Attachment 0025 - DD254.pdf

Please wait...

If this message is not eventually replaced by the proper contents of the document, your PDF viewer may not be able to display this type of document.

You can upgrade to the latest version of Adobe Reader for Windows®, Mac, or Linux® by visiting http://www.adobe.com/go/reader_download.

For more assistance with Adobe Reader visit http://www.adobe.com/go/acrreader.

Windows is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Mac is a trademark of Apple Inc., registered in the United States and other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.

Addendum Non-Sci Intel-Jan2020

Intelligence Addendum to Department of Defense Contract Security Classification Specification (DD Form 254)

(Non-SCI Contracts)

1. Reference, DOD 5220.22-M, National Industrial Security Program Operating Manual

(NISPOM).

2. Purpose. This addendum provides security requirements in addition to the NISPOM for intelligence information (non-SCI) provided by the Intelligence Division, G-2 (Intelligence and

Security), US Army Aviation and Missile Command (AMCOM) under this contract.

3. Security Requirements for Intelligence Information

a) Intelligence provided under this contract may be used only for that purpose. Contractors are not authorized to disclose further or release intelligence to any of their components or employees not directly engaged in providing services under this contract or to another contractor (including subcontractors) without prior written approval of the Intelligence Division, AMCOM.

b) Contractors will not release intelligence to foreign nationals or immigrant aliens (including those employed by the contractor), foreign contractors or subcontractors (including a US subsidiary of a foreign-owned company), foreign governments, or international organizations without prior written approval of the Intelligence Division, AMCOM.

c) Contractors performing duties inside a Government owned or controlled facility will follow security procedures of the host organization and this addendum.

d) Contractors performing duties outside of Government owned or controlled facilities will establish procedures to control all intelligence received, produced, and held by them in accordance with the NISPOM and this addendum.

e) Intelligence documentation provided to contractors, all reproductions thereof, and all other material generated based on or incorporating data there from (including authorized reproductions), remain the property of the US Government. All reproductions and extractions of intelligence shall be classified, marked, and controlled in the same manner as the original(s).

f) Upon contract termination, the contractor will request in writing, through the Government contracting office, to the Intelligence Division, AMCOM approval to destroy intelligence documentation, reproductions, and/or other material generated based on or incorporating intelligence information or to retain it for use on another contract. The request will cite the document’s number, title or subject, originator, publication date, and overall classification.

Intelligence documentation not specifically authorized for retention or destruction will be returned to the Intelligence Division, AMCOM.

Inquiries/correspondence concerning this addendum will be addressed to Intelligence Division, AMSAM- IS-ID, US Army Aviation and Missile Command, Redstone Arsenal, AL 35898.

US Army Aviation and Missile Command Intelligence Division (AMSAM-ISI)

G-2 (Intelligence and Security) Redstone Arsenal, AL 35898

Contract Intelligence Authorization

Prime Contract Number

W31P4Q-20-R-0015

Subcontract Number

Revision Number: Revision Number:

DD Form 254 Date (YYYYMMDD)

DD Form 254 Date (YYYYMMDD)

Contractor Name, Address, Zip Code (Actual Performance Location)

TBD

Contractor Name, Address, Zip Code (Actual Performance Location)

Contract Monitor Endorsement

The government official identified below will monitor and endorse contractor requirements for specific intelligence information as necessary for contract execution.

COR/COTR/PM Name/Organization/E-mail/Phone

Jerome Paul

IAMD

Jerome.paul.civ@mail.mil 256-313-4910

Signature and Date

Senior Intelligence Officer (SIO) Validation

The government official identified below approves contractor requirements for specific intelligence information as necessary for contract execution.

