On October 5, the Information Security Oversight Office (ISOO) issued a joint notice (Joint Notice) with the Small Business Association (SBA) and in coordination with the Department of Defense (DOD) clarifying that the Cognizant Security Agency (CSA) is responsible for determining which entities are required to hold an Entity Eligibility Determination (EED), also known as a Facility Clearance (FCL), and providing specific guidance as to which entities must possess EED in different scenarios.