Attachment 22 - MJU-76 DD Form 254 Signed.pdf

Please wait...

If this message is not eventually replaced by the proper contents of the document, your PDF viewer may not be able to display this type of document.

You can upgrade to the latest version of Adobe Reader for Windows®, Mac, or Linux® by visiting http://www.adobe.com/go/reader_download.

For more assistance with Adobe Reader visit http://www.adobe.com/go/acrreader.

Windows is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Mac is a trademark of Apple Inc., registered in the United States and other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.

ADDENDUM TO DD FORM 254 (Block 10e (2))

RELEASE OF NON-SENSITIVE COMPARTMENT INFORMATION (NON-SCI) INTELLIGENCE INFORMATION TO

U.S. CONTRACTORS

CONTRACT NUMBER: FA8213-25-R-B009

COMPANY NAME: TBD

EXPIRATION DATE: TBD

COR/CM (Name, Office Symbol, and Phone Number): Marc Mattsson, AFLCMC/EBHK, (801) 775-4462

1. Requirements for access to non-SCI intelligence:

a. Contractor will require access to Non-SCI intelligence information and must comply with directions provided by the COR. The

COR has determined that disclosure does not create an unfair competitive advantage for the contractor or a conflict of interest with the contractor’s obligation to protect the information. The COR/Program Manager will identify what Non-SCI intelligence information is required to satisfy contract requirement.

b. All intelligence material release to the contractor remains the property of the U.S. Government and may be withdrawn at any time. Contractors must maintain accountability for all classified intelligence released into their custody.

c. The contractor must not reproduce intelligence material without the written permission of the originating agency through the

Intelligence Support Office. If permission is granted, each copy shall be controlled in the same manner as the original.

d. The contractor must not destroy any intelligence material without advance approval or as specified by the Program Manager identified under Item 13 of the DD Form 254. EXCEPTION: Classified waste shall be destroyed as soon as practical in accordance with the provision of the Industrial Security Program.

e. The contractor must restrict access to only those individuals who possess the necessary security clearance and who are actually providing services under the contract with a valid need-to-know. Further dissemination to other contractors, subcontractors, other government agencies, private individuals or organizations is prohibited unless authorized in writing by the originating agency through the Program Manager identified under Item 13 of the DD form 254.

f. The contractor must ensure each employee having access to intelligence material is fully aware of the special security requirements for this material and shall maintain records in a manner that will permit the contractor to furnish, on demand, the names of individuals who have had access to this material in their custody.

g. Intelligence material must not be released to foreign nationals or immigrant aliens whether they are consultants, U.S. contractors, or employees of the contractor and regardless of the level of their security clearance, except with advance written permission from the originator. Requests for release of foreign nationals shall be initially forwarded to the contract monitor and shall include:

(1) A copy of the proposed disclosure.

(2) Full justification reflecting the benefits to U.S. interests.

(3) Name, nationality, particulars of clearance, and current access authorization of each proposed foreign national recipient.

g. Upon completion or termination of the classified contract, or sooner when the purpose of the release has been served, the contractor will return all classified intelligence (furnished or generated) to the source form which received unless retention or other disposition instructions (see AFMAN 37-139) are authorized in writing by the Program Manager identified under Item 13 of the DD

Form 254.

h. The contractor must designate an individual who is working on the contract as custodian. The designated custodian shall be responsible for receipting and accounting for all classified material. The inner wrapper of all classified material dispatched should be marked for the attention of a designated custodian and must not be opened by anyone not working directly on the contract.

i. Within 30 days after the final product is received and accepted by the procuring agency, classified intelligence materials released to or generated by the contractor, must be returned to the originating agency, through the Program Manager identified under Item 13 of the DD Form 254, unless written instructions authorizing destruction or retention are issued. Requests to retain material shall be directed to the Program Manager identified under Item 13 of the DD Form 254 for this contract in writing and clearly indicate the justification for retention and identity of the specific document to be retained.

j. Classification, regrading, or declassification markings of documentation produced by the contractor shall be consistent with that applied to the information or documentation from which the new document was prepared. If a compilation of information or a complete analysis of subject appears to require a security classification other than that of the source documentation, the contractor shall assign the tentative security classification and request instructions from the contract monitor. Pending final determination, the material shall be safeguarded as required for its assigned or proposed classification, whichever is higher, until the classification is changed or otherwise verified.