Chief, Intelligence Division (SIO Delegate) Signature and Date

2020-03-17T13:21:34-0500

HELEM.BRIDGETT.F.1230665580

2020-04-17T06:26:12-0500

HALVERSON.BRYCE.EARL.1109220694

CONTRACT REQUIREMENTS PACKAGE ANTITERRORISM/OPERATIONS SECURITY REVIEW COVER SHEET

Requirements Contract Number ___________________________________________________________________________ Date _________________

____YES ___NO ___SOW

Army Training Certification Tracking System (ATCTS) Registration for Contractors with a Government Information Systems Access Requirement.

Reviewer: ___________________________________________________ Typed or printed name, rank/civ grade

Signature _____________________________________________Date of Review: _______________________________

10. Contracts that Require OPSEC Training.

Antiterrorism Review Signature: I am an ATO (Level II Certified) and have reviewed the requirements package and understand my responsibilities in accordance with Army Regulation 525-13, Antiterrorism .

11. Information Assurance (IA)/Information Technology (IT) Training.

13. Threat Awareness Reporting Program (TARP).

Section III. Remarks:

Operations Security Review Signature: I am OPSEC level II certified and have reviewed the requirements package, and it is in compliance with Army Regulation

530-1, Operations Security .

7. Contracts Handling or Having Access to Classified Information.

Reviewer: __________________________________________________ Typed or printed name, rank/civ grade

Signature _____________________________________________Date of Review: _______________________________

Contracts that Require a Formal OPSEC Program.

6. Access and General Protection/Security Policy and Procedures.

12. Information Assurance (IA)/Information Technology (IT) Certification.

iWATCH Training.

Contractors Authorized to Accompany the Force.

5. Contracts Requiring Performance or Delivery in a Foreign Country.

1. Anti-Terrorism (AT) Level 1 Training.

Section I.

Purpose of cover sheet: To document the review of the requirements package statement of work statement (SOW) quality assurance surveillance plan and any applicable source selection evaluation criteria for antiterrorism (AT) and other related protection matters to include, but not limited to: AT, operations security (OPSEC), information assurance (IA)/cyber security, physical security, law enforcement, intelligence, foreign disclosure.

Army policy requirement: A signed AT/OPSEC cover sheet is required to be included in all requirements package except for supply contracts under the simplified acquisition level threshold, field ordering officer actions and Government purchase card purchases. Command policy may require this form for supply contracts under the simplified acquisition level threshold.

Mandatory review and signatures: The organizational antiterrorism officer (ATO) must review each requirements package prior to submission to the supporting contracting activity to include coordination with other staff elements for review as appropriate per section II below. If the requiring activity does not have an ATO, the first ATO in the chain of command will review the contract for considerations. An OPSEC officer review is also mandatory.

Section II. Standard Contract Language Provision/Contract Clause Text Applicability and/or Additional SOW Language. If standard contract or clause language found on page 2 (Section IV) of this form is sufficient to meet specific contract request requirements, check "yes" in block below and include this language in the SOW. If standard contractual text (provisions or clauses) or clause language does not apply, check "no." If the standard SOW language applies, but is not in of itself sufficient, check "yes" and "SOW" and include both the standard language and additional contract specific language in the SOW. If "yes" is marked for items 1, 2, 3, 4, 5, 10, 11 and 13, then training is required. Mandatory training must be measured as a deliverable and evaluated in the QASP.

2. AT Awareness Training for Contractor Personnel Traveling Overseas.

Version 3, dated 21 August 2015

3.

4.

8.

9.

6a.

6b.

Contractors Requiring a Common Access Card (CAC).

Contractors not Eligible for a CAC, but Requires Access to a DoD Facility or Installation.

____YES

____YES

___NO

___NO

___SOW

___SOW

1. Anti-Terrorism (AT) Level 1 Training. (This standard language is for contractor employees with an area of performance within an Army controlled installation, facility or area.)

All contractor employees, to include subcontractor employees, requiring access Army installations, facilities and controlled access areas shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable.

