Attachment 09_DD254_Draft (1).pdf

Please wait...

If this message is not eventually replaced by the proper contents of the document, your PDF viewer may not be able to display this type of document.

You can upgrade to the latest version of Adobe Reader for Windows®, Mac, or Linux® by visiting http://www.adobe.com/go/reader_download.

For more assistance with Adobe Reader visit http://www.adobe.com/go/acrreader.

Windows is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Mac is a trademark of Apple Inc., registered in the United States and other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.

DRAFT

SAMPLE

PREVIOUS EDITION IS OBSOLETE.

Page of

DD FORM 254, APR 2018

NEEDS DD67

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the National Industrial Security Program (NISP) apply to all security aspects of this effort involving classified information.)

OMB No. 0704-0567 OMB approval expires:

June 30, 2025 The public reporting burden for this collection of information, 0704-0567, is estimated to average 70 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, at whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

RETURN COMPLETED FORM AS DIRECTED IN THE INSTRUCTIONS.

1. CLEARANCE AND SAFEGUARDING

2. THIS SPECIFICATION IS FOR: (X and complete as applicable.)

3. THIS SPECIFICATION IS: (X and complete as applicable.)

a. ORIGINAL (Complete date in all cases.)

b. REVISED (Supersedes all previous specifications.)

4. IS THIS A FOLLOW-ON CONTRACT?

If yes, complete the following:

Classified material received or generated under

5. IS THIS A FINAL DD FORM 254?

If yes, complete the following:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

7. SUBCONTRACTOR(S) (Click button if you choose to add or list the subcontractors -- but will still require a separate DD Form 254 issued by a prime contractor to each subcontractor)

8. ACTUAL PERFORMANCE (Click button to add more locations.)

10. CONTRACTOR WILL REQUIRE ACCESS TO: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

e. NATIONAL INTELLIGENCE INFORMATION:

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. See instructions. Provide details in Blocks 13 or 14 as set forth in the instructions.)

12. PUBLIC RELEASE

Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the National Industrial Security Program Operating Manual (NISPOM) or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified here with at least office and phone contact information and if available, an e-mail address. (See instructions)

13. SECURITY GUIDANCE

The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended.

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. The field will expand as text is added. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. Also allows for up to 6 internal reviewers to digitally sign. See instructions for additional guidance or use of the fillable PDF.)

List of Attachments (All Files Must be attached Prior to Signing, i.e., for any digital signature on the form)

14. ADDITIONAL SECURITY REQUIREMENTS

Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the CSO. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

15. INSPECTIONS

Elements of this contract are outside the inspection responsibility of the CSO.

If Yes, explain and identify specific areas and government activity responsible for inspections. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

17. CERTIFICATION AND SIGNATURES

Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. Upon digitally signing Item 17h, no changes can be made as the form will be locked.

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICIAL

9.0.0.2.20120627.2.874785 DD 254, "DoD Contract Security Classification Specification"

USA Space & Missile Defense Command, Martin Road Bldg 5220, Redstone Arsenal, AL 35898

2. Reagan Test Site Operations Center-Huntsville, (ROC-H), 6000 Technology Dr, Huntsville, AL See Item Addendum A to DD 254

2. Use of non-U.S. Citizens – See DD254 Continuation Pages Enter infomration for "other.": Doran, Cynthia - Chief, Research and Technology Protection (RTP) and Industrial Security Reed, Brad - RTS, Security Manager KWAJ/HSV Benvinda, Oliveira - ACC-RSA Contractor Officer

HUNTSVILLE, AL 35807-3801

Enter public release authority.: USASMDC, ATTN: SMDC-PA, Public Affairs, P.O. BOX 1500, HUNTSVILLE, AL 35807-3801

PERIOD OF PERFORMANCE: xxxxx-xxxx

SECURITY GUIDANCE (ITEM 13) CONTINUATION:

1. Additional Security Requirements:

a. Contractor shall forward a copy of any DCSA letter that informs of any serious contractor facility deficiency to the USASMDC RTS Security Manager and USASMDC Industrial Security Specialist within 48 hours of receipt.