2. Intelligence material carries special markings. The following is a list of the authorized control markings of intelligence material:

a. “Dissemination and Extraction of Information Controlled by Originator (ORCON).” This marking is used, with a security classification, to enable a continuing knowledge and supervision by the originator of the use made of the information involved. This marking may be used on intelligence which clearly identifies, or would reasonably permit ready identification of an intelligence source or method which is particularly susceptible to countermeasures that would nullify or measurably reduce its effectiveness.

This marking may not be used when an item or information will reasonably be protected by the use of other markings specified herein, or by the application of the “need-to-know” principle and the safeguarding procedures of the security classification system.

b. Authorized for Release to (Name of the Country(ies)/International Organization).” The above is abbreviated “REL .”

This marking must be used when it is necessary to identify classified intelligence material the U.S. Government originator has predetermined to be releasable or has been released through established foreign disclosure channels to the indicated country(ies) or organization.

3. The following procedures govern the use of control markings.

a. Any recipient desiring to use intelligence in a manner contrary to restrictions established by the control markings set forth above shall obtain the advance permission of the originating agency through the Program Manager identified under Item 13 of the

DD Form 254. Such permission applies only to the specific purposes agreed to by the originator and does not automatically apply to all recipients. Originators shall ensure that prompt consideration is given to recipients’ requests in these regards, with particular attention to reviewing and editing, if necessary, sanitized or paraphrased versions to derive a text suitable for release subject to lesser or no control markings.

b. The control marking authorized above shall be shown on the title page, front cover, and other applicable pages of documents, incorporated in the text of electrical communications, shown on graphics, and associated (in full or abbreviated form)‚ with data stored or processed in automatic data processing systems. The control marking also shall be indicated by parenthetical use of the marking abbreviations at the beginning or end of the appropriate portions. If the control marking applies to several or all portions, the document must be marked with a statement to this effect rather than marking each portion individually.

c. The control markings shall be individually assigned at the time of preparation of intelligence products and used in conjunction with security classifications and other marking specified by E.O. 13526 and its implementing security directives, in addition to previous Executive Orders. The marking shall be carried forward to any new format in which the same information is incorporated including oral and visual presentations.

GENERAL - Details or information related to:

Program Information on Development, Acquisition, and

Test Programs Program Management Directives (PMDs), Operational requirement documents, Acquisition Plans Program Introduction Documents (PIDs) Statements of Capability for Specific Programs Test Directives and Amendments Test Schedules Delivery Dates of Major items and Supplies Test Results (System/subsystem, Developmental and

Operational Tests) Contract Information Documents Describing Test Capability Improvements Production and Delivery Dates (Assets Availability, etc.)

Dates of Operational Capabilities (Initial or Full

Operational Capability, etc) Weapon Systems details, such as specifications, drawings, capabilities, limitations, and vulnerabilities of those under development or test, and photos of internal components

Weapon system technology, concepts of use application and design information

Limitations and vulnerabilities of test resources Radio frequencies Countermeasures against security vulnerabilities Personnel security clearance information Security Classification Guides Program Protection Plans Engineering drawings and specifications for planned test facilities Details of logistics plans (use and consumption rates, number of weapons in each location, shifts in manning, spares requirements, number of bed down locations, etc.)

Fuel service requirements for test missions Weapon and communications systems shortfalls detrimental to your mission (ground, space segments, etc.)

Acquisition programs or studies for future capabilities (new technology insertion, etc.)

Training and/or equipment vulnerabilities and limitations

Directorate, Division or Branch travel itineraries/flight plans

GENERAL-Continued - Details or information related to:

Identity of fixed/mobile assets/one-of-kind systems Maintenance records and supply usage (logistics trail) Unclassified cutting-edge technology innovations Program master schedules Correspondence relating to system performance System safety documentation and associated schedules Funding ACAT programs (International Cooperatives, ID, 3600, 3400, R&D, etc.)

Production Schedule (quantity/lot, total quantity)

Protect OPSEC CIIL information at all times to include places such as: home/teleworking, gym, base exchange, shoppette, off base, etc.

