How Often Must You Receive a Defensive Foreign Travel Briefing (2026 Data)

How often must you receive a defensive foreign travel briefing? There is no calendar interval for the briefing itself: under the national reporting rules it comes before a trip, whenever the agency requires one.¹ Two fixed clocks run around it instead: refresher training on reporting duties every 12 months¹², and a report of any change to an approved itinerary within 5 business days¹ of return.

The rules cover people with access to classified information or in a sensitive position, drawn from a clearance system that counted 4,243,937³ eligible people on October 1, 2019. They travel into a world where 52⁴ of 215 rated destinations sit at Level 3 or Level 4.⁵ Behind the traveler, the vetting system has changed fast: the investigation backlog is down 84% from its 2018 peak, and 99.7%⁶ of the national security population is now under continuous vetting.

The short answer: before the trip, when your agency requires it

The defensive briefing is tied to the trip, not to the calendar. Security Executive Agent Directive 3 (SEAD 3), the executive branch's reporting rule for cleared people, says: "When required by the agency head or designee, covered individuals shall, prior to travel, receive a defensive security and counterintelligence briefing."¹ The sentence sits inside the rules for unofficial foreign travel; reporting for official trips is left to each agency, whose heads "shall determine requirements for reporting foreign travel as part of a covered individual's official duties."

The yearly item is training, not the travel briefing. SEAD 3 tells agency heads to provide training that ensures "awareness of individual reporting obligations, at a minimum, during employee indoctrination and in annual refresher training."¹ The contractor rule, the National Industrial Security Program Operating Manual (NISPOM, 32 CFR Part 117), says "the contractor will provide all cleared employees with security education and training every 12 months"; insider threat awareness training is also annual, and derivative classifiers are trained at least once every 2 years.²

After you return: the five-business-day clock

Before an unofficial trip abroad, a covered person submits an itinerary to the agency and, unless an exception applies, receives approval before leaving. "All deviations from approved travel itineraries shall be reported within five business days of return."¹ An unplanned day trip to Canada or Mexico is reported on return, also within five business days, and emergency travel needs at least a verbal notice to the supervisor or management chain before departure, with full reporting within five business days of return.

Puerto Rico, Guam and other U.S. possessions and territories do not count as foreign travel and need no report.¹ Agencies may name conditions under which prior reporting and approval are not needed, such as frequent travel to one country, and they may also add more detailed procedures of their own. An agency can refuse a trip that "presents an unacceptable risk", and ignoring that decision can lead to administrative action up to revocation of national security eligibility.

Contractors: the NISPOM timeline

For cleared contractors, NISPOM points reporting back to the directive: reports are made "pursuant to this rule, Security Executive Agent Directive (SEAD) 3" and the guidance of the cognizant security agency.² The rule gave contractors 6 months from February 24, 2021 to implement it, and gave contractors under Defense Department security cognizance 18 months², until August 24, 2022, to begin SEAD 3 foreign travel reporting to the Department of Defense. SEAD 3 itself was signed on December 14, 2016 and took effect 180 days later, on June 12, 2017.¹

What goes into a foreign travel report

A foreign travel report is built from 10¹ data elements, and 3 of them are post-travel items: unplanned contacts, unusual or suspicious occurrences, and foreign legal or customs incidents.

To judge the risk of a trip, agencies are pointed to 4 threat resources, among them the national threat identification and prioritization assessment, the security environment threat list, U.S. travel alerts and warnings, and the Defense Intelligence Agency threat list.¹ Agencies may require more detailed reporting and approval procedures than the minimum, and nothing in the directive stops an agency head from adding requirements of their own.¹

Who counts as covered is set out in the definitions. A covered individual is "a person who performs work for or on behalf of the executive branch who has been granted access to classified information or holds a sensitive position"; the definition reaches state, local, tribal and private-sector people granted access, and legislative or judicial staff granted access after an executive-branch investigation.¹ It is "not limited to government employees" and includes contractors, subcontractors, licensees, certificate holders, grantees, experts and consultants.

More duties at the Top Secret level

The reporting list grows with the clearance. Everyone covered reports foreign travel, unofficial contact with a known or suspected foreign intelligence entity, and continuing association with foreign nationals that involves bonds of affection, personal obligation or intimate contact.¹ Secret and Confidential holders add items such as a foreign passport or identity card, arrests, and bankruptcy or any debt more than 120 days delinquent. Top Secret holders also report foreign activities, from a foreign bank account to voting in a foreign election, plus any unusual infusion of assets of $10,000 or greater and a foreign national roommate staying more than 30 calendar days.

