On May 12, 2025, the Defense Counterintelligence and Security Agency (DCSA) released a new SF-328[1] consisting of 9 questions and 6 pages of instructions that detail the types of supporting documentation requested and identify information required by different responding entities (e.g., corporate, non-profit, academic, etc.). With this SF-328, DCSA is seeking certain frequently requested information and documents with initial SF-328 submissions rather than obtaining these documents through communications or revised SF-328 submissions. Additionally, when completed, the new SF-328 is considered Controlled Unclassified Information (CUI).Continue Reading New SF-328 Released and Embedded Guidance Seeks More Information Up Front
New SF-328 for Foreign Ownership, Control, and Influence Assessments Approved, Publication Imminent
On May 7, 2025, the Defense Counterintelligence and Security Agency (DCSA or the “Agency”) announced the approval[1] of a revised and expanded Standard Form (SF) 328, Certificate Pertaining to Foreign Interests. Contractors and subcontractors engaged in work involving classified information use the SF-328 for disclosures relating to foreign ownership, control, or influence—and the form will soon be required for contractors and subcontractors in the unclassified space for certain covered contracts. Publication of the updated form has not yet occurred but is expected as soon as this weekend (May 10-11). New SF-328 forms will be required for initial and changed condition packages initiated on or after May 12 according to a National Industrial Security System (NISS) communication today.Continue Reading New SF-328 for Foreign Ownership, Control, and Influence Assessments Approved, Publication Imminent
COVID-19 Effects on Cleared Contractors
On March 30, 2020, the Defense Counterintelligence and Security Agency (DCSA) published COVID-19 NISP Guidance to describe for cleared industry how DCSA will conduct its oversight mission during the pandemic. That guidance includes, among other things:
- DCSA has suspended all enhanced security vulnerability assessments (ESVA) and other on-site activities. DCSA Industrial Security Representatives (ISR) will