Attach_1_BSSS_SOW.docx

(U) National Geospatial-Intelligence Agency (NGA)

(U) Behavioral Science Support Services (BSSS)

(U) Statement of Work (SOW)

(U) Version 1.0: 05 June 2026

DATE

(U) Contents

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

1. (U) Introduction

(U) This Statement of Work (SOW) describes the non-personal services required to support the mission of the National Geospatial-Intelligence Agency (NGA), Security and Installation Directorate’s (SI) Counter Insider Threat Office (SII) Behavioral Science Team (BST).

1.1. (U) Background

(U) NGA has charged SII with detecting, deterring, and mitigating threats to NGA personnel, technology, information, and systems by analyzing combined data sources to identify anomalous events and threats posed by trusted insiders. SII supports the NGA Security and Installations Directorate (SI) in fulfilling its mission to make geospatial intelligence (GEOINT) happen by providing premier protections, security, and facilities.

(U) This contract will be supporting the Behavioral Science Team (BST). The BST’s mission is to facilitate a safe, secure, and productive work environment by deterring, detecting and mitigating potential threats to NGA personnel, facilities, data, and systems through the expert application of psychological science. BST executes this mission through four activities: Consultation, Training and Education, Research and Development, and Liaison.

2. (U) Scope

(U) The Contractor shall provide technical support services, personnel and supervision to support SII’s BST tasks and responsibilities as defined by this SOW.

2.1 (U) Description of Work

· (U) Consultation – Integrate established and emerging psychological principles and best practices into current and future efforts to deter, detect and mitigate potential threats to the agency by providing expert national security psychology consultation to relevant internal and external stakeholders and mission partners. Examples include, but are not limited to:

· (U//FOUO) Case Consultation: Provide case consultation for a variety of stakeholders and mission partners [e.g., Office of Counterintelligence (SIC), Personnel Security Division (SISP), other SII divisions, and Threat Management Unit (TMU)]. Case consultation offers the application of national security psychology expertise to case-specific consultation questions, often identifying intelligence gaps and effective strategies for gathering essential information (e.g., interview techniques). When appropriate, utilize direct assessment or indirect assessment methods in support of case consultation.

· (U) Direct Assessments. Conducts direct psychological assessments on behalf of the agency, in support of agency initiatives, and IAW the SII mission. Direct assessments often are a component of consultation to SISP adjudication and assessment of applicant and incumbent police officers for the Office of Protective Services (SIP), but may conduct direct assessments for other purposes (e.g., psychological assessment and selection). The agency is the primary client of BST assessments.

· (U//FOUO) Indirect Assessments. Conduct indirect assessments on behalf of the agency, in support of agency initiatives, and IAW the SII mission. The agency is BST’s primary client benefitting from the assessment, and the focus typically involves managing risk to agency personnel and mission.

· (U) Organizational and Management Consultation: Provide consultation to leaders and teams regarding management, leadership, personnel, and systemic organizational matters. Examples include, but are not limited to identification of and response to concerning behaviors, problem solving, team dynamics, motivation, performance enhancement, operational resiliency, workforce trends and post-incident reviews.

· (U) Individual Consultation: Provide individual behavioral science consultation to advance the SII and NGA missions. Individual consultation does not establish a doctor-patient relationship and is not healthcare.

· (U) Training & Education (T&E) – Educate relevant stakeholders in the theoretical and empirical bases of behavioral science and national security psychology related to the deterrence, detection and mitigation of potential threats by providing expert training briefs, presentations and educational courses. Examples include, but are not limited to:

· Elicitation awareness and defensive strategies

· Incorporating behavioral science into counter insider threat programs

· Capabilities briefings

· Operational resiliency and retention in high-stress, high-OPTEMPO assignments.

· (U) Research & Development (R&D) – Innovate and advance the science of counter insider threat and national security psychology by improving existing methods and developing new methods to deter, detect and mitigate potential threats through behavioral science R&D and the application of scientific rigor to current methods and process improvements. Common R&D activities and work products include, but are not limited to:

· Policy review

· Survey research

· White papers

· Validation studies

· Executive summaries

· Project briefings

· Literature reviews

· Academic inquiries

· (U) Liaison – Communicate innovations, findings, lessons learned and best practices throughout the DoD, IC, and broader community, as appropriate, to aid others in the deterrence detection and mitigation of potential threats.

