Attachment 4c DD Form 254 Continuation Sheet (Contract).pdf

UNCLASSIFIED//FOUO

DD Form 254 (BACK), DEC 1999 Installation Contracting Command Contract Number: W91151-16-C-0040

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT (continued).

The IDS system has experienced a communication’s failure or has been tampered with. System monitor personnel will provide all required support of reporting and documenting, including that to sensors located in classified/secure areas. This requirement is a Base plus 4 year Contract.

10. THIS CONTRACT WILL REQUIRE ACCESS TO (continued).

Ref Blocks 10k – Classified and/or Sensitive But Unclassified military facility design information, including vulnerabilities and Force Protection significance of the facility High Risk Target/Mission Essential Vulnerable Area (HRT/MEVA) designations, that if exploited might result in exploitation, neutralization, or loss of use of the facility for its intended purpose.

Ref Block 10e

1) Access to SCI Intelligence materials IS NOT authorized or required.

2) Access to the JWICS IS NOT required nor authorized.

3) Access to Non-SCI Intelligence Materials Access IS NOT required or authorized.

4) Access to SIPRNet (including establishment of local domain User and/or email accounts) IS NOT required or authorized.

Ref Blocks 10k – Classified and/or Sensitive But Unclassified military facility design information, including vulnerabilities and Force Protection significance of the facility [High Risk Target/Mission Essential Vulnerable Area (HRT/MEVA) designations], that if exploited might result in exploitation, neutralization, or loss of use of the facility for its intended purpose.

11. IN PERFORMANCE OF THIS CONTRACT, THE CONTRACTOR WILL (continued).

Ref Block 11j – OPSEC considerations will be driven by approved Essential Elements of Friendly Information (EEFI) at the supported installation. On-site contractor visit group personnel will conform with OPSEC guidance promulgated by supported OPSEC staff/staff officer.

13. SECURITY GUIDANCE (continued).

a. (Ref Blocks 8, 11f) The Contractor is to perform all tasks associated with the contract's requirements in

US Government owned and supplied facilities. Primary office location will be in building 23020, Fort Hood, Texas 76544. Task performance may require contractor to continue support to assigned staff at fixed facilities located throughout the installation.

b. The Contractor shall maintain a facility clearance as described in Chapter 2 of the NISPOM.

c. Performance under the terms of this contract may not require “SAFEGUARDING: (Ref Block 1b) at the contractor’s cleared facility. However, on-site “Visit Group” contractor personnel may be required to provide safeguarding of classified information/materials at the supported/remote location.

d. In the event the contract award results in a teaming agreement, or has task order items which will be satisfied by a subcontract, the corporate/company Facility Security Officer for contract prime will be responsible for onward promulgation of these security guidelines to subcontractors. A courtesy copy of all DD254’s issued to subs will be provided to the USAG Hood Industrial Security Program Manager at the address contained in paragraph 13h(2) below. Derivative DD 254’s for subcontractors will conform in all aspects to the guidelines contained in the original, however, they may – if desired – be more restrictive.

e. Performance under the terms of this contract does not require “SAFEGUARDING” (Ref Block 1b) at the contractor’s cleared facility. However, on-site “Visit Group” contractor personnel may be required to provide safeguarding of classified information/materials at the supported/remote location.

f. Individual local "Visit Group" personnel will be completely integrated into the supported US Army Garrison staff element(s). The US Army Garrison (USAG) Directorate of Plans, Training, Mobilization, and Security (DPTMS) Security Manager will provide individual contractor personnel with primary day-to-day security oversight, guidance and management regarding approved local security procedures. However, as the local US Army proponent for both Information (AR 380-5) and Industrial (AR 380-49) Security, the USAG Hood Industrial Security Program Manager will retain and provide security oversight and guidance regarding implementation of Department of the Army (DA) security regulations and approved local security procedures to the Visit Group. Likewise, the DPTMS-Security Division Chief will be the final local authority in providing command interpretation of security guidance and in resolving any conflicts in guidance provided by subordinate staff security managers to elements of the Visit Group.

g. The company/corporate Facility Security Officer is wholly responsible for the conduct/execution of all initial, as well as, recurring security indoctrination (SF 312) and security education for all members of the visit group. However, integrated contractor personnel will be offered the opportunity to participate in routine security training conducted by the security manager of the supported staff element.

h. In all instances where there is a conflict between the NISPOM and DA regulations, the applicable DA regulations and the instructions of the staff security manager will take/have precedence for the local Visit Group. DA regulations may be further supplemented by IMCOM, FORSCOM or Ft. Hood regulations, which shall be equally binding (NISPOM 6-105).

i. The Contractor's Facility Security Officer will provide USAG Hood Industrial Security Program Manager (JPAS Non-SCI SMO Code: W0VCAACON6) with a Visit Authorization Request (VAR) for ALL personnel (cleared as well as uncleared) performing services under this contract.

