Frequently Asked Questions


What is definition of national security systems?
National Security Systems as defined in CNSSI 4009, Information Assurance Glossary, reflect the FISMA definition:
national security system
Any information system (including any telecommunications system) used or operated by an agency or by a contractor of any agency, or other organization on behalf of an agency,
  1. the function, operation, or use of which:
    1. involves intelligence activities;
    2. involves cryptologic activities related to national security;
    3. involves command and control of military forces;
    4. involves equipment that is an integral part of a weapon or weapon system; or
    5. subject to subparagraph (B), is critical to the direct fulfillment of military or intelligence missions; or
  2. is protected at all times by procedures established for information that have been specifically authorized under criteria established by an Executive Order or an Act of Congress to be kept classified in the interest of national defense or foreign policy.

(B). Does not include a system that is to be used for routine administrative and business applications (including payroll, finance, logistics, and personnel management applications).

(Title 44 U.S. Code Section 3542, Federal Information Security Management Act of 2002.)

How can I get an FOUO document?
Members can access FOUO documents on the CNSS Members only database. Contractors must go through their COR.
Can non-members attend working group meetings?
Non-CNSS members and contractors (working for CNSS Members and Observers) may participate in working group meetings; however, they cannot vote.
Is the 1986 version of the classification guide current?
Yes, it is. As CNSS documents are phased out or replaced, it is noted in the Index.
What role do contractors play in CNSS?
Contractors who are working for USG departments and agencies may participate in working groups and attend Subcommittee meetings upon invitation.
Is the CNSS Conference open to the public?
The CNSS Conference is “by invitation only.” Participants from the private sector (NSTAC, academia, and our Allies) have attended previous Conferences.