Control access to documents, transmit/discuss data using appropriate security measures (SIPR, secure phone and email encryption)

SHRED ALL information including personnel SSAN, phone numbers & addresses, schedules, rosters

Disclose information on need-to-know basis, exercise sound situational awareness, use proper security markings

Understand/beware of the risks associated with posting information on Social Networking Sites- do not disclose unauthorized information to include photography

Educate friends and family to practice safe OPSEC

Primary: Tamara Newcomb – 777-8973 Alternate: Isaac Robinson – 777-9939

ARMAMENT DIRECTORATE

CRITICAL INFORMATION AND

INDICATORS LIST

Current as of 15 April 2024

ARMAMENT DIRECTORATE CIIL: THINK OPSEC!

OPSEC POCs

Countermeasures

Operations Security (OPSEC)

Reference: National Security Decision Directive (NSDD) 298

DOD 5205.02

DODD 5205.02E

AFI10-701AFGM_2018-01

All contractors, subcontractors, their employees, associates, and consultants who have access to critical information must comply with the DOD and Air Force-sponsored Operations

Security (OPSEC) program. The OPSEC Program is directed by NSDD298, DOD Publications, and applicable Air Force guidance.

OPSEC is a systematic means of identifying and protecting information which an adversary could use to their advantage or to our disadvantage. Critical Information (CI) is generally unclassified but can become classified through compilation. This sensitive information has been identified by the organization’s OPSEC program as requiring protection. OPSEC

Measures (OM) are control standards with which all personnel must comply in order to protect

CI against adversaries.

RESPONSIBILITIES:

The AFLCMC/EBH OPSEC Program Coordinator will approve OPSEC training curriculum for use by the contractor. Types of information identified on Critical Information and

Indicator Listings (CIILs) must be protected by all contract personnel. Approved organizational

OPSEC measures must be used by all contract personnel to protect critical information in their possession and protect against current foreign intelligence and industrial espionage threats. The

OPSEC PM/Coordinator and the Lead contractor must ensure all contract personnel working on the contract or having access to CI attend initial and annually recurring refresher training and that the approved curriculum is presented. Training must be provided before contract personnel are allowed access to or handling of critical information. All contract personnel will comply with the organizations OPSEC standards and practices as trained. Additional training may be required based on updates to critical information, OPSEC measures, intelligence threat/vulnerability, or other fundamental changes to the OPSEC program.

Contactors with OPSEC requirements within a contract must ensure employees receive

OPSEC training as specified within the contract. Accomplishment of training must not exceed

90 days from initial assignment to a contract with OPSEC requirements. Annual training will be accomplished NLT 30 September of each year. The contractor personnel will not be given access to an organizations CIIL until after training has been completed and documented by the organization OPSEC Coordinator.

Prior to seeking approval through Hill AFB Public Affairs, any information to be released outside of official U.S. Government channels, via any media, must be approved through an

OPSEC review by the AFLCMC/EBH OPSEC Coordinator. All personnel must promptly report

OPSEC related incidents, issues, and concerns to the AFLCMC/EBH Coordinator, 801-777-8973 who will then report it to the installation PM, 801-586-8008.

Sensitive information is information requiring special protection from disclosure that could cause compromise or threat to our national security, an Air Force organization, activity, family member, DAF civilian or DoD contractor. Critical Information is defined as information important to the successful achievement of U.S. objectives and missions, or which may be of use to an adversary of the United States. It consists of specific facts about friendly capabilities, activities, limitations (includes vulnerabilities), and intentions needed by adversaries for them to plan and act effectively so as to degrade friendly mission accomplishment. All critical information is sensitive, but not all sensitive information is critical.

The Contractor shall not release sensitive information to the general public without prior written approval from the Contracting Officer. All contractor requests to release sensitive information shall be in writing and clearly explain the necessity for release of the information and consequences if approval is not granted. Contractor employees who are U.S. citizens shall be provided access to sensitive information on a "need to know" basis required to fulfill the terms and conditions of the contract. Foreign National (FN) employees' access to information will be limited to non-sensitive information. FN access to sensitive information will be approved in writing by the Contracting Officer on a case-by-case basis and will be strictly limited to the information that the employee must know in order to fulfill the terms and conditions of the contract.

The Contractor shall be responsible for establishing and maintaining an OPSEC program to adequately manage, protect and control sensitive information that has been provided or generated under the contract. The Contractor shall appoint an OPSEC Officer to manage the

OPSEC program and to prepare a written OPSEC Plan, which identifies the CI, threat information and OPSEC measures used to mitigate known vulnerabilities and risks.

