DIS procedures adapt for the future.

During the Cold War era, the Defense Industrial Security Program (DISP) had a specific mission for protection of national security information and a definabl threat against which to measure success. Policies and procedures developed by industry and government were codified into the Industrial Security Manual for Safeguarding Classified Information, and the role of the Defense Investigative Service (DIS) was primarily compliance oriented. Security programs were, therefore, evaluated on the basis of their ability to meet the specific requirements set forth by the manual.

The money available in the defense budget and the buildup of military forces during the 1980s made this a successful security strategy. That luxury no longe exists. In order to adapt to a new environment, DIS is taking several steps to modernize its objectives and procedures.

The major consideration is the relevance of security costs in today's environment. The current administration is expected to reduce the Department of Defense budget 41 percent by 1997. This emphasizes the need for cost-effective security programs in the defense industry. The objectives of preserving economi security and defense capabilities also encourage cost-effectiveness in industrial security strategy.

The DIS is already adapting to its new environment. Several years ago, DIS bega emphasizing advice and assistance to private industry as an essential service i a comprehensive industrial security program. This approach emphasizes cooperation between government and private industry to prevent the loss or compromise of classified information.

Many successful initiatives have been developed by industry representatives and DIS field personnel. Open forums held in all of the DIS regions have prompted frank discussions of industrial security policy and practices, interaction between DIS and industry security professionals, and identification and solutio of security problems.

Industrial security councils have been established to foster awareness among participants, reduce costs, and increase the effectiveness of such programs in industry. Threat information is passed to industry through these programs, allowing those responsible for industrial security to focus their attention on areas where countermeasures are needed most.

The forums and councils, developed by personnel in the DIS field program and by their counterparts in private industry, respond to a need for threat information. Because of their firsthand knowledge of how security programs operate, these industrial security councils provide input to DIS on reengineering industrial security programs.

The industrial security directorate has held meetings at the national and regional levels to establish a direction for redesigning the way DIS administer the industrial security program. The reorganization effort has the following four objectives:

* Cut red tape. The DIS plans to shift from systems that require people to follow rules to systems where people are accountable for achieving results.

* Improve customer service. The government will put customers first and measure success by their satisfaction.

* Endorse empowerment. By motivating employees, the DIS hopes to make processes more efficient.

* Streamline management control. Internal regulations and management position will be reduced, allowing a clearer line of authority.

Recommendations garnered during the visits to the field are being examined and implemented. Although policy is developed by the Office of the Secretary of Defense, not by the Defense Industrial Security Program (DISP), the role of DIS includes policy implementation duties from processing initial facility and personnel clearances to assisting civilian contractors. In addition, the progra is proactive in making recommendations for policy.

DIS has been given the authority to implement policy where it will have the mos impact on industry. One of the principal field activities is the conduct of security inspections in civilian contractor facilities. A number of improvement have already emerged from the process.

Security programs vary in quality, of course. DIS will concentrate its efforts on programs most in need of improvement and on those at high-risk sites.

A facility that deals with classified material faces a greater threat than a facility that does not. Recognizing these realities, the DIS Industrial Securit Representatives (IS Reps) have been given greater flexibility for inspection scheduling so that resources can be directed where the impact for improvement i the greatest.

Rigid sampling requirements for documents, personnel clearance authorizations, and closed areas during an industrial security inspection have been eliminated. Evaluations of security programs at contractor facilities have been based on th professional judgement of IS Reps and not on the amount of documentation produced. The elimination of sampling requirements allows the IS Rep to focus o the inspection developed by DIS several years ago and provide an assessment of the security program based on the program's overall effectiveness.

The requirement that a fixed percentage of inspections be unannounced has been eliminated. Unannounced inspections can be a valuable tool when the IS Rep feel that a complete picture of a facility's security program cannot be obtained during a formal audit. In some cases, however, unannounced inspections make contractors feel they are not trusted by DIS despite the fact that the facility is responsible for protecting classified information. Under the new system, the IS Rep can conduct an unannounced inspection when it would have the most value.

The forms used to report an inspection will also be changed. The IS Rep will no have to complete sections of the DD Form 696 that do not pertain to the facilit being inspected. Narratives will be used to further profile the facility and it security program. The nature of the previous form controlled the nature of inspections. Contractors would be asked questions or be required to produce documentation because the IS Rep wanted to review every item on the form even i it did not apply to the facility being inspected. Due to downsizing and a hirin freeze, the experience level of the IS Rep has increased across the board. They are capable of using their professional judgement rather than a checklist to guide them through a review.

Internal procedures have been modified to reduce administrative work and give the IS Rep more time to provide assistance to contractors. IS Reps are empowere to make decisions needed to sustain and improve contractor security programs.

Such changes in DIS procedures will enhance security programs in industry. The next task for the security community is to institute positive changes in the program as a whole.

John F. Donnelly is director of the Defense Investigative Service.