall accumulation of Confidential or Secret material
warrants the protection afforded information of a
higher category of security classification; and
2. Stored in conformity with the category of security
classification involved.
1415 CHANGE OF LOCKING DEVICE COMBINATIONS
The combination of a lock or padlock used for security
storage purposes will be changed, and only by persons having
an appropriate security clearance, in the following
instances:
1. When the locking device is first placed in use;
2. At least once every 12 months thereafter for devices
used to safeguard U.S. classified information and at
least once every 6 months for devices used to safeguard
NATO classified information;
3. Whenever a person knowing the combination is
transferred or terminated from employment, or for some
other reason is no longer authorized access to the
classified material stored in the equipment or area;
4. Whenever it is possible that the combination may have
been subjected to compromise; or
5. Whenever the security storage equipment or security
area has been found unsecured and unattended by an
authorized person.
1416 EQUIPMENT OUT OF SERVICE
When security equipment with a built-in combination lock is
taken out of service at a NASA Installation, the lock will
be reset to the standard combination 50-25-50. Combination
padlocks will be reset with the combination 10-20-30.
CHAPTER 15: REPRODUCTION OF CLASSIFIED MATERIAL
1500 GENERAL
1. NASA personnel will keep to a minimum the number of
carbon copies or other reproductions of classified
materials. Only copy machines certified by the
Installation Chief of Security are authorized to
reproduce classified materials.
2. In accordance with paragraph 1202-11, copy numbers will
be assigned to reproduced copies of material subject to
accountability in accordance with paragraphs 1300-1 and
2. The person or organizational unit responsible for
the accountability of such material will promptly
receive a receipt covering such copies and any
associated negatives, plates, or mats developed during
the reproduction process.
3. Overruns of classified documents will be kept to an
absolute minimum and will be destroyed promptly in
accordance with Chapter 19.
1501 AUTHORIZATION TO REPRODUCE CLASSIFIED MATERIAL
1. Limitation of Requirements. The provisions of this
paragraph do not apply to the original copying or
processing of work papers within an originating NASA
organizational element.
2. Top Secret Material
a. Originators of NASA Top Secret documents will
determine the minimum number of copies initially
required. NASA Top Secret information may be
reproduced only upon specified authorization of
the originator unless otherwise marked by the
originating organization.
b. Top Secret documents or information contained
therein that originated outside NASA may be
reproduced only with the specific written approval
of the office, department, or agency of origin.
In all cases, the originating organization will be
informed of the number of copies reproduced and
their disposition.
c. If authorized to reproduce a Top Secret document
or any portion thereof, the reproduction will
indicate, in addition to all markings that appear
on the original, the reproducing organization, and
the authority for reproduction, e.g., "Reproduced
by (office/Installation), NASA Headquarters, dated
(insert date)."
For all documents reproduced, the reproducing
organization will obtain control number(s) from
the Top Secret Control Officer (TSCO) and will
prepare and execute receipt(s) in accordance with
paragraph 1302-2b. The TSCO will notify the
office of origin of the disposition of each
reproduced copy, as required by the organization
of origin.
3. Secret Material
a. NASA Secret Material. In the absence of a
specific prohibition against its reproduction by
the originator, such material may be reproduced
sparingly or copied only with the authorization of
an official indicated in subparagraph c below.
The authorizing official will specify the number
of copies to be made, either on a work order or in
a notation on the material to be copied.
b. Other Secret Material. Secret material
originating outside NASA that prescribes a
restriction against its reproduction will not be
reproduced or copied without the authorization of
the originating organization. The authorization
and the number of copies to be made will be
documented by an official indicated in
subparagraph c below, either on a work order or in
a notation on the material to be copied. If no
restriction against reproduction is evident, the
Installation Chief of Security (ICS) will be
consulted prior to reproduction.
c. Authorizing Officials. They include Officials-in-
Charge of Headquarter Officers, the Directors of
NASA Field Installations, or ICS's. This
authority may be redelegated in writing to
subordinate officials or employees only to the
extent necessary for the orderly transaction of
NASA business.
4. Confidential Material. The reproduction or copying of
any Confidential material is authorized in the absence
of a specific prohibition against such action by the
originating organization.
CHAPTER 16: TRANSMISSION OF CLASSIFIED INFORMATION AND MATERIAL
1600 PREPARATION FOR TRANSMISSION OUTSIDE A NASA INSTALLATION
Top Secret, Secret, and Confidential material being prepared
for transmission outside a NASA Installation will be
securely enclosed in sealed, opaque inner and outer
envelopes or covers of sufficient strength to withstand
rough handling. The address and return address will be
placed on both covers. The highest category of security
classification of its contents will be plainly marked only
on the inner cover and will include, when appropriate, the
additional marking of "Restricted Data." The outer cover
will bear no indication of the classification or the
Restricted Data nature of its contents. Whenever classified
material cannot be prepared for transmission due to its
nature, weight, or size as indicated in this paragraph, it
will be prepared in accordance with specific instructions
obtained from the ICS. Whenever any doubt exists as to the
authorized safeguarding and storage capability of any
intended recipient of classified material, the ICS will be
consulted in advance. A receipt will be attached to or
enclosed in the inner cover, except when the sender deems it
unnecessary for Confidential information.
1601 METHODS OF TRANSMISSION WITHIN A NASA INSTALLATION
1. Top Secret. The Top Secret Control Officer (TSCO),
custodian, or other employees having a Top Secret
clearance and designated by either TSCO or the ICS,
will personally hand-carry Top Secret information
within a NASA Installation. Within a single building
or between concentrated buildings confined within a
single NASA Installation, such information, with
accompanying receipts, will be enclosed in a single
sealed and appropriately marked and addressed envelope.
The envelope will be covered in such a manner as to
preclude visual access. Between buildings of a NASA
Installation that are widely dispersed or between
buildings occupied by NASA and located in metropolitan
areas, Top Secret information will be transmitted
within double-wrapped, marked, and addressed envelopes
as prescribed in paragraph 1600 above, or in a manner
approved by the ICS.
2. Secret and Confidential. Secret and Confidential
material being transmitted entirely within a NASA
Installation will, as a minimum, be afforded the
protection of an appropriate classified cover sheet
(Standard Form 704 or 705). Additional measures may be
established by the ICS to control access to any
classified information by an unauthorized person during
transmission. Such material may be transmitted within
a NASA Installation as follows:
a. Hand-delivered by an employee possessing a
clearance at least as high as the category of
classification of the material involved; or
b. Through the internal mail distribution system, in
accordance with procedures approved by the ICS.
1602 METHODS OF TRANSMISSION OUTSIDE A NASA INSTALLATION
1. To and From Points Outside the 50 States, the District
of Columbia, Puerto Rico, and U.S. Territories or
Possessions:
a. Top Secret. The transmission of Top Secret
noncryptographic information or material will be
transmitted only by one of the following methods:
(1) Preferably by oral discussions in an
acoustically secure room or area, provided
that the information is not designated "Eyes
Only" and provided that the room or area is
specifically certified for the appropriate
security levels and for any special
requirements which maybe associated with the
category of information under discussion.