b. Additionally, the contractor shall report to the USASMDC RTS Kwajalein Security Manager, RTS HSV-ROC-H Security Manger, and Industrial Security Specialist (ISS) within 24 hours any incident of possible compromise or security violations. The RTS Kwajalein Security Manager’s telephone numbers are 805-355-2272 and 805-355-9559, ROC-H Security Manager, ROC-H 256-955-2726 and ISS’s telephone number 256-955-5576 (refer to Item 17 for physical address/e-mail address).

c. The prime contractor shall provide the RTS Security Manager and ISS with a copy of all DD 254 issued to subcontractors, to include all revisions. See DD 254, Page 7, Item/Blocks 17a, b, c, & d for the ISS’s contact information.

d. Upon termination or cancellation of any effort, the cognizant Directorate Chief must issue a Memorandum for Record and identify whether or not the effort has Critical Program Information (CPI). The MFR must be cleared by the program Manager (PM), Contracting Officer Representative (COR) and or Technical Manager (TM) within 30 calendar days of the activity’s cancellation/transfer. If the effort has identified CPI, the Directorate Chief must also issue a “Critical Program Information Security Adjudication” MFR within 60 calendar days (to be classified CONFIDENTIAL at a minimum) which details the CPI, CPI location, and the adjudicative method for secure CPI storage after cancellation/transfer. Furthermore, Contractors shall destroy classified material in their possession as soon as possible after it has served the purpose for which it was released by the government, developed or prepared by the contractor, or retained after completion or termination of the contract.

e. In accordance with section 52.246-4 of the Federal Acquisition Regulation, the Government has the right to inspect and test all services called for by the contract, to the extent practicable at all times and places during the term of the contract. The Government shall perform inspections and tests in a manner that will not unduly delay the work. Additionally, Chapter 1-104b of the National Industrial Security Program Operation Manual (NISPOM) states that the designation of a Cognizant Security Office (CSO) does not relieve the Government of responsibility to protect and safeguard the controlled unclassified information (CUI) and classified information for their contracts, or from visiting the contractor to review the security aspects of such contracts. As the USASMDC is the Government requiring activity for this contract, they shall retain the right to conduct bi-annual security Staff Assistance Visits (SAV) (or more frequent inspections if contractor services do not conform with contract requirements) to ascertain the level of compliance with the stated requirements of this DD Form 254 and all derivative or subordinate DD Form 254. These SAVs shall be coordinated by the G-24 staff with the corresponding company’s facility security officer and cognizant Industrial Security Representative from the DCSA. These SAVs shall only be limited to validation of the cleared defense contractor’s (CDC) compliance with the Government’s stated security requirements officially identified in the associated contract’s DD Form 254. These SAV’s will not in any way encumber, inhibit, or negate DCSA’s role as the DoD proponent for Industrial Security and/or agency responsible for NISPOM compliance and facility clearance level (FCL) inspection/accreditation

REFERENCE ITEM 10a; Access to Communications Security (COMSEC) Information.

a. Written concurrence from USASMDC, SMDC-INS-E; the Contracting Officer’s Representative (COR); and, the Contracting Officer (KO) is required prior to subcontracting COMSEC information.

b. Classified COMSEC material is not releasable to contractor employees who have not received a FINAL clearance at the appropriate security level. COMSEC access shall be IAW DOD 5220.22-M, National Security Agency (NSA) Central Security Service NSA/CSS Policy Manual No. 3-16, Control of Communications Security (COMSEC) Material and AR 380-40, Policy for Safeguarding & Controlling Communications Security (COMSEC) Material. When access is required at Government facilities, contractor personnel will adhere to COMSEC rules and regulations as mandated by USASMDC policy and procedures.

REFERENCE ITEM 10b; Access to Restricted Data (RD).

a. Written concurrence from USASMDC, SMDC-INS-E; the COR; and, the Contracting Officer (KO) is required prior to subcontracting RD.

b. Restricted Data Information is not releasable to contractor employees who have not received a FINAL clearance at the appropriate security level.

c. Contractor access to RD will be IAW AR 380-5.

