bering straits native corporation, its cleared ...€¦ · residence, etc. • your personal or...

2019 Annual Security Refresher Training

Bering Straits Native Corporation,

its cleared Subsidiaries and

Joint Ventures

beringstraits.com

Objectives of 2019 Annual Security

Refresher Training

• Threat Awareness Briefing

• Counterintelligence Security Briefing

• Overview of the Security Classification System

• Insider Threat Awareness and Employee Reporting

Requirements

• Security Procedures and Responsibilities

• Unauthorized Disclosure of Security Information

• Penalties for Compromising Classified Information

2019 Annual Security Refresher Training beringstraits.com

National Industrial Security Program

(NISP) Overview

• Designed to safeguard classified information given to industry

in conjunction with government contracts.

• Provides uniform rules for all contractors and each must

comply with its provisions.

• Corporate Facility security clearances are reviewed & audited

by DCSA annually.


Threat Awareness Briefing

• Nearly 100 countries are now running economic espionage

operations against the US – adversarial as well as allied

countries.

• New targets – research & development, technology, and

trade secrets.

• Spies – visiting the US on scientific/student exchanges, business

tours, or with on-site inspection teams,


Counterintelligence Awareness Briefing

Employees need to be alert if they become a target or if they see

someone being targeted by an adversary.

Elicitation: A strategy used by both foreign and non-foreign adversaries

to subtly gather information about you, your work, and your colleagues.

This technique is used to gather protected information on classified or

unclassified government projects, or proprietary company information.

Any amount of information is valuable; similar to a puzzle, once all the

information is put together a full picture is revealed.

Recruitment: An adversary will recruit their target who has access or can

obtain access to proprietary, classified or unclassified information. This

stage occurs after the elicitation and when the adversary creates a

relationship with their target.


Counterintelligence Awareness Briefing -

ElicitationElicitation is subtle and difficult to recognize. Adversaries are well

trained on how to gather information in a manner where the

target does not recognize the attempt to elicit information. Some techniques of elicitation are:

• False statement: Where the adversary purposely makes a false statement in

hopes to be corrected. Example: “I can’t believe that device has an effective range of 5,000 meters.” Targets Response: “No, actually the range is closer to

9,000 meters.”

• Instinct to Complain: When an adversary incites the target to complain, they

may provide more information on a particular topic. Example: “Is everything OK? You appear to be pretty stressed out today. Boss working you too hard?”

Targets Response: “My boss is a jerk. He is all bent out of shape because we

are preparing to deploy….”

• Disbelief: The adversary expresses a level of doubt concerning a targeted

subject. Example: “I can’t believe the US military is able to keep track of all those tanks and vehicles in Iraq and Afghanistan.” Targets Response: “It’s

really pretty easy, we use a sophisticated…”


Counterintelligence Awareness Briefing -

Recruitment

A recruiter can be an adversary or a fellow employee who is working with an adversary. Once the recruiter has established a relationship with their target and has assessed their vulnerabilities, they will recruit the target to work with them as an agent. The recruiter may use money or appeal to the target’s ideology, ego, retaliation, or blackmail the target.

Decrease your vulnerabilities and exploitable behaviors by adjusting your lifestyle to close gaps that could be exploited. Beware of your surroundings and conversations with others. Remember providing protected information is illegal, and espionage against the U.S. government is a serious crime punishable by imprisonment, fines, or death.



Employees need to be alert to the following:

• Foreign representatives attending training or fact-finding visits,

trade shows, scientific meetings, and military exchanges.

• Foreign governments establishing joint venture companies

with Americans or purchasing American companies with

government contracts.

• Individuals conducting market research, sending surveys or

resumes from abroad, phone calls or other attempts to

acquire classified or proprietary information.



Most effective methods of espionage:

• Blackmailing vulnerable employees,

• Establishing an inside “mole,”

• Bribing employees to steal classified or proprietary information,

• Hiring consultants to spy on competitors,

• Bugging offices or tampering with companies’ electronics, and

• Compromising company computer networks (i.e.“hacking” into

a network).


Counterintelligence Information

Adversaries can gather more information on you from your social media accounts. Please follow this

link to take the Social Networking short:https://iatraining.disa.mil/eta/disa_sn_v21_fy17/index.html

If you are unable to open the short with the direct link above, please follow this link, scroll down to Social Networking and select

go>> to view the short:

https://www.cdse.edu/shorts/cybersecurity.html#

Short created by the Center for Development of Security Excellence (CDSE)


https://iatraining.disa.mil/eta/disa_sn_v21_fy17/index.html

https://www.cdse.edu/shorts/cybersecurity.html

Levels of Classified Information

Confidential – the

lowest level applied

to information

whose

unauthorized

disclosure could be

expected to cause

damage to the

national security of

the United States.



Secret – the

classification level

whose

unauthorized

disclosure could be

expected to cause

serious damage

to the national

security of the

United States.



Top Secret – the highest level applied to information whose unauthorized disclosure could be expected to cause

exceptionally grave damage to the national security of the United States.