(2) A messenger/courier system specifically
created for that purpose, e.g., an
appropriately cleared NASA courier, such as
the Defense Courier Service, who has been
fully briefed on the responsibilities of a
courier or escort for Top Secret material;
(3) State Department diplomatic pouch; or
(4) Over land-line or radio communications
circuits authorized by the National Security
Agency (NSA), or by Secure Telephone Unit
(STU) (e.g., STU III), provided by the
Installation and certified to the appropriate
security level.
b. Secret and Confidential. The transmission of
Secret and Confidential noncryptographic
information or material may be transmitted by any
of the following methods:
(1) By one of the means authorized for Top
Secret.
(2) By captains or masters of vessels of United
States registry under contract to a
department of the Executive Branch, and
pilots of aircraft who are U.S. citizens and
who are appropriately cleared.
(3) U.S. registered mail through Army, Navy, or
Air Force Postal Service facilities provided
that the information or material does not at
any time pass out of U.S. citizens' control
or through a foreign postal system.
(4) Secret and Confidential information and
material may be hand-carried by NASA Field
Installation employees on commercial domestic
flights only upon receipt of specific
approval by the ICS and, for NASA
Headquarters personnel, the Chief, Security
Branch (Code JBF). The hand-carrying of
classified material on commercial
international flights is prohibited.
Classified material typically may be
hand-carried aboard U.S. Government-owned or
chartered aircraft on both domestic or
international flights.
2. Between the 50 States, the District of Columbia, Puerto
Rico, and U.S. territories or Possessions.
a. Top Secret. Top Secret noncryptographic
information and material may be transmitted by any
method, as applicable and appropriate, set forth
in subparagraph la.
b. Secret and Confidential. Secret and Confidential
noncryptographic information and material may be
transmitted by any of the following methods:
(1) By any method, as applicable and appropriate,
as set forth in subparagraph 1.
(2) By U.S. Postal Service registered mail with
registered mail receipt or express mail
service, or by protective services provided
by United States air or surface commercial
carriers. United States Postal Service
express mail service shall be used only when
it is the most effective means to accomplish
a mission within security, time, cost, and
accountability constraints. To ensure
direct delivery to the addressee, the "Waiver
of Signature and Indemnity" block on the
United States Postal Service Express Mail
Label 11-B may not be executed under any
circumstances. All Secret express mail
shipments should be processed through mail
distribution centers or delivered directly to
a United States Postal Service (USPS)
facility or representative. The use of
external (street side) express mail
collection boxes is prohibited. Also,
Confidential noncryptographic information or
material may be transmitted by the USPS
certified, first class, or express mail.
(3) By protective services provided by commercial
carriers under conditions approved by the
ICS.
1603 TRANSMISSION OF CRYPTOGRAPHIC INFORMATION
The transmission of cryptographic information, in each
instance, will be in accordance with specific guidance
obtained from the ICS.
1604 DEFENSE COURIER SERVICE REIMBURSEMENT PROGRAM
Upon request of the NASA Security Office, the ICS will
verify that his Installation utilized the reimbursable
service of the Defense Courier Service.
CHAPTER 17: ACCESS TO RESTRICTED DATA
1700 ACCESS CONTROLS
Restricted Data is subject to the same general access
controls and safeguarding requirements as other classified
information. In addition, access to Restricted Data is
subject to special legal limitations. Specifically,
authorization for access to Restricted Data may be granted
only by the Department of Energy (DOE), the Nuclear
Regulatory Commission (NRC), the Department of Defense
(DoD), or NASA. Access based upon such authorization is
limited as follows:
1. DOE/NRC Clearances
a. A "Q" clearance plus an administrative
determination by DOE/NRC that access should be
authorized is required for access to Restricted
Data classified Top Secret. A "Q" clearance also
authorizes access to Restricted Data classified
Secret and Confidential.
b. An "L" clearance authorizes access only to
Restricted Data classified Confidential.
c. A "QX" or "LX" clearance authorizes a holder of a
DOE/NRC Permit for Access to Restricted Data, and
the holder's employees to have access to
Restricted Data in certain categories designated
as related to the civilian aspects of atomic
energy (see 10 CFR Part 25 for a listing of the
categories). An access permit holder's employee
with a "QX" or "LX" authorization may have access
to Restricted Data classified Confidential, and an
employee with a "QX" authorization may have access
to Restricted Data classified Secret, within
certain categories as indicated on the access
permit itself.
2. NASA or DOD Clearance. A NASA clearance for access to
classified information granted to a NASA or DOD
employee or a DoD clearance issued to a NASA or DOD
contractor employee is appropriate for access to
Restricted Data of the same category of security
classification, with the following limitations:
a. A NASA clearance authorizes access to Restricted
Data relating only to aeronautical and space
activities. Access to Restricted Data outside the
scope of aeronautical and space activities must be
based on a DOD, DOE, or NRC clearance as
applicable.
b. An Interim Secret or Interim Confidential
clearance issued by DOD to a NASA or DOD
contractor employee is not valid for access to
Restricted Data. An Interim Top Secret clearance
granted by DOD to a contractor employee is valid
for access only to Restricted Data classified
Secret or Confidential.
c. A Confidential clearance granted by a NASA or DOD
contractor to a contractor employee is not valid
for access to Restricted Data.
d. Except as limited in subparagraph a, access to
Restricted Data within NASA and DOD (including the
exchange of such information between NASA and DOD)
based on a NASA or DoD clearance is handled in the
same manner as access to other classified
information.
3. Additional Limitations on Restricted Data and Formerly
Restricted Data. Advice should be obtained from a NASA
ICS concerning additional limitations on access to
Restricted Data involving other than aeronautical and
space activities and Restricted Data and Formerly
Restricted Data by a person issued a Limited Access
Authorization.
1701 REQUIREMENTS FOR ACCESS TO RESTRICTED DATA OUTSIDE OF NASA
AND DOD BY A NASA REPRESENTATIVE
1. Request for Access Approval
a. Clearance Requirements. A request to obtain
access outside of NASA and DoD to Restricted Data
relating to aeronautical and space activities will
be based on a NASA clearance; a request for access
to other categories of Restricted Data must be
based on a DOE or NRC clearance. The NASA
representative must submit a written request for
access approval that contains the information
prescribed by the agency concerned.
b. Form of Request
(1) A request for approval for access outside of
NASA or DOD to Restricted Data will be
submitted, whenever possible, on NASA Form
405, "Request for Access Approval." The form
should be completed in detail to justify
clearly the need for such access. If the
access is within the scope of aeronautical
and space activities, the NASA security
clearance should be indicated as Top Secret,
Secret, or Confidential. On the other hand,
should access be required outside the scope
of aeronautical and space activities, the DOE
or NRC clearance should be indicated as "Q"
or "L." With respect to the item on NASA
Form 405 concerning document transmittal,
each request should identify the document or
categories of documents requested and include
a brief statement of work for which the
request is being made. Documents may be
requested for transmittal to a titled
position in NASA, instead of a named
individual.