· (U) Build and maintain strong collaborative relationships with other national security psychologists and associated professionals within the counter insider threat, military, forensic, law enforcement, security and counterintelligence communities

· (U) Collaborate on developing innovative solutions to real-time national security problems.

· (U) Routine Administrative Functions – Perform routine administrative functions that meet program and performance objectives within the thresholds identified in this SOW. Routine administrative functions are sub-tasks required to ensure mission success while performing the required tasks. Examples of routine administrative functions (the list is not all-inclusive) are below:

· Providing input to a case management system or database, developing metrics, and program evaluation activities are routine administrative tasks.

· Timely completion of documentation in a manner consistent with professional standards

· (U) Maintain Licensure – Maintain a full, current and unrestricted license to practice clinical psychology in the United States (including United States Territories)

2.2. (U) Contractor Support

(U) Contractors shall support the Government in developing work products:

· (U) Quality and performance metrics for all activities, including hours of effort toward each activity

· (U) Workload tracking through the SII case management system

· (U) Verbal consultation to stakeholders and mission partners

· (U) Written consultation reports, including informal (e.g., e-mail) and formal (e.g., psychological evaluation) reports

· (U) T&E briefs, presentations and courses, including supporting materials (e.g., presentation slides/notes)

· (U) R&D activities and written products (e.g., modeling, policy review, survey research, white papers, validation studies, executive summaries, project briefings, literature reviews, and academic inquiries)

· (U) Standard Operating Procedures (SOPs), instruction manuals, training materials, etc., that support process improvements or other advancements

· (U) Program/Project documentation historical and current, non-record and records.

· (U) Detailed trip reports for all trips, conferences, or similar off-site meetings.

· (U) In addition, staff packages, memoranda, minutes, briefings, rough statistical information and estimates hardcopy/softcopy reports on performance metrics may also be required at the direction of the Government.

(U) See Appendix A for Position Description.

3. (U) Contract Requirements

3.1. (U) Work Hours

(U) When required for mission support the Contracting Officer Representative (COR) may request or authorize the contractor to have personnel work overtime. Daily hours can vary between 6:00 AM and 5:00 PM, Monday through Friday.

(U) Telework may be permitted on this contract. The contractor may request in writing telework for employees by submitting a telework plan to the COR for review and approval.

3.2. (U) Place of Performance:

National Geospatial-Intelligence Agency East Campus located in Springfield, Virginia. Occasionally, work may be required to be performed at other Governmental agencies or offsite for NGA.

3.3. (U) Travel and Other reimbursable expenses

(U) A contractor may need to travel. The Contractor must provide the reason for the travel or for the purchase materials or supplies, or any other reimbursable expense preapproved by the Government. The Contractor shall provide a request with a corresponding estimate to their COR for review and approval prior to the travel or purchase of materials. The Contractor will follow GSA travel per diems and guidelines for travel costs.

3.4. (U) Quality Assurance Surveillance Plan (QASP)

(U) The COR, utilizing the QASP, will evaluate the Contractor’s performance under this contract.

3.5. (U) Government Furnished Property

(U) The Government will furnish workspace for on-site personnel.

3.6. (U) Non-Disclosure Agreements (NDA)

(U) The Contractor shall obtain a written Non-Disclosure Agreement (NDA) from each employee, who has access to proprietary, classified, or other sensitive information under this contract. The Contractor shall educate its employees regarding the restrictions imposed by FAR 9.505-4, so that they will not use or disclose proprietary information or data generated or acquired in the performance of this contract, except as provided herein.

3.7. (U) Applicable Documents

(U) A list of applicable reference documents is provided for reference. See Appendix B.

