INDUSTRIAL SECURITY PROGRAM ESTABLISHMENT AND OPERATIONS

FCL sponsorship readiness and industrial security program support.

Bedrock helps companies prepare for a legitimate sponsorship path, establish the required NISP security program, and repair or standardize existing operations. DCSA or the applicable Cognizant Security Agency retains its authority.

Begin with a legitimate classified contractual need and an authorized sponsor.

Before sponsorship, Bedrock helps the company and its Government or cleared-prime sponsor review the classified-access requirement and supporting contract documents. After DCSA places the company in process, Bedrock helps organize governance information, KMP and initial FOCI disclosures, appointed security roles, required training, written procedures, and customer-controlled submission activity.

The sponsor submits the sponsorship. The customer certifies its information and performs authorized transactions. DCSA determines FCL eligibility, KMP requirements, FOCI status, and acceptable mitigation.

01

Governance and KMP

Support business-governance records, KMP identification, exclusion considerations, role appointments, and action tracking.

02

FOCI information

Support complete initial disclosures and issue identification. DCSA makes formal FOCI determinations. Qualified counsel addresses legal instruments and legal advice.

03

Appointed roles

Prepare the customer-designated SMO, FSO, and ITPSO for their distinct responsibilities.

04

Written program

Develop procedures tailored to the company's classified work and applicable NISP requirements.

Keep required actions, records, and changes visible after initial processing.

  • Contract security administration
  • Personnel security procedures
  • Training and briefings
  • Insider threat program support
  • Self-inspection planning and records
  • Findings and corrective actions
  • DCSA reporting and action tracking
  • Change-condition identification
  • Security review preparation
  • Turnover and continuity records

Company officials remain responsible for the security program.

The Senior Management Official retains management accountability. The appointed FSO supervises and directs the required security measures. The appointed ITPSO establishes and executes the insider threat program. Bedrock supports those officials without replacing them.

Questions Bedrock addresses before scope or award.

Can Bedrock sponsor a company for an FCL?

No. A Government contracting activity or cleared contractor establishes the classified contractual need and submits the sponsorship. Bedrock supports sponsor and company readiness.

How long does the FCL process take?

Bedrock does not promise a processing timeline. Timing depends on the requirement, sponsorship package, company conditions, KMP, FOCI, Government workload, and other factors controlled outside Bedrock.

Does Bedrock replace the company FSO or ITPSO?

No. The company appoints its required officials. Bedrock supports their preparation and program operations within the authorized scope.

Does an FCL include SCI access?

No. An FCL may be granted at the Confidential, Secret, or Top Secret level. SCI eligibility, access approval, and SCIF accreditation are separate matters.

Discuss the classified need, sponsor path, company posture, and operating requirement.

Discuss FCL or NISP support