Bidders Library DISA I 240 110 36.pdf

DEFENSE INFORMATION SYSTEMS AGENCY

P.O. BOX 4502

ARLINGTON, VIRGINIA 22204-4502

DISA INSTRUCTION 240-110-36* 07 March 2008

SECURITY

Personnel Security

1. Purpose. This Instruction prescribes policy and assigns responsibility for personnel security for DISA.

It also details security clearance processes, information technology (IT) access, security clearance reciprocity, periodic reinvestigations, and use of the Joint Personnel Adjudication System (JPAS).

2. Applicability. This Instruction applies to all DISA activities.

3. Authority. This Instruction is published in accordance with the authority contained in DoD 5200.2-R, Personnel Security Program, January 1987, and Director of Central Intelligence Directive (DCID) No. 6/4, Personnel Security Standards and Procedures Governing Eligibility for Access to Sensitive Compartmented Information (SCI), 2 July 1998.

4. Policy.

4.1 The minimum position sensitivity level for all civilian

and military employees in DISA is Noncritical Sensitive.

Position sensitivity will be determined by management officials and coordinated with the Manpower, Personnel, and Security Directorate (MPS).

4.2 All civilian and military personnel assigned to DISA

are required to obtain and maintain, at a minimum, a current security clearance eligibility of Secret. Contractor personnel must obtain and maintain a security clearance and/or IT access as defined and written into their contract statement of work.

5. Responsibilities.

5.1 Principal Directors, Directors, Chiefs, and Commanders

of Major Organizational Elements. These individuals will:

5.1.1 Ensure personnel security within their organization

is managed as specified by DoD and as directed in this Instruction.

5.1.2 Appoint a Security Manager and an alternate for their

organization.

5.2 Manpower, Personnel, and Security (MPS) Chief, Security

Division (MPS6). The Chief, MPS6, will conduct oversight of personnel security for DISA.

5.3 Security Managers. Security Managers and personnel

assigned to perform personnel security will provide day-to-day security duties within their respective organization as mandated by DoD 5200.2-R and DCID No. 6/4 (authority documents).

5.4 Supervisors. Supervisors will:

5.4.1 Ensure the Joint Table of Distribution (JTD) is

properly coded for the duty position of their employees.

(See paragraph 6 for guidance on coding.)

5.4.2 Report any issue that may impact an employee’s

continued eligibility for access to classified information to the organization Security Manager or directly to MPS6.

5.5 Employees. Employees will:

5.5.1 Submit required and requested investigative information in a timely manner.

5.5.2 Report any issue that may impact their continued

eligibility for access to classified information and/or occupancy of a sensitive position and also any DISA employee, to include subordinates, peers, and superiors. (The issue may be reported to their supervisor, the organization Security Manager, or directly to MPS6.)

6. Position Sensitivity. Security clearance and IT access requirements (position sensitivity requirements) for each position within DISA are derived from the Joint Table of Distribution (JTD). On the JTD, each position is either coded as Noncritical Sensitive (NC), Critical Sensitive (CS), or Special Sensitive (SS). The designated position sensitivity determines what type of security investigation is required and requested for the employee by MPS6. To ensure the correct investigation is requested, supervisors are to conduct periodic reviews of the JTD, confirming the accuracy of position sensi-tivity designations. To change the position sensitivity, the supervisor is to coordinate with their organization’s administrative personnel to initiate a Request for Personnel Action (RPA).

7. Security Clearance Eligibility. All initial and subsequent civilian and military personnel actions requiring personnel security review will be coordinated through the respective personnel office and forwarded to MPS6. (Respective personnel offices are the Defense Finance and Accounting Service (DFAS) for GS-12 and below civilians; MPS Civilian Personnel Division (MPS1) for GS-13 and above civilians; MPS Military Personnel Division (MPS2) for active duty military; and MPS2 Reserve Section (MPS2R) for military reservists.) The security requirements will be validated and the interim clearance determination made by MPS6. For new hires, should unmitigated derogatory information be present, MPS6 will notify the hiring official through the personnel specialist that the new hire must await completion of the investigation and a final adjudicative determination prior to employment. A favorable interim deter-mination may be withdrawn by the Chief, MPS6, if any credible and/or significant derogatory information is reported to MPS6 during the course of the initial background investigation.

