Attachment 6- Security Requirements.pdf

SECURITY REQUIREMENTS

1. CRIMINAL BACKGROUND INVESTIGATION CHECK:

a. All contractors/subcontractors seeking to enter Laughlin AFB (LAFB) for employment must submit to a criminal history background check. Passes will not be issued to individuals not consenting to this investigation. In order to initiate a background check, an individual must complete and submit a release form and provide a copy of a Government issued identification (ID) front and back (e.g. state driver’s license). ID must be REAL ID Compliant. If personnel do not possess a compliant REAL ID, Two additional forms (with names matching) must be submitted which may include: Passport, Birth Certificate with raised seal, Social Security Card. One release form per employee is required. The contractor will compile all copies of release forms for respective employees and submit to the Security Forces Squadron through the Contracting office, in advance of the projected contract start date. “Advance” is defined as a minimum of two weeks prior to start date. Note: Any release form/spreadsheet not correctly filled out will be considered incomplete and that contractor employee will not be granted access onto LAFB.

b. Contractor personnel convicted of the following crimes (but not limited to) will not be allowed to work on LAFB: espionage, sabotage, treason, terrorism, felony convictions, violent crimes against persons, sex crimes, drug crimes related to distribution or intent to distribute, or firearms/explosives violations. Other grounds for exclusion for working on LAFB include, but are not limited to: unable to provide proof of resident alien status, immigration document or proof of U.S. citizenship, outstanding warrants, individuals identified on federal terrorist watch lists, and incarceration for 12 months or longer within the past three years. Deviations from this guideline are permitted on a case-by-case basis, as determined by Security Forces Squadron Commander or the Laughlin AFB Wing Commander.

c. Background checks will be considered valid for a period of 12 months for contractors without a break in service working on LAFB during that time. However, if there is a break in service (work on base) for longer than one day, the contractor will have to resubmit for a criminal background check.

d. All contractor/subcontractor personnel obtaining a satisfactory criminal history background check may obtain a pass to enter this installation. A DD Form 1172-2 must be completed and submitted to the Contracting Officer with a valid government issued picture identification and social security card for approval. ID must be REAL ID compliant. If personnel do not possess a compliant REAL ID, Two additional forms (with names matching) must be submitted which may include: Passport, Birth Certificate with raised seal, Social Security Card. If the contractor/subcontractor employee is requesting a vehicle pass, he/she must provide a valid driver’s license, vehicle registration and proof of insurance meeting the minimum Texas liability coverage.

Entry Authorization List (EAL) digitally signed and provided by 47 CONS or 47 CES/CEX can be utilized for criminal backgrounds check supplied by subcontractors’ DoD ID card holder sponsor working on the installation. It will be periodically re-vetted by Visitor Center personnel every new EAL listings and/or every three (03) calendar months if projects are longer than three (03) calendar months.

e. Short-notice passes may be considered on a case-by-case basis and are subject to approval by the Contracting office’s project Contracting Officer. Contractors are expected to do advance planning to the maximum extent practicable to minimize short notice pass requests.

f. Contractor/subcontractor(s) will report all lost, stolen or missing passes to Security Forces Squadron immediately upon discovery. All passes will be turned-in upon completion of the contract, termination of an employee, an employee being barred from base, release from contract, and/or government-terminated contract. Failure to follow stated procedures may prevent contractor/subcontractor from further qualifying for base access.

2. PHYSICAL SECURITY

a. Contractor/subcontractor gaining access onto the installation will conduct all work during the days and hours of Monday-Friday, 0730-1630 and will not be allowed to access other base facilities, unless otherwise specified in the contract. The contractor/subcontractor(s) will adhere to entering/exiting vehicle inspections and traffic laws as outlined in the Texas Penal Code, Department of Defense (DoD), Air Force Instruction (AFI), Air Education and Training Command (AETC), and applicable supplements.

Contactor/subcontractor will also be subject to Force Protection Condition (FPCON) entry authorization and procedures based on the Antiterrorism Officer (ATO) or designated person(s) recommendation, i.e., contractor/subcontractor may not enter LAFB during increased threat situations or must follow the ATOs established procedures. Contractor/subcontractor is not authorized to sponsor personnel onto the installation unless specifically authorized in the contract. Note: Retired DoD personnel and/or Common Access Card (CAC) holders, to include dependents who are employed by a contractor(s), may not use their sponsorship privilege for the contractor/subcontractor(s) benefit.

b. If contractor/subcontractor is issued a government key to facility(s) and/or equipment, it is the sole responsibility of the contractor/subcontractor to safeguard against reproduction and theft.

Contractor/subcontractor will report all missing, stolen, and/or unauthorized reproduction as soon as discovery is made. Contractor/subcontractor will ensure facility is secured and all lights are turned off at the end of the workday. Any Government issued or private property equipment must be secured in a manner to afford it reasonable protection from theft.

