ATTACH D. DD FORM 254.pdf

Please wait...

If this message is not eventually replaced by the proper contents of the document, your PDF viewer may not be able to display this type of document.

You can upgrade to the latest version of Adobe Reader for Windows®, Mac, or Linux® by visiting http://www.adobe.com/go/reader_download.

For more assistance with Adobe Reader visit http://www.adobe.com/go/acrreader.

Windows is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Mac is a trademark of Apple Inc., registered in the United States and other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.

DoDM 5200.01-V4, February 24, 2012

Change 1, 05/09/2018

(Excerpt from Enclosure 3, page 10, paragraph 1.f.)

f. ALL DoD unclassified information MUST BE REVIEWED AND APPROVED FOR RELEASE through standard DoD Component processes before it is provided to the public (including via posting to publicly accessible websites) in accordance with DoDD 5230.09 (Reference (j)), Deputy Secretary of Defense Memorandum (Reference (k)), and other applicable regulations. Unclassified information previously approved for release to the public may be shared with any foreign government or organization.

(Excerpt from Enclosure 3, page 17, paragraph 2.e.)

e. Protection of FOUO Information

(1) During working hours, reasonable steps shall be taken to minimize the risk of access by unauthorized personnel (e.g., not reading, discussing, or leaving FOUO information unattended where unauthorized personnel are present). After working hours, FOUO information may be stored in unlocked containers, desks, or cabinets if Government or Government-contract building security is provided. If such building security is not provided or is deemed inadequate, the information shall be stored in locked desks, file cabinets, bookcases, locked rooms, etc.

(2) FOUO information and material may be transmitted via first class mail, parcel post, or, for bulk shipments, via fourth class mail. Whenever practical, electronic transmission of FOUO information (e.g., data, website, or e-mail) shall be by approved secure communications systems or systems utilizing other protective measures such as Public Key Infrastructure (PKI) or transport layer security (e.g., https). Use of wireless telephones should be avoided when other options are available. Transmission of FOUO by facsimile machine (fax) is permitted; the sender is responsible for determining that appropriate protection will be available at the receiving location prior to transmission (e.g., machine attended by a person authorized to receive FOUO; fax located in a controlled government environment).

(3) FOUO information may only be posted to DoD websites consistent with security and access requirements specified in Reference (k).

(4) Additional guidance regarding FOUO information that may also require protection pursuant to the Privacy Act of 1974, as amended, may be found in Reference (r).

(5) Record copies of FOUO documents shall be disposed of according to provisions of chapter 33 of title 44, U.S.C. (Reference (v)) and the DoD Component records management directives. Non-record FOUO documents may be destroyed by any of the means approved for the destruction of classified information or by any other means that would make it difficult to recognize or reconstruct the information.

(6) The originator or other competent authority (e.g., initial FOIA denial and appellate authorities) shall terminate the FOUO status of specific information when circumstances indicate that the information no longer requires protection from public disclosure. When the FOUO status of information is terminated in this manner, all known holders shall be notified, to the extent practical. Upon notification, holders shall efface or remove the FOUO markings, but records in file or storage need not be retrieved solely for that purpose. Information whose FOUO status has been terminated shall not be released to the public without the review and approval required by paragraph 1.f of this enclosure.

Attachment (3) to DD 254

DRAFT

SAMPLE

PREVIOUS EDITION IS OBSOLETE.

Page of AEM LiveCycle Designer

DD FORM 254, APR 2018

NEEDS DD67

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the National Industrial Security Program (NISP) apply to all security aspects of this effort involving classified information.)

OMB No. 0704-0567 OMB approval expires:

October 31, 2020 The public reporting burden for this collection of information, 0704-0567, is estimated to average 70 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, at whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

RETURN COMPLETED FORM AS DIRECTED IN THE INSTRUCTIONS.

1. CLEARANCE AND SAFEGUARDING

2. THIS SPECIFICATION IS FOR: (X and complete as applicable.)

3. THIS SPECIFICATION IS: (X and complete as applicable.)

a. ORIGINAL (Complete date in all cases.)

b. REVISED (Supersedes all previous specifications.)

4. IS THIS A FOLLOW-ON CONTRACT?

If yes, complete the following:

Classified material received or generated under

5. IS THIS A FINAL DD FORM 254?

If yes, complete the following:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

7. SUBCONTRACTOR(S) (Click button if you choose to add or list the subcontractors -- but will still require a separate DD Form 254 issued by a prime contractor to each subcontractor)

8. ACTUAL PERFORMANCE (Click button to add more locations.)

10. CONTRACTOR WILL REQUIRE ACCESS TO: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

e. NATIONAL INTELLIGENCE INFORMATION:

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. See instructions. Provide details in Blocks 13 or 14 as set forth in the instructions.)

