RFP-Attachment 15 -Industrial Security Addendum (Unclass) -SAROPS Support.pdf

C5ISC

Industrial Security Addendum

For

Unclassified – Related Work

Contract Title: ____________________________________________________

Contracting Officer’s Representative (COR): _______________________________

C5ISC Command Security Officer (CSO)/ Industrial Security Officer Command Security Officer (CSO) Dwayne Battle::

Name: ________________________________________

Signature:_____________________________________ Date:___________________

Note: This addendum shall be completed by the unit’s Industrial Security Officer (CSO or ACSO). The COR shall attach this addendum to the SOW/PWS to specify applicable industrial security requirements.

The below industrial security requirements are commonly associated with unclassified-related contracts. If any of the below paragraphs are checked, then the paragraph applies to this particular contract. If a paragraph is not checked, then the paragraph does not apply to this particular contract.

_____ (1) Contractor employee access to sensitive but unclassified (for-official-use-only) information is required under this contract.

_____ (2) The government may require the contractor employee to complete a minimum background investigation (NACI) at government expense if the employee does not already have a qualifying background investigation on record sufficient to obtain a government issued common access card (CAC).

_____ (3) Contractor personnel shall read, complete and sign the Department of Homeland Security Non-Disclosure Agreement – DHS Form 11000-6 (series). This form will be maintained on file by the Contracting Officer or servicing CG Command Security Officer.

_____ (4) DHS Instruction 121-01-007 Personnel Security, Suitability, and Fitness Program states that waivers to the U.S. citizen requirement may only granted by the Head of the Component or designee with the concurrence of both the DHS CSO and CIO or their designees.

_____ (5) The contractor’s facility security officer (FSO) shall provide a visit authorization letter (VAL) to the place of performance at least five business days in advance of commencing work. The VAL shall identify all contractor employees requiring access to the job site. Questions concerning VAL requirements shall be directed to C5ISC’s Command Security Officer at (757) 686-2817.

_____ (6) All contractor employees working on-site shall be required to complete a security arrival brief upon check-in.

_____ (7) All contractor personnel requiring routine (1) unescorted logon access to a DHS/CG Computer Information System, (2) unescorted access to CG controlled classified material, (3) unescorted access to federal facilities, or (4) requiring Public Key Infrastructure (PKI) authentication to perform their required duties under this contract/task order shall be issued a Common Access Card (CAC). A completed background investigation (BI) with favorable adjudication must be completed in order for a CAC to be issued. For persons without a completed BI, a BI must have been initiated.

_____ (8) Contractor or subcontractor employees who are declined a CAC via Trusted Associate Sponsorship System (TASS) are ineligible to perform work that requires a CAC under this contract/task order.

_____ (9) When an employee with a CAC is no longer performing work under this contract/task order, the employee must surrender the CAC to the COR or the company project manager on the same day the employee stops working. Additionally, the COR will immediately advise the servicing Command Security Officer of the sponsoring unit.

In all cases, the CAC shall be delivered to the COR no more than five business days following the departure of the employee.

_____ (10) Contractor’s employees shall comply with all applicable government regulations, policies and procedures, e.g., security, safety, sanitation, and environmental protection when visiting or working at government facilities. The contractor shall ensure contractor employees present a professional appearance at all times and that their conduct shall not bring discredit on the United States, the Department of Homeland Security or the U.S. Coast Guard. The contractor employee shall not release any government personnel contact information or information concerning official unit business or operations to unauthorized parties.

_____ (11) The government may, at its sole discretion, direct the contractor to remove any contractor employee from Coast Guard and Department of Homeland Security facilities for misconduct or security reasons. Removal does not relieve the contractor of the responsibility to continue providing the services required in this contract/task order.

The government will provide the contractor with an immediate written explanation of the request to remove the employee through the Coast Guard KO.

_____ (12) All contractor developed processes and procedures, and other forms of intellectual property developed under this contract/task order shall be considered government property.

_____ (13) All documents, records, reports and correspondence generated under this contract/task order by the contractor employee are the property of the U.S. government.

Any disposal or destruction of such material must be pre-approved by the COR.

_____ (14) The contractor employee shall be responsible for safeguarding all government equipment, information and property provided for contractor use. At the close of each work period, the contractor employee shall secure work areas, equipment and materials to prevent loss.

_____ (15) The contractor employee shall be responsible for all keys issued by the government and shall ensure that keys are not lost, misplaced, or used by unauthorized persons. The contractor employee shall not duplicate keys issued by the government.

Opening of locked areas by the contractor employee to permit access by persons other than those specifically authorized for the performance of official work is strictly prohibited. The contractor employee shall ensure that combinations to locks are protected from unauthorized disclosure.

_____ (16) The government is the only source for media release information. The contractor employee shall not provide any government-related information to the media and shall refer all queries to the COR or KO.

_____ (17) Contractor access to sensitive but unclassified information (SBU) is required under this contract. Contractor employees shall safeguard this information against unauthorized disclosure or dissemination in accordance with DHS MD 11042.1, “Safeguarding SBU/FOUO information.” SBU includes information categorized by DHS or other government agencies as: For Official Use Only (FOUO); Official Use Only (OUO); Sensitive Homeland Security Information (SHSI); Limited Official Use (LOU);

Law Enforcement Sensitive (LES); Safeguarding Information (SGI); Unclassified Controlled Nuclear Information (UCNI); and any other identifier used by other government agencies to categorize information as sensitive but unclassified. The Contractor shall sign a non-disclosure agreement (DHS Form 11000-6). The Contractor shall continue to ensure employees safeguard this information when the new Controlled Unclassified Information (CUI) framework replaces the Sensitive But Unclassified (SBU) categorization.

_____ (18) The contractor shall implement procedures whereby any loss, compromise, or suspected loss or compromise of sensitive but unclassified information or material issued under this contract is promptly reported to the designated Contracting Officer

Representative (COR). The COR shall provide a complete report of the loss to the servicing USCG Command Security Officer and Contracting Officer.

_____ (19) Contractor employees granted access to USCG IT systems shall adhere to CG information system rules and regulations to safeguard government information.

The Contractor shall abide by the security requirements contained in the following primary policies and instructions:

Directives Check if Applicable

Operations Security (OPSEC) Program, COMDTINST M5510.24 (series) Personnel Security and Suitability Program, COMDTINST M5520.12 (series) Safeguarding Sensitive But Unclassified (FOR OFFICIAL USE ONLY) Information, DHS MD 11042.1 Handling of Sensitive Security Information (SSI), DHS MD 11056.1

Physical Security & Force Protection Program Manual, COMDTINST M5530.1 (series) U.S. Coast Guard Cybersecurity Manual, COMDTINST M5500.13 (series) Information Technology Security Program Policy/Handbook for Sensitive Systems, DHS 4300A U.S. Coast Guard TEMPEST Program, COMDTINST M2241.6