A18 f3070-1_OPSEC 0 - Signed.pdf

CARDEROCKDIV 3070/1 (REV. JUN 2022) Page 1 of 5

Save Form Clear Form

Naval Surface Warfare Center, Carderock Division (NSWCCD) Operations Security (OPSEC) Contract Review Form (OCRF)

Non-Commercial Contracts Only Purpose: This form adds an additional layer of security for vetting all non-commercial contracts for potential vulnerabilities utilizing each codes Critical Information Lists (CIL). The CIL shall be utilized to assist all personnel and respective codes when determining what he or she can say (orally) or email (electronically) prior to it leaving the Command.

Critical Information is defined as specific facts about friendly intentions, capabilities, and activities needed by adversaries for them to plan and act effectively so as to guarantee failure or unacceptable consequences for friendly mission accomplishment. Because it is normally UNCLASSIFIED, Critical Information is an adversary's target of choice. (ALL LOCATED ON Critical Information CUE Card)

Critical Information Lists contain critical information which must be protected from loss to keep adversaries from gaining an operational, economic, political, or technological advantage against the Department of Defense (DoD), Naval Sea Systems Command (NAVSEA), and NSWCCD interests, and to prevent the adverse impact that such a loss would have on mission accomplishments. (ALL LOCATED ON each CIL under paragraph 2).

Please submit OPSEC Contract Review Forms (OCRF) along with Performance Work Statement (PWS) or Statement of Work (SOW) to

OPSEC OCRF Org email for submission:

Display: NSWCCD OPSEC OCRF

E-mail: nswccdopsecocrf.fct@navy.mil

FOR SECURITY DIVISION PERSONNEL ONLY:

Select from following:

Classification Level: Unclassified The designated Security Representative will determine the classification level that the contract and form require, possibly requiring a DD254 review.

Section 1: Contract Information

1. Contract/Solicitation Name:

TBD / CLB FAR

2. Solicitation/RFI Number:

TBD

3. Solicitation/RFI Date:

4. Comment Synopsis (Include any potential OPSEC violation areas):

NSWCCD Advanced Propulsor Management Office (Code 808) requires the CLASSIFIED machining of one Columbia (CLB) Forward Alignment Ring (FAR) to support on time delivery of a full scale Columbia (CLB) propulsor.

SECTION 2: CONTRACT REVIEW AREAS

Must be completed by Program Manager (PM)/ Technical Advisor (TA).

If an area is answered with a "yes", explain it in the space provided on page 2, section 3 (Comments block).

If more space is required, continue the explanation on page 2 of this form. Additional pages may be attached as needed.

Contact your Department Security Coordinator (DSC) or the OPSEC Program Manager for questions regarding the following statements:

1. Known or potential vulnerabilities to any U.S. system and their direct support systems No

2. Details of capabilities or limitations of any U.S. system that reveal or could reveal known or potential vulnerabilities No

3. Details of information about military operations, missions, and exercises No

4. Details of U.S. systems supporting combat operations (numbers of systems deployed, deployment timelines, locations, effectiveness, unique capabilities, etc.) No

5. Operational characteristics for new or modified weapon systems (Potential of Kill (Pk), Countermeasures, Survivability, etc.) No

6. Required performance characteristics of U.S. systems using leading edge or greater technology (new, modified or existing) No

7. Telemetered or data-linked data or information from which operational characteristics can be inferred or derived No

8. Test or evaluation information pertaining to schedules of events during which CI might be captured No

9. Details of NAVSEA unique Test or Evaluation capabilities (disclosure of unique capabilities) No

CARDEROCKDIV 3070/1 (REV. JUN 2022) Page 2 of 5

Naval Surface Warfare Center, Carderock Division (NSWCCD) Operations Security (OPSEC) Contract Review Form (OCRF)

Non-Commercial Contracts Only Purpose: This form adds an additional layer of security for vetting all non-commercial contracts for potential vulnerabilities utilizing each codes Critical Information Lists (CIL). The CIL shall be utilized to assist all personnel and respective codes when determining what he or she can say (orally) or email (electronically) prior to it leaving the Command.

Critical Information is defined as specific facts about friendly intentions, capabilities, and activities needed by adversaries for them to plan and act effectively so as to guarantee failure or unacceptable consequences for friendly mission accomplishment. Because it is normally UNCLASSIFIED, Critical Information is an adversary's target of choice. (ALL LOCATED ON Critical Information CUE Card)

Critical Information Lists contain critical information which must be protected from loss to keep adversaries from gaining an operational, economic, political, or technological advantage against the Department of Defense (DoD), Naval Sea Systems Command (NAVSEA), and NSWCCD interests, and to prevent the adverse impact that such a loss would have on mission accomplishments. (ALL LOCATED ON each CIL under paragraph 2).