12. PUBLIC RELEASE

Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the National Industrial Security Program Operating Manual (NISPOM) or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified here with at least office and phone contact information and if available, an e-mail address. (See instructions)

13. SECURITY GUIDANCE

The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended.

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. The field will expand as text is added. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. Also allows for up to 6 internal reviewers to digitally sign. See instructions for additional guidance or use of the fillable PDF.)

14. ADDITIONAL SECURITY REQUIREMENTS

Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the CSO. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

15. INSPECTIONS

Elements of this contract are outside the inspection responsibility of the CSO.

If Yes, explain and identify specific areas and government activity responsible for inspections. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

17. CERTIFICATION AND SIGNATURES

Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. Upon digitally signing Item 17h, no changes can be made as the form will be locked.

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICIAL

9.0.0.2.20120627.2.874785 DD 254, DoD Contract Security Classification Specification List of Attachments (All Files Must be Attached Prior to Signing, i.e., for any digital signature on the form)

N/A

CSO:

N/A

CSO:

N/A

Pearl Harbor Naval Shipyard & IMF 667 Safeguard street, Suite 100

JBPHH, HI 96860-5033

Location: Commander, Submarine Force Pacific U.S. Pacific Fleet, Morton Street

JBPHH, HI 96860

Location:

Commander, Joint Base Pearl Harbor Hickam

JBPHH, HI 96860

Block9:

To perform inspections of tanks/piping for the purpose of certifying areas as safe to perform subsequent work operations. Red Shipyard badge are required to ensure timely (e.g., responding within four (4) hours) and efficient services are provided by the Marine Chemist for areas within the submarine or ship that have increased security controls (this includes areas within a submarine's engine room and reactor compartment spaces, tanks, and piping systems.

-Item 10(b) & 10(k)1: (U) Security Controls on the Dissemination of NNPI Received or Generated Under NAVSEA Contracts 12/1/2011 -Item 10(b) & 10(k)2: OPNAVINST, N9210.3 (U) Safeguarding of Naval Nuclear Propulsion Information (NNPI) 6/7/2010 -Item 10(b) & 10(k)3: (C-RD) CG-RN-1, REV.3, CHANGES 1-20, DOE-DOD SCG for the NNPP which includes Interpretive Guidance Bulletins 1-19 -Item: 10(b) & 10(k)4. Processing of NNPI on non-federal IT systems requires NAVSEA 08 authorization per OPNAVINST N9210.3, using the procedures identified in NAVSEA ltr 08B/19-03823, dated 2 August 2019.

-Item 10(b) & 10(k)5: Prior to subcontracting access to RD an approval signature from the official in Item 17 of this DD 254 is required on the subcontract DD 254.

-Item: 10(b) & (k)6. The contractor must provide a copy of subcontractor DD254s issued under this contract, where NNPI is shared, to NAVSEA 08 Security, via the official in Item 17 of this DD 254.

-11(a) No classified and/or NNPI material will be removed from Ship in the performance of this contract unless approved in writing by the ship's Commanding Officer and PHNSY&IMF's Security Manager (Code 1122). Contractor shall utilize security guidance from SECNAVINST 5510.36A and the DOD 5220.22-M (NISPOM).

-All security aspects of this contract fall under the cognizance of PHNSY&IMF. Contact the PHNSY&IMF Security Contracting Officer for any questions regarding the content of the DD Form 254.

-Classified or unclassified technical papers to be presented at a classified symposium must be approved by the PHNSY&IMF Contracting Officer's Representative (COR) Code 1122 prior to the presentation.

-Security classification guides and controlled unclassified information (CUI) (e.g., FOUO, distribution statement controlled) are not authorized for public release; therefore, they cannot be posted on a publicly accessible web-server or transmitted over the internet unless appropriately encrypted. Request for public release cannot be transmitted via the internet until the contractor receives final approval from PHNSY&IMF (Code 1160).

-The subsequent revisions of Security Classification Guide(s) apply to this contract. Subsequent revisions shall be provided by the Government Contracting Activity (GCA) as Government Furnished Information (GFI) and shall be executed by the Contractor at no additional cost to the government.

-Contractor must submit a request for sharing of classified and other sensitive information between prime contracts in writing to the PHNSY&IMF's Security Contracting Officer (SCO) identified in Item 17 of this form.

-Personnel designated as derivative classifiers shall receive derivative classification training prior to access from the contractor's Facility Security Officer (FSO). The FSO shall ensure personnel receive initial and biennial training during the life of this contract. Evidence of completion, training certificates or equivalent, shall be provided to the Information Assurance Manager no later than the individual's due date.

-All classified documents must be destroyed using a National Security Agency (NSA) approved high security crosscut shredder listed on the NSA/CSS evaluated products list(EPL) for high security crosscut paper shredders, or other approved method for destroying classified information.

