EconDefense
INT-36 / Intelligence, counterintelligence and security

Protect classified contractor information and mitigate foreign ownership risks

Conduct industrial-security functions, assist other agencies, and integrate DCSA FOCI assessment with acquisition responsibility, contract conditions and oversight.

Download record

At a glance

Possible toolINT-36 · Security & information
Legal basis10 U.S.C. § 428

Authority holder: Secretary of Defense; USD(A&S)/DCSA responsibilities in §4819; USD(I&S) security oversight under §137.

Security & information

Mechanism tags describe the source text; they do not expand the authority.

Availability and verification

Existing statutory pathway; conditional on the listed findings, approvals, eligible purpose and actual available funds. Not an obligation-ready certification.

Requirements and limits

Eligibility & prerequisites

  • Classified-contractor scope under §428; separate §847 covered-contractor threshold generally exceeds$5m.
  • Commercial-product/service exemptions to specified §847 requirements unless senior official applies them for national-security risk.
  • Use appropriate disclosure, assessment, mitigation and contract procedures.

Limits & exclusions

  • DCSA is not a general regulator of every U.S. company or substitute for CFIUS.
  • FOCI finding is not identical to a criminal offense.
  • Statutory mandate does not prove implementing rule or capacity fully operational; see audit.

Funding conditions

  • Available security/acquisition resources; legislation requires sufficient resources but does not itself appropriate them.

Read the funding and execution guide

Who contributes what

Need & planning

Resources

  • Program/acquisition security funds
  • DCSA program resource owner
    Office profile

Approval

  • Statutory/appointed acquisition decision-maker and contracting officer
    Office profile
  • DCSA security determination officials within documented delegations
    Office profile

Execution

Partners & review

  • FBI for its domestic CI/criminal jurisdiction
  • Treasury-led CFIUS where covered transaction
  • Contractor security and beneficial-ownership officials

Office links are editorial matches to the original role text, not verified delegations. Composite labels and unmatched actors are preserved.

Coordination pathway

Program/contractor risk → DCSA and Service CI → acquisition/counsel decision → mitigation or permissible contract action → FBI/CFIUS referral when their powers needed.

Actor and execution-role sources

What this research establishes

Legal powerSource and conditions recorded
EligibilityProject-specific check needed
Available fundsBalances not verified
DelegationValid signature authority must be checked
ExecutionOffice capacity and approvals must be checked

Confidence: High on express statutory capability; execution/delegation and currently available resources require program-specific confirmation.

Currentness: GovInfo 2024 U.S. Code baseline read; relevant FY2026 NDAA (Pub. L. 119-60, enacted 2025-12-18) amendments reviewed. Target 2026-10-02; source-specific OLRC checks and remaining delta are documented in international.md. No certification of current funds or executed delegations. OLRC §4819 snapshot dated2026-09-28 read in index; GAO-26-107861 distinguishes implementation/resource gaps from missing legal authority.

Research target: October 2, 2026. A record-specific last-review date is not supplied. Publication date is not legal-currentness certification.