3. INDUSTRIAL SECURITY PROGRAM:

a. Contractor/subcontractor working on classified, sensitive, and/or high risk projects will report any suspicious activity or suspicious contacts by personnel to Office of Special Investigations (OSI) (Eagle Eye at 830-298-5158). Any person finding classified information will immediately secure it (do not open/read/examine) and contact Security Forces Squadron at 830-298-5100 during non-duty hours and inform them a patrol response is necessary to take control of classified document(s)/material(s). All contracts regardless of cleared or uncleared status will receive INFOSEC Security Education Awareness Training, (SETA) from the Host Unit Security Manager (USM) under the 47 Flying Training Wing/Information Protection (47 FTW/IP) office.

b. Under this program, contractor/subcontractor will submit to a criminal history background check three weeks prior to contract start date. The Contracting office will provide contractors/subcontractors individual forms and/or spreadsheet requiring, as a minimum, full name, date of birth, citizenship, and driver’s license number or other U.S. Government issued picture identification. All contractor/subcontractor(s) must sign the release form prior to the criminal history background check being conducted. Individuals must provide proof of resident alien status, immigration document, or proof of U.S. citizenship.

c. The contractor will appoint a Primary Security Monitor and report to the Host Unit Security manager, (USM). The contractor will participate and comply with the Industrial Security Program as outlined in DoDM 5220.22,V2_AFMAN16-1406, V2, Industrial Security Program Management, DoDM5200.01V1- 3_DAFMAN16-1404V1-3, Information Security Program and DD Form 254, DoD Contract Security Classification Specification.

4. Contractors/subcontractors may be barred from LAFB at the Installation Commander’s discretion based on unfavorable information resulting from the criminal history background check.

5. AETC/IP SECURITY REQUIREMENTS FOR UNCLASSIFIED CONTRACTS

1) Contractor Notification Responsibilities. The contractor shall notify the Installation Security Program Manager (ISPM) at each operating location 30 days before on-base performance of the contract. The notification shall include:

a) Name, address, and telephone number of company representatives.

b) The contract number and contracting agency.

c) The reason for the contract (i.e., work to be performed).

d) The location(s) of contract performance and future performance, if known.

e) The date contract performance begins.

f) Any change to information previously provided under this paragraph.

2) Pass and Identification Items. The contractor shall ensure the following pass and identification items required for contract performance are obtained for employees and non-government owned vehicles:

a) DD Form 1172, Application for Uniformed Services Identification Card (DAFI 36-3026, Identification Cards For Members of The Uniformed Services, Their Family Members, and Other Eligible Personnel, and AETC Instruction 36-3001, Issue and Control of AETC Civilian Identification (ID) Cards).

b) AETC Form 58, Civilian Identification Card (AETCI 36-3001).

c) AF Form 2219 (series), Registered Vehicle Expiration Tab (AFI 31-204, Air Force Motor Vehicle Traffic Supervision).

d) DD Form 2220, DoD Registered Vehicle and Installation Tab (AFI 31-204).

e) AF Form 1199, USAF Restricted Area Badge, or locally developed badge.

f) AF Form 75, Visitor/Vehicle Pass (DAFI 31-204).

g) DoD Common Access Card (CAC), (DAFI 36-3026).

3) Suitability Investigations. Contractor personnel shall successfully complete, as a minimum, a (T1), before operating government furnished workstations that have access to Air Force e-mail systems. These investigations shall be submitted by the government at no additional cost to the contractor. The contractor shall comply with the DoDM5200.02_AFMAN16-1405, Personnel Security Program, and AFMAN17- 1201, User Responsibilities and Guidance for Information Systems.

4) Unescorted Entry to Restricted Areas. When work under this contract requires unescorted entry to controlled or restricted areas, the contractor shall comply with AFI 31-101, Volume 1, The Air Force Installation Security Program, and DoDM5200.02_AFMAN16-1405, Personnel Security Program Management, as applicable. Contractor personnel shall be the subject of a favorably completed (T1) investigation to qualify for unescorted entry to a restricted area. In addition, the Air Force shall submit (T1) investigations for contractor employees at no additional cost to the contractor.

5) Listing of Employees. The contractor shall maintain a current listing of employees. The list shall include employee's name, social security number, and date of investigation if contract work involves unescorted entry to Air Force restricted or other sensitive areas designated by the installation commander. The list shall be validated and signed by the company Facility Security Officer (FSO) and provided to the contracting officer and ISPM prior to the contract start date. Updated listings shall be provided when an employee's status or information changes.

6) Freedom Of Information Act Program (FOIA). The contractor shall comply with DoD Regulation 5400.7/Air Force Supplement, DoD Freedom of Information Act Program, requirements. The regulation sets policy and procedures for the disclosure of records to the public and for marking, handling, transmitting, and safeguarding Controlled Unclassified Information (CUI) material. The contractor shall comply with AFI 33-332, Air Force Privacy Act Program, when collecting and maintaining information protected by the Privacy Act of 1974 authorized by Title 10, United States Code, Section 8013. The contractor shall remove or destroy official records only in accordance with AFMAN 37-139, Disposition of Records—Standards, or other directives authorized in AFI 37-138, Records Disposition—Procedures and Responsibilities.