Please submit OPSEC Contract Review Forms (OCRF) along with Performance Work Statement (PWS) or Statement of Work (SOW) to

OPSEC OCRF Org email for submission:

Display: NSWCCD OPSEC OCRF

E-mail: nswccdopsecocrf.fct@navy.mil

FOR SECURITY DIVISION PERSONNEL ONLY:

Select from following:

Classification Level: Unclassified The designated Security Representative will determine the classification level that the contract and form require, possibly requiring a DD254 review.

10. Existence and/or details of intrusions into or attacks against DoD Networks or Information Systems, including, but not limited to, tactics, techniques and procedures used, network vulnerabilities exploited, and data targeted for exploitation No

11. Disclosure of DoN computer network user login information (username/password) No

12. Counter-IED capabilities and characteristics, including success or failure rates, damage assessments, advancements to existing or new capabilities No

13. Vulnerabilities in Command processes, disclosure of which could allow someone to circumvent security, financial, personnel safety, or operations procedures No

14. Force Protection specific capabilities or response protocols (timelines/equipment/numbers of personnel/training received/etc.) No

15. Command leadership and VIP agendas, reservations, plans/routes etc. No

16. Detailed facility maps or installation overhead photography (photo with annotation of Command areas or greater resolution than commercially available) No

17. Details of COOP, NAVSEA emergency evacuation or emergency recall procedures No

18. Government personnel information that would reveal force structure and readiness (such as recall rosters or deployment lists) No

SECTION 3: COMMENTS

If an area in section 2 is answered with a "yes", explain it in the space provided below. If more space is required, continue on the next page as well as additional pages may be attached at the end as needed.

Do not include any classified information in this document. If classified information informs the OPSEC comments below, pre-pare the information on the appropriate information system and forward via separate correspondence to the OPSEC Program Manager.

PLEASE CONTACT THE SECURITY DIVISION CODE 105 OFFICE FOR OFFICIAL GUIDANCE.

Comments/Explanations:

CARDEROCKDIV 3070/1 (REV. JUN 2022) Page 3 of 5

Naval Surface Warfare Center, Carderock Division (NSWCCD) Operations Security (OPSEC) Contract Review Form (OCRF)

Non-Commercial Contracts Only Purpose: This form adds an additional layer of security for vetting all non-commercial contracts for potential vulnerabilities utilizing each codes Critical Information Lists (CIL). The CIL shall be utilized to assist all personnel and respective codes when determining what he or she can say (orally) or email (electronically) prior to it leaving the Command.

Critical Information is defined as specific facts about friendly intentions, capabilities, and activities needed by adversaries for them to plan and act effectively so as to guarantee failure or unacceptable consequences for friendly mission accomplishment. Because it is normally UNCLASSIFIED, Critical Information is an adversary's target of choice. (ALL LOCATED ON Critical Information CUE Card)

Critical Information Lists contain critical information which must be protected from loss to keep adversaries from gaining an operational, economic, political, or technological advantage against the Department of Defense (DoD), Naval Sea Systems Command (NAVSEA), and NSWCCD interests, and to prevent the adverse impact that such a loss would have on mission accomplishments. (ALL LOCATED ON each CIL under paragraph 2).

Please submit OPSEC Contract Review Forms (OCRF) along with Performance Work Statement (PWS) or Statement of Work (SOW) to

OPSEC OCRF Org email for submission:

Display: NSWCCD OPSEC OCRF

E-mail: nswccdopsecocrf.fct@navy.mil

FOR SECURITY DIVISION PERSONNEL ONLY:

Select from following:

Classification Level: Select The designated Security Representative will determine the classification level that the contract and form require, possibly requiring a DD254 review.

Section 4: Point of Contact (POC) and OPSEC PM/Designee

1. Program Manager/TA Name (Last, First, MI):

Sanchez de Lozada, Marvin F

2. Phone:

301-227-5992

3. Dept/Code:

4. Date Approved: 5. Signature:

6. OPSEC PM/Designee Comments:

7. OPSEC PM/Designee Name (Last, First, MI):

Wallmark, Adam M.

