Attach 10_MFR UNCI Control and Receipt.pdf

DEPARTMENT OF THE AIR FORCE

90TH MISSILE WING (AFGSC)

DETER • MODERNIZE • STRIKE

3 August 2026

MEMORANDUM FOR RECORD

FROM: 90 CONS/PKAA

SUBJECT: Controlled Unclassified Information Release: Project Title: Dorm Water Damage

1. The purpose of this memorandum is to record receipt of Department of Defense (DoD) Controlled Unclassified Information (CUI).

2. Information Safeguarding is required for any information that is marked as CONTROLLED

UNCLASSIFIED INFORMATION (CUI).

3. Please provide your Commercial and Government Entity (CAGE) Code and sign below to confirm receipt and acknowledgement of the following statement concerning safeguarding of CUI material.

a. Information safeguarding is the responsibility of the individual, agency, and/or company requesting and taking possession of the CUI documents.

b. Release or reproduction of this material or any part thereof, is prohibited, except for official use only. No public publication of this material—by any means—is authorized.

c. This material shall be destroyed properly. In accordance with Section 2002.14 of Title 32, CFR part 170 – Cybersecurity Maturity Model Certification Program, record and non-record CUI documents must be destroyed by means approved for destroying classified information or by any other means making it unreadable, indecipherable, and unrecoverable.

d. The CUI paper destruction methods the individual, agency, and/or company must use are cross-cut shredders that produce 1mm. x 5 mm. (0.04 in. x 0.20 in.) particles (or smaller); or pulverize/disintegrate paper using disintegrator devices equipped with a 2.4 mm. (3/32 in.)

security screen.

e. The CMMC Program utilizes the security standards set forth in the 48 CFR 52.204-21;

National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, Basic Safeguarding of Covered Contractor Information Systems, Revision 2, February 2020 (includes updates as of January 28, 2021) (NIST SP 800-171 R2); and selected requirements from the NIST SP 800-172, Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171, February 2021 (NIST SP 800-172 Feb2021), as applicable (see table 1 to § 170.14(c)(4) for requirements, see § 170.2 for availability of NIST publications)

4. Direct any questions in regard to this policy to the F. E. Warren AFB Civil Engineer Squadron at (307) 773-4086. Information safeguarding and marking requirements are per the following (when applicable):

a. AFI 33-332, Records Management and Information Governance Program;

b. DoDI 5200.48_DAFI 16-1403, Controlled Unclassified Information (CUI);

c. Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7008, Compliance with Safeguarding Covered Defense Information Controls;

d. DFARS 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting;

g. DFARS 252.204-7021, Cybersecurity Maturity Model Certification Requirements; and/or Executive Order 12958

5. The document(s) shall only be released to vendors who have demonstrated they are compliant with DFARS 252.204-7021 by COMPLETING THE ASSESSMENT/CMMC in the Supplier Performance Risk System (SPRS) within the Procurement Integrated Enterprise Environment (PIEE). NIST SP 800-171 shall be completed within the last three years and show an assessment of BASIC. If a score of 110 is not obtained at time of request, contractor MUST provide an active System Security Plan (SSP) and a Plan of Action and Milestones (POA&M) for any unimplemented controls, to receive the drawings. If CMMC is available, a Level 2 (Self) or higher is required to be considered eligible to receive Attach 10_CUI_1164 Drawings (CMMC Certificate covers NIST SP). If you do not have a CMMC level 2 (Self), you must prove a Conditional Certification with an active POA&M to receive drawings.

6. Once the assessment has been verified complete in SPRS, the Contractor shall request documents via email from SSgt Tiffany Turgeon at tiffany.turgeon@us.af.mil and Mr. Brandon Bartlett at brandon.bartlett@us.af.mil.

7. The CUI document(s) shall be provided via a DoD SAFE Link (safe.apps.mil) and sent to the Contractor representative.

ANDREA M. MCCURRY

Contracting Officer mailto:tiffany.turgeon@us.af.mil mailto:brandon.bartlett@us.af.mil

TO: 90 CONS/PKAA

DATE: _________________________ CAGE: _________________________

I have read and understand the Information Safeguarding Statement above and agree that the denoted CUI material(s) received below shall be returned to the 90th Contracting Squadron with the Contractor proposal.

I acknowledge receipt of: Attachment 7 – CUI Drawings

(Contractor Company Name Here) (Contractor Signature Here)

(Contractor Name in Print Here)