[Code of Federal Regulations]

[Title 32, Volume 6]

[Revised as of July 1, 2006]

From the U.S. Government Printing Office via GPO Access

[CITE: 32CFR2001.70]



[Page 493]

 

                        TITLE 32-NATIONAL DEFENSE

 

CHAPTER XX--INFORMATION SECURITY OVERSIGHT OFFICE, NATIONAL ARCHIVES AND 

                         RECORDS ADMINISTRATION

 

PART 2001_CLASSIFIED NATIONAL SECURITY INFORMATION--Table of Contents

 

                Subpart F_Security Education and Training

 

Sec.  2001.70  General [5.4].





    (a) Purpose. This subpart sets standards for agency security 

education and training programs. Implementation of these standards 

should:

    (1) Ensure that all executive branch employees who create, process 

or handle classified information have a satisfactory knowledge and 

understanding about classification, safeguarding, and declassification 

policies and procedures;

    (2) Increase uniformity in the conduct of agency security education 

and training programs; and

    (3) Reduce improper classification, safeguarding and 

declassification practices.

    (b) Applicability. These standards are binding on all executive 

branch departments and agencies that create or handle classified 

information. Pursuant to Executive Order 12829, the NISPOM prescribes 

the security requirements, restrictions, and safeguards applicable to 

industry, including the conduct of contractor security education and 

training. The standards established in the NISPOM should be consistent 

with the standards prescribed in Executive Order 12958, as amended and 

of this part.

    (c) Responsibility. The senior agency official is responsible for 

the agency's security education and training program. The senior agency 

official shall designate agency personnel to assist in carrying out this 

responsibility.

    (d) Approach. Security education and training should be tailored to 

meet the specific needs of the agency's security program, and the 

specific roles employees are expected to play in that program. The 

agency official(s) responsible for the program shall determine the means 

and methods for providing security education and training. Training 

methods may include briefings, interactive videos, dissemination of 

instructional materials, and other media and methods. Agencies shall 

maintain records about the programs it has offered and employee 

participation in them.

    (e) Frequency. The frequency of agency security education and 

training will vary in accordance with the needs of the agency's security 

classification program. Each agency shall provide some form of refresher 

security education and training at least annually.