NISPOM
Also known as: NISPOM, 32 CFR 117, NISPOM Rule, National Industrial Security Program Operating Manual, DoD 5220.22-M
National Industrial Security Program Operating Manual (32 CFR 117) — US Department of Defense / DCSA
Official site Official change log
The rules a cleared US contractor follows to protect classified information: facility clearances, insider threat programmes, foreign ownership and control reporting, and the security controls behind them. Issued for decades as a DoD manual, it became binding regulation in its own right when it was published as 32 CFR 117 in December 2020 (2020-27698).
Timeline
No changes recorded yet — we are watching, and nothing has been published.
Monitoring
Watched by 1 official source. Watching since 20 September 2026.