The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR or to the contracting officer, if a COR is not assigned, within 30 calendar days after completion of training by all employees and subcontractor personnel. AT level I awareness training is available at the following website : http://jko.jten.mil

Section IV. Standard Contract Language/Contract Clause Applicability and/or Additional SOW Language.

13. Threat Awareness Reporting Program (TARP).

For all contractors with security clearances. Per AR 381-12 Threat Awareness and Reporting Program (TARP), contractor employees must receive annual TARP training by a CI agent or other trainer as specified in chapter 2, paragraph 2-4b of AR 381-12.

2. AT Awareness Training for Contractor Personnel Traveling Overseas.

This standard language is required for US based contractor employees and associated sub-contractor employees to make available and to receive government provided area of responsibility (AOR) specific AT awareness training as directed by AR 525-13. Specific AOR training content is directed by the combatant commander with the unit ATO being the local point of contact.

7. Contracts Handling or Having Access to Classified Information.

Contractor shall comply with FAR 52.204-2, Security Requirements. This clause involves access to information classified “Confidential,” “Secret,” or “Top Secret” and requires contractors to comply with - (1) The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M);

(2) any revisions to DOD 5220.22-M, notice of which has been furnished to the contractor.

11. Information Assurance (IA)/Information Technology (IT) Training.

All contractor employees and associated sub-contractor employees must complete the DoD IA awareness training before issuance of network access and annually thereafter. All contractor employees working IA/IT functions must comply with DoD and Army training requirements in DoDD 8140.01, DoD 8570.01M and AR 25-2 within six months of appointment to IA/IT functions.

10. Contracts that Require OPSEC Training.

Per AR 530-1 Operations Security, the contractor employees must complete Level I OPSEC Awareness Training. New employees must be trained within 30 calendar days of their reporting for duty and annually thereafter.

9. Contracts that Require a Formal OPSEC Program.

The contractor shall develop an OPSEC Standing Operating Procedure (SOP)/Plan within 90 calendar days of contract award, to be reviewed and approved by the responsible Government OPSEC officer. This plan will include a process to identify critical information, where it is located, who is responsible for it, how to protect it and why it needs to be protected. The contractor shall implement OPSEC measures as ordered by the commander. In addition, the contractor shall have an identified certified Level II OPSEC coordinator per AR 530-1.

6a. Contractors Requiring a Common Access Card (CAC).

Before CAC issuance, the contractor employee requires, at a minimum, a favorably adjudicated National Agency Check with Inquiries (NACI) or an equivalent or higher investigation in accordance with Army Directive 2014-05. The contractor employee will be issued a CAC only if duties involve one of the following: (1) Both physical access to a DoD facility and access, via logon, to DoD networks on-site or remotely; (2) Remote access, via logon, to a DoD network using DoD-approved remote access procedures; or (3) Physical access to multiple DoD facilities or multiple non-DoD federally controlled facilities on behalf of the DoD on arecurring basis for a period of 6 months or more. At the discretion of the sponsoring activity, an initial CAC may be issued based on a favorable review of the FBI fingerprint check and a successfully scheduled NACI at the Office of Personnel Management.

6. Access and General Protection/Security Policy and Procedures. (This standard language is for contractors with an area of performance within an Army controlled installation, facility or area.)

Contractors and all associated sub-contractors employees shall provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements (FAR clause 52.204-9, Personal Identity Verification of Contractor Personnel) as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

8. Army Training Certification Tracking System (ATCTS) Registration for Contractors with a Government Information Systems Access Requirement.

All contractor employees with access to a government info system must be registered in the ATCTS (Army Training Certification Tracking System) at commencement of services, and must successfully complete the DOD Information Assurance Awareness prior to access to the IS and then annually thereafter.

3. iWATCH Training. (This standard language is for contractor employees with an area of performance within an Army controlled installation, facility or area.)

The contractor and all associated sub-contractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity ATO). This local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 calendar days of contract award and within 30 calendar days of new employees commencing performance with the results reported to the COR NLT 45 calendar days after contract award.