8. Phone:

3012272147

9. Dept/Code:

10. Date Initiated:

10/31/2022

11. Date Completed:

11/14/2022

12. Approved:

Yes

13. Signature:

CARDEROCKDIV 3070/1 (REV. JUN 2022) Page 4 of 5

Naval Surface Warfare Center, Carderock Division (NSWCCD) Operations Security (OPSEC) Contract Review Form (OCRF)

Instructions for Completing CARDEROCKDIV 3070/1 Section 1: CONTRACT INFORMATION

1. CONTRACT/SOLICITATION NAME: Enter either contract name and/or solicitation name (if applicable)

2. SOLICITATION/RFI NUMBER: Enter Solicitation/RFI number (if applicable) or TBD

3. SOLICITATION/RFI DATE: Enter Solicitation/RFI date (if applicable) or TBD

4. Comment Synopsis: Annotate any additional information, if needed, that the OPSEC Program Manager should know prior to reviewing SOW/ PWS. Be very specific.

Section 2: CONTRACT REVIEW AREAS

This section must be completed in its entirety by the Technical Advisor (TA) or Program Manager (PM) prior to submitting PWS/SOW for OCRF approval. Complete questions 1-18 with a “YES”,”NO”, “N/A” answer. If determined “YES” or “N/A” please provide comments in Section 3 with justification to how you deem as a “YES” or “N/A. Also provide for further clarification.

1. Known or potential Vulnerabilities? Select Yes if the topics would be a vulnerability to the Command. Select No if the topic would not be a vulnerability to the Command.

2. Details of Capabilities or limitations? Select Yes if details of capabilities or limitations are provided and if they would cause a vulnerability to the Command. Select No if details are not provided or would not cause a vulnerability to the Command.

3. Details of Military operations etc.? Select Yes if details of military operations are provided. Select No if details are not provided.

4. Details of U.S. Systems etc.? Select Yes if details of U.S. systems are provided. Select No if details are not provided.

5. Operations Characteristics? Select Yes if details of operations characteristics are provided. Select No if details are not provided.

6. Performance Characteristics? Select Yes if details of performance characteristics are provided. Select No if details are not provided.

7. Telemetered or data-linked data information? Select Yes if details of telemetered or data-link information are provided. Select No if details are not provided.

8. Test or evaluation information? Select Yes if details of test or evaluation information are provided. Select No if details are not provided.

9. Details of NAVSEA unique Test or Evaluation shared? Select Yes if details of NAVSEA unique test or evaluation are provided. Select No if details are not provided.

10. Details of intrusions or attacks against DoD Networks? Select Yes if details of intrusions or attacks against DoD networks are provided.

Select No if details are not provided.

11. Disclosure of DoN computer network user login information? Select Yes if details of DoN computer network user login information are provided. Select No if details are not provided.

12. Counter IED capabilities and characteristics, including success or failure rates etc.? Select Yes if details of Counter IED capabilities and characteristics, including success or failure rates are provided. Select No if details are not provided.

13. Vulnerabilities in Command processes, disclosure of which could allow someone to circumvent security? Select Yes if there are vulnerabilities in command processes and disclosure of which could allow someone to circumvent security. Select No if there are not vulnerabilities in command processes or disclosure of which would not allow someone to circumvent security.

14. Force Protection capabilities or response protocols? Select Yes if details of Force Protection capabilities or response protocols are provided.

Select No if details are not provided.

15. Command Leadership and VIP agendas, reservations, plans/routes etc.? Select Yes if details of Command Leadership and VIP agendas, reservations, plans/routes etc are provided. Select No if details are not provided.

16. Detailed facility maps or installation info etc.? Select Yes if details of facility maps or installation info etc are provided. Select No if details are not provided.

17. Details of COOP, NAVSEA emergency evacuation or emergency recall procedures? Select Yes if details of COOP, NAVSEA emergency evacuation, or emergency recall procedures are provided. Select No if details are not provided.

18. Government personnel information that would reveal force structure and readiness? Select Yes if details of Government personnel information that would reveal force structure and readiness are provided. Select No if details are not provided.

Section 3: COMMENTS SECTION TA or Program Manager provide detailed explanation to any questions answered “YES” and any additional information pertinent from questions 1-18.

