In the NBA playoffs, the bright lights expose everything – strengths, weaknesses, habits, and blind spots. The playoffs do not create character. They reveal it.
And in the world of national security, 32 CFR Part 117 (NISPOM) does the same thing.
It does not invent discipline.
It does not magically create a culture of protection.
It simply reveals whether the organization has built one.
Because under pressure – whether it is a Game 7 or a Defense Counterintelligence and Security Agency (DCSA) assessment – your preparation becomes visible.
1. The Spurs, the Upsets, and the Power of Systems
This year, the Spurs shocked everyone by winning their first playoff series since 2017. Upsets like that do not happen by accident. They happen because a system quietly and consistently works.
NISPOM is the same.
It rewards organizations that build:
- Repeatable processes
- Predictable controls
- Documented behaviors
- A culture that does not depend on heroics
Compliance is not a buzzer-beater.
It is a season-long discipline.
2. Joel Embiid and the “Appendectomy Principle”
Joel Embiid dropped 33 points days after surgery. That is grit. But grit is not a strategy.
In security, organizations often rely on the “Embiid mindset” – the heroic employee who remembers the rule, catches the mistake, or saves the day.
But 32 CFR Part 117 does not rely on heroes.
It relies on:
- Access control
- Need-to-know
- Insider threat programs
- Continuous monitoring
Systems beat heroics every time.
3. Injuries, Depth Charts, and Insider Threat Programs
Teams lose players.
Organizations lose people too – through turnover, burnout, or simple distraction.
That is why NISPOM requires:
- Designated roles
- Cross-trained backups
- Documented responsibilities
- Insider threat awareness across the workforce
Because when one person goes down, the mission cannot.
The Wolves losing Anthony Edwards for a week is a setback.
Losing your Facility Security Officer (FSO) without a trained alternate is a vulnerability.
4. Draft Picks and the Future of Your Cleared Workforce
The NBA draft is about potential.
NISPOM is about protecting it.
Rookie of the Year Cooper Flagg did not arrive ready-made.
Neither do new cleared employees.
They need:
- Onboarding
- Security training
- Reinforcement
- Leadership modeling the right behaviors
A cleared workforce is not hired – it is developed.
5. Executives of the Year and the Leadership Mandate
Brad Stevens earned Executive of the Year because he built a culture, not just a roster.
NISPOM makes the same demand of leadership.
Executives must:
- Set expectations
- Resource the security program
- Champion compliance
- Treat protection as a strategic advantage
Security is not an FSO problem.
It is an organizational identity.
The Lesson
The NBA playoffs remind us of something simple:
Pressure exposes preparation.
In basketball, that means wins and losses.
In national security, it means trust, contracts, and the protection of information that cannot be replaced.
32 CFR Part 117 is not just a rulebook.
It is a playbook.
And the organizations that treat it that way – the ones that practice, prepare, and build culture – are the ones that advance.
Security First & Associates believes security is a team sport.