3.8. (U) Security

3.8.1. (U) Classified Work Performance Security Requirements

(U) Contractors must abide by the DD Form 254 - Contract Security Classification Specification (referred to as DD254 hereafter), the National Industrial Security Program Operating Manual (NISPOM 32 CFR Part 117), and all other applicable security policies and regulations including operational security (OPSEC) requirements.

(U) Some personnel may need to obtain access to Special Access Program (SAP), and/or Control Access Program (CAP) and/or Alternate Compensatory Control Measures (ACCM) Information as required for the execution of NGA’s sensitive program missions. Access will not be granted without written permission from the COR.

(U) Defense Counterintelligence and Security Agency (DCSA) remains the Cognizant Security Agency (CSA) for individuals performing work with collateral (SECRET or TOP SECRET) security clearances. As such, Security Executive Agent Directive (SEAD) 3 reporting should continue to be provided to the Contractor’s Facility Security Officer (FSO) for reporting to DCSA via Defense Information Security System (DISS). DCSA will also dictate mandatory security training as the CSA for the collateral cleared community.

3.8.2 (U) Personnel Security Requirements

(U) Contractor personnel performing Top Secret/Sensitive Compartmented Information (TS/SCI) work on the contract are required to have active TS/SCI clearances for access to TS/SCI facilities, when performing duties within TS/SCI environments, and for access to TS/SCI computer systems for the performance of this contract. Contractors are subject to a Counterintelligence-Scope Polygraph examination, as requested by NGA. As a condition of employment and assignment, contractors who have not successfully completed polygraph testing within the last five years must immediately schedule a polygraph examination and must complete the process, in no more than three test sessions, within 90 days.

(U) All Contractor personnel shall possess a current Top Secret Personnel Security Clearance and be eligible for favorable NGA adjudication for SCI access. The government will be responsible for verifying security clearances/SCI eligibility of the Contractor personnel in accordance with (IAW) SEAD 7: “Reciprocity of Background Investigations and National Security Adjudications”. If needed, NGA will sponsor SCI accesses at its sole discretion. NGA will provide badges, Common Access Cards (CAC) and other items (e.g. parking hangtags) when applicable, for required Contractor personnel.

(U) Upon onboarding, all cleared NGA contractors shall be enrolled into the NGA Continuous Vetting program and the Office of Director of National Intelligence Continuous Evaluation System IAW SEAD 6: “Continuous Evaluation” and Trusted Workforce (TW) 2.0 requirements. Cleared NGA contractors must report new applicable security issues, new foreign travel/contacts, and other required information to their FSO and NGA personnel security IAW SEAD 3: “Reporting Requirements for Personnel with Access to Classified Information or Who Hold a Sensitive Position” and NGA Instruction 5205.3: “Security Reporting Requirements”. Additionally, cleared NGA contractors will be required to be enrolled into a Report of Arrest and Prosecution Background (RAPBack) program, which also complies with TW 2.0 requirements.

(U) Cleared NGA contractors who are designated to participate in NGA’s annual Security Financial Disclosure Program (SFDP) must comply IAW with NGA SFDP requirements.

(U) The Contractor shall inform NGA as soon as practicable when its employees will no longer support the contract (see DD254). NGA desires notification prior to the day the individual no longer supports the contract, but requires notification no later than the day that contract support ends. If Contractor personnel will no longer be supporting NGA via an NGA contract, NGA shall take all appropriate action, up to and including debriefing the contractor from SCI access and terminating logical and physical access to NGA IT systems and facilities.

(U) Upon notifying NGA that a Contractor will no longer support the contract, the Contractor must return all NGA Badges, CAC, hangtag, and any other government furnished property. These items can be returned to the NGA Workforce Support Center, NGA Site Security Office, or the Contracting Officer Representative (COR) as soon as practicable, but no later than four (4) business days from the date of Contractor departure.

(U) When Contractor personnel are unable to turn these items into the NGA Workforce Support Center, NGA Site Security Office, or COR then it is the responsibility of the Contractor’s FSO to collect the items from the individual and return them to NGA as soon as practicable, but no later than four (4) business days from the date of Contractor departure.

