Atch 3 MFR CUI Control_Receipt.pdf

DEPARTMENT OF THE AIR FORCE

90TH MISSILE WING (AFGSC)

DETER • MODERNIZE • STRIKE

14 August 2026

MEMORANDUM FOR RECORD

FROM: 90 CONS/PKAB

SUBJECT: Controlled Unclassified Information Release, Project Test and Replace Sprinkler Heads at Multiple Facilities

1. The purpose of this memorandum is to record receipt of Department of Defense (DoD) Controlled Unclassified Information (CUI).

2. Information Safeguarding is required for any information that is marked as CONTROLLED

UNCLASSIFIED INFORMATION (CUI).

3. Please provide your Commercial and Government Entity (CAGE) Code and sign below to confirm receipt and acknowledgement of the following statement concerning safeguarding of CUI material.

a. Information safeguarding is the responsibility of the individual, agency, and/or company requesting and taking possession of the CUI documents associated with this project.

b. Release or reproduction of this material or any part thereof, is prohibited, except for official use only. No public publication of this material—by any means—is authorized.

c. This material shall be destroyed properly. In accordance with Section 2002.14 of Title 32, CFR part 170 – Cybersecurity Maturity Model Certification Program, record and non-record CUI documents must be destroyed by means approved for destroying classified information or by any other means making it unreadable, indecipherable, and unrecoverable.

d. The CUI paper destruction methods the individual, agency, and/or company must use are cross-cut shredders that produce 1mm. x 5 mm. (0.04 in. x 0.20 in.) particles (or smaller); or pulverize/disintegrate paper using disintegrator devices equipped with a

2.4 mm. (3/32 in.) security screen.

e. The CMMC Program utilizes the security standards set forth in the 48 CFR 52.204-21;

National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, Basic Safeguarding of Covered Contractor Information Systems, Revision 2, February

2020 (includes updates as of January 28, 2021) (NIST SP 800-171 R2); and selected requirements from the NIST SP 800-172, Enhanced Security Requirements for Protecting

Controlled Unclassified Information: A Supplement to NIST Special Publication

800-171, February 2021 (NIST SP 800-172 Feb 2021), as applicable (see table 1 to §

170.14(c)(4) for requirements, see § 170.2 for availability of NIST publications)

4. Direct any questions in regard to this policy to the F. E. Warren AFB Civil Engineer Squadron at (307) 773-3046. Information safeguarding and marking requirements are per the following

(when applicable):

a. AFI 33-332, Records Management and Information Governance Program;

b. DoDI 5200.48_DAFI 16-1403, Controlled Unclassified Information (CUI);

c. Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7008, Compliance with Safeguarding Covered Defense Information Controls;

d. DFARS 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident

Reporting;

e. DFARS 252.204-7021, Cybersecurity Maturity Model Certification Requirements;

and/or Executive Order 12958

5. The document(s) shall only be released to vendors who have demonstrated they are compliant with DFARS 252.204-7021 by COMPLETING THE ASSESSMENT/CMMC in the Supplier

Performance Risk System (SPRS) within the Procurement Integrated Enterprise

Environment (PIEE). NIST SP 800-171 shall be completed within the last three years and show a score of 110. If not, submit plan of action to attain this assessment score. If CMMC is available, a Level 2 is required to be considered eligible to receive Atch 2 CUI Drawings (CMMC Cert covers NIST SP).

6. Once the assessment has been verified complete in SPRS, the Contractor shall request documents via email from Lt Walter Wheeler at walter.wheeler.1@us.af.mil and Ms. Liezel McIntyre at liezel.mcintyre@us.af.mil.

7. The CUI document(s) shall be provided via a DoD SAFE Link (safe.apps.mil) and sent to the Contractor representative.

LIEZEL MCINTYRE, Civ, DAF

Contracting Officer

TO: 90 CONS/PKAB

DATE: ________________________ CAGE: _____________________

I have read and understand the Information Safeguarding Statement above and agree that the denoted CUI material(s) received below shall be returned to the 90th Contracting Squadron with the Contractor proposal. I acknowledge receipt of: Attachment 2 – Drawings (CUI)

(Contractor Company Name Here) (Contractor Signature Here)

(Contractor Name in Print Here)