(2) Should repeated access be required to the
same type of information which is under the
cognizance of the same approving official
(outside of NASA and DOD), arrangements
should be made for continuing access based on
the initial request. These arrangements may
be made for a specific period not to exceed 1
year, may be renewed for additional periods,
and may involve a large group of individuals
engaged in the same work.
(3) The request for access approval will be
processed through the ICS and certified by or
signed in the name of the appropriate NASA
certifying official (see NMI 1600.2, "NASA
Security Program"). In an emergency, and
subject to the advance approval of the NASA
certifying official, a teletype may be used
in place of NASA Form 405, or an oral request
may be made if it is confirmed in writing.
The details required by NASA Form 405 will be
furnished in the emergency request.
(4) Whenever the request involves Restricted Data
outside the scope of aeronautical and space
activities, the phrase "relating to
aeronautical and space activities" starting
on the first and fourth lines, and reference
to "NASA" before the word "clearance" in the
third line of the certification statement of
the Form 405 will be completely lined through
and initialed by the certifying official.
c. Submission of Requests
(1) A request for access to DOE Restricted Data
will be submitted for approval to the
following address:
U.S. Department of Energy
Office of Safeguards and Security
Washington, DC 20545
If a research and development report is
requested, the request will be sent to the
following address:
U.S. Department of Energy
Technical Information Center
P.O. Box 62
Oak Ridge, TN 37830
(2) All requests for access to NRC Restricted
Data will be submitted for approval to the
following address:
U.S. Nuclear Regulatory Commission
Division of Security
Washington, DC 20555
(3) Requests for access to Restricted Data of a
Federal department or agency having
jurisdiction over the information will be
sent to the department or agency concerned.
2. NASA Officials Authorized to Certify Request. A
request for access to Restricted Data must be certified
by or signed in the name of one of the NASA officials
specified in NMI 1600.2, "NASA Security Program." (A
person signing in the name of the certifying official
must be a person duly authorized to perform that
function and must identify, by position title, the
official in whose name the subordinate is acting.)
CHAPTER 18: DISCLOSURE OF CLASSIFIED INFORMATION TO FOREIGN
GOVERNMENTS
1800 GENERAL
This Chapter continues in effect NASA policies and
procedures for the disclosure of classified information by
NASA to foreign governments.
1801 DEFINITIONS
For the specific purposes of this Chapter, the following
definitions, as well as those in Appendix A, are applicable:
1. Disclosure. The transfer of classified information
through approved channels to an authorized
representative of a foreign government or international
organization.
2. Disclosure Authority. A NASA official specifically
authorized in or pursuant to paragraph 1803 to approve
the disclosure of classified information to foreign
governments.
3. High-Ranking Foreign Government Representative. An
official of a foreign government or of a public
international organization that the official represents
for the purpose of receiving classified information.
4. Military Information. Information under the control or
jurisdiction of the Department of Defense (DoD), its
departments or agencies, or that which is of primary
interest to them.
5. Original Recipients. Representatives, civil or
military, of a foreign government who, either
individually or collectively, directly receive from the
U.S. Government classified information being
communicated or transmitted to their government.
6. Security Assurance. A certification by the receiving
government stating in substance that its
representatives, civil or military, have been
specifically approved by that government to receive
classified information from the U.S. Government.
1802 DISCLOSURE AUTHORITY
1. The Administrator will designate which office has
Disclosure Authority to approve the disclosure of
classified information to foreign governments.
2. Authority granted to the designated office may be
delegated as required on a case-by-case basis for the
orderly and expeditious transaction of NASA business.
1803 PRELIMINARY CONSIDERATIONS IN THE DISCLOSURE OF CLASSIFIED
INFORMATION
1. General. It is the policy of the U.S. Government to
treat classified information as a national security
asset that must be conserved and protected, and that
may be shared with foreign entities only where there is
a clearly defined advantage to the United States.
2. False Impression. It is the policy of the United
States to avoid creating a false impression of its
readiness to make classified material, technology, or
information available. Accordingly, proposals to
foreign governments and international organizations
that result from either U.S. or combined initial
planning and that will lead to the eventual disclosure
of classified information must be authorized in advance
by the Releasing Authority.
3. Export Control. The Office of Munitions Control of the
Department of State is responsible for controlling the
export of articles on the U.S. Munitions List. Such
articles include both classified and unclassified
equipment and technical data. U.S. classified
information proposed for release is subject to the
provisions of this policy.
4. Declassification Review. The Releasing Officer will
determine if classified information will be reviewed by
the appropriate classification authority for
downgrading or declassification prior to its release to
a foreign government.
5. Coordination with Other Agencies. Classified
information originated by another department or agency
will not be disclosed to a foreign government without
the consent of the originating department or agency.
1804 DISCLOSURE OF MILITARY INFORMATION
Military information (classified or unclassified) will not
be disclosed without the approval of the proper military
authority. Requests for such approval will be referred to
the Chief, NASA Security Office, NASA Headquarters, who will
coordinate the proposal with the proper military disclosure
official.
1805 DISCLOSURE OF NASA ORIGINAL CLASSIFIED INFORMATION
1. Approval Authority. NASA original classified
information will be disclosed to foreign governments
only after approval by the Disclosure Authority.
Disclosures will be approved in accordance with the
provisions of subparagraphs 2 and 3 below.
2. Disclosure Conditions. Disclosures will not normally
be made until the disclosure authority receives the
following assurances:
a. The information or acknowledgement of its
possession will not be revealed to a third party,
except with the prior consent of the United States
(each British Commonwealth nation should be
treated separately).
b. The recipient government will take measures to
give the information substantially the same degree
of protection afforded it by the United States,
including prosecution for unlawful disclosure.
c. The recipient government will not use the
information for other than the purpose given.
d. The recipient will report promptly and fully to
the U.S. authorities any known or suspected
compromise of U.S. classified information released
to them.
e. The specified original recipients of U.S.
classified information have received appropriate
security clearance from their own governments for
access to information of the security
classification involved.
f. The recipient government will, in the absence of
or pursuant to the provisions of any existing
agreement with the U.S. Government, respect any
private rights such as patents, copyrights, or
trade secrets that are involved in the
information.
3. Obtaining Agreements. Agreements, either general or in
a particular case, will be negotiated for NASA by the
Director, International Relations Division, after
consultation with the Chief, NASA Security Office, NASA
Headquarters.