-All classified information involved in security incidents shall be retained and provided to the certifying official in Item 17 of this DD 254 for classification review.

-All reports of contractor security violations associated with this contract shall be sent by the Cognizant Defense Counterintelligence and Security Agency (DCSA) field office directly to the certifying official in Item 17 of this DD 254.

-Forward a copy of subcontractor DD 254s issued under this contract to the official shown in item 17 of this DD 254.

-All security related issues, incidents, requests pertaining to this contract shall be presented in writing by the contractor's FSO to the individual identified in Item 17 of this DD 254. The contractor shall abide by other reporting requirements outlined in the NISPOM.

-This DD form 254 is for solicitation purposes only; therefore it must be returned to the official shown in item 17 of this DD254 to be updated before the contract DD 254 can be issued to the contractor.

-Contractor must comply with Attachments (1) through (3).

ATTACHMENT (1)

CONTRACTOR SECURITY REQUIREMENTS FOR SUBMARINE ACCESS AT PHNSY&IMF’S CONTROLLED INDUSTRIAL AREA (Rev. NOV 2020)

Ref: (a) NAVSHIPYD&IMFPEARLINST 5510.78 (series), Information and Personnel Security Program

(b) NAVSHIPYD&IMFPEARLINST 5530.1 (series), Physical Security Plan

(c) NAVSHIPYD&IMFPEARLINST 3070.1 (series), Operation Security (OPSEC) Program

(d) NAVSHIPYD&IMFPEARLINST 5239.1 (series), Activity Information Systems Security Plan (AISSP)

(e) NAVSHIPYD&IMFPEARLINST 5239 Notice, Pearl Harbor Naval Shipyard and Intermediate Maintenance Facility Activity Information Systems Security Plan

1. The provisions of these security requirements are in accordance with references (a) through (e) and applicable to contracts, subcontracts and Memorandums of Agreement (MOAs) for access to:

a. Controlled Industrial Area (CIA) – The large fenced-in area encompassing the waterfront and industrial shops, extending from 1274 Compound to include all of Bravo Pier 2.

b. CIA Restricted Waterways (between Landing "C" and Bravo Pier 2 or if the CIA is extended to include Bravo 4) - See paragraph 18 of this document for specific access requirements.

2. Performance of all work under this Contract or MOA is restricted to U.S. citizens and U.S. nationals only .

3. In accordance with reference (a) for issuance of Red or Yellow Shipyard Access Control Badges (SACBs), a “classified contract” is required with a Contract Security Classification Specification (DD 254) that includes:

a. Red SACB - Access to Restricted Data (RD) and Naval Nuclear Propulsion Information (NNPI).

b. Yellow SACB - Access to Classified National Security Information (C-NSI) and unclassified NNPI.

c. In either case, the DD 254 must contain an approval signature from Naval Sea Systems Command (NAVSEA) SEA 08/Chief of Naval Operations (CNO) N00N and NNPI handling requirements in accordance with OPNAVINST N9210.3 (Safeguarding of NNPI).

4. These security requirements are applicable to the prime contractor as well as to all subcontractors and suppliers thereunder. The terms “contractor or contract” shall refer to all of the above whether this document is included in a contract, subcontract or MOA.

5. The period of proposed work on the submarine is subject to further approval of the PHNSY&IMF Commander depending on the sensitivity of industrial operations in the affected areas.

6. At least three weeks prior to the visit, the PHNSY&IMF Sponsor will provide the contractor’s Facility Security Officer (FSO) or other Company Official the Contractor Visit Request (VR) form (PH-SYD 5512/28) and its completion instructions. The FSO or Company Official shall complete applicable items on Part 1 of the PH-SYD 5512/28 and submit it to the Government Contracting Activity (GCA) for completion of Part 2. The GCA will then forward the VR, DD 254, and prime contract documentation via encrypted means, to the PHNSY&IMF Sponsor for completion of Part 3 no later than two weeks prior to the visit. The PHNSY&IMF Sponsor will upload the VR and associated documents to the Code 320 Contractor Visit Request SharePoint no later than one week prior to the visit start date. The VR must specify the submarine areas to be accessed. Entry into the CIA and access onboard a submarine for those listed on the VR may be authorized under the following conditions:

a. All contractor companies must have DOD Facility Clearances (FCLs) granted by the Defense Counterintelligence and Security Agency (DCSA) and their personnel who need unescorted access to the submarine must have DOD Personnel Clearances (PCLs) granted by the DOD Central Adjudication Facility (DODCAF). The FCLs, PCLs and security access (granted by the contractor) must be verifiable in the applicable DOD record system.