1) Due to the routine use of VAR information for administrative actions beyond simply certification of individual contract employee Personal Security Clearance (PCL) levels, the requirement for submission of a VAR will not be waived as provided for in the Deputy Under Secretary of Defense memorandum;

Subject: Facilitating Classified Visits within the Department of Defense, dated 01 April 2005 and/or Headquarters, Department of the Army Memorandum; Subject: Classified Visit Request Process, dated 20 May2007. The requirement to continue use/submission of VARs will be periodically reviewed and may be discontinued once JPAS is in use by 100% of the Defense Contractor base, and changes to the NISPOM are implemented to provide details not presently included in JPAS. JPAS is fully implemented for clearance processing, certification of contractor personnel clearances will ONLY be accepted upon receipt of a Visit Request (VR) submitted in JPAS and received by the appropriate Non-SCI SMO.

2) In addition to NISPOM requirements (Chap 6, para 6-104b), the VAR WILL include SSN, date of clearance, investigation type and investigation date for each employee listed. The VAR will also clearly identify which personnel are permanent/long-term, on-site Visit Group residents and which are intermittent visitors in the traditional sense of the term. VARs will be mailed to Cdr, USAG Hood, ATTN:

IMHD-PLS (DPTMS-Security Division), 761st Tank Bn. Ave., Rm W204, Ft. Hood, TX 76544-5010. VAR's may be FAXed to (254) 288-7970. VARs will be accepted in softcopy (Adobe Reader (.pdf) format ONLY) provided they include appropriate legal signatures.

3) Regardless of the individual Contractor employee’s eligibility level (PCL), VARs/clearance certification on local visit group members and the resulting local access shall not exceed the clearance authorization contained in Block 1b above.

4) The above office will likewise be notified in writing of all clearance status changes for all visit group employees performing services under the terms of this contract; such status changes will include but are not limited to: clearance suspension, revocation, upgrade and departure or termination of the employee.

5) The contractor may courtesy copy (cc)/copy furnish the VAR to the staff Security Manager, however, the office of the USAG Hood, DPTMS-Security Division is the sole OFFICE OF RECORD for all clearance certifications of contractors working on, or supporting the installation/Ft. Hood for garrison contracts.

j The Contractor will appoint an on-site Security Manager for the local Visit Group to act as the local Point of Contact for all security related matters pursuant to performance under this contract. The local Security Manager will be identified in writing to the USAG Hood Industrial Security Program Manager at the address above.

k. (Ref Block 10a) All access to, and use of, government furnished cryptographic equipment (STU- III/STE) and associated STU-III/STE CIK datakeys or KOV-21 FORTEZZA cards shall be governed by the provisions of DA Pam 25-16, Security Procedures for the Secure Telephone Unit, Third Generation (STU- III); DA Pam 25-380-2, Security Procedures for Controlled Cryptographic Items; and FH Regulation 380-8, Security Procedures for Controlled Cryptographic Items (CCI).

1) The Contractor will work only with classified material that was originated and marked by an originating agency.

2) All classified material furnished under the provision of the contract will contain classification markings that, in conjunction with AR 380-5, provide classification guidance necessary for contract performance.

3) The Contractor may be required to generate classified material that has derivative classification, however, they will not have original classification authority. In all cases, AR 380-5 will govern application of derivative classification markings. The DoD Guide to Marking Classified Documents (DoD 5200.1-PH) may be used in conjunction with AR 380-5.

4) (Ref Block 10k) Security Classification Guides supporting Operation Iraqi Freedom which may be required to be consulted in making derivative classification decisions include but, may not be limited to, the DoD Operation ENDURING FREEDOM and Operation NOBEL EAGLE Classification guide, dated 28 March 2002 (unclassified) et seq; the CENTCOM OPLAN 1003-V Classification Guidance, dated 31 October 2002 (classified) et seq; and the MNF-I/MNC-I Security Classification and Marking Guide – Version 4, dated 11 November 2004 w/Change 1 (classified) et seq.

