Description

A focused course, tailored for you

DCSA Physical Security and COMSEC Audit Readiness

Build the documentation, procedures, and control evidence that pass DCSA physical security and COMSEC inspections the first time.

The COMSEC account and the physical security plan were written at different times by different people. When DCSA arrives, they compare them. Every contradiction is a finding.

$199 one-time

Tailored to your situation. Access within 24 hours. 30-day money-back.

Includes a hand-built implementation playbook delivered alongside course access, generated for your specific situation.

Why this course

The KMI migration created a documentation gap in most COMSEC accounts that annual inventories keep surfacing: procedures that still describe EKMS workflows, key custodian appointment formats that reference superseded regulations, and physical storage documentation that doesn't reflect the new key management chain. At the same time, DCSA physical security inspections have moved toward integrated reviews that cross-reference the COMSEC material storage area, the IDS certification covering it, and the access control log maintaining it. Three documents that were often written independently. When they contradict each other, the facility accumulates findings. When findings stack across two inspection cycles, the FCL review timeline accelerates.

What you walk away with

Write a COMSEC account SOP that satisfies both NSA/CSS Policy Manual 3-16 and DCSA physical security inspection requirements simultaneously.
Build the documentation package that connects your COMSEC material storage area to your IDS certification and physical access control records.
Update COMSEC accounting records and key custodian procedures to reflect KMI migration requirements.
Produce a physical security plan section that cross-references COMSEC storage requirements without creating contradictions inspectors will cite.
Complete the RMF control evidence package for PE and SC control families using your actual facility records.

The 12 modules

Module 1. DoD RMF and the COMSEC/Physical Security Control Map

The Risk Management Framework assigns specific control families to physical and communications security. This module maps NIST 800-53 PE and SC/IA controls to what a COMSEC Account Manager and Physical Security Officer actually produce: the policies, access records, inspection findings, and accreditation artefacts that satisfy each control family. You walk away with a working crosswalk your SSP author can reference directly.

Module 2. COMSEC Account Management Under Current NSA/CSS Policy

NSA/CSS Policy Manual 3-16 and TB 380-41 define what your COMSEC account records must contain and how frequently they are audited. This module covers account establishment, key custodian appointment and documentation, quarterly and annual inventory procedures, and the specific record formats that DCSA and NSA inspectors check first. You produce a compliant account management SOP template by the end of the module.

Module 3. EKMS to KMI Migration: Updating SOPs and Accounting Records

The Key Management Infrastructure replaced EKMS, but many facility SOPs still reference workflows, equipment identifiers, and accounting codes that no longer apply. This module walks through the KMI migration checklist for a COMSEC account: which procedures must be rewritten, which equipment records need KMI-era identifiers, and how to document the transition in your COMSEC account book before the next inspection cycle opens.

Module 4. Physical Security Baseline Documentation: ICD 705 and DoD 5200.08-R

SCIF accreditation and cleared facility physical security both require written documentation tied to Intelligence Community Directive 705 and DoD Instruction 5200.08-R. This module covers the physical security plan structure, the elements DCSA looks for in each section, and the specific evidence of implementation, including alarm certifications, access control logs, visitor records, and perimeter inspection records, that auditors compare against the written plan.

Module 5. IDS Certification and Access Control Evidence

Your Intrusion Detection System certification must align with what your physical security plan says the system does, and the access control log must reflect the access rule set documented in your SOP. This module covers UL 2050 certification requirements, IDS zoning documentation, and how to build an access control audit trail that satisfies both a DCSA inspection and your insider threat program's physical data requirements.

Module 6. COMSEC Material Storage and Physical Access Control Integration

COMSEC material storage requirements, including GSA-approved containers, dual-person integrity for certain key material, and access control for the storage area, must appear in both the COMSEC account SOP and the physical security plan. When written independently, these documents create inspection findings. This module covers the specific paragraphs that must cross-reference, and the physical access log evidence that ties the two documents together for an inspector.

Module 7. Writing the COMSEC SOP That Passes NSA/CSS and DCSA Review

A COMSEC SOP must satisfy two inspection audiences simultaneously: the NSA/CSS team reviewing account procedures and the DCSA team reviewing facility security. This module covers the SOP structure, mandatory elements under NSA/CSS Policy Manual 3-16, DCSA-specific language for physical storage procedures, and the version-control and review-cycle requirements both agencies look for. You produce a compliant SOP template with annotation for your facility's specific configuration.

Module 8. DCSA Inspection Preparation: The Assessment and Authorization Process

DCSA's Assessment and Authorization Process Manual defines what an inspector reviews during a facility security inspection, in what order, and with what evidence. This module covers the DCSA inspection cycle, the pre-inspection self-assessment, the documentation a Physical Security Officer must have ready, including physical security plan, IDS certification, access control records, and training records, and how to close prior-cycle findings before the next inspection opens.

Module 9. Facility Security Clearance Maintenance and the SSP

A facility's FCL depends on a current, accurate System Security Plan that reflects actual operations. This module covers the SSP update process for physical security and COMSEC changes: what triggers an SSP amendment, how to document equipment additions or removals, the COMSEC account references that must appear in the SSP, and how to manage the DCSA approval process for changes that affect the facility's accreditation status.