b. A Yellow or Red SACB will be issued depending on the areas needed to be accessed onboard the submarine. Unescorted or escorted access for Yellow SACB contractors onboard the submarine will depend on how the submarine is controlling access to the Nuclear Work Areas (NWA). For a Yellow Controlled Nuclear Information Area (CNIA) SACB, the contractor must have at least an Interim Confidential. For a Red (NWA) SACB, the contractor must have a final PCL/RD access.

c. Ensure that all contractor employees when reporting to the Pass and ID Office for PHNSY&IMF SACBs bring their valid Defense Biometric Identification Systems (DBIDS) identification cards. Also if they have interim PCLs, they must bring their proof of U.S. citizenship. See Appendix (1) for a list of acceptable documents.

d. Ensure any derogatory or questionable information concerning contractor employees possessing DOD PCLs and/or a PHNSY&IMF SACB is reported immediately to the Industrial Security Branch (Code 1123) so that PHNSY&IMF access eligibility can be evaluated.

e. Ensure that contractor employees attend the 30-minute annual orientation on safety, security, OPSEC, and radiological protection aspects of industrial operations within PHNSY&IMF.

NOTE: The annual orientation video will be shown at the Pass and ID Office in groups of 8, prior to issuance of PHNSY&IMF SACBs.

f. Ensure that contractor employees at all times while in PHNSY&IMF spaces wear and display their PHNSY&IMF SACBs in plain view, vertically, on their outer clothing positioned above the waist and with the front/photograph facing outward. If an employee is issued a temporary (i.e. no picture) SACB, the employee must also carry his or her DBIDS identification card

g. Ensure that each SACB is used only by the specific individual named on the SACB.

h. Maintain strict accountability over SACBs and passes issued by the Pass and ID Office. Report immediately, to the Pass and ID Office, any that are missing, lost or stolen and the circumstances. Return SACBs/passes to the GCA or PHNSY&IMF Sponsor immediately upon termination of any employee, SACB expiration, completion of the work, or when no longer required, whichever occurs soonest. The GCA or PHNSY&IMF Sponsor will ensure that all SACBs/passes are forwarded to the PHNSY&IMF Pass and ID Office.

i. Restrict hours of work to first shift, i.e. 0630 to 1500 hours, Monday through Friday (except for federal holidays). In accordance with reference (b) when operational needs require the contractor to schedule work outside of first shift, weekends and/or federal holidays, submit written notification at least two weeks in advance to the PHNSY&IMF Sponsor who will obtain approval from the respective PHNSY&IMF Department, Office and Shop Heads. Such notifications will include the company name, type of work to be performed, location of work, specific dates, and hours of work. The PHNSY&IMF Sponsor will also submit a request in writing to the Operations & Physical Security Branch (Code 1121) by Wednesday of each week, to add the contractor to the “Non-Duty Hours Contractor Access List” that is issued weekly. Emergency access for contractors not on the list will be authorized by the Security Officer (Code 1120) or Code 1121, upon verification with the PHNSY&IMF Sponsor.

j. Restrict employees/representatives to the work site and control travel directly to and from the work site.

7. The Pass and ID Office is located in Building 207 at Safeguard Street and Russell Avenue. Hours of operation are Monday through Friday (except for federal holidays) 0600 to 1400 hours, except on Wednesday, 0600 to 1230 hours. Contractors must be signed in 45 minutes before closing to receive service.

8. No vehicle will be permitted access to a work site in the CIA without a PHNSY&IMF CIA vehicle pass. The CIA vehicle passes are issued for limited purposes by the PHNSY&IMF Pass and ID Office and will not be issued without proof of vehicle registration. All vehicles are required to conform to PHNSY&IMF traffic regulations. The speed limit is 15 MPH in the CIA. Outside of the CIA, the speed limit is as posted or marked.

9. Only those contractor vehicles meeting all of the following criteria will be allowed to enter the CIA with the PHNSY&IMF CIA vehicle pass:

a. Vehicles must be registered to the company.

b. All contractor/commercial vehicles must be visually inspected prior to any entry into the CIA.

c. All vehicles must clearly display an authorized company sign or logo on both sides of the vehicles. The logo must be either painted on the vehicle; a decal or vinyl sticker; or a magnetic sign. Paper or cardboard signs are not authorized. Lettering of the logo must not be less than 2-1/2 inches in height and 1/4 inch wide.

d. Every vehicle entering the CIA will display the pass on the dashboard or visor (facing outward). The pass will be visible at all times while in the CIA.

e. Vehicle access to the CIA will only be allowed for transportation of contractors’ heavy tools, parts, and materials to and from the work site. Contractor vehicles found parked in the CIA, not meeting the above criteria, will lose their CIA access privilege.

NOTE: Contractor vehicles will not be used solely to transport employees to the job site. Privately owned vehicles will not be allowed in the CIA.