BSNC

Insider Threat ProgramAn insider threat is someone within the organization who wittingly or unwittingly,

uses their access to do harm to the security of the United States through

espionage, terrorism, unauthorized disclosure of national security information,

or loss/degradation of resources or capabilities. They may be acting on behalf

of a foreign entity or themselves.


Be aware of your surroundings and report any suspicious behavior to the BSNC

Ethics Hotline, the BSNC FSO or the DoD Hotline.

BSNC Ethics Hotline: (877) 206-0664www.beringstraits.alertline.com

BSNC Security: Laura Lancaster, FSO (907) [email protected]

Insider Threat Program Senior Official(ITPSO):

Krystal Nelson, COO (907) [email protected]

DoD Hotline: (800) 424-9098 or [email protected]

http://www.beringstraits.alertline.com/

mailto:[email protected]



Reportable Behaviors

Be aware of the following behaviors, regardless of nationality, that you

are required to report:

• Refusing to report adverse information.

• Storing classified materials in unauthorized locations.

• Attempting to access sensitive information without authorization.

• Obtaining access to sensitive information without the need to know.

• Using a non-secure channel to discuss classified materials.

• Removing classification markings from documents.

• Working outside normal duty hours.

• Sudden or unexplainable affluence.

• Frequent foreign travel, and/or attempting to conceal foreign travel.

• Attempts of elicitation, unusual conversations or encounters.


Employee Assistance Program

Please keep in mind that BSNC and its subsidiaries offer a 24/7 Employee Assistance Program through the Cigna Life Assistance Program

• Call 800-538-3543

• Visit https://apps.cignabehavioral.com/web/

• Depression, stress, grief

• Marriage or Parenting problems

• Finding assistance for senior, child, and pet care

• Alcohol or Substance Abuse

• Legal Consultation - Receive a free 30-minute consultation and up to a 25% discount on select fees.

• Anyone in your household can access


https://apps.cignabehavioral.com/web/

Reporting Requirements

Cleared Personnel are required to report the following to the FSO:

• Changes in your status – name, marital status, citizenship, residence, etc.

• Your personal or professional foreign travel.

• Adverse Information on yourself or another cleared individual

• Loss, compromise or suspected compromise of classified data.

• Your personal financial problems, such as bankruptcy, collection actions, or lawsuits.

If you see or know of a reportable behavior, do not assume it has already been reported! It is best practice to report all known

reportable behaviors and incidents.


beringstraits.com

Foreign Travel

It is company procedure that all cleared personnel report

foreign travels to the Corporate Security Department 20 days

prior to departure.

A foreign travel brief will be conducted before the employee(s)

depart, and a debrief will be conducted with the employee(s)

return.

For more information in regards to this contact the Security

Department.


Adverse Information

Please watch the

Adverse Information Reporting Short

by clicking on the link below:http://www.cdse.edu/multimedia/shorts/adverse/mod1/module.htm

If you are unable to open the short with the direct link above, please follow this link, scroll down to Adverse Information Reporting and

select go>> to view the short:

https://www.cdse.edu/shorts/personnel-security.html

Short created by the Center for Development of Security Excellence (CDSE)


http://www.cdse.edu/multimedia/shorts/adverse/mod1/module.htm

https://www.cdse.edu/shorts/personnel-security.html

Adverse Information

• Employees must report any Adverse Information that comes to their

attention regarding themselves or another cleared person.

• Self-reporting Adverse Information is an expectation and responsibility

if you hold any level clearance.

• Reports may be submitted to:

• The BSNC Security Department:

• Laura Lancaster, FSO at (907) 334-8381

• Isabel Yamat, AFSO at (907) 334-8356

• For both send to [email protected]

• The DoD Hotline (800) 424-9098 or [email protected]




Examples of Adverse Information

• Arrests, charges, or convictions for any criminal, drug or alcohol offenses.

• Any traffic fine involving drug or alcohol use and/or traffic

fines over $150.

• Illegal use of drugs or drug activity.

• Drug or alcohol related treatment or counseling.


Examples of Adverse Information

• Bankruptcy, wage garnishment, property repossession, liens

against property, judgments made against you.

• Financial delinquencies over 180 days.

• Any public record civil court actions.

• Consultation with a mental health provider for reasons other

than grief counseling or adjustments from service in a military

combat environment.


Continuous Evaluation

What it is: A personnel security investigative process to review the

background of a covered individual who has been determined to be

eligible for access to classified information or to hold a sensitive position

at any time during the period of eligibility. Continuous Evaluation (CE)

leverages a set of automated records checks and business rules, to

assist in the ongoing assessment of an individual’s continuing eligibility.

In June 2018, a memo was issued by the Director of National Intelligence

and the Director of the Office of Personnel Management, implementing

interim measures to mitigate the backlog of background investigations.

Incoming periodic reinvestigations are screened using a risk

management approach that permits deferment of reinvestigations

where screening results are favorable and mitigation activities are in

place; enrolling them into CE.


Continuous Evaluation

Automated records checks shall be conducted to identify adjudicative,

relevant information to assist in assessing the continued eligibility of a

covered individual at any time during the period of eligibility. The

automated records checks will include checks of commercial

databases, U.S. Government (USG) databases, and other information

lawfully available to security officials at any time during the period of

eligibility.