5) (Ref Block 10i) Limited Dissemination information will be handled as FOUO information.

6) (Ref Block 10j) All “FOR OFFICIAL USE ONLY” (FOUO) and “LAW ENFORCEMENT SENSITIVE” (LES) information will be handled in accordance with AR 25-55, The Department of the Army Freedom of Information Act Program.

l. All personnel security actions and/or requests for clearance will conform with the provisions of the NISPOM (Chapter 2, Section 2).

1) The Contractor shall obtain the required personnel security clearances or interim clearances when authorized, by contract performance start date or at start of employment for personnel hired thereafter and shall maintain these clearances throughout the contract performance period. A personnel security clearance under the Defense Industrial Security Program (DISP) is neither a license for access to classified information nor a substitute for security measures designed to prevent unauthorized access.

Therefore, security clearances and associated background checks under the DISP are only to be granted when there is a requirement for access to classified information in performance of duty assignment.

2) The Contractor shall perform debriefing procedures for departing/terminating employees in accordance with DoD 5220.22-M, National Industrial Security Program.

3) The contractor is not authorized to clear ALL company/corporate personnel associated with this contract vehicle (NISPOM 2-200d). Personnel requiring Personnel Security Clearance (PCL) will be limited to those employees/managers associated with Alarm Monitoring tasks.

m. Government furnished classified and unclassified files in existence at the contract start date, and those generated under this contract, shall be maintained and retired in accordance with AR 25-400-2, The Army Records Information Management System (ARIMS). The contractor shall provide security for classified documents in accordance with AR 380-5, Department of the Army Information Security Program, and DoD 5200.1-R, Information Security Program. The Contractor shall not provide copies of classified information in any form, hard copy, digital, or otherwise, to agencies or individuals unless authorized by the Contracting Officer or the Contracting Officer’s Representative (COR).

n. All personnel (IT Level III / IT-III ) using contractor-supplied, or government-furnished computers that access the government’s unclassified LAN/WAN (NIPRNet) will be required, as a minimum, to have successfully passed a reliability investigation (Trustworthy NAC/TNAC) – Standard Form 85P (SF-85P), as specified by AR 25-2/Information Assurance (para 4-14). Favorable investigations for granting of a security clearance will be used to satisfy this requirement in lieu of a TNAC.

o. (Ref Block 10g) The US Army Garrison DPTMS Security Manager will be responsible for administering any required NATO Access briefings. Access to NATO information requires a FINAL U.S. Government clearance.

p. The government agency reserves the right to exercise an option to execute a Visitor Support Agreement (VSA) with the contractor to govern actions of the local Visit Group.

14. ADDITIONAL SECURITY REQUIREMENTS (cont.)

In addition to requirements contained in the NISPOM, any on-site government-furnished physical plant, real property & facilities, and automation equipment/infrastructure in use by the contractor will be governed by AR 190-13, The Army Physical Security Program; AR 190-51, Security of Army Property at Unit and Installation Level; AR 25-2, Information Assurance, and applicable IMCOM, FORSCOM and/or local regulations.

15. INSPECTIONS (cont.)

a. The Physical Security Branch, Security Division of the US Army Garrison Directorate of Emergency Services shall retain the authority to conduct physical security inspections of government furnished office & work spaces occupied by the contractor.

b. The Defense Security Service (DSS) retains ultimate responsibility for Industrial Security oversight and inspection of the contractor for security program process & procedures as well as their protection of collateral classified materials accessed in performance of this contract.\

17. REQUIRED DISTRIBUTION (cont.)

Ref Block 17c – Cdr, USAG Hood, ATTN: IMHD-PLS (DPTMS-Security Division) 761st Tank Bn Ave, Bldg 1001, Rm W204, Fort Hood, TX 76544

Security Provisions of this document have been reviewed for accuracy and sufficiency as indicated below:

PETER K. FRISCH

DAC, GS-11

Contracting Officer’s Representative, DES Fort Hood

DANIEL SPENCER

DAC, GS-13

Chief, DPTMS-Security Division Fort Hood