Facility Security Clearance (FCL) Guide: How Contractors Get Cleared Under the NISPOM

Many defense and intelligence contracts require access to classified information, which means your company needs a Facility Security Clearance (FCL). Getting an FCL is one of the most misunderstood steps in government contracting. This guide explains how the FCL process works under the NISPOM and how to prepare.

What Is a Facility Clearance?

An FCL is an administrative determination that a company is eligible to access classified information at a specific level: Confidential, Secret or Top Secret. Companies with an FCL participate in the National Industrial Security Program (NISP), overseen for most of industry by the Defense Counterintelligence and Security Agency (DCSA). The rules are in the NISPOM, codified at 32 CFR Part 117.

You Cannot Apply for an FCL Yourself

A company cannot request its own facility clearance. It must be sponsored by a government contracting activity or a cleared prime contractor that has a legitimate need for the company to access classified information, such as a classified contract or subcontract (usually with a DD Form 254) or a pending bid that requires clearance.

The FCL Process Step by Step

• 1. Sponsorship: the sponsor submits a request to DCSA.
• 2. Registration in NISS: the company registers in the National Industrial Security System and submits required documents.
• 3. Documentation: business records, organizational documents, a list of key management personnel (KMP) and the SF 328 Certificate Pertaining to Foreign Interests.
• 4. KMP clearances: the senior management official, the Facility Security Officer (FSO), the Insider Threat Program Senior Official and other KMP as required must obtain personnel clearances at the FCL level.
• 5. Orientation and review: DCSA's Industrial Security Representative reviews the company and the security program.
• 6. FCL issued, followed by ongoing oversight and security reviews.

Foreign Ownership, Control or Influence (FOCI)

If a company has foreign owners, foreign debt, foreign board members or significant foreign revenue, DCSA evaluates FOCI. Mitigation agreements may be required before an FCL is granted. Disclose foreign ties early to avoid delays.

Personnel Security Clearances

Employees who need classified access must obtain a personnel security clearance (PCL). Investigations are processed through DCSA systems, and cleared employees are enrolled in continuous vetting. Cleared talent is in high demand, so many firms recruit candidates who already hold active clearances.

Running a Compliant Security Program

• Appoint a trained FSO and an Insider Threat Program Senior Official
• Deliver initial and annual security training
• Report required events such as changed conditions, adverse information and suspicious contacts
• Safeguard classified material per NISPOM requirements if your facility has storage approval
• Prepare for periodic DCSA security reviews

Frequently Asked Questions

How long does it take to get a facility clearance?

It varies with company complexity, FOCI and KMP investigation timelines. Responsive, complete submissions shorten the process.

Does an FCL cost money?

The government covers investigation costs, but companies bear the cost of running their security program and FSO.

Can a small business get an FCL?

Yes. Many small businesses get sponsored as subcontractors to cleared primes.

Are you an FSO or building a cleared program? Share questions and lessons below.