DOC Policy

Manual of Security Policies and Procedures (Commerce personnel only)

---

Department Organizational Orders (DOO)

• DOO 20-6, Director for Security

---

Department Administrative Orders (DAO)

• Department Administrative Order 207-1, Security Programs
• Department Administrative Order 207-11, Official Credential and Badge
• Department Administrative Order 207-12, Foreign National Visitor and Guest Access Program
• Department Administrative Order 210-1, Emergency Readiness for Departmental Continuity
• Department Administrative Order 210-7, Commerce Responsibilities in Disasters and Emergencies

---

Memoranda (Commerce personnel only)

• Designation of Departmental Special Security Officer, memo dated April 4, 2019 
• Implementation of Foreign National Request Form, memo dated May 25, 2018 from the Director for Security
• Implementation of the Interagency Security Committee Risk Management Process Standards; memo dated January 5, 2018 from the Director for Security
• PIV and Alternative Credential Implementation, memo dated March 19, 2019 from the Director for Security
• Security Training Requirements for Official International Travel, memo dated December 27, 2019 from the Director for Security

---

External Policy and Guidance

Continuity Program

• Federal Continuity Directive-1 (FCD-1)
• Federal Continuity Directive-2 (FCD-2)

---

Emergency Management Program

• Federal Protective Service Guidance for Occupant Emergency Planning
• Occupant Emergency Programs: An Interagency Security Committee Guide
• Executive Order 12656, Assignment of Emergency Preparedness Responsibilities

---

HSPD-12 Credentialing

• Homeland Security Presidential Directive 12 (HSPD-12) - Policy for a Common Identification Standard for Federal Employees and Contractors 
• FIPS 201-2 Personal Identity Verification (PIV) of Federal Employees and Contractors
• NIST SP 800-79-2 Guidelines for the Authorization of Personal Identity Verification Card Issuers (PCI) and Derived PIV Credential Issuers (DPCI)
• NIST SP 800-116 Guidelines for the Use of PIV Credentials in Facility Access
• NIST SP 800-157 Guidelines for Derived Personal Identity Verification (PIV) Credentials
• NIST SP 1800-12 Derived Personal Identity Verification (PIV) Credentials
• OPM Memo July 31, 2008 - Final Credentialing Standards for Issuing Personal Identity Verification Cards under HSPD-12
• OPM FIN 10-05 May 17, 2010 - Reminder to Agencies of the Standards for Issuing Identity Credentials Under HSPD-12
• OMB Memo March 2, 2016 - Guidance on Executive Branch-Wide Requirements for Issuing Personal Identity Verification (PIV) Credentials and Suspension Mechanism

---

Information Security

• Executive Order 12829, Industrial Security
• Executive Order 13526, Classified National Security Information
• 32 CFR Parts 2001 and 2003, Classified National Security Information
• National Industrial Security Program Operating Manual (NISPOM)
• Executive Order 13549, Classified National Security Information Program for State, Local, Tribal and Private Sector Entities
• Executive Order 13556, Controlled Unclassified Information
• Executive Order 13587, Structural Reforms to Improve the Security of Classified Networks and the Responsible Sharing and Safeguarding of Classified Information

---

Interagency Security Committee (ISC)

• The Risk Management Process for Federal Facilities: An Interagency Security Committee Standard
  • Appendix A: Design-Basis Threat Report (FOUO) (Commerce personnel only + password)
  • Appendix B: Countermeasures (FOUO) (Commerce personnel only + password)
  • Appendix C: Child-Care Centers (FOUO) (Commerce personnel only + password)
  • Appendix D: How to Conduct a Facility Security Committee
• Items Prohibited from Federal Facilities: An Interagency Security Committee Standard
• Planning and Response to an Active Shooter: An Interagency Security Committee Policy and Best Practice Guide (FOUO) (employees only)
• Other ISC Policies, Standards, Best Practices, Guidance, and White Papers
• Executive Order 12977, Interagency Security Committee

+ To obtain password, email request to [email protected]. Requests will be approved for security personnel, and personnel with Commerce Risk Management Process need-to-know.

---

Personnel Security

• Executive Order 12107 - Security Requirements for Government Employment
• Executive Order 12968 - Access to Classified Information
• Executive Order 13467, Reforming Processes Related to Suitability for Government Employment, Fitness for Contractor Employees, and Eligibility for Access to Classified National Security Information
• Executive Order 13488, Granting Reciprocity on Excepted Service and Federal Contractor Employee Fitness and Reinvestigating Individuals in Positions of Public Trust
• Security Executive Agent Directives (SEAD) 1 through 7
• 5CFR Part 731 - Suitability
• 5CFR Part 732 - National Security Positions
• 5CFR Part 736 - Personnel Investigations
• 5CFR Part 1400 - Designation of National Security Positions
• 5CFR §330.1300 - Timing of Background Investigations

---