Attachment 10 - SSO AFRL SCI Addendum.pdf

SENSITIVE COMPARTMENTED INFORMATION (SCI)

ADDENDUM TO DD FORM 254 (Block 10e (1)) As of June 2025

Company Name:

Contract #:

Expiration date:

SCI CM Name:

Office Symbol and Phone:

1. Ref DD 254 Block 14: This contract requires access to Sensitive Compartmented Information (SCI). The following references are offered to provide the necessary guidance for physical, personnel, information, and information systems security measures and are part of the SCI security specifications for the contract: National Security Act of 1947, as amended; Executive Order (EO) 12333, as amended; EO 13526; EO 13549; EO 12829; EO 12968, as amended; 32 CFR Part 2001; 32 CFR Part 2003, 32 CFR Part 2004; and other applicable provisions of law; DoD Manual 5105.21 Vols 1-3; AFMAN 14-403; AFMAN 14-401; DoDM 5220.22 Volume 2_AFMAN16-1406V2_AFMCSUP; ICD 701; ICD 703; ICD 704/ICPGs 704.1, ICPG 704.2, ICPG 704.3, ICPG 704.4; ICD 705; ICS 705-1; ICD 710; and ICD 503.

2. Ref DD 254 Block 12: SCI will not be released to contractor employees without the specific release approval by the originator or designated authority of the material as outlined in the governing directives and based on prior approval and certification of “need-to-know” by the SCI Contracting Officer’s Representative (COR) or Contract Monitor (CM), identified above.

3. Names of contractor personnel requiring access to SCI and justification for SCI positions will be submitted for approval and action to the supporting SSO by the SCI CM once billets are established. Upon receipt of written approval from the SCI CM, the Facility Security Officer and/or Contractor Special Security Officer (CSSO) may submit the necessary forms to Defense Counterintelligence and Security Agency (DCSA) for a Tier 5 investigation for those personnel nominated for SCI access. The FSO/CSSO will monitor the approved system of record for status changes affecting adjudication and eligibility for personnel under their cognizance and notify the SSO when changes are noted.

4. This contract will require SCI positions in order to fulfill contractual obligations incurred. SCI access is subject to U.S. Government review and approval as outlined in the aforementioned SCI security guidance. Upon completion, expiration or cancellation of the contract, the SSO/CSSO will debrief all personnel not required for contract closeout and SCI positions will be removed.

5. The SSO/CSSO must restrict access to only those individuals who possess the necessary access and who are actually providing services under the contract. Further dissemination to other contractors, sub-contractors, other government agencies, private individuals or organizations is prohibited unless authorized in writing by the releasing agency.

N/A when box 13 is checked Controlled By:

Controlled By:

CUI Category:

Distribution Dissemination Controls:

POC:

SUPPORTING SSO: SSO AFRL

OFFICE SYMBOL: XP2

ADDRESS: 1684 Fourth Street, WPAFB OHIO 45433

PHONE NUMBER: 937-255-5745

6. SCI materials furnished in support of this contract remain the property of the DoD department or command that released it. Upon completion, expiration or cancellation of the contract, all SCI materials furnished will be returned to the direct custody of the originator of the materials or the CM.

7. Classified foreign intelligence materials must not be released to foreign nationals or immigrant aliens whether or not they are also consultants, US contractors, or employees of the contractor, regardless of the level of their security clearance, except with advanced written permission from the originator.

8. The CSSO must not reproduce classified foreign intelligence without advance approval of the releasing agency. If permission is granted, each copy will be controlled in the same manner as the original. The CSSO must not destroy any classified foreign intelligence without advance approval of the releasing agency.

9. Contractor personnel must maintain accountability for all intelligence (to include foreign intelligence) materials released to their custody.

10. Inquiries pertaining to classification guidance on SCI will be directed to the CM listed above. SCI security infractions, violations and incidents shall be directed to SSO AFRL via the phone number identified at the top of this document.

11. All DD Form 254s prepared for subcontracts involving access to SCI under this contract must be forwarded to the CM for review and then to the servicing SSO for review and coordination prior to award of the subcontract.

12. Ref Item 11i: Emanations security (aka TEMPEST) requirements apply to the SCIF execution location. See Defense Federal Acquisition Regulation Supplement (DFARS) Clause 252.239-7000, Protection Against Compromising Emanations, dated 25 June 2004, revised 10 January 2008; Intelligence Community (IC) Tech Spec-for ICD/ICS 705 26 July 2021, Technical Specifications for Construction and Management of Sensitive Compartmented Information Facilities;

Committee on National Security Systems Advisory Memorandum (CNSSAM) TEMPEST/01-13, Red/Black Installation Guidance, dated 17 January 2014.

13. If SCI access is ONLY for meetings, conferences, demonstrations, etc., check box and skip paragraph 14.

14. An SCI Facility (SCIF) meeting the physical security requirements outlined in ICD 705 is required for this contracting effort. All SCI used for this contract shall be stored, handled, and maintained in an accredited SCIF, be it the local contractor SCIF or similarly SCI accredited facilities used by the contractor. If the contractors' place of performance is in a SCIF, or if they are accessing an SCI IT system, or generating SCI in any format, the places of performance will be identified in the DD 254 item 8a AND listed on this form.

15. For contract work within an approved contractor facility, all AF IC SCI & ISR information systems will be accredited and authorized through the Designated Authorizing Official using the XACTA system. These are processed through the Command CISO at HQ AFMC/A2S to the AF IC AO (AF Intelligence Community Authorizing Official).

Other applicable policy as directed by DIA, ODNI, or HQ AFMC shall apply. This includes all electronic connectivity and electronic methods for storing and communicating within and outside the SCIF.

16. Other networks processing corporate unclassified, SIPRNET, or other collateral information will follow the cognizant authority policy requirements. Prior authorization by a cognizant authority must be obtained prior to operation.

Non-AF SCI systems must be accredited by the designated authority and may require a CUA/JUA for operations in DIA facilities.

17. Ref DD 254 Block 15: This contract requires access to SCI. If the contractor has established a SCIF, DIA and its designees are responsible for all inspections of the contractor SCIF and SCI security management for ensuring compliance related to SCI security regulations and policies. The supporting SSO maintains security cognizance for all SCI requirements on this contract. Inspections of the SCIF(s) will be conducted by the Intelligence Community accrediting agency who approved the SCIF or their delegated official. The Defense Counterintelligence and Security Agency (DCSA) is relieved of security oversight for SCI performance.

18. Visits Requests (VR): The contractor will submit the VR for SCI visits through the CM for approval of the visit.

The VR must be submitted by the CM, COR or SCI personnel authorized to sign via the SSO Share Point VR tool at least seven working days prior to the visit.

19. This contract requires that the contractor have courier authorization in order to transport classified materials between work locations. This authorization is based on duty location and distance and will be processed IAW DODM

5105.21 V1. Check here if applicable:

Phone:SCI requirements reviewed and approved by: SSO AFRL Industrial Security.

**NOTE 1: AN APPROVED CUA or JUA IS REQUIRED FOR NON-AF SCIF(s) BEFORE CONTRACTOR

BILLETS CAN BE ESTABLISHED ON THE CONTRACT.**

**NOTE 2: MARK CUI IN HEADER AND FOOTER WHEN SCIF LOCATION(s) ARE IDENTIFIED.**

List SCIF information below in the following format: (Not required when box 13 above is checked) (CUI) Office Symbol and/or Company Name; Street Address, Bldg#, City, State, Zip code, SCIF ID, SSR/CSSO Name, Phone number.