REFERENCE ITEM 10c; Access to Critical Nuclear Weapon Design Information (CNWDI).

a. Written concurrence from USASMDC, SMDC-INS-E; the COR; and, the KO is required prior to subcontracting CNWDI.

b. CNWDI Information is not releasable to contractor employees who have not received a FINAL clearance at the appropriate security level.

c. Contractor access to CNWDI will be IAW AR 380-5.

REFERENCE ITEM 10d; Access to Formerly Restricted Data (FRD).

a. Written concurrence from USASMDC, SMDC-INS-E; the COR; and, the KO is required prior to authorizing FRD access to a subcontractor.

b. The contractor is permitted access to FRD in performance of this contract. FRD is not releasable to contractor employees who have not received a minimum interim SECRET clearance.

c. Contractor access to FRD will be IAW AR 380-5.

REFERENCE ITEM 10e (2); Access to Intelligence Information (non-SCI)

a. Written concurrence from USASMDC, SMDC-INS-E; the COR; and, the KO is required prior to subcontracting Non-SCI.

b. Non-SCI information is not releasable to contractor employees who have not received a FINAL clearance at the appropriate security level.

c. The following guidelines concerning control and dissemination of intelligence information are based on Intelligence Community Directive (ICD) 703, 21 June 2013:

(1) Intelligence information released under this contract or Request for Proposal (RFP) remains the property of the U.S. Government and may be withdrawn upon notice.

(2) The contractor will maintain a record of all classified intelligence material released to their custody. Unclassified intelligence information will be treated as CUI, formerly known as For Official Use Only (FOUO).

(3) All reproductions of intelligence material will be classified, marked, and controlled in the same manner as original(s).

(4) Prior to granting an employee access to intelligence materials, employees will be briefed on their obligation to comply with these procedures and will be debriefed when access to the material is terminated. A permanent list of all employees having had access to the intelligence materials during this contract will be maintained by the company and will be available for DCSA inspection.

(5) The contractor will not release intelligence material to any activity, employee, or other person not directly engaged in providing services under this contract unless specific written authorization for such release is received from the Government Contracting Activity (GCA). This prohibition precludes release without authority to another contractor, Government agency, private individual, or organization unless a contractual relationship exists in support of this contract. Specific written authorization for such release will be received from the U.S. Army Space & Missile Defense Command (USASMDC), ATTN: SMDC-INS-E, P.O. Box 1500, Huntsville, AL 35807-3801.

(6) The intelligence materials will not be released to foreign nations, non-U.S. citizens or U.S. citizens representing foreign entities except with specific written authorization from the GCA and USASMDC Foreign Disclosure Officer (FDO).

(7) Intelligence materials released to the contractor will be destroyed upon contract completion unless the GCA requests the return of the materials. A copy of the destruction certificate referencing USASMDC control number will be mailed to USASMDC, ATTN: SMDC-INS-E, P.O. Box 1500, Huntsville, AL 35807-3801, in order to remove contractor accountability from USASMDC records. However, returned intelligence information will be sent to the attention of the Contracting Officer’s Representative (COR), address identified in the contract. In the event the contract is extended or a new similar contract requiring the released data is initiated, it is the responsibility of the COR to affect an extension or document transfer with the GCA.

(8) All actions or inquiries concerning intelligence materials on this contract shall identify any USASMDC control numbers, if applicable, and shall be sent to the following address: USASMDC, ATTN: SMDC-INS-E, P.O. Box 1500, Huntsville, AL 35807-3801.

REFERENCE ITEM 10h; Foreign Government Information.

a. Written concurrence from USASMDC, SMDC-INS-E; the COR; and, the KO is required prior to subcontracting Foreign Government Information.

b. Foreign Government Information (FGI) is not releasable to contractor employees who have not received a FINAL clearance at the appropriate security level.

c. Foreign government information is described as information provided to the U.S. by a foreign government or information produced by the U.S. as a result of a joint arrangement with a foreign government requiring that the information or arrangement be held in confidence.

d. Procedures for access to foreign government information in Chapter 10, Section 3, of the NISPOM apply.

e. Classified foreign government information will be afforded the same degree of protection as U.S. classified. Procedures in Chapter 10 of the NISPOM apply.

f. Foreign government information will not be transferred (oral, visual, or documentary) to a third party without the written approval of the USASMDC KO and USASMDC Foreign Disclosure Officer (FDO).

g. Receipt of foreign government information does not authorize the contractor to enter into discussions or release any data to foreign nationals or foreign representatives without an approved export license.