Module 10. Insider Threat Program Integration with Physical Security Controls

DoD Directive 5205.16 requires insider threat programs to incorporate physical security data: access logs, after-hours entry records, and unusual activity reports. This module covers what access control data to retain, in what format, for how long, and how to connect physical security anomalies to the user activity monitoring and reporting process your facility's insider threat working group needs from your physical security program.

Module 11. Cross-Domain Solution Physical Security and COMSEC Requirements

Facilities hosting Cross-Domain Solutions carry layered physical and COMSEC requirements beyond standard SCIF accreditation: specific cable routing documentation, equipment isolation requirements, and COMSEC material handling procedures that apply to CDS hardware. This module covers DSS and NSA CDS accreditation requirements for physical security, the COMSEC account documentation specific to CDS-adjacent key material, and coordination of the CDS approval package with your existing SOPs.

Module 12. The Integrated Accreditation Package: Physical Security, COMSEC, and RMF Closure

Your facility's accreditation package must present physical security and COMSEC controls as a coherent, evidence-backed whole. This module covers the final assembly: organizing the SSP, physical security plan, COMSEC account SOPs, and supporting evidence into a package that satisfies DCSA, satisfies RMF closure requirements, and does not create document contradictions an inspector will cite. You leave with a review checklist and a document index template.

How this addresses your situation

Specific modules that map to what you said you are dealing with.

Physical Security Officers running the annual IDS certification and access control review who also manage the COMSEC account

COMSEC Account Managers updating SOPs after the EKMS-to-KMI migration who need to ensure physical storage procedures match the new key management chain

Facility Security Officers preparing for a DCSA inspection cycle who hold dual physical and COMSEC program responsibility

ISSOs building RMF control evidence for PE and SC control families at facilities with active COMSEC material storage areas

What you get with this course

12 written modules covering COMSEC account compliance, physical security documentation, and RMF control evidence
Downloadable COMSEC SOP template annotated for both NSA/CSS Policy Manual 3-16 and DCSA inspection requirements
Physical security plan cross-reference checklist for COMSEC material storage area documentation
KMI migration procedure update template for COMSEC account books and key custodian records
RMF control family crosswalk mapping PE and SC families to facility artefacts
Hand-built implementation playbook tailored to your facility's specific configuration, delivered alongside course access

What you will have in hand by Day 1, Week 1, Month 1

Access to all 12 written modules within 24 hours of purchase.

Downloadable templates and worked examples available immediately.

Hand-built implementation playbook tailored to your facility configuration, delivered alongside course access.

Before and after

Before

COMSEC SOPs still reference EKMS workflows after the KMI migration. Physical security plan and COMSEC account documentation were written independently and create contradictions that inspectors cite. RMF control evidence for PE and SC control families requires hours of assembly from separate sources.

After

An integrated documentation package where the COMSEC account SOP, physical security plan, and SSP cross-reference correctly. IDS certification and access control records connect to COMSEC material storage procedures. RMF control evidence organized for the next DCSA inspection cycle and ready for ATO submission.

What happens if you do not address this

The next DCSA inspection will compare your written procedures against what is actually on the floor. If your COMSEC SOP still references EKMS workflows, that is an automatic finding. If your physical security plan does not reference the COMSEC material storage area, that is a second finding. Two findings in the same inspection cycle triggers enhanced monitoring and a shortened reinspection timeline. The documentation work is identical whether done before or after the findings close.

Who it is for

Physical Security Officers and COMSEC Account Managers at cleared defense contractors who hold dual responsibility for both programs, working under DCSA oversight with an active COMSEC account and a facility requiring SCIF-level or contractor-level physical security documentation. Typically at the manager or senior specialist level, directly accountable for producing and maintaining the documentation rather than advising on it.

Who this is NOT for. Physical security or COMSEC professionals whose programs are managed by separate functional owners with no documentation integration requirement. This course assumes hands-on accountability for producing the facility documentation package.

How it arrives

Text-based course in the Art of Service learning environment, plus downloadable templates and worked examples for every module, plus the hand-built implementation playbook delivered alongside course access.

Time investment. Each module runs 30-45 minutes with an associated template you complete for your facility. Full course covers 12 modules across approximately 6-9 hours of focused reading and template work. Most participants produce a compliant COMSEC SOP draft and physical security plan cross-reference within the first five modules.

Why $199 is the right number

Cleared consultants specializing in COMSEC and physical security documentation charge $150-250 per hour, with audits and rewrites running 20-40 hours. DoD-sponsored training covers policy knowledge rather than producing your specific facility's documentation package. This course produces your actual COMSEC SOP, your physical security plan cross-reference, and your RMF control evidence file, not generic templates requiring months of adaptation.

FAQ

Does this cover COMSEC accounts outside the Army TB 380-41 structure?

Yes. The course covers NSA/CSS Policy Manual 3-16 requirements that apply across services, and the DCSA physical security framework that applies to all cleared defense contractors regardless of service affiliation.

How does this connect to the DoD RMF authorization package?

Module 1 maps COMSEC and physical security controls to the NIST 800-53 PE and SC control families your ATO evidence package must cover. Module 12 covers organizing that evidence into a coherent submission package.

My facility manages both COMSEC and STE equipment. Does this cover STE-specific physical security?

The module on cross-domain and special-purpose equipment covers STE physical placement requirements, power isolation, and IDS coverage requirements, along with the specific documentation needed in your physical security plan.

30-day money-back guarantee. If after a week of working through the materials this is not what you needed, reply to the receipt email and a full refund is processed. No questions, no forms.

Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.