Attachment 14 PWS - DIA Region IV FSS TE-4 DIA Security Requirements 20221208.pdf

PWS Technical Exhibit 4 DIA Region IV FSS Security Requirements for DIA Contracts at Secure Facilities

Page 1 of 6 08 December 2022

(U) SECURITY REQUIREMENTS FOR DIA CONTRACTS AT SECURE FACILITIES

(U) Facility Clearance Requirements: The Contractor shall possess a Top Secret (TS) facility security clearance. Performance under the contract may require that the Contractor access data and information sensitive to another government agency, another government contractor, or of such nature that its dissemination or use other than as specified in this contract would be averse to the interests of the Government or others. Neither the Contractor, nor its contractor employees, shall divulge or release any information developed or obtained during contract performance, except to specifically authorized Government personnel or upon written approval of the Contracting Officer (KO). The Contractor shall not use, disclose, or reproduce any sensitive contract information that bears a restrictive legend, other than as specified in this contract.

Address or report any question regarding information contained within the SOW to the KO.

(U) Safeguarding: Contract facility must possess and retain a level of equal to the facility clearance level granted by the Defense Security Service and must be equal or higher than the level of classified information authorized by contract requirements.

(U) SCI Security Requirements: Contract employees shall be United States (U.S.) citizen possess and maintain a final TS security clearance issued by the Office of Personnel Management (OPM), the Defense Industrial Security Clearance Office (DISCO), or another government agency for contract personnel providing support to referenced contract in accordance with DoD 5200.2-R (DoD Security Program), DoD 5105.21, Vol 1-3 (Sensitive Compartmented Information Administrative Security Program), and Intelligence Comm unity Policy Guidance number 704.1(Personnel Security Investigative Standards and Procedures Governing Eligibility for Access to Sensitive Compartmented Information and Other Controlled Access Program Information). The facility Security Officer (FSO) or Contract Special Security Officer (CSSO) must ensure that contract personnel who have been nominated to support the referenced contract have completed actions to take an ownership or servicing role within JPAS under its Security Management Office Code. The FSO or CSSO is required to verify that the nominated contractor possess a final Top-Secret clearance based upon a current Single Scope Background Investigation (SSBI), Periodic Re-investigation (PR) or Phased Periodic Re-investigation (PPR).

If the current investigation is out-of-scope, the FSO or CSSO must initiate a PR or PPR and it must be reflected in JPAS prior to submitting an SCI nomination.

Note:

(U) Interim Clearance: Contract personnel who have been granted an Interim SECRET or TOP SECRET clearance by DISCO or another agency are not authorized to be nominated for SCI eligibility until, which time the SSBI has been completed.

(U) Reciprocity: Contract personnel who were previously granted SCI eligibility within the last 24 months and or are currently in SCI access with no deviations, waivers or exceptions will be reviewed to reciprocally accept SCI eligibility/access.

(U) SCI/Collateral Nomination Information: An SCI nomination letter/memorandum nominating the contractor employee for access to SCI must include the following information:

(U) Contractor must submit an SCI nomination letter on company letterhead for FTEs based upon authorized positions containing the following:

• Company Cage Code (Prime or Sub-Contract):

• Name (Last, First, Middle):

Page 2 of 6 08 December 2022

• Former Name/Aliases:

• SSN:

• Home Address:

• Home Phone:

• Cell Phone:

• Email Address:

• Place of Birth (City/State):

• Date of Birth:

• Citizenship:

• Country of Birth (If other than US):

• Duty Position:

• Contract Number:

• Clearance Level:

• Investigation date/type:

• Investigative Agency:

• Granting Agency:

• Polygraph Type (None, CI, or FS):

• Polygraph Date and Agency Completing Polygraph:

• Contract Start and End Dates:

• Location(s) of performance:

(U) Submission of the SCI security nomination to the DIA COR or Special Security Contact Officer (SSCO), facilitates the coordination with the contract employee, FSO or CSSO to coordinate the scheduling of a counterintelligence-scope polygraph (CSP) examination with DIA's Credibility Assessment office. Contract personnel who possess a current or acceptable polygraph (CI or Lifestyle) will be reciprocally accepted based upon verification in JPAS and or Scattered Castles.

(U) Polygraph Requirements: All contractor employees identified to perform work for DIA, where contract support requires access to DIA information, facilities, or systems must successfully complete a CSP examination in accordance with Intelligence Community Policy Guidance 704.6 and DoD Directive 5210.48 or have a valid polygraph examination displayed in JPAS or Scattered Castles from another federal agency to be reviewed to determine reciprocity PRIOR to scheduling and completing the SCI indoctrination process and accessing DIA systems, facilities, or information.