(U) If the FSO debriefs their employee, the FSO shall provide a copy of the debriefing statement, plus all applicable Government-furnished items (e.g. NGA Badge, CAC, Courier Card, parking hangtags, etc.) to the NGA Site Security Office or the NGA Workforce Support Center as soon as practicable, but no later than four (4) business days from the date of Contractor departure.

3.8.3. (U) Physical Security Requirements

(U) All classified work performed at a non-NGA facility must be approved by the COR. Any classified work performed at contractor sites must be performed in either an NGA accredited SCIF, Other Government Agency (OGA) SCIF, or an approved secure collateral space that has either a Memorandum of Agreement (MOA), Memorandum of Understanding (MOU), Joint Use Agreement or Co-Use Agreement with NGA for this contract. SCIF or secure facility accreditation shall be at least the level commensurate with the level of safeguarding required by the contract DD254.

(U) Pursuant to “IC Technical Specifications for Construction and Management of Sensitive Compartmented Information Facilities Version 1.5.1; IC Tech Specs for ICD/ICS 705”, the NGA accrediting official, or designee, shall conduct periodic security inspections/reviews to ensure the efficiency of NGA accredited SCIF operations, identify deficiencies, and document corrective actions taken. Inspections/reviews of NGA accredited SCIFs shall be conducted based on threat, facility modifications, sensitivity of programs, past security performance, or at least every five years. Technical Surveillance Countermeasures (TSCM) activities in NGA accredited SCIFs will only be conducted by NGA TSCM teams consisting of NGA military, civilian, or contractor personnel who have successfully completed approved TSCM training. Authorized inspectors shall be admitted to a SCIF without delay or hindrance when inspection personnel are properly certified to have the appropriate level of security clearance and SCI indoctrination for the security level of the SCIF.

(U) Contractor personnel are forbidden from bringing prohibited or unauthorized items into any NGA installation or other secure facility covered under this contract. These items include weapons, cell phones, cameras, two-way pagers, laptops, recording devices of any kind, flash drives, or any other removable media. Exceptions may be granted by NGA Security upon the Contractor’s request. If granted, Contractor personnel must bring documentation showing approval prior to entering with the item(s). Violations may subject the Contractor and its offending personnel to civil and/or criminal liability IAW applicable laws and regulations governing access to secure Government facilities.

3.8.4 Unclassified Work Performance Security Requirements

(U) If applicable, and after discussion with the COR, and the COR has provided written approval, uncleared Contractor personnel are authorized to work on this contract at the Unclassified level, with access up to DoD Controlled Unclassified Information (CUI) at the Contractor site without the requirement of a security clearance.

3.8.5 Uncleared Personnel Requirements

(U) If applicable, and after discussion with the COR, and the COR has provided written approval, any Contractor personnel working with CUI information must receive a favorable HSPD-12 and/or HSPD-12 Tier 1 adjudication prior to accessing CUI information. Contractor personnel who require access to CUI for 60 days or less must receive a favorable HSPD-12 adjudication. Contractor personnel who require CUI access for more than 60 days must receive a favorable HSPD-12 Tier 1 adjudication. NGA will sponsor the HSPD-12 and HSPD-12 Tier 1 background investigation for Contractor personnel as needed.

(U) Foreign nationals are not permitted to perform unclassified work under the terms of this contract without prior written approval from the Contracting Officer (CO) or the COR. Should NGA identify the use of unauthorized personnel, the CO may direct the Contractor, at its own expense, to remove and replace any unauthorized Contractors, Subcontractors, or other personnel performing on the contract. Such action may be taken at the NGA's discretion without prejudice to its rights under any other contract provision, e.g., termination for default.

(U) Uncleared Contractor personnel visiting NGA facilities or other sites may receive the appropriate visitor badge and be escorted, as appropriate. The Contractor will return the visitor badge at the end of each visit day.

3.8.6. (U) Information Security Requirements

(U) NGA shall have the sole authority to determine whether, and to what extent, protected information shall be provided to the Contractor under the terms of the contract. Access to classified information will be pursuant to the security requirements established in the DD254. The Contractor shall not access, download, print, or further disseminate any classified information outside the execution of the defined contract requirements without the guidance and written permission from the COR.