10. Vehicles may enter and exit from gates located on Paul Hamilton Avenue, Monday through Friday, 0600 to 1800 hours or on Chosin Street, 24 hours, 7 days a week, including federal holidays. For access before 0630 and after 1500 hours, weekends, and holidays the contractors must comply with paragraph 6.i.

11. Parking is not permitted on any piers on any dry dock/waterfront areas. Contractors shall not park on or block the marked fire lanes at any time. Vehicles may stop on the piers of dry dock/waterfront areas for 15 minutes for loading or unloading. An exception may be made for vehicles that are part of the equipment needed to do the required work and are attached or connected to the pier or ship, i.e., a truck which uses a mounted generator, a vehicle with built-in equipment, etc. The exception request must be in writing and include justification. The contractor will send the request to Code 1120 via the GCA at least two weeks prior to the date the parking space is required. Emergency notifications to the Regional Dispatch Center (RDC) may be necessary if pier access is blocked. The following information is also required:

a. The license number of the vehicle(s).

b. The type and size of the vehicle(s) (pickup truck, crane, forklift, etc.)

c. Parking location.

d. Purpose and duration.

12. Parking for privately-owned vehicles is available:

a. In the “N” parking lot on Central Avenue and “D” parking lot on Paul Hamilton Avenue, located between South Avenue and Safeguard Street or;

b. In the “C” parking lot on Lake Erie Street and Central Avenue.

13. All vehicles are subject to search while entering, remaining in, or leaving the PHNSY&IMF and/or Joint Base Pearl Harbor Hickam (JBPHH) areas. A Property Pass (OP-7) or Bill of Lading issued and signed by the GCA must cover all government material being transported out of the CIA by contractors. Material found without a Property Pass will be confiscated and a police offense report issued.

14. Entry into shop, office or ship spaces covered by this contract will be subject to prior approval of the respective Department, Office and Shop Head or Ship’s Commanding Officer. Contractors will coordinate action with the PHNSY&IMF Sponsor for obtaining entry approval.

15. Code 1120 will coordinate guard services on a reimbursable basis for contractors requiring guard services. The contractor must notify and obtain approval from Code 1120 via the GCA at least two weeks prior to the time guard services will be required. Notification in writing shall (include the purpose and number of hours guard services will be required. Funding must be submitted by the GCA to JBPHH prior to the requested service date.

16. Contractor personnel will not be permitted to enter PHNSY&IMF buildings, spaces, and areas not covered by this contract except on prior approval of the Department, Office, or Shop Heads having jurisdiction of the areas. Contractors will coordinate in advance with the PHNSY&IMF Sponsor to obtain entry approval.

17. If access is needed to the restricted CIA waterways for divers and boats, the PHNSY&IMF Sponsor must coordinate access controls with Code 1121 in advance. Code 1121 will then coordinate with the CIA security force (JB2) and the RDC.

a. Access onto the CIA piers requires all personnel have SACBs that allow unescorted access to the CIA (i.e. Green, Yellow or Red). An armed JBPHH officer at the debarking point must validate SACBs of all personnel prior to their stepping onto a CIA pier.

b. EVERY TIME personnel leave the CIA perimeter and re-enter the CIA by waterway, they must meet with an armed JBPHH officer and their badges checked prior to accessing the CIA.

c. Once work is completed for the day, the PHNSY&IMF Sponsor must notify Code 1121 and the RDC.

d. If working only in the waterways, personnel must be instructed to stay in the water or boat (i.e. do not tie up to or step onto a CIA pier) and advise Code 1121 prior to starting the work.

e. All emergencies that require personnel to come onto the CIA pier without CIA SACBs and/or advance notification require notification to the RDC. Once the personnel are safe they must stand by in the area, call the RDC at 911 and explain that they have come ashore in the Pearl Harbor Naval Complex CIA, and do not have authorization to be there. The notification must include if personnel require urgent medical treatment. The RDC will dispatch a JBPHH officer and paramedics, if applicable, to the location to address the situation and notify key personnel for action or instructions. The PHNSY&IMF Sponsor must make other notifications to appropriate (non-security) personnel, i.e., PHNSY&IMF Docking Officer, Harbor Control, etc.

18. Access to unclassified and classified U.S. Navy shipbuilding, conversion, or repair technology and related technical information manuals, documents, drawings, plans, specifications, etc., by the Contractor shall be restricted to an official need-to-know basis. This type of information shall be handled, controlled, and safeguarded to prevent oral, visual, and documentary disclosure to uncleared personnel, the public, to foreign sources, and to all personnel not having an official need-to-know. It shall be returned to PHNSY&IMF upon completion of contracted work, except when the GCA grants specific retention authorization. In addition, contractor personnel will protect unclassified PHNSY&IMF critical information in accordance with OPSEC requirements, see reference (c).

