Security Clearance in Government Contracting

A security clearance is an official government determination that an individual or organization is eligible and trustworthy to access classified national security information at a specific sensitivity level, granted through a formal investigative process administered by the Defense Counterintelligence and Security Agency (DCSA).

What is a Security Clearance?

Security clearances for federal contractors are governed by Executive Order 12968 (Access to Classified Information) and the National Industrial Security Program (NISP) regulations in 32 CFR Part 117. Individual clearances are granted at three primary levels: Confidential (the lowest level), Secret (the most common level for defense contractors), and Top Secret (for information whose unauthorized disclosure could cause exceptionally grave damage to national security). Some programs require additional access to Sensitive Compartmented Information (SCI) or Special Access Programs (SAPs) beyond the basic Top Secret clearance.

For the contractor workforce, individual clearances are sponsored by the contractor's employer in connection with a specific government contract that requires cleared personnel. The employer must hold a Facility Security Clearance (FCL) to employ cleared individuals and to receive classified information from the government. The FCL and individual clearances are processed by DCSA, which conducts background investigations through the National Background Investigation Services (NBIS). Investigation timelines vary significantly by level and the complexity of the subject's background, ranging from a few months for Secret to over a year for Top Secret with polygraph requirements.

Cleared contractors face ongoing compliance obligations managed by the Facility Security Officer (FSO): annual self-inspections, employee security briefings, reporting of foreign contacts and potentially derogatory information, and participation in DCSA inspections. The classified contract requirements are defined in the DD Form 254 (Contract Security Classification Specification), which specifies what classified information a contractor will receive and at what level.

Why security clearances matter for government contractors

Access to the classified contracting market is gated by security clearance infrastructure. A company without an FCL cannot compete for or perform on classified contracts, which represent a significant portion of defense and intelligence community spending. Building the FCL and cleared workforce takes time - the FCL application process alone can take six to twelve months, and individual Top Secret investigations can take significantly longer. Companies that plan to enter the cleared contractor market should begin the FCL process well before they have a specific cleared contract in hand. Read how security clearances affect government contracting for a deeper overview.

Example

A cybersecurity consulting firm wins a DHS contract that requires Secret-level access to investigate critical infrastructure vulnerabilities. The firm's founding team includes two former government officials who hold active Secret clearances. The firm applies for a Facility Security Clearance (FCL) at the Secret level, designating the CEO as the Key Management Personnel (KMP) subject to suitability review. DCSA processes the FCL application and grants the FCL after four months. With the FCL in place, the firm can receive classified network vulnerability data from DHS, host classified working meetings in its SCIF (or use government facilities), and hire additional cleared analysts to build team capacity.

Frequently Asked Questions

How does a contractor get an initial security clearance?

A contractor cannot self-initiate a security clearance. An individual clearance must be sponsored by an employer in connection with a specific contract or job requirement. The employer with an FCL submits a clearance request through the DCSA system, and the individual completes the Electronic Questionnaires for Investigations Processing (e-QIP) form. The sponsoring contractor is responsible for verifying that the individual has a legitimate need for access to classified information in connection with their employment.

What is the difference between a personnel clearance and a facility clearance?

A personnel clearance (also called a PCL) is granted to an individual employee. A facility clearance (FCL) is granted to the contractor organization as a whole and allows the organization to possess classified information and employ cleared personnel. Both are required for a contractor to perform classified work. The FCL establishes that the company itself is trustworthy and has adequate physical security and compliance systems. The PCL establishes that individual employees are eligible for access.

How long does a security clearance last?

Security clearances do not expire on a fixed schedule but are subject to periodic reinvestigation to verify continued eligibility. The reinvestigation cycle depends on the clearance level: Secret clearances are reinvestigated every 10 years, Top Secret clearances every 5 years. Additionally, cleared employees must self-report any significant changes in personal circumstances (financial problems, foreign contacts, criminal matters) between reinvestigations. Failure to report can itself be grounds for revocation.

Can a cleared employee take their clearance from one contractor to another?

Yes. Clearances are portable between cleared contractors when a cleared employee changes jobs. When an employee leaves a cleared position, the losing company terminates the clearance access. When the employee joins a new cleared contractor, the gaining company submits a request to "pick up" the existing clearance, which is typically processed quickly if the clearance is current and the employee has no intervening derogatory information. The clearance remains with the individual rather than the employer.