4. Waiver of Certain Agreement Requirements. The
Administrator or the Deputy Administrator may waive the
requirements set forth in subparagraphs 2a, b, c, d,
and above, when deemed necessary for exceptional
releases. The requirement in subparagraph 2f above
regarding the protection of private rights may not be
waived. Requests for waiver of the agreement rights
will be referred to the Chief, NASA Security Office,
NASA Headquarters, for review and recommendation.
5. Specifically Prohibited Disclosures
a. Classified information officially obtained from a
foreign source, except when the information has
been conveyed by the source with express consent
to its further disclosure.
b. Joint information without prior consultation with
all departments or agencies having control or
jurisdiction.
c. If NASA has no objection to releasing information
originated by or for another agency, then the
request for such information will be referred to
the department or agency for its determination as
to releasability.
d. Restricted Data, Formerly Restricted Data, Signal
Security, Communications Security, Special Access
Authorization Required, and Sensitive Sources or
Methods Involved.
6. Disclosure Criteria. Disclosures will be made only
when all of the following criteria are satisfied:
a. Disclosure is consistent with the foreign policy
of the United States toward the recipient nation
or international organization.
b. The national security of the United States permits
disclosure, for example, when disclosure of
advanced technology will not constitute an
unreasonable risk to the U.S. position in
technology affecting national security.
c. Disclosure will result in benefits to the United
States at least equivalent to the value of the
information disclosed, for example, when the
United States obtains information from the
recipient nation on a quid pro quo basis.
d. Disclosure is limited to information necessary to
the purpose for which disclosure is made.
1806 SECURITY ASSURANCES AND CHECKS REGARDING ORIGINAL RECIPIENTS
1. General Requirement for Security Assurance. Except as
provided in subparagraph b below, a security assurance
will be required of all original recipients before
releasing any classified information to a foreign
government. The Chief, NASA Security Office, NASA
Headquarters, is responsible for coordinating security
assurances or reciprocal access authorization, as
applicable through the Director, International
Relations Division, NASA Headquarters.
2. Waiver of Requirement for Security Assurance. The
Administrator may waive the requirement for a security
assurance regarding high-ranking foreign government
representatives when deemed necessary. Proposals for
waiver will be submitted through the Chief, NASA
Security Office, NASA Headquarters, for recommendation
to the Administrator.
CHAPTER 19: DISPOSITION OR DESTRUCTION OF CLASSIFIED MATERIAL
1900 GENERAL
1. This Chapter applies to the routine disposition or
destruction of classified material. When a particular
document contains specific instructions to the
contrary, however, those specific instructions will be
followed.
2. When doubt exists as to the propriety of destroying
classified material received from another Federal
department or agency, the material will be returned to,
or permission to destroy the material will be obtained
from, that department or agency.
3. To prevent an unnecessary accumulation of classified
records, inactive classified records will be disposed
of in accordance with NHB 1441.1 "NASA Records
Disposition Handbook." Surplus copies of classified
documents will be destroyed as soon as practical.
4. All classified material, including waste and
reproduction materials containing classified
information, will be safeguarded as prescribed in this
Handbook for the specific category of security
classification involved until the material is disposed
of or destroyed.
1901 CLASSIFIED CRYPTOGRAPHIC MATERIAL
Classified cryptographic information will be disposed of or
destroyed in compliance with the requirements of current NSA
directives.
1902 DESTRUCTION OF CLASSIFIED MATERIAL
1. General
a. Each NASA Installation will review at least
annually its classified material holdings for the
purpose of reducing to an absolute minimum the
quantity on hand at any given time. At a minimum,
a specific day will be designated each year for
classified material review and destruction.
Nonrecord classified information that has served
its purpose will be destroyed in accordance with
procedures and methods outlined below. The method
of destruction selected must ensure that
recognition or reconstruction of the classified
information or material, in whole or in part, is
made impossible.
b. The method of destruction for all classified
material must be approved by the ICS.
c. Classified information embodied in paper products
will be destroyed by burning (with pulverization
of the residue), by pulping, or by shredding and
pulverizing the material into an unrecognizable
form.
d. Classified information embodied in material other
than paper products will be destroyed by any
method specifically approved by the ICS as having
the capability of completely and permanently
rendering the information indistinguishable.
e. Any known or suspected breakdown or malfunction of
destruction equipment must be reported to the ICS
immediately.
f. If classified material is removed from a NASA
facility for destruction, it must be destroyed on
the same day that it is removed, unless storage
facilities are approved by the ICS.
2. Witnessing and Certifying Destruction
a. Top Secret
(1) The Top Secret Control Officer (TSCO) or an
alternate will personally destroy all Top
Secret material, but only in the presence of
a properly cleared witnessing NASA employee.
(2) A record of destruction will be made. If
evidence of destruction is required by
another department, certification will be
furnished by separate letter.
b. Secret and Confidential
(1) Secret material will be destroyed by at least
two appropriately cleared persons. Such
persons will certify destruction of the
material as prescribed by the ICS.
(2) Confidential material does not require a
witness or a certificate of destruction.
3. Retention of Certificates of Destruction. Signed and
witnessed records of destruction of Top Secret material
will be retained on file for 5 years after the date of
destruction.
CHAPTER 20: SECURITY VIOLATIONS AND COMPROMISE OF CLASSIFIED
INFORMATION
2000 GENERAL
As stated in the following examples, classified information
is vulnerable to compromise its custodians allow themselves
to become negligent by:
1. Failing to properly secure, i.e., lock classified
material in an authorized container when not under
their immediate, continuing control and supervision;
2. Not properly preparing the material for transmission,
or improperly transmitting the material within or
outside the Installation;
3. Discussing or attempting to "talk around" classified
information during telephone conversations or in places
where unauthorized persons are present;
4. Misplacing or otherwise losing control of classified
material (including classified waste); or
5. Releasing classified information without properly
determining the recipient's identity, clearance status,
and need-to-know.
2001 EMERGENCY ACTION AND REPORTING REQUIREMENTS
1. Whenever any NASA employee observes that classified
information is not being given the prescribed
protection, that individual will do the following:
a. Immediately take all interim actions possible to
restore the prescribed security controls over the
information or material; and
b. Report the circumstances promptly to an immediate
supervisor and directly to the Security Office.
Non-NASA personnel having no immediate supervisor
within a NASA Installation or a component activity
thereof will report the circumstances as
prescribed by the ICS.
2. Whenever any NASA employee or non-NASA personnel
discovers the loss or compromise of classified
information or material, that person will promptly
report such loss or compromise to the nearest NASA
Security Office.
2002 ACTION TO BE TAKEN BY INSTALLATION CHIEF OF SECURITY (ICS)
1. Preliminary Action and Inquiry. Upon becoming aware
that there has been any loss of prescribed security
control over classified information, the ICS will take
the following appropriate actions:
a. Ensure that all required security controls over
the information or material are immediately and
fully restored;
b. Ensure that all classified material involved is
accounted for by the custodian(s) as expeditiously
as possible. Whenever Top Secret material is
involved, however, an inventory will be conducted
immediately;
c. Ensure the immediate change of each locking device
combination that may have been subjected to
compromise; and
d. Promptly conduct a preliminary inquiry to
determine if the information or material involved
may have been compromised.