4. Contractors Authorized to Accompany the Force. (DFARS Clause 252.225-7040, Contractor Personnel Authorized to Accompany U.S. Armed Forces Deployed Outside the United States.)

This clause shall be used in solicitations and contracts that authorize contractor personnel to accompany US Armed Forces deployed outside the US in contingency operations; humanitarian or peacekeeping operations; or other military operations or exercises, when designated by the combatant commander. The clause discusses the following AT/OPSEC related topics: required compliance with laws and regulations, pre-deployment requirements, required training (per combatant command guidance), and personnel data required.

12. Information Assurance (IA)/Information Technology (IT) Certification.

Per DoD 8570.01-M , DFARS 252.239.7001 and AR 25-2, the contractor employees supporting IA/IT functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award.

Version 3, dated 21 August 2015

5. Contracts Requiring Performance or Delivery in a Foreign Country. (DFARS Clause 252.225-7043, Antiterrorism/Force Protection for Defense Contractors Outside the U.S.)

This clause shall be used in solicitations and contracts that require performance or delivery in a foreign country. This clause applies to both contingencies and non-contingency support. The key AT requirement is for non-local national contractor personnel to comply with theater clearance requirements and allows the combatant commander to exercise oversight to ensure the contractor’s compliance with combatant commander and subordinate task force commander policies and directives.

6b. Contractors not Eligible for a CAC, but Requires Access to a DoD Facility or Installation.

Contractor and all associated sub-contractors employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (TSDB) (Army Directive 2014-05/AR 190-13), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative), or, at OCONUS locations, in accordance with status of forces agreements and other theater regulations.

Check Box4: Yes

Check Box3: Off

Check Box5: Yes

Check Box6: Off

Check Box7: Yes

Check Box2: Yes

Check Box8: Off

Check Box9: Off

Check Box10: Off

Check Box11: Off

Check Box12: Off

Check Box13: Off

Check Box14: Off

Check Box15: Off

Check Box16: Off

Check Box17: Off

Check Box18: Off

Check Box19: Off

Check Box20: Off

Check Box21: Off

Check Box22: Off

Check Box23: Off

Check Box24: Off

Check Box25: Off

Check Box26: Off

Check Box27: Off

Check Box28: Off

Check Box29: Off

Check Box30: Off

Check Box31: Off

Check Box32: Off

Check Box33: Off

Check Box34: Yes

Check Box35: Off

Check Box36: Off

Check Box37: Yes

Check Box38: Yes

Check Box39: Yes

Check Box40: Yes

Check Box41: Yes

Check Box42: Yes

Check Box43: Yes

Check Box44: Yes

Check Box45: Yes

Check Box46: Yes

Text2: W31P4Q-20-R-0015

Text3: 02/14/2020

Text4:

Text5: Karen D. Miller

Text6: 02/13/2020

Text8: Jeffrey M. Brothers

Text9: 13Feb2020

2020-02-13T13:47:35-0600

MILLER.KAREN.DENISE.1230957483

2020-02-13T14:33:15-0600

BROTHERS.JEFFREY.MACK.1112779031

DRAFT

SAMPLE

PREVIOUS EDITION IS OBSOLETE.

Page of AEM LiveCycle Designer

DD FORM 254, APR 2018

NEEDS DD67

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the National Industrial Security Program (NISP) apply to all security aspects of this effort involving classified information.)

OMB No. 0704-0567 OMB approval expires:

October 31, 2020 The public reporting burden for this collection of information, 0704-0567, is estimated to average 70 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, at whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

RETURN COMPLETED FORM AS DIRECTED IN THE INSTRUCTIONS.

1. CLEARANCE AND SAFEGUARDING

2. THIS SPECIFICATION IS FOR: (X and complete as applicable.)

3. THIS SPECIFICATION IS: (X and complete as applicable.)

a. ORIGINAL (Complete date in all cases.)

b. REVISED (Supersedes all previous specifications.)