Section 4: Point of Contact (POC) and OPSEC PM/Designee Section Program Manager (PM)/ Technical Advisor (TA) Completes:

1. Program Manager/TA Name: Enter Last, First, MI of person submitting PWS/SOW to OPSEC PM for review.

2. PM/TA Phone Number: Enter a good contact number for person submitting PWS/SOW.

3. Dept/Code: Enter the Department number and specific code assigned for person submitting PWS/SOW

4. Date Approved: Select the date that the OCRF was submitted to the OPSEC PM/Designee.

5. Signature: Provide the digital signature and submit to the OPSEC PM via org email.

CARDEROCKDIV 3070/1 (REV. JUN 2022) Page 5 of 5

OPSEC PM Completes:

6. OPSEC PM/Designee Comments: This section is completed by the OPSEC PM only.

7. OPSEC PM/Designee Name: OPSEC PM provides Last, First, MI.

8. Phone Number: Enter a good contact number for OPSEC PM.

9. Dept/Code: Enter the Department number and specific code assigned for OPSEC PM or designee.

10. Date Initiated: Select the Date that the OPSEC PM/Designee received PWS/SOW for review/approval.

11. Date Completed: Select the Date that the OPSEC PM/Designee approved PWS/SOW.

12. Approved: Answer “YES”, “NO”, “Pending”

13. Signature: Provide the digital signature and send back to the PM/TA for their records and processing.

CARDEROCKDIV 3070/1 (REV. JUN 2022)

Page of Naval Surface Warfare Center, Carderock Division (NSWCCD) Operations Security (OPSEC) Contract Review Form (OCRF) Non-Commercial Contracts Only Purpose: This form adds an additional layer of security for vetting all non-commercial contracts for potential vulnerabilities utilizing each codes Critical Information Lists (CIL). The CIL shall be utilized to assist all personnel and respective codes when determining what he or she can say (orally) or email (electronically) prior to it leaving the Command.

Critical Information is defined as specific facts about friendly intentions, capabilities, and activities needed by adversaries for them to plan and act effectively so as to guarantee failure or unacceptable consequences for friendly mission accomplishment. Because it is normally UNCLASSIFIED, Critical Information is an adversary's target of choice. (ALL LOCATED ON Critical Information CUE Card)

Critical Information Lists contain critical information which must be protected from loss to keep adversaries from gaining an operational, economic, political, or technological advantage against the Department of Defense (DoD), Naval Sea Systems Command (NAVSEA), and NSWCCD interests, and to prevent the adverse impact that such a loss would have on mission accomplishments. (ALL LOCATED ON each CIL under paragraph 2).

Please submit OPSEC Contract Review Forms (OCRF) along with Performance Work Statement (PWS) or Statement of Work (SOW) to OPSEC OCRF Org email for submission: Display: NSWCCD OPSEC OCRF E-mail: nswccdopsecocrf.fct@navy.mil

FOR SECURITY DIVISION PERSONNEL ONLY:

Select from following:

The designated Security Representative will determine the classification level that the contract and form require, possibly requiring a DD254 review.

CARDEROCKDIV 3070/1 (REV. JUN 2022)

Page of Section 1: Contract Information

SECTION 2: CONTRACT REVIEW AREAS

Must be completed by Program Manager (PM)/ Technical Advisor (TA).

If an area is answered with a "yes", explain it in the space provided on page 2, section 3 (Comments block).

If more space is required, continue the explanation on page 2 of this form. Additional pages may be attached as needed.

Contact your Department Security Coordinator (DSC) or the OPSEC Program Manager for questions regarding the following statements:

SECTION 3: COMMENTS

If an area in section 2 is answered with a "yes", explain it in the space provided below. If more space is required, continue on the next page as well as additional pages may be attached at the end as needed.

Do not include any classified information in this document. If classified information informs the OPSEC comments below, pre-pare the information on the appropriate information system and forward via separate correspondence to the OPSEC Program Manager. PLEASE CONTACT THE SECURITY DIVISION CODE 105 OFFICE FOR OFFICIAL GUIDANCE.

Section 4: Point of Contact (POC) and OPSEC PM/Designee Naval Surface Warfare Center, Carderock Division (NSWCCD) Operations Security (OPSEC) Contract Review Form (OCRF) Instructions for Completing CARDEROCKDIV 3070/1 Section 1: CONTRACT INFORMATION

1. CONTRACT/SOLICITATION NAME: Enter either contract name and/or solicitation name (if applicable)

2. SOLICITATION/RFI NUMBER: Enter Solicitation/RFI number (if applicable) or TBD

3. SOLICITATION/RFI DATE: Enter Solicitation/RFI date (if applicable) or TBD

4. Comment Synopsis: Annotate any additional information, if needed, that the OPSEC Program Manager should know prior to reviewing SOW/PWS. Be very specific.