One traveler's form sits inside a very large system. Only people in access or in a sensitive position are covered by these travel duties, but the clearance system counts everyone found eligible, whether or not they hold access today.¹

How many people are eligible for a security clearance

On October 1, 2019, 4,243,937³ people were eligible for access to classified information, about 12.9⁴ for every 1,000 U.S. residents.⁷ The count had fallen 21.7%⁴ from 5,150,379 in 2013 to 4,030,625 in 2017, then grew 5.3%⁴ by 2019.⁸⁹

No full count has been published since fiscal 2019. In March 2023, the Pentagon's top intelligence and security official put the figure at "approximately 4.2 million Americans with security clearances, more than 3.6 million of them work as DOD, civilian, or contractor personnel."¹¹ The 2013 peak of 5,150,379 included 2,058,402 people who were eligible but not in access; by 2017 that group had shrunk to 1,198,684, which accounts for most of the drop.⁸⁹

Government employees, contractors and Top Secret

Government employees and military held 68.3%⁴ of all eligibility in fiscal 2019, contractors 24.3%⁴, and other records 7.5%, mostly entries without an employee type.³

Contractors lean toward the higher level: of 1,030,280 eligible contractors, 497,271 held Top Secret eligibility, against 711,404 of 2,897,172 in government.³ Access splits the same way: most contractor eligibility was in access, while more than a million government eligibility records were not.

Top Secret eligibility stood at 1,384,060³ in 2019, 32.6%⁴ of the total, after dipping to 1,309,793 in 2017.⁹

In access or just eligible

Eligibility is not the same as access. In 2019, 2,949,756³ eligible people were in access, 69.5%⁴ of the total, and 1,294,181 were eligible without current access; the second group grew faster that year, by 7.6% against 2.7%.³ Only those in access or in a sensitive position fall under the travel-reporting duties.¹

Approvals per year

Approvals count every favorable decision in a year, initial or reinvestigation, so they are not the same as new clearances. They rose from 668,546 in fiscal 2018 to 964,138³ in fiscal 2019, up 44.2%⁴, after sitting between 594,864 and 668,546 from 2015 to 2018.⁹¹⁰ In fiscal 2012 and 2013, before this run, approvals were 798,618 and 777,168.⁸ Of the fiscal 2019 approvals, government employees and military received 652,523⁴ and contractors 279,905, and Top Secret approvals rose from 213,687 to 347,846 in one year.³

The Department of War's growing cleared workforce

The Department of War, an authorized secondary name for the Department of Defense (which remains its legal name), counts its own national security population in a different way, so its figures do not match the government-wide totals above.⁶ Its eligible population rose from about 4.0⁴ million in fiscal 2014 to 5.7 million in fiscal 2025, up 42.9%⁴.

Almost all of the growth is people without current access. That group more than doubled, from about 1.6⁴ million to 3.2 million, up 103%⁴, while the in-access group stayed close to 2.4 million; the growth came from "a hiring surge in uniformed military personnel".⁶ In-access numbers barely moved, from 2,399 thousand in fiscal 2014 to 2,466 thousand in fiscal 2025.

The rise has not stopped: in the first quarter of fiscal 2026 the population reached 5,789 thousand, and 57.3% of it had no current access.⁶

For decades, the check on a cleared person's life came once every few years. That rhythm has now been replaced by a continuous one.

From five-year reinvestigations to continuous vetting

Before the reform, a Top Secret holder was reinvestigated "at least once every five years".¹¹ Periodic reinvestigations fell from 210,500 in fiscal 2020 to 15,300 in fiscal 2025, down 92.7%⁴, because they "have largely been replaced with continuous vetting."⁶

Enrollment in continuous vetting climbed from 9.2%⁶ of the national security population in the first quarter of fiscal 2020 to 99.7% from fiscal 2023 on. Enrollment ran in two phases, TW 1.25 and TW 1.5,⁶ and virtually the whole national security workforce is now enrolled.¹²

Continuous vetting produces alerts, and they split into two kinds. In fiscal 2025 there were 380,700⁴ actionable alerts, meaning information not previously known, and 212,200 alerts on matters already self-reported or reported by a third party, 592,900 in all.⁶ Actionable alerts rose from 28,300 in the fourth quarter of fiscal 2022 to 124,200 in the fourth quarter of fiscal 2025. The split only says whether the flagged information was already known: if continuous vetting flags something a person should have reported and did not, it counts as actionable, not previously known.⁶

The checks behind these alerts are automated record checks combined with agency-specific information and event- or time-driven checks.¹² Under the old model, a problem could stay hidden until the next reinvestigation, typically every 5 or 10 years depending on the position. The Defense Department reported that potentially adverse information now arrives on average 3 years¹² faster for Top Secret holders and 7 years faster for Secret holders than under that model.

