Atch 3 MFR CUI Control_Receipt.pdf

DEPARTMENT OF THE AIR FORCE

90TH MISSILE WING (AFGSC)

DETER • MODERNIZE • STRIKE

02 March 2026

MEMORANDUM FOR RECORD

FROM: 90 CONS/PKAB

SUBJECT: Controlled Unclassified Information Release, Project Number: GHLN 26-6277, Project Title: Replace Site Lighting Electrical Conduits at 5 Launch Facilities (LFs)

1. The purpose of this memorandum is to record receipt of Department of Defense (DoD) Controlled Unclassified Information (CUI).

2. Information Safeguarding is required for any information that is marked as CONTROLLED

UNCLASSIFIED INFORMATION (CUI).

3. Please provide your Commercial and Government Entity (CAGE) Code and sign below to confirm receipt and acknowledgement of the following statement concerning safeguarding of CUI material.

a. Information safeguarding is the responsibility of the individual, agency, and/or company requesting and taking possession of the CUI documents associated with Project Number

GHLN 26-6277.

b. Release or reproduction of this material or any part thereof, is prohibited, except for official use only. No public publication of this material—by any means—is authorized.

c. This material shall be destroyed properly. In accordance with Section 2002.14 of Title 32, CFR part 170 – Cybersecurity Maturity Model Certification Program, record and non-record CUI documents must be destroyed by means approved for destroying classified information or by any other means making it unreadable, indecipherable, and unrecoverable.

d. The CUI paper destruction methods the individual, agency, and/or company must use are cross-cut shredders that produce 1mm. x 5 mm. (0.04 in. x 0.20 in.) particles (or smaller); or pulverize/disintegrate paper using disintegrator devices equipped with a 2.4 mm. (3/32 in.)

security screen.

e. The CMMC Program utilizes the security standards set forth in the 48 CFR 52.204-21;

National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, Basic Safeguarding of Covered Contractor Information Systems, Revision 2, February 2020 (includes updates as of January 28, 2021) (NIST SP 800-171 R2); and selected requirements from the NIST SP 800-172, Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171, February 2021 (NIST SP 800-172 Feb2021), as applicable (see table 1 to § 170.14(c)(4) for requirements, see § 170.2 for availability of NIST publications)

4. Direct any questions in regard to this policy to the F. E. Warren AFB Civil Engineer Squadron at (307) 773-4086. Information safeguarding and marking requirements are per the following (when applicable):

a. AFI 33-332, Records Management and Information Governance Program;

b. DoDI 5200.48_DAFI 16-1403, Controlled Unclassified Information (CUI);

c. Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7008, Compliance with Safeguarding Covered Defense Information Controls;

d. DFARS 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting;

g. DFARS 252.204-7021, Cybersecurity Maturity Model Certification Requirements; and/or Executive Order 12958

5. The document(s) shall only be released to vendors who have demonstrated they are compliant with DFARS 252.204-7021 by COMPLETING THE ASSESSMENT/CMMC in the Supplier Performance Risk System (SPRS) within the Procurement Integrated Enterprise Environment (PIEE). NIST SP 800-171 shall be completed within the last three years and show a score of 110. If not, submit a plan of action to attain this assessment score. If CMMC is available, a Level 2 is required to be considered eligible to receive Atch 2 CUI Map Layout (CMMC Certificate covers NIST SP).

6. Once the assessment has been verified complete in SPRS, the Contractor shall request documents via email from Ms. Megan Evans at megan.evans.3@us.af.mil and SSgt Kyra Niece at kyra.niece@us.af.mil.

7. The CUI document(s) shall be provided via a DoD SAFE Link (safe.apps.mil) and sent to the Contractor representative.

KYRA NIECE, SSgt, USAF Contracting Officer mailto:megan.evans.3@us.af.mil mailto:kyra.niece@us.af.mil

TO: 90 CONS/PKAB

DATE: _________________________ CAGE: _________________________

I have read and understand the Information Safeguarding Statement above and agree that the denoted CUI material(s) received below shall be returned to the 90th Contracting Squadron with the Contractor proposal.

I acknowledge receipt of: Attachment 2 – CUI Map Layout

(Contractor Company Name Here) (Contractor Signature Here)

(Contractor Name in Print Here)