10 U.S.C. § 2388

(a) Authority .— If the senior management official of a covered company does not have a security clearance, the Secretary of Defense may grant a security clearance to a facility of such company only if the following criteria are met: (1) The company has appointed a senior officer, director, or employee of the company who has a security clearance at the level of the security clearance of the facility to act as the senior management official of the company with respect to such facility. (2) Any senior management official, senior officer, or director of the company who does not have such a security clearance will not have access to any classified information, including with respect to such facility. (3) The company has certified to the Secretary that the senior officer, director, or employee appointed under paragraph (1) has the authority to act on behalf of the company with respect to such facility independent of any senior management official, senior officer, or director described in paragraph (2). (4) The facility meets all of the requirements to be granted a security clearance other than any requirement relating to the senior management official of the company having an appropriate security clearance. (b) Covered Company .— In this section, the term “covered company” means a company that has entered into a contract or agreement with the Department of Defense, assists the Department, or requires a facility to process classified information.