What protection does the FAR Security Requirements clause 52-204.2 provide if there are changes by the Government to the security classification or security requirements under the contract that cause a change in security costs or other terms of the contract?Question 17Select one:a.The contractor is under no obligation to comply once the contract is awarded.b.The contract will be terminated.c.The contract shall be subject to an equitable adjustment.

Without modifying the contract, the Government can require a contractor to implement a security requirement that is not specified in the NISPOM or the DD Form 254 after contract award.Question 19Select one:TrueFalse

What is the relationship of contractual security requirements in the Federal Acquisition Regulation (FAR) and security guidance based on the NISPOM?Question 12Select one:a.The NISPOM defines the responsibilities of contracting officers and the contract clause that can be found in the FAR.b.The FAR incorporates the requirements of Executive Order 12829, National Industrial Security Program, and specifies the National Industrial Security Program Operating Manual (NISPOM) as the implementing publication for the NISP.c.The FAR and NISPOM provide general guidelines in the form of best practices.

Why is it important during the Pre-Award phase for the GCA and local security office to be involved in developing the security requirements?Question 18Select one:a.The level of security required on a contract should be flexible enough that after the contract is awarded, the contractor has flexibility to address the inherent risks associated with changing requirements.b.The level of security stipulated in the Request for Proposal could disqualify potential bidders from preparing a response.c.The level of security required on a contract will affect the cost of the contract, so key questions to ask are: What FAR security contract clauses should be incorporated? What are the legitimate security needs related to a program?

True or false. To state that an organization is compliant, "the organization needs to define effective security policies to security controls and information", instead of "validate that the requirements within security policies have been applied to security controls and information".

What will follow after the breaking of the Data Security Policy?Choisissez la meilleure optionAll answers are correctDisciplinary actionsLegal consequences Potential contract termination for unreported cases