The Contractor shall provide OPSEC training to all employees regarding the safeguarding of sensitive information prior to employees being allowed access to such information, and annually thereafter.

The Contractor shall destroy all sensitive program material at the completion of the contract to ensure the information cannot be accessed or utilized for any purpose and notify the

Contracting Officer in writing of its destruction.

These same requirements will flow down to all subcontractors working on or provided any sensitive information related to the contract.

All contractors, subcontractors, their employees, associates, and consultants who have access to critical information must comply with the Air Force-sponsored Operations Security

(OPSEC) program.

OPSEC Measures (OM) are control standards with which all personnel must comply in order to protect critical information.

Prime Contract or Solicitation #: FA8213-25-R-B009

DRAFT

SAMPLE

PREVIOUS EDITION IS OBSOLETE.

Page of

DD FORM 254, APR 2018

NEEDS DD67

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the National Industrial Security Program (NISP) apply to all security aspects of this effort involving classified information.)

OMB No. 0704-0567 OMB approval expires:

June 30, 2025 The public reporting burden for this collection of information, 0704-0567, is estimated to average 70 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, at whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

RETURN COMPLETED FORM AS DIRECTED IN THE INSTRUCTIONS.

1. CLEARANCE AND SAFEGUARDING

2. THIS SPECIFICATION IS FOR: (X and complete as applicable.)

3. THIS SPECIFICATION IS: (X and complete as applicable.)

a. ORIGINAL (Complete date in all cases.)

b. REVISED (Supersedes all previous specifications.)

4. IS THIS A FOLLOW-ON CONTRACT?

If yes, complete the following:

Classified material received or generated under

5. IS THIS A FINAL DD FORM 254?

If yes, complete the following:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

7. SUBCONTRACTOR(S) (Click button if you choose to add or list the subcontractors -- but will still require a separate DD Form 254 issued by a prime contractor to each subcontractor)

8. ACTUAL PERFORMANCE (Click button to add more locations.)

10. CONTRACTOR WILL REQUIRE ACCESS TO: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

e. NATIONAL INTELLIGENCE INFORMATION:

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. See instructions. Provide details in Blocks 13 or 14 as set forth in the instructions.)

12. PUBLIC RELEASE

Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the National Industrial Security Program Operating Manual (NISPOM) or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified here with at least office and phone contact information and if available, an e-mail address. (See instructions)

13. SECURITY GUIDANCE

The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended.

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. The field will expand as text is added. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. Also allows for up to 6 internal reviewers to digitally sign. See instructions for additional guidance or use of the fillable PDF.)

List of Attachments (All Files Must be attached Prior to Signing, i.e., for any digital signature on the form)

14. ADDITIONAL SECURITY REQUIREMENTS

Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the CSO. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

15. INSPECTIONS

Elements of this contract are outside the inspection responsibility of the CSO.

If Yes, explain and identify specific areas and government activity responsible for inspections. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

17. CERTIFICATION AND SIGNATURES

Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. Upon digitally signing Item 17h, no changes can be made as the form will be locked.

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICIAL

9.0.0.2.20120627.2.874785 DD 254, "DoD Contract Security Classification Specification" Hide Attachment Bar

The Contractor will notify the Government Contracting Activity and the Government Security Manager within 48 hours of any incident involving the actual or suspected compromise/loss of classified information to enable the Government to conduct immediate assessment of potential impact pending formal inquiry/investigation. Actual or suspected compromise of Covered Defense Information will be reported IAW DFARS Clause 252.204-7012.

Program Manager: Quincy Stevens, AFLCMC/EBHC, ph: 801-775-2842, quincy.stevens.1@us.af.mil Security Manager: Tamara Newcomb, AFLCMC/EBHIP, ph: 801-777-8973, tamara.newcomb@us.af.mil

Ref 1a/1b: Contractor must obtain a SECRET Facility Security Clearance prior to being granted access to SECRET information and must obtain SECRET safeguarding capability prior to being provided SECRET information.

Ref 10a/11h: COMSEC/Cryptologic safeguarding requirements apply. See AFMAN 17-1302-O, Communications Security (COMSEC) Operations for guidance. See NSA/CSS Policy Manual 3-16, Control of COMSEC Material for details.