How long vetting takes

From the peak of about 725,000⁶ pending background investigations at the end of March 2018, the inventory has fallen 84% to about 117,000⁶ at the end of December 2025.⁴ Measured from January 2025 instead, the drop to about 117,000 cases is 56%¹³. The goal is an inventory of approximately 80,000 cases by the end of fiscal 2026.⁶

End to end, from initiation to a reported decision, the fastest 90% of initial Top Secret cases took 414⁶ days in the first quarter of fiscal 2019 and 220 days in the last quarter of fiscal 2025, 194 days less. Initial Secret cases took 109 days in that quarter, up from a low of 71 days in fiscal 2023.⁶ In fiscal 2025, more than 144,000 favorable preliminary determinations were issued at 13 agencies, with an average time saving of 132 days per case.¹³

Investigations alone are faster. In the first quarter of fiscal 2026, the fastest 90% of high-risk investigations, which include Top Secret, took 109¹³ days, and moderate-risk investigations, which include Secret, took 59 days, against targets of 60 and 20 days for fiscal 2026.⁶ Timeliness readings carry a caveat: an audit found 86% of agency timeliness data inaccurate, one-third of it off by more than 20%.¹³ In that first quarter of fiscal 2026 alone, the fastest-90% Secret investigation time dropped 9.3 days (14%) and the Top Secret time 50 days (32%).

Timeliness goals for fiscal 2019 set 74 days end to end for an initial Secret case and 114 for initial Top Secret; actual end-to-end times for intelligence-community cases that year were 125 and 172 days, and 176 for periodic reinvestigations against a 195-day goal.³¹¹

Inside the intelligence agencies

Named-agency figures exist only for fiscal 2013. That year the longest case among the fastest 90% of Top Secret decisions took 419⁸ days at the CIA and 155 days at the State Department. For Secret and Confidential cases the longest were 448 days at the CIA, 204 at the FBI, 167 at the NRO and 136 at the State Department. For a new hire at these agencies, that wait comes before any of the travel-reporting duties begin.

Denial rates in fiscal 2013 ranged from 8.4%⁸ at the NRO to 0.0% at the DIA; the NRO also had the highest revocation rate, 5.4%.

For fiscal 2017, the report's text says pending intelligence-agency investigations up to 12 months old fell from 8,517 in fiscal 2016 to 5,328 in fiscal 2017, and those older than 12 months from 364 to 92.⁹ Its own agency table does not add up to those totals: the rows sum to 5,403 cases up to 12 months old and 17 in the two columns for older cases. The report credits the drop mostly to one agency resolving contract issues with its investigative service provider.

So where do cleared travelers actually go, and how risky is it?

Where travelers go: travel advisory levels

U.S. travel advisories rate 215⁵ destinations on four levels: 82 at Level 1, Exercise Normal Precautions; 81 at Level 2, Exercise Increased Caution; 28 at Level 3, Reconsider Travel; and 24 at Level 4, Do Not Travel. Together, 52 destinations, 24.2%⁴, sit at Level 3 or 4. The advisory feed lists 214 of them: North Korea, at Level 4 since its advisory of April 29, 2025, is missing from the feed and is counted from its own advisory page.¹⁴ These advisories are one of the travel-risk resources the reporting rules point agencies to.¹

The map shows each destination's level. Small islands and territories without a map outline are not drawn. North Korea (Level 4) is missing from the feed and is drawn from its own advisory page.¹⁴ Level 3 includes Colombia, Israel, Nigeria, Pakistan, Saudi Arabia, the United Arab Emirates and Venezuela.⁵

The risks the advisories name

Level 2 to 4 advisories name the risks behind the rating in their headline sentence. Of the 127 feed advisories that name risks this way, 87 (68.5%⁴) name crime and 65 (51.2%⁴) terrorism; civil unrest, health and kidnapping follow.⁵ Five advisories (Albania, Belarus, Comoros, Russia, Uganda) have no such risk sentence, and North Korea's text is not in the feed. One advisory can name several risks, so the counts add up to more than 127. Further down the list come landmines or unexploded ordnance in 22 advisories, armed conflict in 16, and detention, exit bans or arbitrary law enforcement in 11.

