Description

A focused course, tailored for you

NISPOM Implementation for Defense Contractor PSOs

Build audit-ready personnel security processes that close DCSA findings before the inspection letter arrives.

The Annual Self-Inspection surfaces three open findings two weeks before the DCSA review: a CE referral with no written disposition, foreign travel reports filed outside the reporting window, and a cleared employee whose annual training acknowledgment is missing from the file. None of these gaps are hard to fix. All of them become formal findings if the documentation is not in order before the inspector arrives.

$199 one-time

Tailored to your situation. Access within 24 hours. 30-day money-back.

Includes a hand-built implementation playbook delivered alongside course access, generated for your specific situation.

Why this course

Personnel Security Officers at defense contractors manage programs spanning hundreds to thousands of clearances across facilities governed by NISPOM under 32 CFR Part 117, Continuous Evaluation requirements, the Insider Threat Program, and DCSA reporting obligations. The gap is rarely in knowledge of the regulation. It is in documented process: the written procedures that translate NISPOM requirements into daily operations, the binder structure the DCSA inspector expects, the CE referral workflow that produces a defensible written disposition, and the foreign travel reporting chain that catches late submissions before they become findings. Without those written processes, every DCSA review is a search for paper that may or may not exist in the form the inspector accepts.

What you walk away with

Build an ASI binder structure that matches the DCSA inspection checklist and survives a cold review by any DCSA Industrial Security Representative.
Document the CE referral workflow so every open referral has a written disposition before the next Annual Self-Inspection.
Establish a foreign travel pre-briefing and post-debrief process that meets the NISPOM reporting requirement and catches late submissions before they become late reports to DCSA.
Create the Insider Threat Program documentation package required under EO 13587, including written plan, designation letter, and training completion records.
Write a SETA calendar with completion tracking that produces the annual training evidence DCSA expects to find in the facility file.
Produce a self-inspection scoring rubric that surfaces gaps 90 days before the DCSA review rather than two weeks before.

The 12 modules

Module 1. 32 CFR Part 117 Obligations Map

NISPOM became a federal regulation under 32 CFR Part 117, shifting compliance obligations from contract terms to enforceable law. This module maps every Part 117 obligation against its corresponding program artefact: the written SOP, the log, the signed form, or the DISS entry that constitutes compliance evidence. Walk away with a complete obligations register tied to the specific documents your program must produce and maintain, organized by NISPOM section.

Module 2. Annual Self-Inspection Methodology

The ASI is a documented self-assessment with a specific finding format DCSA expects. This module covers the ASI binder structure, finding classification between deviation and vulnerability, corrective action documentation, and the written CAP format that closes a finding. Includes a template ASI checklist aligned to all 12 NISPOM sections, plus the scoring rubric that lets you grade your program 90 days before a DCSA visit and schedule corrective actions with time to spare.

Module 3. DISS Administration and Record Integrity

DISS is the system of record for clearance actions. This module covers what must live in DISS versus the paper file, how to manage open actions without letting them age, how to document a CE referral with a written disposition the adjudicative facility accepts, and how to run a quarterly records review that catches mismatches before the DCSA inspector compares your paper binder to the DISS record and finds a gap you did not know existed.

Module 4. Continuous Evaluation Referral Workflow

CE generates referrals when automated monitoring flags a cleared employee. This module documents the full referral chain: receipt from the government Adjudicative Facility, internal inquiry process, written disposition options including suspend, report, refer, and retain, and the documentation standard that satisfies DCSA review. Includes a referral tracking log template and the written procedure every PSO in the facility can follow without improvising a new process each time a referral arrives.

Module 5. Foreign Travel Reporting and Debrief Process

NISPOM requires pre-travel briefings for cleared employees traveling to designated countries and post-travel debriefs within a defined reporting window. This module builds the written procedure, the country-classification lookup process, the briefing acknowledgment form, and the tracking system that surfaces submissions approaching the reporting deadline. Includes a template pre-travel briefing form and a post-debrief log aligned to the NISPOM reporting requirement that survives turnover without institutional knowledge.