Ref. 10.e.(2): Contractor will require access to intelligence information and must comply with directions provided by the Contracting Officer’s Representative (COR). The Program Manager has determined that disclosure does not create an unfair competitive advantage for the contractor or a conflict of interest with the contractor’s obligation to protect the information. The COR will identify what intelligence information is required for the contractor to satisfy the contract and will submit that information to the servicing Senior Intelligence Officer (SIO) for approval prior to granting access.

Ref 10j/11l: The contractor shall comply with DoDI 5200.48_DAFI16-1403, Controlled Unclassified Information, DoDM 5200.01, Vol 1_AFMAN16-1404, Vol 1, Air Force Information Security Program, and DoDM 5400.07_AFMAN33-302 Air Force Manual, DoD Freedom of Information Act (FOIA) Program. The contractor shall monitor CUI aggregation and compilation based on the potential to generate classified information pursuant to security classification guidance addressing the accumulation of unclassified data or information.

Ref 11c: Any classified information generated in the performance of this contract shall require the contractor to apply derivative classification and markings consistent with the source material or be governed by the current version of the (EXPENDABLE AIRBORNE INFRARED COUNTERMEASURES (IR DECOYS/DEVICES) JOINT SECURITY CLASSIFICATION GUIDE, by US ARMY, US NAVY and US AIR FORCE, dated May 30 2023); Air Force OPR: (AFLCMC EBH, Munitions Sustainment Division, Hill AFB, UT). SCDG will be provided under separate cover.

Ref 11m: The Following FARS and DFARS Clauses apply, FAR Clause 52.204-2, FAR Clause 52.204-21, DFARS Clause 252.204-7012, DFARS 252.204-7000, DFARS252.204-7008 and DFARS 252.204-7009.

Ref 12: Contractor is to submit requests through the Contracting Officer for OPSEC Program Manager review and public release authorization. The Contracting Officer will provide contractor with written approval/disapproval. Information requiring AF or DoD-level review will be reviewed by the unit's OPSEC Program Manager or Coordinator who will in-turn forward to the entry-level public affairs office through the AFIMSC Public Affairs Office to the Secretary of the Air Force, Office of Public Affairs, Security and Review Division (SAF/PAX), 1690 Air Force Pentagon, Washington DC 20330-1690.

Ref Blk 18f (Distribution):

AFLCMC/EBHC, Program Engineer, 6043 Elm Lane, Hill AFB, UT 84056, quincy.stevens.1@us.af.mil, ph. 801-775-2824 AFLCMC/EBH, Security Manager, 6043 Elm Lane, Bldg 1246, Hill AFB, UT 84056, AFLCMC.EBH.Security@us.af.mil AFLCMC/INLS, SSO Hill, Mr. Jason Blake, ph. 801-777-0484, Hill AFB, aflcmc.inls.sso@us.af.mil AFLCMC IP, 1801 Tenth St, Bldg 8, Room 103, WPAFB, OH 45433-7629, AFLCMC.IPDDForm254.Workflow@us.af.mil HQ Defense Counterintelligence and Security Agency, 27130 Telegraph Rd, Quantico, VA 22134

XCM ENGINEER, AFLCMC/EBHC

rep: TAMARA NEWCOMB, CIV

SECURITY MANAGER, AFLCMC/EBH

rep: JASON R. BLAKE, CIV

SSO HILL, AFLCMC/INLS

rep: ROBERT J. SZOBOSZLAY, CIV Chief, Collateral Security AFLCMC/EBV

Ref 11j: Operations Security (OPSEC): OPSEC requirements apply. The contractor shall ensure OPSEC is incorporated into the appropriate area of the contract IAW DoD Directive 5205.02E, DoD Operations Security (OPSEC) Program and AFI 10-701 Air Force OPSEC Program. The Contractor shall flow down all OPSEC requirements to subcontractors that handle Critical Information (CI). CI is defined as specific facts about friendly intentions, capabilities, or activities needed by adversaries to plan and act effectively against friendly mission accomplishment. The contractor must comply with the U.S. Government, DOD, Air Force, AFMC, Hill AFB, and AFLCMC/EBH Operation Security (OPSEC) Programs. The contractor must also comply with any additional OPSEC requirements referenced in the PPP.

Hill AFB, UT 84056 Enter address (include zip code).: 6072 Fir Ave Bldg. 1233 Hill AFB, UT 84056