4. IS THIS A FOLLOW-ON CONTRACT?

If yes, complete the following:

Classified material received or generated under

5. IS THIS A FINAL DD FORM 254?

If yes, complete the following:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

7. SUBCONTRACTOR(S) (Click button if you choose to add or list the subcontractors -- but will still require a separate DD Form 254 issued by a prime contractor to each subcontractor)

8. ACTUAL PERFORMANCE (Click button to add more locations.)

10. CONTRACTOR WILL REQUIRE ACCESS TO: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

e. NATIONAL INTELLIGENCE INFORMATION:

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. See instructions. Provide details in Blocks 13 or 14 as set forth in the instructions.)

12. PUBLIC RELEASE

Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the National Industrial Security Program Operating Manual (NISPOM) or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified here with at least office and phone contact information and if available, an e-mail address. (See instructions)

13. SECURITY GUIDANCE

The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended.

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. The field will expand as text is added. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. Also allows for up to 6 internal reviewers to digitally sign. See instructions for additional guidance or use of the fillable PDF.)

14. ADDITIONAL SECURITY REQUIREMENTS

Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the CSO. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

15. INSPECTIONS

Elements of this contract are outside the inspection responsibility of the CSO.

If Yes, explain and identify specific areas and government activity responsible for inspections. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

17. CERTIFICATION AND SIGNATURES

Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. Upon digitally signing Item 17h, no changes can be made as the form will be locked.

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICIAL

9.0.0.2.20120627.2.874785 DD 254, DoD Contract Security Classification Specification List of Attachments [2] (All Files Must be Attached Prior to Signing, i.e., for any digital signature on the form) AT-OPSEC Cover - W31P4Q-20-R-0015 - Signed.pdf CIA Form for W31P4Q-20-R-0015 LRIP-FRP.pdf

Portable electronic devices containing wireless communications or connectivity, audio, video, recording, or transmission capabilities will be prohibited from areas where classified information is discussed, electronically processed, and/or stored.

a. Laptop Computers, Wearable Fitness Trackers and Headphones may be utilized as long as the wireless or cellular capability is disabled (turned off) to include photo, video, or audio. Charging cables and/or any universal serial bus (USB) accessories are not authorized. The devices shall not be connected to any Information System (IS) within the facility. This includes connections for charging and synchronization.

b. Headphones must not be connected to the IS via a USB port nor contain a microphone. Headphones must be disconnected from the IS when not in use.

c. Personnel that are authorized to utilize these devices must be cleared to the same level of the facility in which the device will be introduced.

REFERENCE ITEM 10a & 11h; Access to Communications Security (COMSEC) Information.

NSA/CSS Policy Manual 3-16, “Control of Communications Security (COMSEC) Material”, Aug 05, and National Industrial Security Program Operating Manual (NISPOM) and AR 380-40 Safeguarding and Controlling Communications Security Material, apply to this contract.

REFERENCE ITEM 10h: Foreign Government Information

Classified Foreign Government Information (FGI) is not releasable to contractor employees who have not received a clearance at the appropriate security level. Written concurrence of the Contracting Officer (KO) is required prior to subcontracting.

REFERENCE ITEM 10j; For Official Use Only Information (FOUO).

Contractor will comply with the requirements of DoDM 5200.01, Volume 4, (Pages 11-18), Section 2, for the processing of FOUO information in this contract.

REFERENCE ITEM 10k; Other

a. The Contractor shall not release to anyone information outside the program, regardless of medium (e.g., film, tape, document), pertaining to any part of this contract or any program related to this contract, unless—

- Approval for Release of Information has been obtained through the official PEO Missiles and Space Public Release Process and the Contracting Officer has given prior written approval; or

- The information has previously been approved for public release through the official PEO Missiles and Space Public Release Process.

