Which office carries out DSS assessment and authorization determinations for contractor information systems to process classified information?

Which office carries out DSS assessment and authorization determinations for contractor information systems to process classified information?

• A. NISP Authorization Office (NAO)
• B. Cognizant Security Office (CSO)
• C. Industrial Security Field Office (ISFO)
• D. Contracting Officer's Representative (COR)

Answer: (A)

In the National Industrial Security Program, the office that conducts the assessment and makes the authorization decision for a contractor information system to process classified information is the NISP Authorization Office. This office oversees the formal security review, collects the required documentation (system security plan, security assessment report, plan of actions and milestones), and determines whether the system meets the necessary security controls to obtain an Authorization to Operate (ATO) or an Interim ATO. Once approved, the contractor can process classified information under defined conditions with ongoing monitoring. The Cognizant Security Office handles policy interpretation and program oversight, but does not issue the authorization decision. The Industrial Security Field Office provides regional oversight and support for industrial security programs, not the formal system authorization decision. The Contracting Officer’s Representative oversees contract performance, not the security authorization of information systems.

In the National Industrial Security Program, the office that conducts the assessment and makes the authorization decision for a contractor information system to process classified information is the NISP Authorization Office. This office oversees the formal security review, collects the required documentation (system security plan, security assessment report, plan of actions and milestones), and determines whether the system meets the necessary security controls to obtain an Authorization to Operate (ATO) or an Interim ATO. Once approved, the contractor can process classified information under defined conditions with ongoing monitoring.

The Cognizant Security Office handles policy interpretation and program oversight, but does not issue the authorization decision. The Industrial Security Field Office provides regional oversight and support for industrial security programs, not the formal system authorization decision. The Contracting Officer’s Representative oversees contract performance, not the security authorization of information systems.