Skip to main content

Home / Insights

Insights

DCSA’s 2026 Continuous Vetting Update: What Cleared Contractors Should Do Now

DCSA changed an important part of the personnel-vetting process for national security personnel in the National Industrial Security Program. The agency’s May 19, 2026 announcement says periodic reinvestigations for NISP contractor national security personnel will no longer be required under the new guidance. Instead, individuals must submit an updated Personnel Vetting Questionnaire, or PVQ, including the SF-86 eApp and releases, every five years regardless of eligibility level. [1] [2]

This is a federal, nationwide security-clearance issue. Our office handles security-clearance matters for clients in all U.S. states and territories. It is not a Maryland-law process, and the exact steps can depend on the contractor, Facility Security Officer, Government Contracting Activity, agency, or special-access program involved.

The practical point is simple: a cleared contractor should not wait for a problem or assume that an old reinvestigation date answers the question. The relevant date under DCSA’s current industry guidance is the PVQ Date recorded in the Defense Information System for Security, or DISS. [1] [2]

What changed under the DCSA guidance

DCSA’s April 22, 2026 guidance supersedes its August 8, 2022 Vetting Risk Operations guidance and incorporates changes from DISS Release 14.5. The guidance makes three changes especially important for NISP contractors:

Question Current DCSA industry guidance
What happens to periodic reinvestigations? DCSA says periodic reinvestigations for NISP contractor national security personnel will no longer be conducted under this process.
What must be submitted? An updated PVQ, or SF-86 eApp and releases, every five years.
Which date controls the five-year period? The PVQ Date in DISS, which DCSA describes as equivalent to the SF-86 date.

This does not mean that every clearance holder in every federal setting follows one identical schedule. DCSA’s announcement addresses NISP contractor national security personnel. The guidance also recognizes that an Intelligence Community or Special Access Program customer may require a PVQ before the scheduled five-year update. In that situation, DCSA directs contractors to follow the specific guidance of the Government Contracting Activity. [2]

Why the PVQ Date matters

The guidance says the most recent PVQ date in the Continuous Vetting section of DISS Subject Details is used to calculate when the next five-year update is due. DCSA previously directed industry to use the Continuous Vetting enrollment date. The April 2026 guidance says that approach is superseded because changes in DISS Continuous Vetting statuses make the PVQ Date the appropriate indicator. [2]

That distinction matters when a person enrolled in Continuous Vetting at a different time from the date of the most recent SF-86. It also matters during a transfer or reciprocity action. DCSA’s FAQ says the same criteria should be applied to determine whether a new PVQ and signed releases are required when a person transfers from another company or is involved in a reciprocity or transfer-of-trust action. [2]

If there is no PVQ Date available, the guidance says the individual must complete a PVQ to enroll in Continuous Vetting. If an Intelligence Community enrollment is not visible in DISS, DCSA may request an updated PVQ. The guidance says an FSO who cannot see an individual’s Continuous Vetting enrollment should proactively submit a PVQ. [2]

What a cleared contractor can do now

1. Ask the FSO to confirm the controlling date

Start with the person who can review the company’s DISS information. Ask the FSO to confirm the most recent PVQ Date shown in DISS Subject Details and whether the individual appears on the DISS Subject Report used to identify personnel due for the five-year update.

Do not calculate the deadline from memory, from the date a clearance was granted, or from a prior reinvestigation notice unless the responsible security office confirms that it remains relevant to the particular case. DCSA’s current industry guidance identifies the PVQ Date as the controlling reference for this update.

2. Build a current fact file before opening the questionnaire

An SF-86 update is easier to complete accurately when the underlying information is organized first. I recommend gathering current and prior residential addresses, employment dates, education information, foreign travel and contacts, financial information, police or court records, and other reportable events before beginning the questionnaire. The goal is not to create a new narrative or guess at what matters. The goal is to give complete, consistent information and preserve the records needed to answer follow-up questions.

Review the information against the last submission. A change in an address, job, relationship, debt status, foreign contact, travel history, or legal matter may require careful explanation. A person should not omit information because it seems embarrassing, old, resolved, or unlikely to appear in a database. The correct treatment depends on the question asked, the applicable reporting requirement, and the facts.