Requests for approval shall identify the specific information to be released, the medium to be used, and the purpose for the release. The Contractor shall submit its request to the Contracting Officer and the USAAMCOM, Office of Public and Congressional Affairs, AMSAM-PC, Redstone Arsenal, AL 35898 at least 10 days before the proposed date for release.

The Contractor agrees to include a similar requirement in each subcontract under this contract. Subcontractors shall submit requests for authorization to release through the prime contractor to the Contracting Officer.

The Contractor shall adhere to IA regulations and security policies including the Federal Information Security Management Act (FISMA); AR 25-1 Army Information Technology; AR 25-2 IA; Army BBPs; Any applicable DoD 8500 series Directives and/or Instructions and their associated references (Cyber security); National Institute of Standards and Technology (NIST) SP 800 series Special Publications (SP) and their associated references; CNSSI No. 1253 Security Categorization and Control Selection for National Security Systems; Chairman of the Joint Chiefs of Staff Instruction (CJCSI) and Chairman of the Joint Chiefs of Staff Manual (CJCSM) 6000 Series; National Security Agency (NSA) Guides; Defense Information System Agency (DISA) Security Technical Implementation Guides (STIGs).

b. Contractor access to SIPRNET via government accounts is restricted to only sites directly related to meeting the requirements of this contract as validated by the COR and/or the Statement of Work (SOW). The contractor will not access INTELLINK-S while on the SIPRNET without formal access authorization of the COR. SIPRNET access via government account may not be subcontracted without prior written authorization of the KO, COR, and the IAMD Security Manager in accordance with DOD 5220.22-M, National Industrial Security Program Operating Manual (NISPOM), Paragraph 9-304.

REFERENCE ITEM 11c; Receive and Generate Classified Material.

Contact the PEO MS COR (as identified in Item 13) for copies of the below identified SCG(s). In the event that a SCG is superseded or replaced, it is the responsibility of the COR to provide such guides to the contractor. The following SCG(s) apply to this contract:

1. PATRIOT Air and Missile Defense System Security Classification Guide, dated 19 April 2018.

2. The Sentinel Radar System Security Classification Guide, dated 25 May 2017.

3. Integrated Air and Missile Defense (IAMD) Project Office Security Classification Guide, dated 08 November 2018.

4. Army Automated Tactical Systems Security Classification Guide, dated September 2014.

5. Single Integrated Air Picture (SIAP) Security Classification Guide (v2.0), dated 30 March 2009.

6. Warfighter Information Network – Tactical (WIN-T) Increments 2&3, dated 5 January 2012.

7. Anti-Tamper Security Classification Guide, dated 17 March 2010.

8. Anti-Tamper Security Classification Guide Change 1, dated 18 April 2011.

9. Anti-Tamper Security Classification Guide (SCG) Change 2, dated 19 May 2014.

10. Cooperative Engagement Capability Security Classification Guide, dated 13 May 2008.

11. Indirect Fire Protection Capability Increment 2-Intercept (IFPC Inc 2-I) Block 1 Security Classification Guide, dated, 28 November 2016

12. Security Classification Guide for Cyberspace Operations and Security, dated 29 May 2015.

REFERENCE ITEM 11g: Authorized to Use the Services of the Defense Technical Information Center (DTIC) or Other Secondary Distribution Center.

Contractor access to DTIC information is restricted to contractual subject matter and SOW performance requirements. The Contract Office or Program/Project Manager will verify contractor need-to-know via certification on the DD Form-1540.

REFERENCE ITEM 11i; TEMPEST

Per AR 380-27, paragraph 2-6, a TEMPEST Countermeasures Review (TCR) will be conducted by an Army Certified TEMPEST Technical Authority (CTTA). TCR will be requested by the GCA via secure e-mail address 902d310thTEMPEST@mi.army.smil.mil) upon award of the contract. The TCR will be conducted at the contractor's facility where classified information or material is to be received, generated or stored electronically. Results of the TCR will be provided the contractor, who will ensure that all applicable AR 380-27 requirements are implemented. Prime contractors cannot impose TEMPEST countermeasures upon subcontractors without GCA or CSA approval.