Module 6. Adverse Information Reporting Procedures

Cleared employees must self-report certain events; the PSO must report others to DCSA within specific timeframes. This module documents the complete adverse information chain: employee self-report form, PSO intake checklist, DISS reporting requirements, and the internal review process that determines whether a report triggers a Statement of Reasons referral. Includes a decision tree covering the most common adverse information categories and the written procedure that meets the NISPOM reporting obligation without requiring a judgment call each time.

Module 7. Insider Threat Program Documentation

EO 13587 requires cleared contractors to establish a documented Insider Threat Program with five required elements. This module builds each element: the written insider threat plan, the program senior official designation letter, user activity monitoring policy, annual training completion records, and the hub reporting procedure. The focus is on what DCSA actually reviews during an inspection and the documentation package that closes that review without a follow-up finding on program completeness.

Module 8. SETA Program Administration and Completion Tracking

Annual security training is mandatory for all cleared employees; the PSO must track completion and produce evidence of a structured program. This module builds the SETA calendar, training delivery record format, completion tracking spreadsheet, and the annual training attestation form. Covers how to document security briefings, debriefings, and refresher training in a format DCSA accepts without requiring a separate learning management system or relying on informal sign-in sheets that do not satisfy the NISPOM standard.

Module 9. Visitor Control and Foreign National Visit Procedures

Visits by foreign nationals to cleared facilities require documented pre-approval, escort procedures, and post-visit reporting. This module covers the visit request form, approval chain, escort log, debrief requirement, and post-visit reporting procedure. Produces the written Visitor Control Procedure covering both cleared and uncleared foreign national visitors and the documentation a DCSA inspector expects to find in the facility visitor control file rather than a series of informal emails and calendar entries.

Module 10. Personnel Security File Maintenance

The personnel security file is the paper record for each cleared employee. This module covers what must be in the PSF at each clearance level, the retention schedule, purge procedures, and the file audit process that confirms completeness before a DCSA review. Includes a PSF completeness checklist aligned to NISPOM requirements and a template for documenting file reviews that demonstrates to the inspector that the audit was conducted and every identified gap was resolved.

Module 11. DCSA Relationship and Inspection Preparation

The DCSA Industrial Security Representative is the primary government contact for the facility security program. This module covers the relationship management cadence, the pre-inspection package PSOs should have ready before a scheduled review, how to receive findings professionally, and how to write a Corrective Action Plan that DCSA closes without scheduling a follow-up visit. Includes a pre-inspection readiness checklist tied to the finding categories DCSA ISRs most commonly cite in formal reports.

Module 12. SOP Writing and Program Documentation Standards

Sustainable NISPOM compliance requires written SOPs that survive personnel turnover and satisfy the DCSA documentation standard. This module covers the SOP format DCSA accepts, document control requirements, and the procedure for keeping SOPs current as regulations change. Includes templates for the five core PSO processes: CE referral, adverse information, foreign travel, visitor control, and key management. Walk away with a complete documentation package reviewable on day one of a DCSA visit.

How this addresses your situation

Specific modules that map to what you said you are dealing with.

DCSA inspection scheduled within 90 days and the ASI binder has open gaps: Modules 2, 3, and 11

CE referral received and no documented disposition procedure exists: Modules 4 and 3

Foreign travel reports are being filed late or post-debrief forms are missing from cleared employee files: Module 5

Insider Threat Program exists on paper but the documentation package is incomplete for a DCSA review: Modules 7 and 8

