This regulation, AR 380-49, establishes policy for the Department of the Army's Industrial Security Program (ISP). This regulation pertains to classified information and also addresses controlled unclassified information (CUI) in the hands of industry. It prescribes requirements, restrictions, and other safeguards for the ISP to prevent unauthorized disclosure of classified and CUI released to current, prospective, or former contractors, licensees, grantees, and certificate holders of the DA. This regulation addresses contractor operations on Army installations or at Army facilities. This regulation does not stipulate the enhanced security requirements for Special Access Programs (SAPs). SAP security requirements are addressed in AR 380-381 and in AR 715-30. Additionally, AR 715-30 provides policy and guidance to support a secure contracting environment and activities having special security or operational requirements. The ISP is administered by the Deputy Chief of Staff, G-2 (DCS, G-2).