Defense Counterintelligence and Security Agency (DCSA)

DCSA is the primary government interface for cleared defense contractors on security program matters. It replaced DSS in 2019 with a significantly expanded mission, making it the largest security agency in the federal government by the number of personnel security investigations it processes.

What is the Defense Counterintelligence and Security Agency (DCSA)?

DCSA was established on October 1, 2019, by redesignating and expanding the former Defense Security Service. DCSA's mission encompasses four primary functions:

1. Personnel Security: DCSA conducts background investigations for DoD military, civilian, and contractor personnel, as well as for other federal agencies under interagency agreements. As of 2024, DCSA processes over 2 million security actions per year, making it the federal government's largest background investigation service.

1. Industrial Security: DCSA administers the National Industrial Security Program (NISP) for over 13,000 cleared contractor facilities. This includes granting and maintaining Facility Security Clearances (FCLs), conducting security compliance reviews, and providing oversight of contractor security programs through Industrial Security Representatives (ISRs).

1. Counterintelligence: DCSA conducts defensive counterintelligence to protect classified information and critical technologies in the defense industrial base from foreign intelligence services. This includes briefings on foreign collection threats, suspicious contact reporting, and investigations of potential foreign intelligence penetration of cleared facilities.

1. Supply Chain Risk Management: DCSA has an expanding role in assessing supply chain risks in defense acquisition, identifying foreign-owned or -influenced suppliers that may pose risks to critical defense programs.

Contractors interact with DCSA primarily through their assigned Industrial Security Representative and through the DCSA portal systems (including DISS - the Defense Information System for Security, which manages clearance records).

Why DCSA matters for government contractors

DCSA is the gatekeeper for classified contract work. No company can perform classified government work without DCSA's approval of its facility security program. Maintaining a productive relationship with DCSA, responding promptly to security compliance findings, and proactively engaging DCSA on security program changes is essential for contractors in the classified space.

Example

A defense contractor undergoes an annual DCSA compliance review. The review finds that two employees received classified information in an office area that does not meet the required physical security standards. DCSA issues a finding and requires a corrective action plan within 30 days. The contractor reconfigures the office space with proper access controls and documents the corrective action. DCSA closes the finding and schedules a follow-up review 6 months later to verify sustained compliance.

Frequently Asked Questions

How do contractors initiate the FCL process with DCSA?

The government (the contracting agency) initiates the FCL process by sponsoring the contractor through a contract that requires classified access. Contractors cannot self-sponsor for an FCL. Once sponsored, DCSA assigns an Industrial Security Representative to guide the contractor through establishing the required security program.

What is DISS and how do contractors use it?

The Defense Information System for Security (DISS) is DCSA's web-based system for managing clearance records, investigation requests, and facility security information. Contractor FSOs use DISS to submit clearance requests for employees, verify clearance status, and receive notifications about their cleared workforce.

How often does DCSA review cleared contractor facilities?

Review frequency depends on the facility's risk rating, classification level, and history. Higher-risk facilities (TOP SECRET, large cleared workforces, sensitive programs) may be reviewed annually. Lower-risk SECRET facilities may be reviewed every two to three years. Facilities with poor compliance histories receive more frequent reviews.

What is a Security Vulnerability Assessment and when does DCSA conduct one?

A Security Vulnerability Assessment is a more intensive review than the standard compliance review, typically triggered by suspected foreign intelligence penetration, a serious security violation, or a change in a facility's risk profile. SVAs examine both physical and personnel security measures and may involve DCSA counterintelligence personnel.