(U) When the Contractor receives protected information under the terms of this contract, the Contractor will comply with all applicable NGA, DoD, and IC information security policies (including the Consolidated NGA (CoNGA) Security Classification Guide) for the proper marking, handling, processing, storing, and safeguarding of classified and unclassified material. The Contractor will ensure that document markings are given the lowest possible security classification to maximize dissemination while still maintaining the information’s confidentiality and integrity as necessary.

(U) Access to CUI will be pursuant to DFARS clause 252.204.7012. The prime contractor shall include this clause, including paragraph (m), in subcontracts, or similar contractual instruments, for operationally critical support or for which subcontract performance will involve covered defense information, including subcontracts for commercial items, without alteration, except to identify the parties. The Contractor shall determine if the information required for Subcontractor performance retains its identity as covered defense information and will require protection under this clause. Contractor personnel shall not release any unclassified information, regardless of medium (e.g., film, tape, document), pertaining to any part of this contract or any program related to this contract, unless the COR has given prior written approval or in performance of a project that has been scoped and negotiated by NGA.

(U) NGA will assess and authorize Contractors to process classified information on government-owned information systems, conduct oversight of such information system processing, and provide information system security guidelines IAW with FAR clause 52.204-21 and other information system security control policies, standards, and procedures. Contractor will be responsible for executing specific provisions under the contract for the accreditation of classified information systems, and upon request, shall provide the COR a written statement confirming accreditation compliance with the minimum information systems requirements established in the DD254. The Contractor shall include the substance of FAR clause 52.204-21 in subcontracts under this contract (including subcontracts for the acquisition of commercial products or commercial services, other than commercially available off-the-shelf items), in which the Subcontractor may have federal contract information residing in or transiting through its information system.

(U) In accordance with FAR Part 4.7 and FAR clause 52.215-2, the Contractor may retain one archival copy of any Government-furnished information provided to the Contractor during the course of performance of the contract, subject to Contractor following relevant data safeguarding practices and CUI restrictions. The disposition of such Government-furnished information is otherwise solely at the discretion of the Government. As directed by the NGA CO or COR, the Contractor will destroy or return to NGA all Government-furnished information upon contract termination or when no longer required for contract performance.

In situations when electronic transmission is not practicable, Cleared Contractor personnel may hand-carry contract-related classified information when authorized by the COR in writing. Approved Contractor personnel must obtain NGA courier authorization prior to hand-carrying of classified contract-related information. Only classified information related to the performance of this contract may be hand-carried. Contractor personnel will be limited to hand-carrying classified information between approved Contractor facilities and US Government facilities unless the COR approves other circumstances in writing, when applicable, on a case-by-case basis.

3.8.7. (U) Cybersecurity Requirements

(U) The Contractor must, at a minimum, implement 10 U.S.C. Sections 391 and 393 along with National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, “Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations” requirements.

(U) If the Contractor intends to use an external cloud service provider to store, process, or transmit any covered defense information in performance of this contract, the Contractor shall require and ensure that the cloud service provider meets security requirements equivalent to those established by the Government for the Federal Risk and Authorization Management Program (FedRAMP) Moderate baseline ()

(U) In the event that the Contractor discovers a cyber incident that affects a covered Contractor information system or covered defense information residing therein, or that affects the Contractor’s ability to perform the requirements of the contract that are designated as operationally critical support and identified in the contract, the Contractor shall—

1. (U) Notify the DoD Cyber Crime Center (DC3) and the COR in writing within 72 hours of incident discovery.

2. (U) Conduct a review for evidence of compromise of covered defense information, including, but not limited to, identifying compromised computers, servers, specific data, and user accounts. This review shall also include analyzing covered Contractor information system(s) that were part of the cyber incident, as well as other information systems on the Contractor’s network(s), that may have been accessed as a result of the incident in order to identify compromised covered defense information, or that affect the Contractor’s ability to provide operationally critical support.

