Which entity establishes industrial security programs and oversees security requirements?

Which entity establishes industrial security programs and oversees security requirements?

• A. Government Contracting Activity (GCA)
• B. Cognizant Security Agency (CSA)
• C. Department of Energy
• D. Office of the Director of National Intelligence

Answer: (B)

The key idea is that the Cognizant Security Agency is the one charged with establishing the industrial security program and overseeing the security requirements for contractors handling classified information. This agency creates the policies for protecting classified material in the supply chain, assigns the applicable security requirements to contractors, and monitors compliance to ensure those protections are in place. It coordinates with the contractor’s sponsoring agency and conducts the oversight needed to maintain the National Industrial Security Program. The other options don’t set or oversee the entire industrial security framework. A Government Contracting Activity administers contracts but does not establish the security program itself. The Department of Energy manages its own internal security practices rather than the national industrial security program. The Office of the Director of National Intelligence oversees intelligence community activities, not the general industrial security requirements for all contractors.

The key idea is that the Cognizant Security Agency is the one charged with establishing the industrial security program and overseeing the security requirements for contractors handling classified information. This agency creates the policies for protecting classified material in the supply chain, assigns the applicable security requirements to contractors, and monitors compliance to ensure those protections are in place. It coordinates with the contractor’s sponsoring agency and conducts the oversight needed to maintain the National Industrial Security Program.

The other options don’t set or oversee the entire industrial security framework. A Government Contracting Activity administers contracts but does not establish the security program itself. The Department of Energy manages its own internal security practices rather than the national industrial security program. The Office of the Director of National Intelligence oversees intelligence community activities, not the general industrial security requirements for all contractors.