Reference Item 10j.

a. Controlled Unclassified Information (CUI).

(1) Personnel will comply with DOD 5200.48, with regard to safeguarding and handling CUI.

(2) Electronic transmission of CUI, facsimile and data, shall be by approved secure communication systems in accordance with Department of Defense Instruction Number 8582.01.

(3) CUI Training shall be distributed and completed by the Facility Security Officer (FSO).

REFERENCE ITEM 10k; CUI generated and/or provided under this contract shall be safeguarded and marked as specified in DoDI 5200.48. For Official Use Only Information provided under this contract shall be evaluated for CUI applicability FOUO documents will no longer be created refer to DoDI 5200.48..

a. Program Protection Planning (PPP). The prime contractor will include this requirement in all subcontracts awarded in support of this procurement effort.

(1) The Contractor shall provide technical and programmatic support to the U.S. Government Program to identify Critical Program Information (CPI). If CPI is identified, the Contractor shall work with the Program Manager (PM) to develop and update a Program Protection Plan (PPP) IAW DoDI 5000.2, DoDD 5200.39, and DoDD 5200.1-M, and SMDC Policy 380-9. The Contractor shall provide technical and programmatic support to the development of the following documents irrespective whether or not CPI is identified:

(a) Recommendations for SCG Annex IAW DoDM 5200.45;

(b) Technology Assessment/Control Plan (TA/CP) Annex;

(c) OPSEC Plan Annex, which implements the overall program OPSEC plan, relative to locations and activities under the direction of the contractor;

(d) System Security Management Plan Annex IAW DOD 5200.1-M and guidelines described in MIL-HANDBOOK-1785; and,

(e) (If applicable) Anti-tamper Plan IAW DoD memorandum "Guidelines for Implementation of Anti-Tamper Techniques in Weapons System Acquisition Programs", dated 3 May 2000

(2) The contractor shall participate in and ensure those individuals necessary for the successful development of a PPP and/or other documents (SCG, TA/CP, OPSEC Plan, etc.) support Technology Protection Security Working Group meetings. The contractor shall identify Government Furnished Items/Equipment (GFI/GFE) required to develop and execute the PPP and annexes. Contractor security representatives shall review all related documentation to include press announcements, articles, speeches, briefings, etc. prior to public release. The review shall include classification, controlled unclassified information (CUI), and OPSEC considerations. The OPSEC review will seek to identify and limit discussion of sensitive indicators of program activity. The contractor shall develop and implement a security awareness and education program consistent with the government's overall program across all contractor's locations and activities. The contractor shall identify and capture best practices and lessons learned relative to program protection planning and execution for the program

b. Threat Awareness and Reporting Program (TARP). In accordance with Army Regulation 381-12, dated 1 June 2016, Threat Awareness and Reporting Program (TARP), persons employed by Army contractors will report threat-related incidents, behavioral indicators, and other matters of CI interest specified in chapter 3, to the Facility Security Officer (FSO), the nearest military counterintelligence (CI) Office, the Federal Bureau of Investigation (FBI), or the Defense Security Service. Contractor employees working as an integral part of an Army organization are required to complete live annual Threat Awareness training in conjunction with Army personnel. Contractor FSOs will ensure that all applicable requirements are implemented for personnel who work at contractor facilities. The prime contractor will include this requirement in all subcontracts awarded in support of this procurement effort. The training and reporting requirements are applicable to all Army contractors included in the applicable contract, not just those with security clearances.

c. Access to Alternate or Compensatory Control Measure (ACCM) and Focal Point (FP). Access to Alternate or Compensatory Control Measure (ACCM) and Focal Point (FP) programs protected information is authorized in performance of this contract. ACCMs information must be handled in accordance with DoDM 5200.01-V3.

d. Applicable Security Classification Guides (SCGs). The below listed security classification guides (SCG) apply to this specification. Contact the USASMDC COR (as identified in Item 13) for copies of the below identified SCG(s). In the event that a security classification guide is superseded or replaced, it is the responsibility of the COR to provide such guides to the contractor.