7) Reporting Requirements. The contractor shall comply with AFI 71-101, Volume- 1, Criminal Investigations, and Volume-2, Protective Service Matters, requirements. Contractor personnel shall report to an appropriate authority, any information or circumstances of which they are aware may pose a threat to the security of DoD personnel, contractor personnel, resources, and classified or unclassified defense information. Contractor employees shall be briefed by their immediate supervisor upon initial on-base assignment and as required thereafter.

8) Personnel Security. Contractor personnel requiring unescorted entry to controlled or restricted areas designated by the installation commander shall comply with base access requirements. These requirements are contained in AFI 31-101, for installation access and DoDM5200.02_AFMAN16-1405, for suitability determinations.

9) Security Monitor Appointment. The contractor shall appoint a security monitor for on-base contract performance. The security monitor may be a full-time position or an additional duty position. The host unit security manager shall provide employees with training required by DoDM 5200.01, V3- DAFMAN16-1404V3, Encl #5, Information Security Program, and AFI16-1404_AFGM2019, Information Security Program Management. The contractor shall provide initial and recurring training to contractor personnel from the host (USM) who work in Air Force controlled/restricted areas. Air Force restricted and controlled areas are explained in AFI 31-101

10) Operations Security (OPSEC). In accordance with AFI 10-701, contractors will familiarize themselves with the organizations critical information and indicators list (CIIL) and associated countermeasures in order to protect the information from unauthorized disclosure. The CIIL can be found on the Laughlin SharePoint Site or can be obtained by contacting the OPSEC Signature Manager (OSM). Additionally, contractors are required to complete OPSEC Awareness for Military Members, DoD Employees and Contractors on Center for Development of Security Excellence (CDSE) websites. Unauthorized disclosure can occur in, but is not limited to, letters, resumes, articles, books, collegiate papers, electronic mail, social media postings, blogs, message boards, or other forms of dissemination. Questions concerning OPSEC training should be addressed to the OPSEC PM at COMM: (830) 298-5946.

11) Additional Security Requirements. In accordance with DoDM 5200.01-V1-3, DAFMAN16-1404, V1- 3, the contractor shall comply with DAFMAN 17-1301, Computer Security (COMPUSEC) DoDM5200.01 AFMAN16-1404, DOD Information Security Program, AFI 17-203, Cyber Incident Handling, and AFMAN 33-322, V4, Information Assurance (IA) Awareness Program.

12) Antiterrorism/Physical Security Standards.Areas controlled by contractor employees shall comply with base Operations Plans/instructions for FPCON procedures, Random Antiterrorism Measures (RAMS) and local search/identification requirements. The contractor shall safeguard all government property, including controlled forms, provided for contractor use. At the close of each work period, government training equipment, ground aerospace vehicles, facilities, support equipment, and other valuable materials shall be secured. Antiterrorism Level I Training is available and can be accessed by the contractor through the following site http://jko.jten.mil/courses/atl1/launch.html.

13) Internal Operating Instructions. The contractor shall develop an Operating Instruction (OI) for internal circulation control, protection of resources, and to regulate entry into Air Force controlled areas during normal, simulated, and actual emergency operations. The OI shall be written in accordance with AFI 31-101, the local base Operations Plan usually referred to as an OPLAN, and AFI 31-210, The Air

Force Antiterrorism/Force Protection (AT/FP) Program Standards, and IAW DoDM5200.01, V1, Encl #2 and coordinated through the ISPM.

14) Entry Procedures to Controlled/Restricted Areas. The contractor shall comply and implement local base procedures for entry to Air Force controlled and restricted areas.

15) Key Control. The contractor shall establish and implement key control procedures in the Quality Control Plan to ensure keys issued to the contractor by the government are properly safeguarded and not used by unauthorized personnel. The contractor shall not duplicate keys issued by the government.

16) Lost Keys. Lost keys shall be reported immediately to the contracting officer. The government replaces lost keys or performs re-keying. The total cost of lost keys, re-keying or lock replacement shall be deducted from the monthly payment due the contractor.

17) Government Authorization. The contractor shall ensure its employees do not allow government issued keys to be used by personnel other than current authorized contractor employees. Contractor employees shall not use keys to open work areas for personnel other than contractor employees engaged in performance of their duties, unless authorized by the government functional area chief.

18) Lock Combinations. The contractor shall establish procedures in local OIs ensuring lock combinations are not revealed to unauthorized persons and ensure the procedures are implemented.

19) Traffic Laws. The contractor and its employees shall comply with base traffic regulations.