(U) SCI and NATO Indoctrination Process: The COR or SSCO will schedule contract personnel for SCI and NATO indoctrination with the DIA SSO upon granting of SCI eligibility by the DIA Central Adjudication Facility and successfully completed and or validated a current polygraph.

(U) Unfavorable SCI Determination or Unsuccessful Cl Polygraph: The DIA CAF will advise the COR or SSCO when an un-favorable SCI determination has been rendered and or un-successful completion of a CI polygraph, resulting in the contractor not being authorized to provide support to DIA associated with SCI contracts.

(U) SCI Suspension or Revocation Requirements: The Government reserves the right to suspend or revoke SCI eligibility based upon ICD 704, Personnel Security Standards and Procedures Governing Eligibility for access to SCI and other Controlled Access Program Information, based upon violation or deviation from established administrative or security procedures by contract personnel that may result in the revocation of their security clearance, removal from the facility, denial of future entry, and possible civil or criminal proceedings. The Contractor and its employees shall cooperate fully in security matters, which may arise relating to this contract. Failure to do so

Page 3 of 6 08 December 2022 may be interpreted as purposeful noncooperation and may result in removal from contract, SCI access and security processing.

(U) Security Requirements: All contract personnel providing support to the referenced contract are required to adhere to requirements identified in this SOW, DD-254 continuation pages, applicable Federal, DoD, and DIA directives, instructions and standard operating procedures, that includes the proper handling and safeguarding classified and un-classified information. Sponsor rules, regulations, direction, and requirements issued by COR or other authorized personnel for good order, administration, and security will apply to all Contractor personnel who enter the Government's facilities. The Contractor shall comply with established security procedures for entering a facility and/or any special procedures that may be established for certain restricted areas. All persons granted access to premises in connection with the performance of this contract will be subject to the provisions of criminal or other laws protecting classified or intelligence information, including provisions of the espionage laws (sections 793, 794 and 798 of Title 18, United States Code), provisions of the Intelligence Identities Protection Act of 1982 (P.L. 97-200, SO U.S.C., 601 et. Seq.), and Section 1903 of Title 32, Code of Federal Regulations (CFR).

(U) Debrief Requirements: The contractor shall relinquish government issued credentials consisting of IC or DIA Staff badge, Common Access Card (CAC) and Courier Card when applicable, and any other government issued badges or system access cards upon resignation, removal from contract, termination from company, suspension or revocation of security clearance or SCI access or end of period of performance of contract. Contractor shall coordinate with the COR or SSCO to notify the DIA SSO to relinquish badge(s) CAC or courier card upon ending contract support with DIA and to receive SCI debriefing, resulting in the removal of SCI accesses from the agency's internal security database Total Integrated Team Access Network (TITAN) and

JPAS.

(U) The CSSO/FSO must immediately take possession of government issued credentials from contract personnel upon discontinuing contract support with DIA and notify the COR or SSCO to facilitate deactivation & revocation of credentials and administrative SCI debriefing within TITAN and JPAS.

(U) Disposition of Government Information and or Equipment: The Contractor shall not release information (including photographs, files, public announcements, statements, denials or confirmations) on any part of the subject matter of this contract, on any phase of any Government program, or regarding any individuals, without the prior written approval of the Contract Officer.

The Contractor may provide only the following information regarding this contract in the past performance section of any proposal that it submits in response to any solicitations issued by any local, state, or U.S. Government agency:

The unclassified contract number.

The unclassified contract type.

The unclassified contract award date.

The unclassified contract dollar value.

The unclassified contract periods of performance.

The unclassified contract project title.

The unclassified contract work description summary.

The unclassified contract places of performance.

Information Bulletin DIA Field Support Activity Rivanna Station

DIA FSARS Bulletin 2-2011 14 April 2011

References.

a. DIA Instruction 8460.002, Portable Electronic Devices

b. DIA Instruction 5200.400, Possession of Firearms and Dangerous Weapons in DIA Facilities

Restrictions on Items in DIA Facilities

The referenced documents establish DIA policy on items that may and may not be brought into DIA sensitive compartmented information facilities (SCIF), as well as non-SCIF facilities.

Though other items are included in DIA restrictions, a major focus of DIA restrictions is on personally-owned and contractor-owned portable electronic devices (PED). Reference a. defines a PED as any easily transportable electronic device that has a capability to record, copy, store, and/or transmit data, digital images, video, and/or audio. Examples of PEDs include, but are not limited to, pagers, computers, cellular telephones, radios (AM/FM and satellite), compact discs, cassette players and recorders, personal digital assistants (PDA), digital audio devices, cameras, camcorders, calculators, electronic book readers, and electronic watches with input capability and/or reminder recorders. Though there are some exceptions, most government-owned equipment, including PEDs, are allowed in DIA-owned or leased facilities. Additionally, there may be instances where prohibited items need to be introduced into DIA facilities for operational or other reasons. Exceptions may be granted for these special occasions. For such exceptions, contact Jim Thibodeau, DIA Rivanna Station Security Officer.