2. Action Required in Event Classified Information Was Not
Compromised. If the preliminary inquiry indicates that
the information or material was not subjected to
compromise but that a security violation did occur, the
ICS will do the following:
a. Determine the circumstances surrounding the
security violation and the identity of the
individual(s) responsible.
b. Obtain a written or verbal account of the
violation from the responsible individual(s).
c. Provide copies of a report containing essential
details of the incident to one or more of the
following, as appropriate:
(1) The appropriate NASA supervisor(s). If the
responsible individual is on a NASA payroll
or is serving without a contract as an
advisor, consultant, or expert to NASA, this
report will be used by NASA management as a
basis for considering disciplinary action.
(2) The Security Office of the employing Federal
department or agency, if the responsible
individual is a Federal employee on other
than a NASA payroll.
(3) The cognizant Security Office of the
employing contractor, as prescribed in
Section V of the DOD Industrial Security
Regulation (DOD 5220.22-R), if the
responsible individual is a contractor
employee and the incident involved Top
Secret, Restricted Data, or cryptographic
information.
d. Take corrective action to eliminate the practice
or condition that caused or permitted the security
violation.
3. Action Required in Event of Possible Loss or Compromise
of Classified Information
a. Action by ICS. If the preliminary inquiry
indicates that classified material is missing or
lost, or that classified information has been
otherwise subjected to compromise, the ICS will
conduct a full inquiry for the purpose of taking
corrective measures and appropriate
administrative, disciplinary, or legal action.
Such inquiry will follow the stages prescribed in
subparagraphs b through g below as appropriate.
b. General Requirements
(1) Every reasonable measure will be taken
promptly to regain custody of all missing
material and to restore appropriate security
controls.
(2) Promptly notify the following of the incident
and of each pertinent development:
(a) Installation officials, in accordance
with the policy of the Installation
Director; and
(b) The Chief, NASA Security Office, NASA
Headquarters.
(3) Within the guidelines and restrictions set
forth in this paragraph, also initiate prompt
action to directly inform the originating
NASA Installation or other Federal department
or agency of details pertaining to the
possible loss or compromise so that a damage
assessment may be conducted and appropriate
measures taken to negate or minimize any
adverse effect of such a compromise.
(4) Unless otherwise directed in this paragraph,
additional dissemination of information will
not be made while the incident is under
active investigation.
c. Indication of Violation of Criminal Statutes. If
a violation of criminal statutes is indicated,
immediately suspend all further inquiry and
promptly refer the matter to the nearest office of
the FBI. The Chief, NASA Security Office, NASA
Headquarters, will be advised whenever such action
is taken.
d. Cryptographic Information. When cryptographic
information is involved, reporting and
investigative actions will be taken in accordance
with the provisions of Chapter 46.
e. Classified NATO Information. When classified NATO
information is involved, after action is taken as
prescribed in subparagraphs b(1) and (2), the
agency report and investigation will be
accomplished in accordance with the provisions of
paragraph 2003.
f. Corrective Action. Within limitations set forth
in this paragraph and in paragraph 2003, determine
the circumstances that permitted the loss or
compromise and take all necessary actions to
preclude a recurrence.
g. Final Report. Within the guidelines and
limitations set forth in this paragraph and in
paragraph 20d in paragraph 2003, and at the
conclusion of investigation of the incident,
prepare a final report of all pertinent findings.
Provide copies of this report to one or more of
the following, as appropriate:
(1) All persons and Federal departments and
agencies previously provided a copy of the
incident report as prescribed in
subparagraphs b(2) and b(3).
(2) The appropriate NASA supervisor(s). If the
responsible individual is a NASA employee or
special Government employee, this report will
be used by NASA management as a basis for
considering disciplinary action.
(3) The Security Office of the employing Federal
department or agency, if the responsible
individual is an employee of another agency.
(4) The cognizant Security Office of the
employing contractor, as prescribed in
Section V of the DOD Industrial Security
Regulation (DoD 5220.22-R), if the
responsible individual is a contractor
employee.
(5) The Chairperson, NASA SMWG, will provide a
copy of the final report to the Information
Security Oversight Office, General Services
Administration, Washington, DC 20405.
2003 ACTION REQUIRED IN THE EVENT OF POSSIBLE LOSS OR COMPROMISE
OF CLASSIFIED NATO INFORMATION
The Chief, NASA Security Office, NASA Headquarters, will
submit an initial report of the incident to the United
States Security Authority for NATO Affairs (USSAN) and will
initiate an investigation in accordance with the provisions
of USSAN instructions.
2004 ACTION REQUIRED IN THE EVENT OF UNAUTHORIZED DISCLOSURE OF
CLASSIFIED INFORMATION BY NASA PERSONNEL
Key officials of the Office of the Administrator,
Officials-in-Charge of Headquarters Offices and Directors of
Field Installations will ensure that prompt and appropriate
sanctions are taken whenever any NASA employee is determined
to have knowingly, willfully, and without authorization
disclosed information that has been properly classified
pursuant to the provisions of a current statute, executive
order, or established regulation. Sanctions may include
reprimand, suspension without pay, removal, loss or denial
of access to classified information or other sanctions in
accordance with applicable laws and NASA regulations.
2005 MEDIA LEAKS
The ICS will notify the NASA Security Office when
information has been comprised via a media leak. If
appropriate, the NASA Security Office will notify the
Internal Security Section, U.S. Department of Justice, who
will in turn review the facts presented, determine whether
the facts meet the standards of law, and, if so, request
that the FBI initiate an investigation. The initial
notification is made via a letter addressed to the
following:
Assistant Attorney General
Criminal Division
U.S. Department of Justice
Washington, D.C. 20530
Attention: Deputy Assistant Attorney General
The information contained in the letter should describe the
article, including the date and title of the article, and
the newspaper/magazine or other media venue, in which the
information was included. A copy of the article may be
included as an enclosure. A brief statement concerning the
potential damage to national security by the article should
be included, as well as a point of contact knowledgeable of
the incident and available for an initial interview, i.e.,
the Security Officer.
CHAPTER 21: LIMITED DISSEMINATION (LIMDIS) INFORMATION
2100 GENERAL
1. Certain NASA programs and projects require a slightly
higher level of protection than general security
requirements provide. This additional protection can
be provided by using LIMDIS controls. These controls
utilize standard national security procedures for
handling and storing classified information, but limit
its dissemination by requiring a more stringent
need-to-know policy.
2. LIMDIS is the term given to the additional protection
provided to classified material. There are no LIMDIS
Programs; there are classified programs that use LIMDIS
protective measures.