What you get with this course

12 written modules covering every NISPOM and 32 CFR Part 117 program area from obligations mapping to SOP writing
Downloadable templates: ASI binder structure, CE referral tracking log, foreign travel acknowledgment form, PSF completeness checklist, SETA completion tracking spreadsheet, adverse information decision tree, pre-inspection readiness checklist
Hand-built implementation playbook tailored to your facility size, clearance level, and current documentation gaps
Written SOP templates for the five core PSO processes: CE referral, adverse information, foreign travel, visitor control, and key management

What you will have in hand by Day 1, Week 1, Month 1

Course access provisioned within 24 hours of enrollment

Hand-built implementation playbook delivered alongside course access

Before and after

Before

DCSA review preparation means digging through shared drives for the current version of each form, hoping the binder structure is close enough to what the inspector expects, and discovering gaps in the final two weeks before the scheduled visit.

After

90 days before any DCSA review, a documented self-inspection using the ASI rubric surfaces every gap. Each gap has a written corrective action and a deadline. The binder is pre-organized. The inspector reviews a program with documented processes, not a pile of files assembled under pressure.

What happens if you do not address this

An unresolved NISPOM finding becomes a formal deviation or vulnerability in the DCSA record. Repeated open findings can trigger a show-cause process. The documentation gaps that produce findings are not hard to close, but they compound: one late foreign travel report establishes a pattern; one undocumented CE disposition becomes a referral process finding; missing Insider Threat Program elements become a program-level deficiency in the next inspection cycle.

Who it is for

Personnel Security Officers and Facility Security Officers at defense contractors managing Secret and Top Secret clearance programs under 32 CFR Part 117. Typically responsible for 50 to 2,000 cleared employees across one or more DCSA-regulated facilities, handling DCSA relationship management, Annual Self-Inspection administration, Insider Threat Program compliance, Continuous Evaluation referral processing, and maintaining program documentation that survives personnel turnover.

Who this is NOT for. HR professionals seeking general employment background screening frameworks, security professionals at organizations not subject to DCSA oversight, or programs governed solely by IC directives rather than the NISPOM and 32 CFR Part 117 regime.

How it arrives

Text-based course in the Art of Service learning environment, plus downloadable templates and worked examples for every module, plus the hand-built implementation playbook delivered alongside course access.

Time investment. Each module is designed for 45 to 60 minutes of focused reading and template completion. Building the core program documentation across all 12 modules takes approximately four to six weeks at one module per week, or faster if a DCSA review is imminent and specific modules need to be prioritized.

Why $199 is the right number

DCSA publishes 32 CFR Part 117 and CDSE offers courses on the regulation text. What is missing is the translation from regulatory language to documented process: the specific binder structure the inspector expects, the written workflows that produce defensible dispositions, and the template documents that prove the process is running day to day. This course covers the documentation layer that sits between the regulation and the actual DCSA finding.

FAQ

Does this cover both Secret and Top Secret programs?

The core NISPOM and 32 CFR Part 117 requirements covered apply to both Secret and TS clearance programs. Programs with SCI access governed by IC directives have additional requirements not covered here. The implementation playbook is built for your specific program level and facility type.

Our DCSA review is in six weeks. Is this still useful on that timeline?

Yes. Modules 2, 3, and 11 address ASI methodology, DISS record integrity, and pre-inspection preparation directly. The downloadable ASI binder template and corrective action plan format are available immediately on enrollment, before you work through the remaining modules.

We already have SOPs in place. Is there still value?

The most common finding is not missing SOPs but SOPs that do not document the process at the level DCSA expects. Module 12 covers the SOP writing standard and the audit trail that shows the SOP is actually being followed rather than sitting in a folder no one has touched since the last personnel change.

What does the implementation playbook contain?

The playbook is hand-built for your program after enrollment. It maps the 12 module outputs to your facility's current documentation gaps and produces a 90-day corrective action calendar with specific artefact deliverables per week, sized to your program's clearance population and DCSA review timeline.

30-day money-back guarantee. If after a week of working through the materials this is not what you needed, reply to the receipt email and a full refund is processed. No questions, no forms.

Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.