19. Photography and photographic equipment are prohibited in PHNSY&IMF, to include personal cellular phones with camera features. When operationally required, a written request containing specific justification and details will be submitted to the PHNSY&IMF Security Manager (Code 1122) via the GCA for consideration. If a PHNSY&IMF photographer is unable to take the photographs, authorization will only be granted to the contractor if the contractor has a PHNSY&IMF Sponsor and is under continuous escort of a designated PHNSY&IMF employee. The designated escort shall be briefed by Code 1122. The escort will take the film or photographic media in his or her custody and turn it over to the PHNSY&IMF Sponsor. The PHNSY&IMF Sponsor will mark and control the photographs as “For Official Use Only” and prior to release from PHNSY&IMF, route them in accordance with reference (a) for review and approval of a Distribution Statement.

20. Portable Electronic Devices (PEDs). PEDs include pagers, mobile/cellular telephones (with/without cameras), personal digital assistants/job performance aids, laptop/notebook/handheld computers, digital imagery (still/video) devices, analog/digital sound recorders (e.g. I-PODs), Fit-Bits, I-Watches, video game devices, USB devices, and devices of similar capability, functionality, or design. Personal PED devices such as those listed above are prohibited on PHNSY&IMF premises. Personal PEDs with the capability of recording, transmitting or exporting photographic or video images of any kind are prohibited. Non-camera PED devices can have audio recording capability but this feature cannot be used in the CIA or any other PHNSY&IMF space. Personal PEDs with image or video recording capability that have been disabled either physically or by software are prohibited. Violations may result in the confiscation and sanitization of the PEDs. The only approved method of sanitizing most PEDs is physical destruction.

a. All personnel authorized to use PEDs in PHNSY&IMF workspaces, whether personal (includes contractor-owned) or government-owned, are required to comply with references (d) and (e).

b. For personal PEDs without camera devices approved for contractor use in PHNSY&IMF spaces, the user shall follow:

(1) Personal PEDs must not handle, process, or store any U.S. Government information that has not been authorized for public release.

(2) Personal PEDs must not be directly or indirectly connected to any PHNSY&IMF owned and acquired equipment, information systems and networks. This prohibition includes but is not limited to the following connections: wireless network, wired network, all types of USB, Thunderbolt, Bluetooth and RJ-11 modems.

(3) The PEDs will operate in only approved locations. These PEDs are not allowed in spaces processing and/or handling classified information.

(4) Users shall comply with software copyright laws and agreements.

(5) The U.S. Government will not be liable for personal PED hardware/software brought in to PHNSY&IMF premises.

21. Ensure that yellow plastic material is not used for warning signs, covering material, etc.

22. Be responsible for control and security of all contractor-owned equipment and material at the work site. Report immediately, all missing/lost/stolen property to the JBPHH Security Detachment (phone 474-2222) as each case occurs.

23. Ensure that no material is stacked within ten (10) feet of the CIA perimeter. Remove from the work site, or secure, ladders or other such equipment, which could be used to climb the CIA perimeter fence. Ensure that no vehicles are parked within ten (10) feet of the CIA perimeter.

24. Provide written notification to Code 1120 via the GCA, two (2) weeks prior to actual start of work to allow for notification of the appropriate PHNSY&IMF departments, offices, and shops of the impact resulting from the contract work. Such notifications will include specific details such as work schedules (including actual start date for PHNSY&IMF entry), and impact statements concerning tasks to be done, e.g. specific parking spaces to be vacated, inclusive dates involved, traffic rerouting, changes to traffic and parking patterns, traffic/parking controls to be instituted by the contractor, barricades to be erected by the contractor, etc., along with sketches of the particular areas involved.

25. Two weeks prior to making any penetrations (i.e. tunneling under, cutting through a fence or building, etc.) in a restricted area (e.g. CIA fence line, CNIA or NWA) the contractor shall contact Code 1120 via the GCA to make arrangements for a security guard or other measures required to meet all security requirements. The cost for the security guard will be charged to the GCA.

