This regulation establishes policy for the Department of the Army’s Industrial Security Program. It pertains to classified information and also addresses controlled unclassified information in the hands of industry. It prescribes requirements, restrictions, and other safeguards for the ISP to prevent unauthorized disclosure of classified and CUI released to current, prospective, or former contractors, licensees, grantees, and certificate holders of the DA. This regulation addresses contractor operations on Army installations or at Army facilities. It does not stipulate the enhanced security requirements for Special Access Programs. SAP security requirements are addressed in other regulations. The ISP is administered by the Deputy Chief of Staff.