3. Not to be confused with special access programs,
programs using LIMDIS protection normally do not use
nicknames, codewords, or trigraphs and digraphs to
identify projects.
4. There is no centralized access list or billet structure
associated with LIMDIS; however, local access lists may
identify those who have been briefed on the protective
measures required for material marked LIMDIS. An
individual releasing LIMDIS information verbally,
through correspondence, or by electronic means must
ensure that the recipient has the required clearance
(Confidential, Secret, or Top Secret) and the
need-to-know, and that he or she has been briefed on
what protective measures apply to the information
before releasing or transmitting the information.
2101 ESTABLISHING LIMDIS CONTROLS
1. Installation Directors have the authority to identify
and assign classified programs that require LIMDIS
protection on their facilities.
2. Specific LIMDIS controls must be identified for each
classified program identified. These controls will
identify the required security measures. LIMDIS
protection measures include the following:
a. Decentralized maintenance of disclosure listings;
b. Briefing concerning access limitations;
c. Physical security restrictions limited to
requirements such as placing the material within
sealed envelopes within approved storage
containers to avoid inadvertent disclosure and the
commingling with other files;
d. Marking inner envelopes containing designated
LIMDIS information with the notation: "To Be
Opened Only By Personnel Authorized Access";
e. Requiring electronically transmitted messages
containing designated information to be marked
with the uniform caveat "LIMDIS"; and
f. Prescribing unique oversight procedures to be
accomplished by competent professional security
personnel.
2102 ACCESS TO LIMDIS MATERIAL
1. Access to LIMDIS protected information is limited to
the following individuals:
a. Those who possess a security clearance at a level
equal to or above that required for the classified
information;
b. Those who have a valid need-to-know the classified
information to perform their duties; and
c. Those who have been briefed on the specific LIMDIS
protection measures that have been approved for
the information.
2. Briefings for LIMDIS access will include the following
information:
a. An explanation of each of the LIMDIS protective
measures that apply to the information they will
receive and how they are implemented.
b. The applicable standard guidance and procedures
identified in this Handbook and any applicable
LIMDIS security guides for handling, storing, and
protecting the information.
3. An individual's LIMDIS access will be sent via standard
security clearance transmission methods to the
cognizant Security Manager. The Security Manager will
verify clearances and that an individual has been
briefed for the indicated LIMDIS information with the
contractor program manager or Government Office of
Primary Responsibility (OPR).
4. Debriefings are not required for LIMDIS.
2103 LIMDIS MATERIALS AND DOCUMENT MARKING, STORAGE, AND
TRANSMISSION
The following guidelines will be uniformly implemented to
afford secure handling and to limit dissemination of LIMDIS
information to only those individuals who require the
information in performing their work.
1. Marking Wrappings. LIMDIS documents will be double-
wrapped with the inner wrapping displaying on both
sides the classification at the top and bottom. Also,
the inner wrapping will be marked: "LIMDIS" and "To Be
Opened By Addressee Only."
2. Document Marking. Stamp or mark classified information
in accordance with Chapter 12 of this Handbook. In
addition, documents containing LIMDIS information will
be marked as follows:
a. Front and back covers. The overall classification
of the document will be marked at the top and
bottom of the front and back covers. The term
LIMDIS will follow the classification, e.g.,
SECRET/LIMDIS. The caveat "CAUTION: LIMITED
DISTRIBUTION POLICY APPLIES" will be placed above
the bottom marking on the front and back covers.
b. Title page or first page if there is no title
page. The overall classification of the document
will be marked at the top and bottom of the page.
The term LIMDIS will follow the classification,
e.g., SECRET/LIMDIS. The caveat "CAUTION: LIMITED
DISTRIBUTION POLICY APPLIES" will be placed above
the bottom marking on the page.
c. Internal pages. Individual pages will be marked
with the most restrictive classification of the
classified contents of the page; unclassified
pages in the classified document will be so
marked. Classifications will include the term
LIMDIS as described above. The caveat "CAUTION:
LIMITED DISTRIBUTION POLICY APPLIES" will be
placed above the bottom marking on each page
containing LIMDIS information.
d. Paragraph markings. Paragraphs will be marked
with the classification and the limited
dissemination abbreviation, e.g., C/LIMDIS.
e. Additional markings. Other markings such as
classification authority and review requirements
must appear on the first page of all classified
material.
f. Marking other material. Other forms of classified
information such as charts, drawings,
transparencies, computer output, etc., must be
marked in accordance with Chapter 12 of this
Handbook. The term LIMDIS will be added to
classification markings where applicable. The
caveat "CAUTION: LIMITED DISTRIBUTION POLICY
APPLIES" will be placed on material where space
permits. Transparencies, view-graphs, and similar
materials will be marked within the viewing area.
2104 STORAGE
LIMDIS materials will be stored only in storage containers
approved by the General Services Administration (GSA) for
the level of classification. In situations where the
complete safe/container is not dedicated to storing material
to which all personnel are accessed, the materials may be
stored in a common container. In this case, the LIMDIS
material will be wrapped and sealed in an opaque cover and
marked with the appropriate classification on the top and
bottom of the front and back and marked with the appropriate
LIMDIS markings.
2105 TRANSMISSION
1. Secret/LIMDIS information shall be sent by registered
mail or hand carried by an authorized courier.
Registered mail and courier packages must be double-
wrapped with the inner wrapper prominently displaying
on both sides the appropriate classification, LIMDIS
caveat, and the statement, "To Be Opened By Addressee
Only." The recipient's name should appear on the inner
wrapper. The receiving organization and return address
is placed on the outer wrapper. Outer wrappers of
courier packages may be marked only with the
recipient's name. Classifications, caveats, or any
reference to the contents of the package will never be
placed on outside wrappers.
2. Confidential/LIMDIS material may be sent via first
class mail between Government facilities and via
certified mail to and from Government contractors.
Wrapping will be as described for registered mail and
the outer wrapper will be marked, "DO NOT FORWARD."
Electronic transmission of all LIMDIS material is
authorized when conducted through established systems
approved for classified transmissions. When possible,
LIMDIS information will identify specific individuals
to receive the information and transmission will occur
only when a briefed individual is present at each end
(the transmitting and receiving equipment). Such
cleared individuals will ensure that the materials are
safeguarded from inadvertent disclosure to others.
CHAPTER 22: SECURITY EDUCATION AND MOTIVATION
2200 GENERAL
1. The effectiveness of an individual in meeting security
responsibilities is proportional to the degree to which
the individual understands them. Thus, an integral
part of the NASA Security Program is the training of
individuals on their security responsibilities.
Accordingly, Directors of NASA Field Installations
shall establish procedures in accordance with this
Chapter whereby all NASA employees and appropriate
contractor personnel are briefed annually, at a
minimum, as to their security responsibilities.