3. Preserve the submission record

Keep a copy of the completed questionnaire, signed releases, confirmation screens, and communications with the FSO or security office. DCSA’s guidance says the organization should submit the necessary information to the Personnel Security Management Office for Industry, or PSMO-I. The guidance also identifies “CVUpdate” for the DISS contract-number field when a PVQ update is submitted. [1] [2]

The submission record can help resolve a later question about what was provided, when it was provided, and which process was used. It should be stored securely and handled according to the contractor’s security and privacy procedures.

4. Ask about transfer, reciprocity, or special-program requirements

A transfer of employment or a reciprocity request does not automatically answer whether a new PVQ and signed releases are needed. The DCSA FAQ says the five-year criteria still apply. A Government Contracting Activity, Intelligence Community customer, or Special Access Program may also impose a separate timing requirement. Ask the FSO which instruction controls before assuming that a previous submission will carry forward.

5. Address inconsistencies before they become a larger issue

Continuous Vetting is designed to use automated record checks and professional review to identify information that may require attention. DCSA describes checks involving criminal, terrorism, financial, public-record, and other information. When an alert is received, DCSA says it assesses the alert and may gather additional facts before a clearance determination is made. [3]

That process does not make every alert a clearance problem. It does mean that an unexplained discrepancy can create avoidable confusion. If a questionnaire answer, database record, court document, credit report, or employment record does not line up, prepare a factual explanation and supporting documentation. If the issue could affect eligibility, consult counsel before submitting a response that is incomplete or speculative.

What this update does not mean

The DCSA announcement should not be read to mean that security-clearance holders no longer have reporting duties, that every federal agency uses the same update process, or that a five-year PVQ submission guarantees continued access. Continuous Vetting remains an ongoing review process. DCSA states that alerts may lead to mitigation, monitoring, suspension, or revocation in some circumstances. [3]

The change also does not eliminate the need to answer the SF-86 accurately. A new questionnaire is not a chance to rewrite history. It is an opportunity to provide current, complete information and address changes since the last submission with care.

When legal review may help

Consider obtaining legal advice before submitting a PVQ update if the current questionnaire will involve a criminal charge, financial delinquency, foreign contact, foreign travel, drug or alcohol issue, mental-health treatment that raises a reporting question, inaccurate prior disclosure, or a conflict between your records and information already in DISS. The right response depends on the actual question, the dates, the documents, and the applicable federal adjudicative framework.

If you receive a notice that raises a security concern, a request for additional information, a Statement of Reasons, or a proposed denial or revocation, do not treat it as the same thing as a routine five-year update. Those situations have their own deadlines and response requirements. A prompt review can help preserve the opportunity to respond with accurate facts and relevant mitigation.

A short checklist

Before the five-year PVQ update, confirm the following with the responsible security office:

  • The PVQ Date shown in DISS Subject Details.
  • Whether the individual appears on the DISS Subject Report for an update.
  • Whether a transfer, reciprocity, Intelligence Community, or Special Access Program requirement changes the timing.
  • Which documents and signed releases must be submitted.
  • How the submission and confirmation should be preserved.

DCSA’s 2026 guidance gives contractors a clearer reference point: the PVQ Date, not an assumed reinvestigation date or Continuous Vetting enrollment date. Use that date, work with the FSO, follow program-specific instructions, and treat every answer on the questionnaire as a factual certification that deserves careful attention.

Educational disclaimer: This article provides general information about federal security-clearance procedures. It is not legal advice for any individual matter and does not create an attorney-client relationship. Requirements can vary by agency, contractor, program, and facts. For advice about your situation, consult qualified counsel.

References

[1] Defense Counterintelligence and Security Agency, “DCSA updates NISP contractor Continuous Vetting process,” May 19, 2026

[2] Defense Counterintelligence and Security Agency, “Changes to the Five-Year Update Criteria,” April 22, 2026

[3] Defense Counterintelligence and Security Agency, “Continuous Vetting”

CallRequest Consultation