Attachment 7 - DD254 (Appendix A) (23 Jan 23).pdf

CONTRACT # UNKNOWN

APPENDIX A

Installation Specific Security Requirements

Installation Physical Security

1. Contractors must provide an access roster to Directorate of Emergency Services (DES), Visitors Center of all employees monthly or when any personnel change occurs for access to Fort Polk. An access roster will also be furnished to the JRTC Operation Group S2 quarterly or upon request. Access rosters must be forwarded by the COR to the visitors control center using a specific format electronically from a government computer. All personnel employed under this contract will adhere to all Fort Polk access control policies which include, weapons registration, transportation of weapons on the installation, access control policies, use of installation passes and ID cards and the operation of motor vehicles.

2. A check of records through the National Crime Information Center (NCIC) Interstate Identification Index (III) is the Army minimum baseline background check for entrance onto Army installations for non-CAC holders to include entrance of visitors. Contractors will identity proof all employees using e-verify and ensure that no illegal immigrants are employed under the umbrella of this contract.

3. The contractor shall provide employees with company identification (ID) cards prior to their commencement of work. The ID format is subject to approval by the government. IDs shall be laminated and include the company's name, ID number, issue and expiration dates, employee name, job title and color photograph. Employees shall wear ID cards on front exterior clothing, above the waist, when performing under the Performance of Work Statement (PWS)/Statement of Work (SOW) unless otherwise specified herein or approved by the government.

4. Physical Security Plan. The contractor shall address the physical security aspects associated with contract performance in government furnished facilities. The plan shall describe how the Security Plan shall prevent unauthorized access, vandalism, pilferage, larceny, sabotage, and arson directed toward contractor controlled facilities. A list of installation buildings for which the contractor shall be responsible shall be included in the plan. The contractor shall maintain an active security checklist for each facility under the contractor's control. The plan shall comply with the provisions of AR 190-11, AR 190-13, AR 190-51, DoD 5100.76(D), 5220.22(D) and the Fort Polk, LA Installation Physical Security Plan. This security plan will be reviewed annually by the DES to ensure regulatory requirements.

5. Information Systems Security Plan. The information systems security plan shall establish security procedures for all computer systems and communications utilized in the performance of this PWS/SOW/SOO. The plan shall conform to AR 25-2, AR 25-1 and AR 380-67.

6. Key Control Plan. The contractor's key control plan shall provide for government access, 24 hours a day, seven days a week, to all government-furnished facilities. The plan shall comply with AR 190-13, the Army Physical Security Program, and AR 190-51.

7. The contractor shall ensure that its employees, performing under this contract who has access to government information systems receive annual Information Technology security training.

8. The contractor shall immediately notify the contracting officer when an employee terminates employment that has access to government information systems or data.

The contractor shall ensure all common access cards issued to employees are returned to the government upon termination of employment and released employee names are to be stricken from the roster maintained by DES & JRTC OPERATION GROUP S2 immediately upon release.

Installation AT/FP

1. Pursuant to DoD Instruction Number 2000.16, "DoD Antiterrorism (AT) Standards," dated October 2, 2006, each Contractor employee requiring access to a Federally- Controlled Installation, facility and/or federally-controlled information system(s) shall complete Level I AT Awareness Training on an annual basis and receive a certificate of completion. The training is accessible from any computer and is available at https://jkodirect.jten.mil The contractor is responsible for ensuring that all applicable employees have completed antiterrorism awareness training and shall certify that their workforce has completed the training through the submission of completion certificate(s) to the Contracting Officer and the Contracting Officer's Representative (if appointed) within five working days after contract award or prior to access to a federally-controlled installation or information system.

Special Instructions:

a. Using an internet search engine, search JKO (Joint Knowledge Online) to begin the process.

Clicks:

b. No DOD CAC

c. I am a US mil, government civil servant, or contract employee

d. I've been directed to take required training on JKO

e. Click on Courses https://jkodirect.jten.mil/

f. I do not have a .MIL, .GOV, or .NDU.EDU address or I am a Multi-National Student

g. Fill out the contact sheet and email to sponsor (This is the COR)

h. Sponsor will email to the JKO help desk. (This is the COR)

Approval

1) Help desk sends non-CAC user an email with User ID

2) Help desk will send a separate email with an electronic token to register a new password (token is good for 24 hours)

3) New User follows the instructions in the email and enters a new password

4) User will need to enroll in Course # JS-US007-14 (User has up to 30 days to complete the course)

2. In the event that the automated system at https://jkodirect.jten.mil not available (e.g., server problems), Level I AT Awareness Training can be provided by a qualified instructor. However, if the training is not completed online, the Level I AT Awareness instructor qualification must be coordinated with the installation Antiterrorism Officer or (installation security equivalent) and the resultant name(s) of approved instructors shall be provided the contracting officer or designee along with all associated cost or schedule impacts to the contract.

