Facility Clearance (FCL) Self-Inspection Checklist (NISPOM)

This template is for cleared contractor facilities that must self-inspect their Facility Clearance program under NISPOM expectations. It is typically run by the FSO, security manager, or another qualified internal reviewer with access to the controlled areas and records. It works best when the inspector can verify both physical safeguards and the supporting logs, authorizations, and corrective actions.

This template is designed for the annual self-inspection cycle, which is the standard cadence for most cleared facilities. Some organizations also use it after major changes such as a move, new storage area approval, personnel turnover, or a serious deficiency. If your internal program has a shorter review cycle, the same checklist can be reused as a quarterly or pre-audit control check.

It covers the core facility-clearance controls in the template structure: inspection details, safeguarding of classified information, visitor control and access authorization, key and combination control, and corrective action sign-off. The checklist is meant to confirm that classified material is stored, marked, handled, and destroyed according to procedure, and that access is limited to authorized personnel. It also captures whether prior deficiencies were reviewed and closed.

No. This is an internal self-inspection tool that helps you prepare for and support external oversight, not a substitute for government direction or formal review. It is useful for finding deficiencies early, documenting remediation, and showing that the facility maintains an active compliance program. If an external reviewer identifies a gap, you should still follow the applicable reporting and corrective-action process.

Common misses include outdated visitor logs, incomplete escort records, keys or combinations stored too close to the items they protect, and storage containers that are not approved or not in good condition. Facilities also overlook open storage approvals, missing document markings, and unresolved prior deficiencies that were never formally closed. This checklist makes those issues visible in one pass.

Yes. You can duplicate the inspection details and section checks for each facility, building, or controlled area, then add location-specific notes for storage containers, visitor entry points, and key cabinets. Many teams also add custom fields for open storage approval references, after-hours access rules, or local procedures. The template is a starting point, so it should reflect your actual layout and security plan.

It can sit alongside access reviews, badge audits, key control logs, corrective action tracking, and document destruction records. Many teams link the findings to a CAPA or issue-tracking workflow so deficiencies are assigned, dated, and closed in one place. If you already use a QMS or compliance platform, this checklist can feed that system as the inspection record.

Record the deficiency clearly, note the affected area or control, and assign a target completion date before the inspection is closed. If the issue involves a critical safeguard such as unsecured classified storage, missing access control, or an unaccounted key, escalate it immediately according to your security procedure. The goal is to leave the inspection with a documented action plan, not just a list of observations.