26. Any exceptions to these security requirements must be coordinated with Code 1120.

APPENDIX (1)

DOCUMENTS ACCEPTABLE FOR PROOF OF U.S. CITIZENSHIP (Original documents or certified copies)

1. U.S. BIRTH REGISTRATION CARD (with Registrar’s raised seal and signature)

2. U.S. BIRTH CERTIFICATE (original with raised seal from one of the 50 states or outlying U.S. territories or U.S. possessions)

3. U.S. IMMIGRATION AND NATURALIZATION SERVICE NATURALIZATION CERTIFICATE (INS N-550/570)

4. DD FORM 1966 (U.S. citizenship documents sighted are listed and attested to by a recruiting official)

5. DELAYED BIRTH CERTIFICATE (Original with Registrar’s seal and signature and cites secondary evidence)

6. HOSPITAL BIRTH CERTIFICATE (Original with authenticating raised seal or signature provided all vital information is given)

7. U.S. PASSPORT or U.S. PASSPORT CARD (Not expired)

8. U.S. IMMIGRATION AND NATURALIZATION SERVICE CERTIFICATE OF CITIZENSHIP (INS N-560/561)

9. FORM FS 240 – REPORT OF BIRTH ABROAD OF A CITIZEN OF THE UNITED STATES OF AMERICA/CONSULAR REPORT OF BIRTH

10. FORM FS 545 – CERTIFICATION OF BIRTH (Issued by U.S. Consulate)

11. FORM DS 1350 – DEPARTMENT OF STATE CERTIFICATION

ATTACHMENT (3)

NAVSHIPYD&IMFPEARLINST 5720.5B

11 Aug 2020

FOR OFFICIAL USE ONLY GUIDELINES

1. The DODI 5200.48, Controlled Unclassified Information (CUI) instruction identifies the CUI Registry, which will establish the approved sharing, marking, safeguarding, storage, dissemination, destruction, and records management for documents containing personal information, PII and respective categories of information that may be covered by a FOIA exemption. Once the CUI Registry is completed, document designation, handling and decontrolling must align to it. For now, legacy markings such as For Official Use Only (FOUO) must be used. The term FOUO is used to mark and identify unclassified, non-technical information that may be withheld from the public under the Freedom of Information Act (FOIA) exemptions (b)(2) through (b)(9). This requirement applies to messages, email, letters, memoranda, etc. General information on guidelines for applying FOUO markings are as follows:

a. FOUO applies only to information that has not been given a security classification but which may be withheld from the public under FOIA exemptions (b)(2) through (b)(9) of 5 U.S.C. §552. No other material will be considered or marked "For Official Use Only" or "FOUO".

b. The prior application of FOUO is not a definitive reason for withholding a record requested under FOIA. A determination must be made whether the exemption claimed still applies at the time a request is made under FOIA. Information which can be reasonably segregated and which is not covered under one of the FOIA exemptions must be released.

c. Marking. Records (messages, emails, letters, memoranda, etc.) will be marked by the originator at the time of creation. Originators must also terminate the markings when the information no longer requires protection from disclosure. Known holders will be notified of the termination as practical. At a minimum, "FOR OFFICIAL USE ONLY" must be typed or stamped, in capital letters, at the center bottom of each page of a letter or memorandum. For email messages, "FOR OFFICIAL USE ONLY" or "FOUO" must be typed in the subject line. Classified documents that also contain FOUO information will bear the highest classification marking at the top and bottom of the page.

d. Transmission. FOUO information may be sent between the Department of the Navy (DON) activities, and between DON officials, contractors and grantees who conduct official business for the DON. Transmission will be by means that preclude unauthorized disclosure to the public. If not co-mingled with classified documents, FOUO may be sent via first-class mail or parcel post. Bulky shipments may be sent fourth class.

e. Safeguarding. During normal working hours, FOUO must not be left unattended in work areas accessible by non-government personnel. At the close of business, FOUO records will be stored to preclude unauthorized access. Documents containing Privacy Act (PA) information must be stored in locked containers when workspaces are located in public or shared areas. Filing FOUO records with other unclassified records in unlocked files and desks is adequate when buildings and rooms are locked during non-working hours.

f. Disposal. Controlled unclassified information (CUI), including FOUO, Personal Identifiable Information (PID and personal information, is defined and governed by laws, international agreements, Executive Orders, and regulations that address the identification, marking, protection, handling, transmission, transportation and destruction of CUI. Per NAVSEA M-5510.1C, Pearl Harbor Naval Shipyard and Intermediate Maintenance Facility must ensure that all CUI material identified for destruction is destroyed completely, to prevent anyone from reconstructing the information.

(1) Destroy all FOUO, PII and personal information materials by any of the means approved for the destruction of CUI by using one of the following options:

(a) Any crosscut paper shredder, then disposed of in a dumpster.

(b) A Central Destruction Facility.

(2) Classified information will be destroyed using a high security cross-cut shredders listed on the National Security Agency Central Security Service Evaluated Products List, then disposed of in a dumpster or by a Central Destruction Facility.

