1. Department of the Navy Security Enterprise Leadership Course Curriculum for Security Program Oversight 1

2. Protecting Classified and Controlled Unclassified Information (CUI) 2 Classified Information Governing policy: DoDM 5200.01-Volumes 1-3, DoD Information Security Program Commanders must: Be responsible for overall management and effectiveness of the program Commit necessary resources Designate, in-writing, a Command Security Manager with appropriate authority to ensure adherence to program requirements Designate, in-writing, other security positions as warranted

3. Protecting Classified and Controlled Unclassified Information(CUI) Controlled Unclassified Information (CUI) Governing policy: DoDM 5200.01-Volume 4, DoD Information Security Program: Controlled Unclassified Information (CUI) Commanders must: Appoint in writing an official to manage and oversee CUI program Predominately performed by the Command Security Manager Establish command procedures Promptly address unauthorized disclosures Direct, administer and oversee an ongoing CUI oversight and education/training program 3

4. Managing the Cleared Workforce Reporting requirement for derogatory information to the DoD CAF Governing Policy: DoD 5200.2-R Personnel Security Program (PSP) Commanders must ensure: Supervisor, co-workers and employees report known derogatory information to CSM Unfavorable information meeting the reportable behavior guidelines will be reported to the appropriate security (DoD CAF), law enforcement or CI professionals for appropriate action 4

5. Managing the Cleared Workforce Managing Personnel Security Investigations and Re-investigations Governing Policy: DoD 5200.2-R Personnel Security Program Commanders must ensure: Occupants of national security positions in and those performing national security duties for commands are subject to investigation o In accordance with the Federal Investigative Standards, reinvestigations may be performed at any time after national security eligibility has been granted. Additionally, DON employees in national security positions and contractors performing national security duties will be subject to standard Periodic Reinvestigation (PR) and Continuous Evaluation (CE) on a recurring basis. 5

6. Managing the Cleared Workforce Effective use of the Command’s Security Manager and Security Manager access to leadership Governing Policy: DoD 5200.2-R Personnel Security Program (PSP) Commanders must ensure: The Command Security Manger has direct access to command leadership and be organizationally aligned to oversee prompt and appropriate attention to PSP requirements. 6

7. Personal Identification Verification and Physical and Logical Access Requirements Policy: Directive-Type Memorandum (DTM) 09-012, “Interim Policy Guidance for DoD Physical Access Control” The Common Access Card (CAC) is the DoD Personal Identification Verification (PIV) in accordance with DTM 09-012 and affords its bearor the following: o Physical Access DOD/Federal Standard (civilian, military and contractor) used to allow access to bases, installations and facilities o Logical Access Allows system access (Log-in to NMCI) 7

8. Personal Identification Verification and Physical and Logical Access Requirements Policy: Directive-Type Memorandum (DTM) 09-012, “Interim Policy Guidance for DoD Physical Access Control” Authorized Credentials Facilitating Physical Access to Installations: o DoD CAC o DoD Uniformed Services Identification and Privilege Cards o USG-issued, authenticated Federal PIV credentials o Transportation Workers Identification Credential (TWIC) For other personnel requiring unescorted access, installation commanders shall use locally-produced temporary issue visitor identification. 8

9. Physical Security Requirements and Active Shooter Response 9 Physical Security Requirements Governing policy: DoD 5200.8-R Physical Security Program Commanders must ensure: They understand their responsibilities for their portion of defense in depth with respect to physical security both deployed and at home, in conjunction with tenant commands and base security officers/provost marshal.

10. Physical Security Requirements and Active Shooter Response 10 Active Shooter Training/Response/Recovery: Governing policy: DoDI 1438.06 Workplace Violence Prevention and Response Policy and DoDI 5525.15 Law Enforcement (LE) Standards and Training in the DoD Commanders must ensure: Annual training is provided to supervisors and employees fostering public safety awareness and prevention of workplace violence Cognizance of LE personnel conducting exercises in the multitude of environments for area familiarization, preplanned responses and situational awareness based on lessons learned Facility managers train on workplace violence and work with LE training support in developing workplace response plans and how to support LE forces in response to an active shooter situation

11. References Executive Order 13526 Classified National Security Information, 29 Dec 09 (revoked EO 12958) This order prescribes a uniform system for classifying, safeguarding and declassifying national security information, including information relating to defense against transnational terrorism. Executive Order 12968 Access to Classified Information, 2 Aug 95 – Executive order establishing a uniform Federal personnel security program for employees who will be considered for initial or continued access to classified information Executive Order 12333, “United States Intelligence Activities,” December 4, 1981, as amended DoD 5105.21 MI (Volumes 1, 2, and 3) It assigns responsibilities and prescribes procedures for the implementation of Director of Central Intelligence and Director of National Intelligence (DNI) policies for SCI. DoDM 5200.01-Volumes 1-4, DoD Information Security Program DoD 5200.02-R Personnel Security Program DoD 5220-22-R Industrial Security Regulation DoD 5200.8-R Physical Security Program DoDI 5525.15 Law Enforcement (LE) Standards and Training in the DoD DoDI 1000.13 Identification (ID) Cards for Member of the Uniformed Services, Their Dependents, and Other Eligible Individuals DoDM 1000.13, Volume 1 DoD Identification (ID) Cards: ID Card Life-Cycle DoDI 5200.46 DoD Investigative and Adjudicative Guidance for Issuing the Common Access Card (CAC) SECNAVINST 5510.37 DON Insider Threat Program SECNAV M-5510.30 Personnel Security Program SECNAV M-5510.36 Information Security Program Adjudicative Guidelines - Guidelines for determining eligibility for access to Classified information DoDI 1438.06 Workplace Violence Prevention and Response Policy 11