Our Security Inspection Experience

1
Our Security Inspection Experience

• By
• Ken Wilson
• OPSEC/Security Specialist
• Nevada Site Office

2
Our SI Experience
We received a long hard look at all aspects of
our Security Awareness Program
3
Our SI Experience

• Provide data collection on time
• Work with them on the security questionnaire
• Have items immediately available that are not on
  the data call
• Answer questions clearly
• Be honest
• Be open

4
Our SI Experience

• Pay attention to your self-assessment of your
  program
• Let them sit-in on all the briefings, if possible
• Initial
• Comprehensive
• Annual security refresher
• Security Termination

5
Our SI Experience

• Look at the SI inspection checklists to know what
  they are going to look at
• If you dont agree, state so and why.
• Show how program interacts with other
  requirements, i.e., OPSEC and CI.
• Your announcement on the security testing to your
  employees needs to be as clear and concise as
  possible.

6
Our SI Experience

• Let the SI inspectors know why someone cant
  test, i.e., extended absence, military duty, etc.
• Do your best to make their testing quota
• Show off your awareness media
• Know the manual requirements

7
Our SI Experience

• Have all documentation
• Appointment letter
• Security Awareness Coordinator Course completion
  certificate
• Awareness briefing slides, lesson plans, etc.
• Proof of attendance for all briefings
• STS documentation on why individual couldnt sign
• Let them know you are good and that you want to
  get it right

8
Our SI Experience

• Know your program strengths and weaknesses, if
  any.
• Dont have any surprises.
• Have management buy-in for action against those
  who have not received their refresher briefing.
• Deny site access
• Learn from the experience.

9
Be Upfront and Dont Hide From Them
10
Questions?
11
The End