FBORFQISA19449PCZ445.pdf

C3CEN Security (CL-CS)

Industrial Security Addendum

For

Classified-Related Work

Contract Title: ____________________________________________________

Contracting Officer’s Representative (COR): _______________________________

C3CEN Command Security Officer (CSO)/ Industrial Security Officer: Dwayne Battle

Note: This addendum shall be completed by the unit’s Industrial Security Officer (CSO or ACSO). The COR shall attach this addendum to the SOW/PWS to specify applicable industrial security requirements.

The below industrial security requirements are commonly associated with classified-related contracts. If any of the below paragraphs below are checked, then the paragraph applies to this particular contract. If a paragraph is not checked, then the paragraph does not apply to this particular contract.

_____ (1) Contractor employee access to classified, and sensitive but unclassified (for-official-use-only) information is required. Due to the time-sensitive nature of this contract, key personnel must hold US citizenship and are required to possess, at a minimum, a valid in-scope national security clearance at the __________________ level.

_____ (2) Persons determined by the KO and COR to be a substantial risk to U.S.

national security interests will not be employed under this contract. Contractor employees must maintain their security clearance eligibility for the duration of this contract/task order.

_____ (3) Prospective offerors shall provide proof of holding a current Facility Security

Clearance (FCL) issued by the Defense Security Service (DSS). This should be provided on company letterhead and must include full business name and address, Data Universal

Signature:_____________________________________ Date:___________________

Numbering System (DUNS) code, Commercial and Government Entity (CAGE) code, date FCL granted, and cognizant DSS security office address with phone number.

_____ (4) Contractor personnel shall read, complete and sign the Department of

Homeland Security Non-Disclosure Agreement – DHS Form 11000-6 (series). This form will be maintained on file by the Contracting Officer or servicing CG Command Security

Officer.

_____ (5)DHS INSTRUCTION HANDBOOK 121-01-007 THE DEPARTMENT OF

HOMELAND SECURITY PERSONNEL SUITABILITY AND SECURITY PROGRAM all covered individuals with unescorted access to DHS information or facilities undergo a suitability/fitness investigation and determination. Suitability/fitness is an assessment of an individual’s character or conduct that may have an impact on promoting the efficiency and the integrity of the Federal service.

_____ (6) The contractor’s facility security officer (FSO) shall provide a visit authorization letter (VAL) to the place of performance at least five business days in advance of commencing work. All requests shall contain the information required by the

National Industrial Security Program Operating Manual (NISPOM), DOD 5220.22-M, and shall not exceed the completion date of the contract or a 12 month period, whichever is shorter. Additionally, the VAL shall note the applicable government COR responsible for coordinating the visit so that the host location can verify “Need-To-

Know,” as necessary.

_____ (7) All contractor personnel requiring routine (1) unescorted logon access to a

DHS/CG Computer Information System, (2) unescorted access to CG controlled classified material, (3) unescorted access to federal facilities, or (4) requiring Public Key

Infrastructure (PKI) authentication to perform their required duties under this contract/task order shall be issued a Common Access Card (CAC). A completed background investigation (BI) with favorable adjudication must be completed in order for a CAC to be issued. For persons without a completed BI, a BI must have been initiated.

_____ (8) Contractor or subcontractor employees who are declined a CAC via Trusted

Associate Sponsorship System (TASS) are ineligible to perform work that requires a

CAC under this contract/task order.

_____ (9) When an employee with a CAC is no longer performing work under this contract/task order, the employee must surrender the CAC to the COR or the company project manager on the same day the employee stops working. Additionally, the COR will immediately advise the servicing Command Security Officer of the sponsoring unit.

In all cases, the CAC shall be delivered to the COR no more than five business days following the departure of the employee.

_____ (10) Contractor’s employees shall comply with all applicable government regulations, policies and procedures, e.g., security, safety, sanitation, and environmental protection when visiting or working at government facilities. The contractor shall ensure contractor employees present a professional appearance at all times and that their conduct shall not bring discredit on the United States, the Department of Homeland Security or the U.S. Coast Guard. The contractor employee shall not release any government personnel contact information or information concerning official unit business or operations to unauthorized parties.

_____ (11) The government may, at its sole discretion, direct the contractor to remove any contractor employee from Coast Guard and Department of Homeland Security facilities for misconduct or security reasons. Removal does not relieve the contractor of the responsibility to continue providing the services required in this contract/task order.

The government will provide the contractor with an immediate written explanation of the request to remove the employee through the Coast Guard KO.

_____ (12) All contractor developed processes and procedures, and other forms of intellectual property developed under this contract/task order shall be considered government property.

_____ (13) All documents, records, reports and correspondence generated under this contract/task order by the contractor employee are the property of the U.S. government.

