X
  • Para realizar los trámites relacionados con la ONS debe dirigirse a la siguiente dirección https://gobernanza.ccn-cert.cni.es

     

Help

Help

In which situations may a FSC be applied for?

A FSC will be applied for whenever the company could access classified information by means of a contract classified with the level «CONFIDENTIAL or equivalent» or above or when the employees may have a reasonable possibility to access classified information.

Up

How is a FSC applied for?

Formalities for the FSC application are the responsibility of the Security Officer) of the organization.

Up

Who can be a Security Officer?

The Security Officer of a Company is the person responsible for the classified information to be handled according to law; the Security Officer is also the point of contact with the NSA regarding the maintenance of a valid FSC.

He/She must be Spanish and granted a valid PSC with a degree at least the degree of the company’s FSC and must have a contract with such Company. He/She also needs to have enough power in the company to develop its duties regarding the protection of classified information.

Up

Is it possible to apply for a FSC to access RESTRICTED classified information?

There are four levels of classified information depending on the damage its knowledge may cause; RESTRICTED, CONFIDENTIAL, SECRET AND TOP SECRET. To access RESTRICTED classified information, an authorization to access RESTRICTED classified information must be applied for.

Up

How can I apply for an authorization to access RESTRICTED classified information?

The authorization to access RESTRICTED classified information must be applied by the individual appointed as Responsible in the Company, who must apply for the authorization following the procedure set by the NSA.

Up

I am self-employed, can I request a PSC?

A self-employed person is an individual company and as such, a Facility Security Clearance can be applied.

Up

Which documents must be submitted for a FSC appplication?

To obtain a FSC, the Company must provide proof that it is in a position to be eligible for a contract/program involving the production or handling of classified information. This proof can be based on a letter from a contracting authority of a Spanish Administration or on specific security clauses included in a contract with an International Organization, such as NATO, the EU or the ESA.

The application for the FSC must include the required documentation that may allow the investigation to start according to the orientations for a FSC request. Security companies must submit also specific documents using the Additional Documents section.

Prior to the above, not exceeding a month, the Security Officer must apply for his/her PSC and his/her deputy’s PSC as well as all PSC needed for staff members that are mandatory to obtain the FSC.

Up

How long does it take to have the authorization for a FSC?

The time for the authorization, which includes conducting a proper investigation, usually takes around 6 months, although it could take longer depending on the company’s characteristics and also on the features of the members of the Protection Service and the administration bodies of the company.

Up

Which documents must be submitted for the authorization to access RESTRICTED classified information?

Current regulation establishes that a company or other private entity that needs to handle classified information up to RESCTRICTED level or equivalent requires an specific authorization. It must give proof of being in a position to be eligible for a “RESTRICTED or equivalent” contract.

Up

How long does it take to have an authorization to access RESTRICTED classified information?

The time for the authorization, which includes all necessary investigation, usually takes around 2 months, although it could take longer dependeing on the company’s characteristics and also on the features of the responsable individual appointed.

Up

What kind of investigation is conducted on the Company to grant a FSC?

A FSC is granted to a company depending on reliability, loyalty and honesty parameters of the company and the individuals with decision-making capabilities.

Up

What options do I have if the FSC has been revoked or denied?

The administrative decisión of denial or revocation of a FSC is sent to the company stating the facts or parts of regulation that contain the risks detected during the investigation. The company can file an appeal for reversal before the NSA. Also an administrative appeal can be filed in a two-month period since the decisión is received.

Up

If a FSC has been denied or revoked, can I reapply?

The FSC cancellation might be a voluntary decisión and, in that case, it could be requested again whenever is needed. If it is denied of revoked due to non-compliance, the company cannot request a new one during the next three years, after this period, a new FSC can be requested.

Up

What formalities related to the FSC can be performed online?

The Security Officer can submit any online application related to the handle of classified information and notify the information related to the company’s current situation requested in the rules. S/He could also apply for the PSC of the employees of the company.

Up

What are the Security Officer duties in relation with the FSC?

Regarding the investigation, the Security Officer must submit all required information comprehensively and honestly. Failing to submit the information on tiem may lead to the denial or cancellation of the FSC.

During the period of validity of the FSC, the NSA must be informed about any substantial changes in the company, such as contact details, stakeholders, board of directors, etc.

These changes will be informed throug the Form of Information of the Company, adding the additional documentation required.

Up

What are the Security Officer duties in relation with the PSC of staff members of the organization?

The Security Officer is responsible for submitting grant and renovation requests of PSCs for the company members that need to handle classified information. The Security Officer must also instruct and train periodically all employees with a PSC.

The Security Officer must also communicate all dismissals of employees with a PSC.

Up

What does it mean “Ongoing” under my application details on the website?

During the formalities in a FSC procedure, any document submitted is considered to be “ongoing”.

Up

What does it mean “Incorrect/Incomplete Documentation” under my application details on the website?

Incorrect/Incomplete Documentation” under the application details means the procedure is cancelled and the required documentation must be submitted again.

Up

What does it mean “Application denied” under my application details on the website?

The procedures performed must not be sent to the NSO or do not apply for the company’s specific case.

Up