3. Antiterrorism performance (Level I AT Awareness Training attendance and compliance) may be documented as a performance metric under the resultant contract, and be part of past performance information in support of future source selections.

Installation OPSEC

1. In accordance with AR 530-1, Operations Security (OPSEC), dated 26 Sep 2014, and DoDM 5205.02-M, DoD Operations Security (OPSEC) Program Manual, dated 03 November 2008, contract personnel shall receive initial OPSEC Level I training which consists of initial and continual awareness training. Within the first 30 days of arrival on Fort Polk contract personnel shall receive initial OPSEC training either by on-line training through the Fort Polk SharePoint OPSEC site on the intranet, or the Defense Security Services website at: http://cdsetrain.dtic.mil/opsec/index.htm

2. The contractor shall ensure all applicable employees have completed OPSEC initial training and annual refresher training and shall certify that their workforce has https://jkodirect.jten.mil/ completed the training through the submission of completion certificate(s) to the Contracting Officer and the Contracting Officer's Representative (if appointed) within 30 days of arrival on post.

3. Operations Security (OPSEC) Awareness Training attendance and compliance may be documented as a performance metric under the resultant contract, and be part of past performance information in support of future source selections.

FORT POLK CONTRACT /HOMELAND SECURITY PRESIDENTIAL DIRECTIVE 12

(HSPD 12) REQUIREMENTS

Requirements apply to any contract where contractor employees will access multiple Installations or require access to the government information systems.

1. All personnel hired under this contract who do not require a security clearance must have a favorable National Agency Check with Inquiries (NACI) to be issued a CAC. The Contracting Officer Representative (COR) will ensure new hires complete a NACI through the Personnel Security Investigation Portal (PSIP) by initiating a request through JRTC OPERATION GROUP S2 no later than 15 days from the date of hire and completing the investigation (submission to OPM) within 30days. Personnel who require a security clearance must be processed by their company Facility Security Officer (FSO) or company Security Manager.

2. Instructions for completing the NACI process will be sent to the Project/Program Manager, Security Manager and the COR once the contract has been awarded and one of the above personnel notifies JRTC OPERATION GROUP S2 for the initiation. The contractor shall schedule fingerprinting appointments with JRTC OPERATION GROUP S2. Personnel requiring a CAC who do not receive a favorable NACI will not be allowed to perform services under this contract.

3. All employees requiring a common access card (CAC) for physical access to multiple Installations or access to the government information systems may be granted a CAC after the successful submission of the NACI through PSIP and a favorable fingerprint review by JRTC OPERATION GROUP S2. An unfavorable NACI adjudication can result in the loss or denial of computer access, physical access or employment.

4. Sponsoring organizations, activities whose personnel do not need access to multiple Installations or access to the government information systems will submit a completed access control roster to the Visitor Control Center (VCC). They may receive an Installation Specific Access Control Credential for the terms of their contract (until contract end date, not to exceed 3 years) when sponsored on an access roster. If not sponsored they will only receive a pass for up to 7 days.

5. Installation Specific Access Control Credential expirations may be updated to reflect a new contract period by submitting an updated access control roster to the VCC.

6. Access rosters may only be submitted via e-mail to the VCC by a .mil, .gov, .AAFES, address by the COR or security activity, all others will be returned without action.

Installation Access

1. All unescorted visitors to Fort Polk must be vetted at the Visitors Center, located adjacent to the main gate on Louisiana Avenue (building 5903). Personnel requiring unescorted access will present a state issued Real ID Act compliant driver’s license (check status of your state at: https://www.dhs.gov/real-id-enforcement-brief ). Visitors who do not have a Real ID act compliant driver’s license may use alternate forms of ID to proof their identity. Contact the Fort Polk Visitor’s Center at (337) 531-7907 to obtain a listing of authorized alternate forms of identity. Each visitor with acceptable screening results will be issued an access control credential for unescorted access to the installation. Personnel with unfavorable screening results may be denied unescorted access to Fort Polk. Law enforcement data obtained during the vetting process will not be released by personnel at the Visitors Center. A waiver process has been established for personnel who are denied unescorted access. Generally, waivers will be processed within five days of completion.

2. Escorted visitors who are accompanied by Department of Defense-affiliated personnel (active-duty Soldiers, civilian common access card holders, retiree ID card holders, DoD dependent ID card holders, and civilian contractor CAC holders) will not require vetting for access and will only need to produce a valid ID card; these visitors must be in the immediate vehicle of the escorting card holder. DoD affiliated personnel will be responsible for their escorted visitors on the installation. Personnel who are enrolled and vetted through the Rapid Gate program or possess an installation issued ID/Pass do not have escorting privileges.

3. The Fort Polk Visitors Center is open 24 hours a day, seven days per week. For additional information concerning access control please contact the Visitors Center at

(337) 531-0380/4978/7186.

https://www.dhs.gov/real-id-enforcement-brief