(1) Department of the Army, U.S. Army Space and Missile Defense Command (USASMDC), Space and Missile Defense Security Classification Guide, 29 April 2013.

(2) Department of Defense, Missile Defense Agency, Ground-Based Midcourse Defense (GMD) Security Classification Guide, August 7, 2006.

(3) Additional security classification guides for specific tasks/program shall be provided by the task order monitor(s), as required.

e. Classified Automated Information Systems (AIS) Processing. Classified AIS processing at the SECRET-level and below (collateral level) required at contractor locations identified in DD Form 254, Item/Block 6.a & 8a. Classified processing will be in accordance with the National Industrial Security Program Operating Manual (NISPOM) (DoD 5220.22-M) and the appropriate security/program guides/directives. Contractors working on-site at USASMDC or other Government facilities shall follow AR 380-5, Department of the Army Information Security Program, AR 25-2, Information Assurance, and other applicable regulations, security procedures, security plans, and security training requirements as identified by the Government Contracting Activity. The contractor shall obtain appropriate security clearances for required personnel.

f. Secret Internet Protocol Network (SIPRNET) Access.

(1) Contractor personnel working on-site at a government location may require access to the SIPRNET at the government location.

(2) The contractor shall not access, download, or further disseminate any special caveated data (i.e., intelligence, NATO, COMSEC, etc.) outside the execution of the defined contract requirements and without the guidance and written permission of the contracting officer. Contractor access to SIPRNET is restricted to sites directly related to meeting the requirements of this contract as validated by the Contracting Officer’s Representative (COR) and/or Performance Work Statement (or equivalent).

(3) SIPRNET access via government accounts may not be subcontracted without prior written authorization from the USASMDC Industrial Security Specialist (SMDC-INS-E); the COR, and the KO.

g. Embedded Contractors (Working On-Site at Government Location(s)).

(1) All contractor personnel with an assigned duty location at a government site shall be U.S. citizens and have, at a minimum, a SECRET clearance.

(2) Contractors located on-site at USASMDC, or working at a facility under USASMDC cognizance, shall comply with the USASMDC Government Security Program to include all applicable security regulations, policies, & procedures. The embedded contractors (prime contractors & subcontractors) shall attend initial security training, annual security refresher training, TARP training, and OPSEC training at the government location.

f. Secure Environment Contracting (SEC). Be advised! Secure does not mean classified – it is another level of securing/protecting unclassified information.

1) Contractors will follow the guidance provided by the KO and the USASMDC G24.

2) Refer to AR 715-30 along with the interim clarification guidance received from the KO listed below: The interim procedures are implemented in order to meet the intent of AR 715-30.

• Non-Classified Internet Protocol Router Network (otherwise known as “NIPR” and DREN) will utilize encryption and password protection, as well as the DoD Secure Access File Exchange (otherwise known as “DoD Safe”), in order to transmit and receive unclassified, non-marked acquisition documents and correspondence.

REFERENCE ITEM 11c; Receive and Generate Classified Material.

a. The contract requires access to classified source data up to and including SECRET, in support of the work effort. Any extracts or use of such data requires the contractor to apply derivative classifications and markings consistent with the source documents. Use of “Multiple Sources” on the “Derived From” line necessitates compliance with the DoD Manual 5200-01, Volume 2, DoD Information Security Program: Marking of Classified Information.

b. Security classification guidance will be provided by the Government Contracting Activity (GCA) and/or Cognizant Security Agency (CSA).

c. Department of Defense (DoD) Components, to include their contractors, shall phase-in the marking standard specified by DoD Manual 5200.01, Volume 2, DoD Information Security Program: Marking of Classified Information, over a period of one year from the date of its issuance (issuance date: February 24, 2012).