2. Management and employee involvement is essential to an
effective security program. Employees are more
motivated when they recognize that top management and
supervisors care about, support, and reward meeting
security objectives, and such employees participate in
helping define security procedures. Employee
motivation is also increased when the security message
is stimulating and makes sense in the context of their
specific jobs.
2201 MANAGEMENT SUPPORT
Management and surveying support must be reflected in the
overall Security Education and Motivation Program.
1. Supervisors must provide job-related, facility-oriented
security education and awareness instruction
immediately after a new or newly assigned employee
reports for duty assignment.
2. Supervisors must participate actively in security
programs and hold timely discussions of security topics
in staff meetings.
3. Supervisors must encourage employees' timely
suggestions efforts to improve overall security
practices.
4. Supervisors must show interest and concern in security
violations committed by employees under their
jurisdiction and in the corrective actions taken
regarding the infractions.
5. Supervisors must use security regulations, handbooks,
and instruction manuals specific to the program in
which the employees are involved.
6. Supervisors must ensure that they have furnished
security educational material necessary to operate
their program.
2202 INITIAL BRIEFINGS (CATEGORY A)
Appropriate security personnel should give new employees a
general orientation to the NASA mission and an overview of
specific information related to their official duties.
1. Appropriate security personnel establish initial
briefings to acquaint newly hired employees with local
security procedures and to ensure that they become
familiar with their responsibilities to protect
personal and Government property from theft, loss, or
damage.
2. Appropriate security personnel give initial briefings
to employees before they report to their workstations.
3. Initial briefings include, but are not necessarily
limited to, access control and escort requirements,
property passes, security of property, protection of
sensitive information, protection of personnel, and
facility orientation.
2203 COMPREHENSIVE SECURITY BRIEFINGS
1. Security Orientation (CATEGORY B)
a. The responsible supervisor or designee will
discuss in detail with each employee who is new to
the employing unit all security requirements and
procedures for which the employee is to be
specifically responsible in discharging the duties
of the particular position to which he or she is
assigned.
b. The security orientation will include, but will
not necessarily be limited to, the security
requirements and procedures that are unique to the
Installation, as well as all other pertinent
requirements and procedures set forth in this
Handbook.
c. Upon conclusion of the orientation, the person who
gave it will complete Item 2 of the "Employee
Security Orientation/Indoctrination Record" (NASA
Form 838), and will ensure that the employee
executes Item 3 of the form. The supervisor or
designee will then forward the record copy of the
form promptly to the Security Office for
processing and permanent filing.
2. Security Indoctrination (CATEGORY C)
a. Before receiving a security clearance, the
employee will be given a security briefing(s) by a
representative (hereinafter referred to as the
"Indoctrination Officer") of the Security Office.
b. The security briefing(s) will include, but will
not necessarily be limited to, the general
security aspects affecting the individual's
employment, a summary of the restrictions and
obligations associated with access to classified
information that are imposed by statute and/or
"The Order," and an invitation for the employee to
confer with the supervisor or the Security Office
whenever any question arises concerning security
requirements or procedures.
c. Upon conclusion of the briefing(s) the employee
and the Indoctrination Officer will complete
Standard Form 312, Classified Information
Nondisclosure Agreement.
3. Special Training
a. Original classifying authorities (Category D) must
receive initial training specifically directed at
procedures for originally classifying documents
and information, etc. Annual refresher training
is required.
b. Security custodians (Category E) must receive
initial training in their responsibilities for
safeguarding classified information. Annual
refresher training is required.
c. Other special training (Category F) will be
developed as required. For example, training
related to Special Access Programs, Sensitive
Compartments Information, the NASA Resource
Protection Program (NRP), the Personnel
Reliability Program, etc.
4. Refresher Security Briefings
a. The Associate Administrator for Management Systems
and Facilities and the Directors of NASA Field
Installations will provide for such periodic
security reorientations and special or refresher
briefings as may be considered necessary within
the respective Installation to effectively
supplement the requirements of subparagraphs 1 and
2 above. The refresher security briefing retrains
employees possessing security clearances with
information regarding security regulations and
their security responsibilities. Refresher
briefings are also designed to maintain and
heighten individual security awareness for all
employees.
b. Annual refresher briefings are mandatory for all
employees. Supervisors are responsible for
ensuring employee attendance.
c. The Security Office must compile and retain a log
of refresher briefing attendees as part of each
individual file.
d. Subject areas covered in both initial and
refresher briefings should be presented in
different ways at each type of briefing to sustain
attendees' interest.
e. An annual Security Awareness Week will be
designated by the Administrator to enhance
security awareness of all employees throughout the
Agency. At least one day will be designated
"Classified Material Destruction Day" to encourage
the destruction of classified material. In
conjunction with the Security Awareness Week the
Administrator will be briefed on the status of
security within the Agency.
2204 FOREIGN TRAVEL BRIEFINGS
The foreign travel briefing informs employees about
intelligence gathering methods that they may be exposed to,
potential terrorist and other criminal threats, and
defensive measures they may use against such methods. Other
practical advice that will enhance the safety of the
travelers should be included.
2205 TERMINATION BRIEFINGS
Security termination briefings are given to employees whose
security clearance is being terminated due to termination of
employment, transfer to another NASA Installation, or
administrative reasons. The briefing is designed to ensure
termination of all classified activity and holdings by the
individuals and to remind them of past clearance
responsibilities and of the penalties for unauthorized
disclosure of classified information. The Security Briefing
Acknowledgement portion of Standard Form 312 is to be
completed following the briefing and retained for 50 years.
If the employee has ever held a security clearance ( "Q" )
issued by the Department of Energy ( DOE ) or the Nuclear
Regulatory Commission (NRC) in connection with a current
NASA employment, the employee also will execute a DOE or NRC
"Security Termination Statement" (DOE Form 136 or NRC Form
136 ) as appropriate. The record copy of such forms will be
retained by the Installation Security Office and a copy
thereof will be furnished to the employee upon request.
2206 SECURITY AWARENESS AND EDUCATION INSTRUCTOR
QUALIFICATIONS/TRAINING
1. It is important that instructors have adequate
qualifications to provide effective training.
Instructors should be considerably knowledgeable about
their subject, and should possess effective
presentation skills. Imagination, common sense, and
enthusiasm are important traits in an instructor.
Instructors must recognize that management and employer
participation is critical in developing an effective
security awareness and education program.
2. Instructors must be able to present well-organized
presentations with clearly defined objectives. A
method must exist for instructors to obtain feedback
from individuals receiving instruction.
3. Instructors must coordinate frequently with other
members of the security staff to assure understanding
of all NASA security policies and procedures.
Instructors shall be required to attend appropriate
training to enhance their knowledge and skills.
Efforts are also to be made to obtain pertinent
information from other Government agencies.
2207 SECURITY EDUCATION SUPPORT MATERIAL
1. General. The judicious selection and use of security
education support material is encouraged to remind
employees of their security responsibilities and to
promote the development of positive security awareness
within the Installation.