Rules written for government employees

Many advisories set separate rules or restrictions for U.S. government personnel in the country, from travel limits to ordered departures. The share rises with the level: 4.9%⁴ of Level 1 advisories carry such rules, 39.5% at Level 2, 85.7%⁴ at Level 3 and 65.2% at Level 4.⁵ At Level 4, 15 of the 23 advisories in the feed carry such rules, against 24 of 28 at Level 3; North Korea's advisory text is not in the feed, so it is not part of this count.

How fresh the advisories are

Advisories are updated one destination at a time. On September 25, 2026, 154⁴ of the 215, 72%⁴, had been updated within the past 12 months, and 10 were more than 2 years old.⁵

Every Level 4 advisory in the feed was updated in July 2025 or later, Libya's being the oldest; North Korea's dates from April 29, 2025.¹⁴ 13 of the 24 were updated in 2026.⁵ The list includes Afghanistan, Iran, Iraq, North Korea, Russia, Ukraine, Syria, Yemen, Haiti and Gaza, plus Burkina Faso, Chad, Mali and Niger in the Sahel.

The State Department's own people abroad

Foreign Service employees, the generalists and specialists who rotate through posts abroad, rose from 11,467¹⁵ in 2007 to 13,790 in 2019, up 20.3%⁴. Most of the growth came by 2011; the count then stayed between 13,519 and 13,985. Civil Service employees grew from 8,784 to 10,048 over the same years, and locally employed staff from 37,089 to 50,403.

By September 30, 2024, the Foreign Service had 14,399¹⁶ members. 9,513 Foreign and Civil Service employees worked overseas, 34.9%⁴ of the 27,230 total, alongside 50,703 locally employed staff, 63.2%⁴ of the whole workforce of 80,214.¹⁶ They serve at 279 posts, 175 of them embassies, and 30 U.S. government agencies have staff overseas.

Between December 2020 and September 2024 the workforce grew from 76,711 to 80,214, mostly in the Civil Service, and the number of posts went from 276 to 279.¹⁷ Foreign Service generalists rose from 7,904 to 8,488 and specialists from 5,612 to 5,911 over the same period.¹⁷¹⁶ These are the people most likely to travel abroad on official orders, which each agency sets its own reporting rules for.¹

What the numbers mean for a cleared traveler

For a cleared traveler, the calendar is simple: refresher training every 12 months, and a report within five business days of return for any change to an approved itinerary.¹ The defensive briefing itself follows the trip. A person who travels abroad several times a year may be briefed before each trip, and the agency decides whether each trip needs one, while one who stays home may never receive it.

The destination matters too. With 52 destinations at Level 3 or 4, and rules for U.S. government employees in 85.7% of Level 3 and 65.2% of the Level 4 advisories in the feed, the riskiest trips are also those most likely to carry rules written for government travelers.⁵ And with 99.7% of the national security population under continuous vetting, potentially adverse information reaches agencies years sooner than under periodic reinvestigations, while the duty to report each trip stays with the traveler.⁶¹²

For contractors, the same duties arrive through NISPOM: security education every 12 months, insider threat training every year, and, for contractors under Defense Department security cognizance, SEAD 3 foreign travel reporting to the Department of Defense, which had to begin by August 24, 2022.² Agencies can still set stricter local procedures on top of that floor.¹

What the numbers cannot show is how often briefings are actually given. No public statistic counts defensive briefings or foreign travel reports, and no government-wide clearance count has been published since fiscal 2019, so the answer comes from the rules, not from a tally.

Conclusions

1. The briefing follows the trip, not the calendar. The fixed clocks are refresher training every 12 months and the five-business-day report after return, so a frequent traveler may be briefed before every trip, and the agency decides whether each trip needs one, while an employee who stays home may never be.
2. Riskier destinations already assume a government traveler. 85.7% of Level 3 and 65.2% of the Level 4 advisories in the feed carry rules or restrictions for U.S. government personnel, against 4.9% at Level 1.
3. Vetting no longer waits for a reinvestigation. With 99.7% of the national security population under continuous vetting and 380,700 actionable alerts in fiscal 2025, information an agency did not already know reaches it years sooner; if a flagged matter should have been reported, it counts as not previously known. The travel report itself is still the traveler's duty.
4. The population the clearance system tracks is large. 4,243,937 people were eligible in 2019 (12.9 per 1,000 residents), and the Department of War's eligible population grew 42.9% from fiscal 2014 to fiscal 2025. Only those in access or in a sensitive position are covered by the travel-briefing and reporting duties.