Items generally prohibited in all DIA facilities include:

• Knives with blades longer than 2 ½ inches

• Alcohol and illegal drugs

• Firearms and other dangerous items (i.e., weapons, devices, instruments, material, and substances, animate or inanimate, that is used for, or is readily capable of, causing death or serious bodily injury

• iPods, iPod Nanos, MP3 players and like digital audio and video players, electronic book readers (such as Kindles, Nooks or Neos)

• Commercial satellite RF devices, such as Sirius and XM *

• Removable storage media (USBs or thumb drives), audio or optical media (CDs or DVDs), and magnetic media (floppies) *

PWS

TE-4

Security Requirements for DIA Contracts at Secure Facilities DIA Region IV FSS

Page 4 of 6 08 December 2022

• Audio and video recorders which can record, download, and/or store data *

• Secure mobile environment portable electronic devices (SME PED) *

• Digital picture frames

• Personally-owned tablet PCs and laptops that have wireless transmit capabilities (such as IR, 802.11, Bluetooth) **

• Cellular phones and two-way pagers

• PDAs, such as a Blackberry phones

• Cameras (still photography) – film or digital *

• Key fobs (secure ID tokens) **

• Dongles *

• Passive RF identification tags *

• Noise-canceling headphones *

• Wireless devices that convey no intelligence data (such as remote control devices and IR and

Bluetooth mouses) *

• Two-way radios (Government emergency response radios are allowed.)

• Other technologies that may convey intelligence data, such as IR optical or 802.11 keyboards *

• RF ID hand-held receivers, handheld scanners and barcode readers, such as Bluetooth, IR optical, or 802.11 *

• RF ID transmitters and receivers (such as Bluetooth, IR optical, and 802.11) *

• RF ID tags (such as Bluetooth, IR optical, or 802.11) *

• All other wireless transmitters not described in this bulletin

• Auxiliary devices (such as cables, docking devices, and data ports) *

• Electronic watches with record capability

• Computer software *

* Government devices are allowed.

** Government devices are allowed. Contractor devices are allowed if specified in the respective contract; such items must be cleared by local security office.

Many DIA facilities are different from one another and operate under modified rules consistent with the intent of references a. and b. For DIA Rivanna Station, the prohibited items listed above, with the exception alcohol, firearms, and other dangerous items, including knives with blades longer than 2 ½ inches, may be brought into the ULC-1 lobby, the JUIAF lobby, and the JUIAF cafeteria. These items may also be brought into and used in the JUIAF Conference Center (JCC), unless the JCC has been cleared for collateral-level or SCI-level activities. Personally-owned and contractor-owned equipment will not be connected to government networks, i.e., NIPRNET, SIPRNET, and JWICS. Contractor-owned equipment is excepted if required by contract and cleared by the local security office.

Prohibited items are subject to confiscation by DAC personnel, and personnel violating DIA policy are subject to appropriate administrative and/or judicial disciplinary action.

Items generally allowed in DIA facilities include:

PWS

TE-4

Page 5 of 6 08 December 2022

• Radio frequency receive-only devices, e.g., one-way pagers and AM/FM radios that do not have record, storage, or wireless capability

• Audio and video players (CD or DVD) that do not have record, storage, or wireless capability

• Commercially manufactured, mass-produced CDs and DVDs that contain manufacturer’s artist label

• RF remote car locking and alarming devices

• Headphones without embedded microphones or noise-canceling capability

• Calculators, spell checkers, language translators that do not have record, storage, or wireless capabilities

• Government-owned/issued devices, except as specified in the above prohibited items list

• Government-owned removable storage media (USB or thumb drives), audio or optical media

(CDs or DVDs), and magnetic media (floppies)

• Government-owned secure mobile environment portable electronic devices (SME PED)

• Government-owned audio and video recorders that can record, download, and/or store data

• Government-issued personal electronic devices (PED), such as computers, digital photo frames, commercial satellite devices (XM and Sirius radio), key fobs with USB capability, etc.

For additional information on the provisions of this bulletin, please contact Jim Thibodeau, DIA Rivanna Station Security Officer, at (434) 956-2330.

Phillip R. Roberts Chief, DIA Field Support Activity Rivanna Station

PWS

TE-4

Page 6 of 6 08 December 2022