REFERENCE ITEM 11j; Have Operations Security (OPSEC) Requirements.

Contractor is required to develop an OPSEC Plan in accordance with DD Form 1423, Contract Data Requirements List, DD Form 1664, and Data Item Description. GCA approval is required prior to imposing OPSEC requirements on a subcontractor.

A Program Protection Plan (PPP) and supporting annexes will be provided as GFI, per DODI 5200.39, dated 16 Jul 08. The contractor will follow guidance in the PPP and annexes to ensure protection of identified CPI. Requests for clarification will be made to the Program Manager not later than 30 days from receipt of the PPP, its annexes or updates. Any modifications or deviation to the PPP will be made in writing by the PM. The contractor will, as requested by the government, provide input to the updates of the PPP and associated annexes to include participation in the CPI identification.

REFERENCE ITEM 11l; Other a.. IAW AR 381-12, Threat Awareness and Reporting Program (TARP), 4 Oct 10, Contractors will report threat-related incidents, behavioral indicators and other matters of Counter Intelligence (CI) interest specified in Chapter 3, to the Facility Security Officer (FSO), the nearest military CI office, the FBI, or the DSS. Contractor employees working as an integral part of the Army organization ARE REQUIRED TO COMPLETE ANNUAL Threat Awareness training. Contractor FSOs will ensure that all applicable AR 321-12 requirements are implemented for personnel who work at contractor facilities.

b. Concurrence of the Contracting Officer and PEO MS Foreign Disclosure Officer (FDO), will be obtained prior to issue of a Limited Access Authorization to a non-U.S. citizen in compliance with the NISPOM. Controlled Unclassified information as defined in DoDM 5200.01, VOL 4, may be disclosed to U.S. persons who are employed by the prime contractor of subcontractors or to such employees who are foreign persons when requirements of export control and other laws are met. The contractor is responsible for compliance with all applicable laws and regulations governing access to Classified Information or Controlled Unclassified Information.

c. HSPD-12 requires that contractor and all associated subcontractor employees shall provide all information required for background checks to meet installation access requirements of installation Provost marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements (FAR clause 52.204-9, Personal Identity Verification of Contractor Personnel) as directed by DOD, HQDA and/or local policy.

d. The contractor is not authorized to release any data to foreign nationals or foreign representatives without an approved export license.

e. IAW with DOD 5200.01, Volume 3, at a minimum, all on-site support contractors with access to classified information shall receive annual refresher training that reinforces the policies, principles, and procedures covered in their initial and specialized training. A record of completion shall be provided to the CSA.

f. If foreign subcontractors are currently performing on this contract with access to U.S. Classified Military Information or Controlled Unclassified Information, the U.S. contractor will provide the Contracting Officer, the PEO MS FDO and the IAMD Security Manager with a list of the foreign subcontractors. The list will also include the country of origin, work being performed, export license number and by name and citizenship of any third party national citizen performing on the subcontract.

g. The contractor is not authorized to acquire from foreign companies any parts and/or materials by purchase or trade without first obtaining written authorization from the government Contracting Officer.

h. Questions concerning any aspect of security will be referred to the IAMD Security Manager, 256-313-3544, Karen.d.miller42.civ@mail.mil.

The estimated date of completion of this contract is 31 July 2026.

The technical point of contact/COR is Jerome Paul, PEO MS/IAMD Project Office, Bldg 5250 Martin Road, Redstone Arsenal, AL 35898, 256-313-4910.

IAMD Security Manager rep: Jerome Paul Contracting Officer Representative

ATTN: SAFE-MSL-OP

Bldg 5250 Martin Road, Redstone Arsenal, AL 35898