Attachment 6b- Integrated VGSA.pdf

Integrated Visitor Group Addendum

Integrated Visitor Group Security Oversight Responsibilities and Supervision:

The visitor group's HOF will provide all SSA’s identified within Item 15, Ref 8.a, a copy of the most recent list of key management personnel (KMP) and will immediately notify the SSA’s of any changes occurring to the KMP list.

Access to Classified Information:

All access to classified material by on-base visitor group personnel including oral and/or visual at the GCA locations identified within Items 8.a – 8.c will be under control of the GCA. The GCA maintains accountability, control, and ownership of all classified information involved under the terms of this contract at all times. The visitor group’s access to classified information will be controlled by the GCA and limited to “contract-specific, need-to-know” information only.

Storage of Classified Material:

The visitor group is not authorized to store classified material at the GCA locations identified within Items 8.a

– 8.c. All classified material will be returned and secured in the designated government security container as directed by the supported unit.

Under the terms of this agreement, the GCA will have access to and control all security containers. The responsibility for setting the storage container combination rests with the GCA. Each container will have a government safe custodian appointed. The Standard Form (SF) 700, Security Container Information, will be used to identify persons having knowledge of the combination(s). This form will be posted inside the locking drawer of each security container.

If within the scope of the contract, contractors categorized as visitor groups are permitted to conduct end of day checks, have access to GSA approved security containers, and/or have access to applicable alarm codes for secure areas.

Transmission of Classified Material:

The on-base visitor group is not authorized direct receipt or dispatch of classified material at the GCA locations identified within Items 8.a – 8.c, through U.S. postal channels or commercial carrier. Receipt or dispatch must be to or through the supported GCA.

Classified material will be transmitted via U.S. postal channels directly from the sponsoring GCA and must be prepared in accordance with DoDM 5200.01, Volume 3, Enclosure 4, and processed through the classified information control system of the GCA.

Contractor employees may hand carry classified on the installations identified within Item 15, Ref 8.a, if they have been designated as a courier in writing by the GCA’s commander or designee per DoDM 5200.01, Volume 3, Enclosure 4. If contractor employees will be required to pass through a manned entry point or checkpoint on the installations, they must have a courier card or letter of authorization. The courier must ensure the classified is packaged IAW DoDM 5200.01, Volume 3, Enclosure 4. All visitor group contractor employees hand carrying classified must receive the proper training and be briefed regarding their responsibilities.

Reproduction of Classified Material:

Only GCA approved and controlled reproduction equipment will be used by the visitor group, when so authorized, per DoDM 5200.01, Volume 3, Enclosure 2. The visitor group cannot reproduce classified material without permission of the GCA.

Security Education: The visitor group’s security focal point shall:

Ensure visitor group employees attend and participate in the Security Education Program, to include initial, recurring, and derivative classification security training, of the sponsoring GCA organizations. The sponsoring GCA unit security manager will ensure integrated visitor group personnel are included in the information security education program and will be responsible for administering security education training per DoDM 5200.01, Volume 3, Enclosure 5 and AFI 16-1404.

Security Incidents and Possible Compromises of Classified:

The visitor group must immediately report any security incidents, outlined in DOD MANUAL 5200.01 Volume 3, Enclosure 6, through the supported GCA to the SSA. The SSA will ensure the supported GCA’s unit commander/director appoints inquiry or investigation officials in accordance with AFI 16-1404, Chapter

7. Inquiry or investigation officials coordinate findings and reports with the appointing official and SSA.

The SSA coordinates and/or reports security violations committed by visitor group employees to the appropriate Defense Security Service (DSS) Cognizant Security Agency (CSA), base contracting office, and the visitor’s group HOF, if and when appropriate.

Local Contractor Badge and Common Access Card (CAC):

Visitor group employees must have and wear (between waist and shoulders on his/her outermost garment) either a GCA issued contractor identification badge or a company issued contractor identification badge at all times while on the confines of the installations identified in Item 15, Ref 8.a. When required for contract performance, locally developed installation badges will be issued to visitor group personnel for entry into designated areas. Entry credentials are issued at the request of the GCA. Contractor personnel who will require access to DOD computer network systems and/or require the use of a Common Access Card (CAC) for installation entry control or physical access to facilities during normal business hours when government personnel are present shall request a CAC through the GCA’s units Contractor Verification Systems Trusted Agent. Contractor personnel who are not authorized a CAC will be required to obtain a Defense Biometrics Identification System (DBIDS) card or other Physical Access Control System (PACS) passes IAW AFI 31- 113.

Disposition of Identification Credentials:

When an employee leaves the installation for another assignment, retires or terminates from the contract, all identification credentials (Restricted/Controlled Area credentials, PACS Passes, CAC, etc.) that have been issued to the individual will be returned to the issuing officials. The GCA and/or contractor will immediately notify the issuing officials for an appropriate update in the Defense Biometric Identification System (DBIDS), Defense Enrollment Eligibility Reporting System (DEERS), or other applicable system when a contractor refuses to return any issued access media.

Contract and Associated DD Form 254: The visitor group’s on-base management personnel and the GCA security manager will maintain a file containing a copy of all contracting documents, to include any associated DD Form 254s (prime and subcontracts).

Security Reviews:

Industrial security program reviews/inspections of visitor groups will be IAW DODM5220.22v2_AFMAN 16-1406v2 and AFI 16-1404.

The SSA conducts reviews/inspections, if applicable, in the following manner:

(1) The SSA will notify and schedule all reviews/inspections through the AF activity’s unit security manager.

These reviews/inspections will be conducted per AFI 16-1404 and supplements thereto. A copy of the review/inspection report will be provided to the GCA, who, in-turn will provide the visitor group a copy of all portions of the report applicable to their performance. The visitor group is not required to acknowledge receipt, nor respond unless directed to do so in the report.

(2) The visitor group will also be included in the GCA’s security self-assessment program IAW AFI 90-201, The Air Force Inspection System, to monitor the visitor group’s performance and compliance.

Subcontracts:

Whenever the HOF or on-base visitor group enters into a subcontract arrangement with another contractor for classified performance on the installations identified within Item 8.a of this DD FM 254, a copy of this attachment will be included within the subcontractor’s DD FM 254.