2. Direct Security Support Material
a. This category of material contains information
that is limited to specific security procedures,
instructions, or concepts, including espionage
techniques and security measures designed to
counter these techniques.
b. This category of material is authorized for
circulation only through regular NASA distribution
channels or displayed only in areas within the
Installation that are frequented primarily by NASA
personnel. This material will not be circulated
in connection with the distribution of salary
checks or other fiscal matters.
CHAPTER 23: INDUSTRIAL SECURITY PROCEDURES
2300 GENERAL
1. NASA policy on Industrial Security is established in
NMI 1600.2, "NASA Security Program," paragraph 5.0.
2. This Chapter describes procedures to implement this
policy. It pertains to contracts, such as purchase
orders, awards, and grants, where performance will
require access to classified information by the
contractor, supplier, grantee, or contractor's
employees. This instruction does not apply to
contracts or agreements with other Federal agencies.
2301 RESPONSIBILITIES OF THE NASA CONTRACTING INSTALLATION
1. NASA Field Installations. The Director of a NASA
Installation requesting bids or quotations for a
classified contract, negotiating or awarding a
classified contract, or bearing responsibility for the
performance of a classified contract is responsible for
ensuring the identification of all necessary security
safeguarding requirements. The responsibilities of the
Installation include, but are not limited to, the
following:
a. The protection of classified information provided
to NASA contractors for performance on NASA
contracts.
b. The appropriate technical guidance and/or
assistance to the cognizant security office during
security inspections of NASA contractor
facilities, or when requested by the cognizant
security office.
c. Taking all necessary actions, subject to the
provisions of this Handbook and the DOD Industrial
Security Regulation (ISR), to prevent the
compromise of classified information.
(1) NASA recommendations affecting the
contractor's security program will be made
only through the cognizant security office of
the contractor concerned, since that office
is primarily responsible for ensuring that
the contractor complies with all security
recommendations.
(2) When it becomes apparent that full and
satisfactory action on a specific NASA
recommendation has not been taken by the
cognizant security office or by the
contractor, a detailed report of the
circumstances will be forwarded to the Chief,
NASA Security Office NASA Headquarters for
appropriate action.
(3) Changes to a contractor's security program
will not be recommended to the contractor
without the prior written approval of the
NASA Contracting Officer, if such changes
will affect the cost, performance, or
delivery of the contract. All changes to the
security program must go through the
contracting officer for the processing of a
contract modification.
d. Determining the need-to-know in connection with
incoming visits to contractor facilities, or in
other instances involving the release of
classified information by NASA contractors. Visit
requests from foreign nationals involving the
release of classified information by NASA
contractors will be forwarded to the International
Relations Division, NASA Headquarters, for
concurrence.
e. Certifying the need-to-know when required in
connection with requests for personnel of NASA
contractors to visit the facility of another
contractor, a military installation, or another
Government agency wherein access to classified
information is involved.
f. Issuing specific instructions to a NASA contractor
whenever the bulk or quantity of classified
material does not lend itself to transmission as
prescribed by the Industrial Security Manual
(ISM).
g. Investigating and requesting the appropriate
cognizant security office to take corrective
measures in connection with the following actions
by NASA contractors. The cognizant security
office may be requested to perform the necessary
investigation:
(1) Releasing information for public
dissemination pertaining to classified
contracts when contrary to NASA policy.
(2) Publishing or distributing, without prior
authorization of the appropriate contracting
officer, classified information in sales
literature, advertisements, and brochures.
(3) Disclosing of classified information at
public or private gatherings without the
prior approval of the appropriate contracting
officer, or the receipt of appropriate visit
authorizations.
2. NASA Headquarters. Responsibilities identified in
subparagraph 1 will be performed by the Chief,
Headquarters Security Branch (Code JBF), for
Headquarters contracts; however, the technical monitor
of the contract involved will make need-to-know
determination of subparagraph 1d.
2302 AUTHORITY OF THE NASA CONTRACTING INSTALLATION
1. Directors of NASA Field Installations and the Chief,
Headquarters Security Branch (Code JBF), are authorized
to take necessary action to discharge the
responsibilities assigned to them in this Handbook,
including reassignment of responsibility and
redelegation of authority to personnel under their
jurisdiction or to the Director of another NASA
Installation. In addition, these responsibilities may
be discharged by redelegating necessary authority to an
appropriate official of the DOD by means of a mutually
acceptable written agreement, which will be reviewed by
the Installation's legal counsel (Chief Counsel for
Installations or General Counsel for Headquarters).
2. The Defense Investigation Service (DIS) has entered
into an agreement with NASA whereby DIS will provide
field service functions, including security, in support
of classified contracts executed by NASA. When DIS is
requested by the contracting agency to perform these
functions, the request and redelegation of authority
will be specific in identifying the services desired
and the authority redelegated.
2303 RESPONSIBILITIES OF THE COGNIZANT SECURITY OFFICE
In contrast to the responsibilities assigned to the
contracting agency, the responsibilities of the cognizant
security office as provided by the ISR include, but are not
limited to, the following:
1. Executing Security Agreements (DD Form 441) with
contractors on behalf of the Government;
2. Conducting security surveys and inspections of NASA
contractor facilities;
3. Granting facility and personnel clearances to NASA
contractors;
4. Investigating the loss, or subjection to compromise, of
classified NASA information in the hands of
contractors; and
5. Serving as the primary point of contact on all security
matters between the Government and the contractor.
2304 RESPONSIBILITIES PRIOR TO AWARD OF A CLASSIFIED CONTRACT
1. Access. Each procurement request will include a
statement that the contractor or prospective contractor
will or will not require access to classified
information and/or will or will not generate classified
information in the performance of such contract. If
the contract will involve access to classified
information or cause the generation of classified
information, a letter as discussed in paragraph 2305.1
will be attached to the material submitted to the
individual negotiating the contract.
2. Contract Clause. Each classified contract will contain
the standard security clause required by Part 4 of the
Federal Acquisition Regulation, which is also set forth
in Part 52 of that Regulation. Any proposed deviation
in this standard security provision, (e.g.,
elimination, addition, or substitution) will be
forwarded to the Office of Procurement (Code HS) for
approval by the Assistant Administrator for Procurement
with concurrence by the Chief, NASA Security Office,
and the General Counsel.
3. Industrial Security Requirements Check List (DD Form
254). See Appendix F.
2305 VERIFICATION OF, OR REQUEST FOR, A CONTRACTOR FACILITY
SECURITY CLEARANCE
1. Verification Procedures. Prior to the release of any
classified information to a contractor or prospective
contractor, the responsible office proposing release of
the classified information will obtain verification of
the existence of a valid facility security clearance of
the contractor or prospective contractor. Verification
will be obtained by a letter to the local NASA Security
Office containing the following information:
a. Complete name, address, and telephone number of
the contractor.