(3) It applies, but is not limited to, reports, briefings, meeting notes, memos, sticky notes, user manuals, working papers, operating instructions or similar work related data that contains sensitive information. Newspapers, magazines, commercial wrappers, packing materials, or any other materials of a commercial nature or for nonprofit educational purposes are exempt from the destruction and disposal requirements.

g. Disclosure. Any misuse, unauthorized possession, disclosure, loss or theft of PA protected data may result in criminal, civil penalties or both, appropriate corrective actions including disciplinary actions, up to and including removal. Unauthorized disclosure of FOUO (e.g., business sensitive) records may result in appropriate disciplinary action, up to and including removal.

h. Exemptions

(l) The FOIA is a disclosure statute whose goal is an informed citizenry. Therefore, records are considered releasable unless they contain information that qualifies for withholding under one of the nine exemptions.

(2) If a document contains information that qualifies for withholding under one of the exemptions, FOIA requires that all "reasonably segregable" information be provided. Records may not be appropriate for release if the redactions would reduce the balance of the text to "unintelligible gibberish".

Note: Any unclassified document that contains information that may be protected from disclosure under one of the FOIA exemptions, must be marked, at a minimum, "FOR OFFICIAL USE ONLY." This requirement applies to messages, emails, letters, memoranda, etc.

2. PA. If the document also contains sensitive information protected by the PA, mark it "FOR OFFICIAL USE ONLY-PRIVACY SENSITIVE: Any misuse or unauthorized disclosure may result in both civil and criminal penalties." Information protected by the PA, includes but is not limited to:

a. Financial, credit, and medical data.

b. Security clearance level.

c. Leave balances and types of leave used.

d. Home address and telephone numbers (including home email addresses).

e. Social Security Number (full and truncated).

f. Birth date.

g. Mother's maiden name and other names used.

h. Drug test results and the fact of participation in rehabilitation programs.

i. Family data.

j. Religion, race or national origin.

k. Performance ratings.

l. Names of employees who hold government-issued travel cards, including card data.

m. Marital Status.

n. Age.

text:

Item 10(b) & 10(k): Access to RD, U-NNPI and NNPI NSI are authorized for this contract

Program Manager, Security Oversight rep: Angelo McDuffie (Code 1122) PHNSY & IMF OPSEC Program Manager

-Item 11.j(2): The Operations Security (OPSEC) Plan will be completed prior to award to the potential awardee then forwarded to the OPSEC Program Manager (PM) by encrypted email, through DoD SAFE at https://safe.apps.mil/, or by U. S. Postal Service. All Contractor (including subcontractor) personnel assigned to this contract will accomplish the following requirements in support of Pearl Harbor Naval Shipyard & IMF (PHNSY&IMF) OPSEC Program.

-Item 11.j(3): During the period of this contract, the Contractor personnel may be exposed to, use, or produce, U.S. Government critical information (CI) and observable indicators which may lead to discovery of CI. PHNSY&IMF's CI will not be distributed to unauthorized third parties, including foreign government or companies under Foreign Ownership, Control or influence (FOCI). The Contractor shall protect CI associated with this contract to prevent unauthorized disclosure. The contractor shall protect all CI as stated throughout the plan in a manner appropriate to the nature of the information. Review the OPSEC plan for examples of indicators.

-Item 11.j(4): PHNSY&IMF CI shall not be publicized in corporate wide newsletter, trade magazines, displays, internet pagers or public facing websites. All transmission to personal email accounts (AOL, Yahoo, Gmail, Hotmail, Comcast, etc.,) and posting on social media websites (Facebook, Instagram, Twitter, LinkedIn, etc.,) are prohibited. Media requests related to this project shall be directed to PHNSY&IMF Public Release Authority listed in Item 12 of this DD Form 254.

-Item 11.j(5): The Lead Contractor Point of Contact must review and sign the OPSEC Plan which states "Contractor and all associated employees under this contract will review the plan and will become familiar with not only the guidance detailed in the plan but also the OPSEC process employed to develop these concepts."

-Item 11.j(6): The Contractor and its personnel should realize that disclosure or compromise of CI to unauthorized persons, whether willfully or through gross negligence, carelessness, or indiscretion, may warrant action to remove the individual assigned or to terminate contract. Furthermore, such conduct may be cause for criminal prosecution and imposition of criminal and civil penalties. Any attempt by unauthorized third parties to solicit, obtain, photograph or record incidents of loss/compromise of government Classified or CI business Sensitive, Company Proprietary information related to this or other program must be immediately reported to the Facility Security Officer, Defense Security Service and/or the Naval Criminal Investigative Service and the PHNSY&IMF Security Manager. Questions concerning these requirements shall be directed to the PHNSY&IMF OPSEC Program Manager.

-Item 11.j(7): These OPSEC requirements shall not be imposed at an additional cost to the U. S. Government.

667 Safeguard Street, Suite 100

JBPHH, HI 96860-5033

Address: Commander, PHNSY & IMF (Code 1123) 667 Safeguard Street, Suite 100

JBPHH, HI 96860-5033