We recommend that the Office of the Chief Security Officer develop and implement suitability policy language to include clear lines of responsibility and processes. Improvements should include: • In the contractor suitability policy, assign the responsibility for the centralized recordkeeping of intra-agency badging agreement Memorandums of Understanding or Agreements to the OCSO; and• In both policies, guidance and requirements for secure badge return and protection and oversight of Personally Identifiable Information.