REFERENCE ITEM 11d; Fabricate, Modify, or Store Classified Hardware.

a. Contractor must provide adequate storage at their facility for classified hardware to the level of Secret

b. During the performance of this contract it may be necessary for your company to store classified hardware, which because of the nature, size, or unique characteristics, may not fit in an approved security container. AR 380-5 Chapter 7 provides the physical security requirement for Open Storage Area, Vaults, etc.

REFERENCE ITEM 11f; Access to U.S. Classified Information Outside the U.S., Puerto Rico, U.S. Possessions and Trust Territories.

OCONUS activities/travel in accordance with the contract scope and at the stipulation of the Government KO and/or COR. Classified information or materials will remain under the direct control of the U.S. government while in transit and in an overseas area unless prior approval is granted by the KO, COR, AND USASMDC G-2. Release of classified information to a foreign entity will be accomplished in accordance with Chapter 10, NISPOM.

REFERENCE ITEM 11j; Have OPSEC Requirements.

This contract requires the application of Operations Security (OPSEC) in accordance with the Missile Defense and Space Systems Project Office Support Statement of Work, Paragraph 4.15 Contract Require OPSEC Training.

a. Mandatory Cyber Reporting: Mandatory Cyber Reporting: In addition to regulatory reporting requirements, the detection or discovery of any unauthorized access, denial of service, or compromise of a contractor’s classified or unclassified network, information system or data contained thereon will be reported within 24 hours to the USASMDC Information Security Officer, Mr. William E. Ransom, Telephone Number: 256.955.5712, e-mail: william.e.ransom.civ@mail.mil. The prime contractor will include this requirement in all subcontracts awarded in support of this procurement effort.

b. Use Of Non-U.S. Citizens:

(1) Prior approval to use or employ non-U.S. citizens on this contract must be obtained from the USASMDC KO and USASMDC FDO. When requesting non-U.S. citizen access to USASMDC technical data or data not in the public domain in support of the USASMDC contract, include the individual’s full name, country of citizenship, and official status within the U.S. The contractor will include this requirement in all subcontracts awarded in support of this procurement effort.

(2) Unless the contractor has an approved export license or exemption, written approval is required from the USASMDC KO & FDO to release technical data or data not in the public domain to foreign nationals or foreign representatives.

(3) Partnering or sub-contracting with foreign industry will require a 30 day advanced notification by the U.S contractor to the USASMDC KO and the USASMDC FDO. Notification also applies to companies with dual national and third-country national employees.

(4) Registrants and other persons subject to ITAR, EAR, and similar US controls remain obligated to maintain awareness of and compliance with the applicable regulations and the latest Federal Register publications that affect exports of munitions or dual-use articles.

c. . ROC-H, 6000 Technology Drive, Huntsville, AL and Kwajalein

(1) All contractor personnel with an assigned duty location at the ROC-H/Kwajalein, shall be U.S. citizens and have a minimum Interim SECRET clearance. Prior to assignment to such duties, a visit authorization request (VAR) which certifies such clearance, shall be submitted in accordance with the National Security Program Operating Manual (NISPOM).

(2) The USASMDC G2 has security oversight.

(3) The ROC-H facility is a government organization. Contractors are considered visitors.

(4) Any incident of possible compromise or security violation/incident occurring shall be reported to the on-site government Security Manager within 24 hours.

(5) All contractor personnel with an assigned duty location at ROC-H/Kwaj will comply with the USASMDC Huntsville Security Education Program.

REFERENCE Item 15: Inspections. AR 25-2, Information Assurance, AR 380-81, DoD Manuals 5205.07 1-4, Program Managers Handbook, and the Risk Management Framework (RMF).

REFERENCE ITEM 17; Required Distribution.

1. SMDC-INS-E (C. Doran, B. Cecil, N. Hays)

2. COR (Aurora Yancey)

3. CCAM-CAA-B (ACC CONTRACTING OFICER, Benvinda Oliveira)

4. SMDC-TCR-R (USASMDC RTS Security Manager, Brad G. Reed)

6. Technology Management Office (TMO), ATTN: DACS-ZDV-TMO, 200 Army Pentagon, Washington, DC 20310-0200.

Redstone Arsenal, AL 35898 Enter address (include zip code).: 5224 Martin Rd.

Redstone Arsenal, AL 35898