Section 2: CONTRACT REVIEW AREAS This section must be completed in its entirety by the Technical Advisor (TA) or Program Manager (PM) prior to submitting PWS/SOW for OCRF approval. Complete questions 1-18 with a “YES”,”NO”, “N/A” answer. If determined “YES” or “N/A” please provide comments in Section 3 with justification to how you deem as a “YES” or “N/A. Also provide for further clarification.

1. Known or potential Vulnerabilities? Select Yes if the topics would be a vulnerability to the Command. Select No if the topic would not be a vulnerability to the Command.

2. Details of Capabilities or limitations? Select Yes if details of capabilities or limitations are provided and if they would cause a vulnerability to the Command. Select No if details are not provided or would not cause a vulnerability to the Command.

3. Details of Military operations etc.? Select Yes if details of military operations are provided. Select No if details are not provided.

4. Details of U.S. Systems etc.? Select Yes if details of U.S. systems are provided. Select No if details are not provided.

5. Operations Characteristics? Select Yes if details of operations characteristics are provided. Select No if details are not provided.

6. Performance Characteristics? Select Yes if details of performance characteristics are provided. Select No if details are not provided.

7. Telemetered or data-linked data information? Select Yes if details of telemetered or data-link information are provided. Select No if details are not provided.

8. Test or evaluation information? Select Yes if details of test or evaluation information are provided. Select No if details are not provided.

9. Details of NAVSEA unique Test or Evaluation shared? Select Yes if details of NAVSEA unique test or evaluation are provided. Select No if details are not provided.

10. Details of intrusions or attacks against DoD Networks? Select Yes if details of intrusions or attacks against DoD networks are provided. Select No if details are not provided.

11. Disclosure of DoN computer network user login information? Select Yes if details of DoN computer network user login information are provided. Select No if details are not provided.

12. Counter IED capabilities and characteristics, including success or failure rates etc.? Select Yes if details of Counter IED capabilities and characteristics, including success or failure rates are provided. Select No if details are not provided.

13. Vulnerabilities in Command processes, disclosure of which could allow someone to circumvent security? Select Yes if there are vulnerabilities in command processes and disclosure of which could allow someone to circumvent security. Select No if there are not vulnerabilities in command processes or disclosure of which would not allow someone to circumvent security.

14. Force Protection capabilities or response protocols? Select Yes if details of Force Protection capabilities or response protocols are provided. Select No if details are not provided.

15. Command Leadership and VIP agendas, reservations, plans/routes etc.? Select Yes if details of Command Leadership and VIP agendas, reservations, plans/routes etc are provided. Select No if details are not provided.

16. Detailed facility maps or installation info etc.? Select Yes if details of facility maps or installation info etc are provided. Select No if details are not provided.

17. Details of COOP, NAVSEA emergency evacuation or emergency recall procedures? Select Yes if details of COOP, NAVSEA emergency evacuation, or emergency recall procedures are provided. Select No if details are not provided.

18. Government personnel information that would reveal force structure and readiness? Select Yes if details of Government personnel information that would reveal force structure and readiness are provided. Select No if details are not provided.

Section 3: COMMENTS SECTION TA or Program Manager provide detailed explanation to any questions answered “YES” and any additional information pertinent from questions 1-18.

Section 4: Point of Contact (POC) and OPSEC PM/Designee Section Program Manager (PM)/ Technical Advisor (TA) Completes:

1. Program Manager/TA Name: Enter Last, First, MI of person submitting PWS/SOW to OPSEC PM for review.

2. PM/TA Phone Number: Enter a good contact number for person submitting PWS/SOW.

3. Dept/Code: Enter the Department number and specific code assigned for person submitting PWS/SOW

4. Date Approved: Select the date that the OCRF was submitted to the OPSEC PM/Designee.

5. Signature: Provide the digital signature and submit to the OPSEC PM via org email.

OPSEC PM Completes:

6. OPSEC PM/Designee Comments: This section is completed by the OPSEC PM only.

7. OPSEC PM/Designee Name: OPSEC PM provides Last, First, MI.

8. Phone Number: Enter a good contact number for OPSEC PM.

9. Dept/Code: Enter the Department number and specific code assigned for OPSEC PM or designee.

10. Date Initiated: Select the Date that the OPSEC PM/Designee received PWS/SOW for review/approval.

11. Date Completed: Select the Date that the OPSEC PM/Designee approved PWS/SOW.

12. Approved: Answer “YES”, “NO”, “Pending”

13. Signature: Provide the digital signature and send back to the PM/TA for their records and processing.

11.0.1.20130826.2.901444.899636 Unclassified Unclassified