8. Reciprocity of Security Clearances. Investigations conducted by other agencies and final security clearance eligibility granted by accredited Federal Adjudications Facilities will be honored under reciprocity for access to Secret or Top Secret material when the following conditions are present: (1) there has been no break in Federal employment or military service exceeding 24 months, (2) there has been no subsequent significant derogatory information uncovered since the previous investigation was completed and/or the previous security clearance was granted, (3) the previous investigation was completed within the 10-year adjudicative scope required for Secret security clearance or the 7-year adjudicative scope required for Top Secret security clearance and Sensitive Compartmented Information (SCI) eligibility, and (4) the previous investigation was adjudicated without waiver or warning.

9. Information Technology (IT) Access. Civilian, military, and contractor employees requiring access to Agency automated information systems (AISs) and associated hardware and software must be able to obtain and maintain eligibility for IT access.

The minimum level of IT access required for personnel who access Agency administered networks or systems is IT-II. All requests for interim and final IT access will be submitted to and granted by MPS6.

9.1 Interim IT access may be granted pending completion of

the required process for final determination of eligibility after the National Agency Check (NAC) portion of the respective investigation has been successfully completed.

9.2 Final IT access may only be granted when an employee

has a current Single Scope Background Investigation (SSBI) or a Special Background Periodic Reinvestigation (SBPR) that has been favorably adjudicated by a DoD Central or Consolidated Adjudications Facility.

10. Periodic Reinvestigations.

10.1 When an employee is required to submit a periodic

reinvestigation, notification is provided by MPS6 to the field Security Manager. A security clearance does not expire, but the eligibility for access to classified information and/or occupancy of a sensitive position is based on investigations conducted within the past 5 years for Top Secret and 10 years for Secret eligibility. An employee will be notified to submit the respective investigative packet for a Top Secret or Secret clearance 6 months prior to the 5- or 10-year anniversary date.

10.2 All security clearance investigations are completed

and submitted using the Web-based Electronic Questionnaire for Investigations Processing (e-QIP). The investigation is initiated by MPS6 through the Joint Personnel Adjudication System (JPAS), and the employee is notified via e-mail of the requirement to complete e-QIP. This e-mail notification will include instructions as to how to use e-QIP. The system has a self-generated suspense of 30 days that cannot be extended;

therefore, an employee will have a 30-day window in which to complete and submit the e-QIP to MPS6 for review. Failure to complete and submit this requirement may result in a suspension of access.

11. Adverse Security Clearance Actions.

11.1 When significant derogatory information is uncovered

or reported, the authority to suspend an employee’s access to classified information and/or occupancy of a sensitive position is delegated to the Chief, MPS6; the Principal Directors, Directors, Chiefs, and Commanders of major organizational elements; and the individual’s supervisor.

The information is reviewed against the adjudicative guide-lines by MPS6 to determine the action to be taken, and the appropriate senior official is then notified. Security related derogatory information reported to MPS6 that is unable to be mitigated through due process may result in an unfavorable determination and loss of security clearance eligibility.

11.2 Central and Consolidated Adjudications Facilities generate statements of reasons (SORs) and letters of intent (LOIs) to revoke eligibility for access to classified information and/or occupancy of a sensitive position. Notifications of these actions are forwarded through MPS6 for presentation to the respective employee. Upon receipt, MPS6 will automatically suspend the individual’s access to classified information and/or occupancy of a sensitive position pending resolution of the issue(s). The SOR or LOI will then be presented to the employee who is required to sign a receipt and indicate his or her intention for submitting a response to the SOR or LOI. The signed receipt and, subsequently, the response will be submitted through MPS6 to the appropriate Central or Consolidated Adjudications Facility.

11.3 Any debriefing action that is based on suspension of

access to classified information and/or occupancy of a sensitive position is coordinated by MPS6. All DISA sponsored or issued identification credentials are to be turned in by an employee to MPS6. All access to Agency AISs will be suspended pending final security determination.

12. Joint Personnel Adjudication System (JPAS). JPAS is the authoritative source for verification of security clearance eligibility within DoD and is used to create, modify, transmit, and remove visit requests. Assigned Security Management Office (SMO) codes are used by Agency personnel to manage all visits.

SMO codes have been created and designated for DISA activities outside of the National Capital Region (NCR). A JPAS account is requested by Security Managers by contacting MPS6.

FOR THE DIRECTOR:

*This Instruction cancels DISAI 240-110-36, 22 November 2002.

OPR: MPS6

DISTRIBUTION: Y

Return to:

Top of DISAI 240-110-36 Publications Listing DISA Home Page cio-pubs@disa.mil – Last revision: 07 March 2008 https://intranet.disa.mil/ca/pubs/ http://www.disa.mil/ mailto:cio-pubs@disa.mil