(U) In the event the Contractor discovers and isolates malicious software in connection with a reported cyber incident, the Contractor shall submit the malicious software to DC3 in accordance with instructions provided by the COR. The Contractor should NOT send the malicious software to the COR.

3.8.8. (U) Insider Threat Requirements

(U) Contractor will establish and maintain an insider threat program to gather, integrate, and report relevant and available information indicative of a potential or actual insider threat, consistent with E.O. 13587 “Structural Reforms to Improve the Security of Classified Networks and the Responsible Sharing and Safeguarding of Classified Information” and Presidential Memorandum “National Insider Threat Policy and Minimum Standards for Executive Branch Insider Threat Programs.” As soon as practicable, Contractor shall report to the COR events that may have an effect on the status of the entity's or an employee's eligibility for access to classified information; report events that indicate an insider threat to classified information or to employees with access to classified information; report events that affect proper safeguarding of classified information; and report events that indicate classified information has been, or is suspected to be, lost or compromised.

4. (U) Deliverables

(U) The following table lists the deliverables for the SOW. All deliverables are subject to Government approval. Rejected deliverables must be modified and resubmitted for acceptance.

(U) All deliverables will be submitted in formats compatible with Adobe or Microsoft Office products. Softcopy delivery (via e-mail, etc.) is the preferred method of exchange for electronic copies. Deliveries will be made as specified in the table below. All deliverables produced by contractor personnel during the performance of tasks defined in this SOW will become Government property and may be used and reproduced without restriction, except as otherwise provided in DFARS 252.227-7013 and 252.227-7014.

Format: Section J.10

Format: Contractor Defined, Government Approved

Monthly thereafter (submitted 10 business days after the Prime Contractors accounting month ends).

Format: Contractor Defined, Government Approved

Format: Contractor Defined, Government Approved

Format: Contractor Defined, Government Approved

*The labor associated with the submission of these deliverables in Table 2 above is not directly billable to the contract.

(U) Appendix A: Position Descriptions

(U) BST requires support through the position descriptions listed below. The government expects all individuals performing under this contract to be professional at all times, work effectively alone and in teams, and to communicate effectively orally and in writing. The Contractor shall provide fully qualified personnel to satisfy the conditions of this SOW. The Government will not fund or reimburse the Contractor for maintaining qualifications.

(U) Clinical Psychologist (e.g., National Security Psychologist, Security Psychologist, Operational Psychologist, and Forensic Psychologist)

(U) Skills and Experience:

· Experience providing behavioral science expertise and analysis in support of counterintelligence (CI), law enforcement, insider threat, counterespionage, personnel security, and violence and suicide risk assessment matters. In-depth knowledge of intelligence, CI and law enforcement regulations, directives, and procedures. Experience working with ICD 704 and related security adjudication/suitability matters. Must possess superior communication skills: Provides evidenced- based assessments that demonstrate professional competency and boundaries while also operating with an awareness of personnel security and CI factors. Analyzes data objectively and articulately communicates findings well-matched for different ends (e.g., to influence decisions, explain options). Develops and presents behavioral sciences and/or mental health trainings and briefings to a wide range of audiences. Conduct liaison with DoD/Intelligence/law enforcement and mental health/psychological communities of practice. May be seen as a leader in field---extensive interaction with IC and senior level military and civilian agency partner equivalents.

(U) Required

· (U) Possess a minimum of ten (10) years’ experience as an operational psychologist, national security psychologist, forensic psychologist, personnel psychologist, police psychologist, military psychologist, or corrections psychologist

· (U) Doctoral Degree in Clinical or Counseling Psychology through an American Psychological Association Accredited (APA) Program (work experience may not be substituted for the required degree)

· (U) Possess a full, current and unrestricted license to practice clinical psychology in the United States (including United States Territories)

· (U) Competencies:

· (U) Ability to conduct psychological assessment, direct and indirect; administration and interpretation of a wide-range of psychological tests (to include cognitive and personality measures)

· (U) Expert knowledge of research methodology, psychometrics and statistical analysis of complex behavior using varied data sources and formats