Note: 1/4 to 1/3 of all covered personnel are under CE at any time. For

this reason timely self-reporting is more important than ever!


Clearance Responsibilities

Your security clearance involves many responsibilities including;

• To be aware of basic security guidelines and safeguards.

• To report suspicious occurrences or behavior by individuals,

regardless of nationality.

• To report adverse information on yourself and/or other cleared

employees.


Protecting Classified Information

You must limit access to authorized persons by verifying:

• Identification

• Need to know

• Clearance Level

*If an individual’s ability to protect information is in question, access should ALWAYS be limited*


SF 312 Non-Disclosure Agreement

All employees must sign an SF312 before access is

granted


• Binding contract

• Lifetime obligation

• You obtain access, if

necessary

• Government has your

commitment to protect

classified information

Unauthorized Disclosure

of Security Information

Types of Unauthorized Disclosure

• Security Infraction: occurs when classified information is not

safeguarded but does not result in a compromise of material.

• Security Violation: occurs when classified information is not

safeguarded and could result in a probable compromise of

material.

• Compromise: an actual compromise of classified information,

whether intentional or unintentional.


Unauthorized Disclosure

of Classified InformationTitle 50, USC, Sec. 783

War & National Defense

It is unlawful to give classified

information to an agent or

representative of any foreign

government that would result in

harm to the National Security of

the United States.


Penalties for Compromising

Classified Information (E.O. 12958)

• Reprimand,

• Suspension without pay,

• Denial of access,

• Removal from premises,

• Termination of classification authority, and/or

• Others in accordance with applicable laws and regulations.


Crimes & Criminal ProceduresTitle 18, USC, Sec. 794

Gathering or delivering defense information to aid of foreign

government

“…delivery of defense information with intent or reason to

believe that it is to be used to the injury of the United States or to

the advantage of a foreign nation,… shall be punished by death

or by imprisonment for any term or years or for life…”


Crimes & Criminal ProceduresTitle 18, USC, Sec. 794

(d)(1) Any person convicted of a violation of this

section shall forfeit to the United States irrespective

of any provision of State law-

(A) Any property constituting, or deriver from, any

proceeds the person obtained, directly or indirectly,

as the result of such violation; and

(B) Any of the person’s property used, or intended to

be used, in any manner or part, to commit, or to

facilitate the commission of, such violation.


Disciplinary Actions

BSNC will enforce procedures that provide for appropriate

administrative actions taken against employees who violate

requirements of DoD 5200.22-M. The contractor shall apply a graduated

scale of disciplinary actions in the event of employee violations or

negligence when:

a. The violation involves a deliberate disregard of security requirements,

b. The violation involves gross negligence in the handling of classified

material, or

c. The violation was not deliberate in nature but involves a pattern of

negligence or carelessness.


Disciplinary Actions (continued)

The following is a general list of potential disciplinary actions. The list is non-

exhaustive and does not limit discretion in imposing discipline up to and including

termination of the at-will employment. All disciplinary actions must be

coordinated with Human Resources.

• Corrective Counseling

• Oral or Written Warning

• Oral or Written Reprimand

• Suspension with pay

• Suspension without pay

• Demotion

• Dismissal/Termination


Changing Times? Not Really.

Please know that even though use and/or possession of marijuana has been

legalized or decriminalized in certain states, it remains a Schedule 1 Narcotic as

defined by the Drug Enforcement Agency (DEA) and the Department of Justice.

As such use or possession can be litigated on the Federal level under the

Controlled Substances Act (CFR Title 21). All marijuana, THC and CBD (derived

from cannabis) use are relevant to Federal Personnel Security determinations and

should be reported appropriately.

BSNC Drug Free Workplace Policy, Section 4.3 states, “Performing work on company

property while under the influence of marijuana is strictly prohibited and considered a

violation of this policy. Some states have passed laws to legally possess and consume

recreational and/or medicinal marijuana. Federally, marijuana is a Schedule 1 drug,

and therefore has no current acceptable medical or recreational use.”


Defense Hotline Number

The Department of Defense maintains a hotline to provide an unconstrained

avenue for government and contractor employees to report, without fear of

reprisal, known or suspected instances of serious security irregularities, fraud, or

other infractions.

Government and contractor personnel are encouraged to furnish information

through established agency or company channels. However, the hotline may be

used as an alternate means to report this type of information when you consider it

prudent or necessary to do so.

Department of Defense: 1-800-424-9098 or [email protected]


Training Certification

Please take the 2019 Annual Security Refresher Training Quiz,. You must

receive a score of 70% or higher to pass the quiz. Once you complete

the quiz, a certificate will be generated and sent to the Security

Department.

Any further questions relating to security should be directed to your

Facility Security Officer:

• Laura Lancaster, FSO (907) 334-8381

• Isabel Yamat, AFSO (907) 334-8356

• For both send to [email protected]



bering straits native corporation, its cleared ...€¦ · residence, etc. • your personal or...

Documents