Any disposal or destruction of such material must be pre-approved by the COR.

_____ (14) The contractor employee shall be responsible for safeguarding all government equipment, information and property provided for contractor use. At the close of each work period, the contractor employee shall secure work areas, equipment and materials to prevent loss.

_____ (15) The contractor employee shall be responsible for all keys issued by the government and shall ensure that keys are not lost, misplaced, or used by unauthorized persons. The contractor employee shall not duplicate keys issued by the government.

Opening of locked areas by the contractor employee to permit access by persons other than those specifically authorized for the performance of official work is strictly prohibited. The contractor employee shall ensure that combinations to locks are protected from unauthorized disclosure.

_____ (16) The government is the only source for media release information. The contractor employee shall not provide any government-related information to the media and shall refer all queries to the COR or KO.

_____ (17) Material developed by the contractor containing classified information or from which classified information may be obtained shall be marked with highest level of classification. Additionally, all classified material derived from other classified sources will use the highest classification and any special caveats pertaining to source material.

_____ (18) The contractor shall ensure that any classified information disclosed to its employees is not further released or made available to other employees, or any other person who does not have appropriate clearance and a need-to-know.

_____ (19) Contractor access to sensitive but unclassified information (SBU) is required under this contract. Contractor employees shall safeguard this information against unauthorized disclosure or dissemination in accordance with DHS MD 11042.1, “Safeguarding SBU/FOUO information.” SBU includes information categorized by DHS or other government agencies as: For Official Use Only (FOUO); Official Use Only

(OUO); Sensitive Homeland Security Information (SHSI); Limited Official Use (LOU);

Law Enforcement Sensitive (LES); Safeguarding Information (SGI); Unclassified

Controlled Nuclear Information (UCNI); and any other identifier used by other government agencies to categorize information as sensitive but unclassified. The

Contractor shall sign a non-disclosure agreement (DHS Form 11000-6). The Contractor shall continue to ensure employees safeguard this information when the new Controlled

Unclassified Information (CUI) framework replaces the Sensitive But Unclassified

(SBU) categorization.

_____ (20) Contractor shall describe in writing how it will manage and certify employee security briefings, including the SF-312, Classified Information Nondisclosure

Agreement, in accordance with NISPOM, Chapter 3.

_____ (21) The contractor shall implement procedures whereby any loss, compromise, or suspected loss or compromise of classified, or sensitive but unclassified, information or material issued under this contract is promptly reported to both the DSS Cognizant

Security Office and designated Contracting Officer Representative (COR). The COR shall provide a complete report of the loss to the servicing USCG Command Security

Officer and Contracting Officer.

_____ (22) This contract is for technical and administrative support services. Generally, classification markings on the material to be furnished will provide the classification guidance necessary for the performance of this contract.

_____ (23) Contractor employees granted access to USCG IT systems shall adhere to CG information system rules and regulations to safeguard government information.

_____ (24) Secret Internet Protocol Network (SIPRNET) access is required. The contractor shall not access, download or further disseminate any special access data (i.e.

intelligence, NATO, COMSEC, etc) outside the execution of the defined contract requirements. The contractor shall receive training via USCG on user responsibilities.

The contractor shall adhere to the USCG rules and regulations in order to protect the integrity of data on Coast Guard information systems.

The Contractor shall abide by the security requirements contained in the following primary policies and instructions:

Directives Check if

Applicable

National Industrial Security Program Operating Manual (NISPOM), DOD 5220.22-M

Classified Information Management Program Manual COMDTINST

M5510.23 (series)

Operations Security (OPSEC) Program, COMDTINST M5510.24

(series)

Personnel Security and Suitability Program, COMDTINST

M5520.12 (series)

Safeguarding Sensitive But Unclassified (FOR OFFICIAL USE

ONLY) Information, DHS MD 11042.1

Handling of Sensitive Security Information (SSI), DHS MD 11056.1

Physical Security & Force Protection Program Manual, COMDTINST M5530.1 (series)

U.S. Coast Guard Cybersecurity Manual, COMDTINST M5500.13

(series)

Information Technology Security Program Policy/Handbook for

Sensitive Systems, DHS 4300A

Information Technology Security Program Policy/Handbook for

National Security Systems, DHS 4300B

USCG NATO Security Manual, COMDTINST M5500.19 (series)

U.S. Coast Guard TEMPEST Program, COMDTINST M2241.6

DHS Ports, Waterways and Coastal Security (PWCS) Security

Classification Guide, DHS SCG USCG 001.1 (PWCS)

DHS Sensor and Instrument Performance Security Classification

Guide, DHS SCG USCG 002.1 (SIP)

Coast Guard Industrial Security Program, COMDTINST 5520.13

(series)

Text1: 20180111