· (U) Effective interviewing skills

· (U) Ability to conduct violence/self-harm risk assessment skills

· (U) High quality psychological report writing skills

· (U) Superior customer service skills, including the ability to effectively communicate with internal and external mission partners while remaining sensitive to organizational structure, policies and culture

· (U) Ability to travel to remote sites to provide services

(U) Desired

· (U) At least one (1) year of experience with counter insider threat detection methodologies and collaboration with modelers / data scientists

· (U) At least one (1) year of experience in conducting or reviewing forensic psychological assessments

· (U) At least one (1) year of experience in conducting police and public safety-oriented evaluations (i.e., fitness for duty, special duty assignment, hiring, and other assessment and selection evaluations)

· (U) At least one (1) year of experience providing psychological consultation within an intelligence community setting with a focus on psychological support to:

· (U) Personnel security adjudications, investigations and continuous evaluation; insider threat / threat management case referral and disposition

· (U) Counterintelligence inquiries, investigations and operations

· (U) Experience in assessment and selection for specialized personnel or high-risk assignments (e.g., working in a high-stress / high OPTEMPO environment, police, privileged user)

(U) Appendix B: Applicable Publications

(U) Dates and versions associated with the documents reflect what is current as of the date of the SOW. The Contractor shall abide by all of the following applicable regulations, publications, manuals, and local policies and procedures and updates as applicable:

1. US Code, Title 10, War and National Defense, Chapter 22 - National Geospatial-Intelligence Agency.

2. US Code, Title 50 – War and National Defense/Chapter 15 – National Security/Subchapter V – Protection of Operational Files, 432. Operational Files of the National Geospatial-Intelligence Agency.

3. Executive Order 12333, United States Intelligence Activities; 4 Dec 1981.

4. Executive Order 13587, Structural Reforms to Improve the Security of Classified Networks and the Responsible Sharing and Safeguarding of Classified Information; 7 Oct, 2011.

5. The National Insider Threat Policy and Minimum Standards for Executive Branch Insider Threat Programs; circa 2014.

6. NITTF 2017 Insider Threat Guide: A Compendium of Best Practices to Accompany the National Insider Threat Policy and Minimum Standards.

7. The .

8. Public Law 91-596, Occupational Safety and Health Administration (OSHA) Act of 1970, amended 1 Jan 2004.

9. DoDD 3020.44, Defense Crisis Management; 4 Jun 2014.

10. DoDD 5205.16, The DoD Insider Threat Program; 30 Sep 2014.

11. DoD 5400.11-R, DoD Privacy Program; 14 May 2007.

12. .

13. .

14. Security Executive Agent Directive (SEAD) 3, Reporting Requirements for Personnel with Access to Classified Information or Who Hold a Sensitive Position; 12 Jun 2017.

15. Security Executive Agent Directive (SEAD) 4, National Security Adjudicative Guidelines; 10 Dec 2016.

16. ICPG 704.3, Denials or Revocation of Access to Sensitive Compartmented Information, Other Controlled Access Program Information, and Appeals Processes; 2 Oct 2008.

17. DoDD 5240.02, Counterintelligence (CI); 19 Mar 2015.

18. DoDD 5240.06, Counterintelligence Awareness and Reporting (CIAR), 17 May 2011.

19. DoDD 5400.11, DoD Privacy Program; 29 Oct 2014

20. DoDI 5240.04, Counterintelligence Investigations; 1 Apr 2016.

21. DoDI 5240.18, Counterintelligence (CI) Analysis and Production; 17 Nov 2009.

22. DoDI 1000.29, DoD Civil Liberties Program; 17 May 2012.

23. DoDI 2000.16, DoD Antiterrorism (AT) Standards, 2 Oct 2006

24. NGA Instruction 5500.7, Handling of Personally Identifiable Information; 15 Feb 2013.

25. , Insider Threat Program; 19 Sep 2016.

26. SIIC Standard Operating Procedures, Jan 2026 (U//FOUO).

27. BST Memorandum for Record – BST Guidelines for Addressing Potential Conflicts of Interest, 17 Aug 2017 (U//FOUO).

(U) Appendix C: Acronyms

image1.jpeg