ATTACHMENT F - OPETVFOR CSP 6_Mar_2025.pdf

CONTROLLED UNCLASSIFIED INFORMATION (CUI)

CONTROLLED UNCLASSIFIED INFORMATION (CUI)

OPERATIONAL TEST AND

EVALUATION FORCES

CONSTRUCION SECURITY PLAN

FOR

BUILDING CA-7 RENOVATION

VERSION 1.0

6 Mar 2025

Approved By:

Accrediting Official / Date

Prepared by:

Daniel Fugett

OPTEVFOR SSO

TABLE OF CONTENTS

SECTION PAGE

1. CSP Applicability and Purpose 2

2. Definitions 2

3. Site Security Manager (SSM) 4

4. Statement of Construction Project 4

5. Location of Work 4

6. C7RP Planned Start Date 4

7. C7RP Planned Competition Date 4

8. Risk Assessment & Management 5

9. Security In-Depth 5

10. Adjacencies to Consider 6

11. Document Control 6

12. Control of Operations 6

13. Procurement. Shipping, and Storage of Materials 6

14. Construction Workers, Other Personnel, & Companies 7

15. Site Security 10

16. Security Administration 11

17. Additional Project Security 11

18. Prohibited/Restricted Items & Activities 13

19. Photography 14

20. Emergencies. Accidents. & Safety 14

21. Sound Transmission Class (STC) Testing 14

22. Appendix A - Non-Disclosure Agreement 16

23. Appendix B – Statement of Affiliation 19

1. CONSTRUCTION SECRUITY PLAN (CSP) APPLICABILITY AND PURPOSE This CSP is created for use during the Operational Test and Evaluation Forces (OPEVFOR) Building CA-7 Renovation Project (C7RP) in Norfolk, Virginia, United States. This CSP applies equally to anyone, and everyone associated with this construction project. Exceptions are not provided for affiliated organization/company, rank/position, for any reason. This includes all persons who will or may, regardless of reason, access the Secure Construction Site (SCS), access Project Documentation (e.g., blueprints/construction documentation) even if they will not access the SCS, attend project meetings, and/or obtain project specific information. The purpose of this CSP is to identify the security requirements, procedures, and standards that wil1 be implemented throughout the CRP construction project to protect the end user mission and US national security.

This CSP will specifically address Construction Site Security (CSS) in its entirety. The performance objective of CSS for this project is to ensure the end building is functional, and successfully protects mission personnel, operations, and information.

This CSP will be issued to the Construction General Contractor (GC) and incorporated as part of the overall construction contract. No changes, modifications, nor reductions of the requirements outlined in this document are authorized without Accreditation Official (AO) approval. For the duration of the project, the GC will adhere to the most current version of the Technical Specifications for Construction and Management of Sensitive Compartmented Information Facilities, IC Tech. Spec for ICD/ICS 705.

This CSP shall be applied in two (2) phases, Phase 1 and Phase 2.

a) Phase 1 shall begin when US Government Construction Force (UGCF) awards the construction contract. The only work that may be performed during Phase l is demolition within the existing facility, sitework/earthwork, and security infrastructure delivery/installation/set up (e.g., fence, Access Control Facility (ACF), Secure Storage Area (SSA), etc.). Phase 1 will require security oversight at a reduced level. Facility construction is not authorized to be performed in any way; however, orders may be placed for 1long lead1 procurement items at the discretion of the GC.

b) Phase 2 shall begin once all security infrastructure has been delivered, installed, set up, and approved by the Site Security Manager (SSM) as acceptable. The GC shall officially request a site review/inspection to the SSM no less than three (3) business days in advance to confirm the SCS and SSA as secure. If confirmed and approved, the SSM shall notify UGCF, and UGCF may issue Phase 2 to the GC. At the start of Phase 2, all aspects of this CSP shall be enforced in full and without exception. Questions on Phase l and Phase 2 authorized work shall be directed to the SSM and UGCF.

2. DEFINITIONS, ROLES, RESPONSIBILITIES, AND AUTHORITIES

US Government Construction Force (UGCF) - The UGCF will include all employees directly employed by UGCF. The UGCF will be the administrative point of contact for contracted engineers, technicians, and construction personnel. For C7RP, the UGCF is Naval Facilities Engineering Systems Command (NAVFAC) – MID ATLANTIC.

Secure Construction Site (SCS) - The SCS is defined as the area within the construction site perimeter that is demarcated by a perimeter FE-6 fence and access is controlled by the SSM staff.

During non-working hours, the construction site shall be locked. The SCS perimeter shall include no less than a 6-foot standoff distance on both sides of the fence (i.e. no materials or other items can be stored within 6 feet of the fence) unless otherwise approved by the SSM.

Changes and/or modifications to the SCS perimeter shall not be made without prior approval by the SSM and AO.

Secure Storage Area (SSA) - The SSA is defined as true floor to true ceiling, slab-to-slab construction of substantial material, and a solid wood-core or steel-clad door equipped with an SSM approved security lock and is intended to protect against surreptitious entry. The SSA is the location where all materials used on this project will be delivered, inspected (as necessary), and stored until they are needed on site. The SSA will be the delivery point for all materials unless otherwise approved by the SSM. Changes to the SSA shall not be made without prior approval by the SSM and AO. Additional information on the SSA is contained in section 13 of this CSP.

Access Control Facility (ACF) - The ACF will be a temporary facility located within the SCS that will serve as the single access point where all personnel enter and exit the SCS. The ACF will serve as the central monitoring station and the screening facility for the project. Changes to the ACF shall not be made without prior approval by the SSM. Additional information on the ACF is contained in section 15 of this CSP.

Sally Port - The sally port is a vehicle control point that provides positive control of all vehicles entering and leaving the SCS. The sally port serves as a vehicle trap and allows the SSM Staff to inspect all vehicles entering and/or exiting the SCS for prohibited and/or dangerous materials.

Changes to the sally port shall not be made without prior approval by the SSM and AO.

Additional information on the Sally Port is contained in section 15 of this CSP.

Accrediting Official (AO) – A US Government employee who has been designated by the Cognizant Security Agency (CSA) to provide security oversight of all aspects of C7RP construction under their security purview; accredit C7RP under their cognizance; and review and approve the C7RP design concept, CSP, and final design for each construction project.

Operationally oversees (directly or indirectly) the SSM in relation to C7RP construction site security. May delegate authorities to the SSO.

General Contractor (GC) - The GC is the Prime Construction Contractor on this contract and includes all persons working for the GC company.

Senior Intelligence Official (SIO)- The SIO is responsible for all aspects of the construction and certification.

Special Security Officer (SSO) - The SSO is the primary on-site security official and will provide oversight to the security team.

Site Security Manager (SSM) - The SSM will be a Top-Secret (TS)-SCI cleared U.S. Citizen specifically trained and certified as an SSM. The SSM will be the single point of contact for all security matters on this project and will report operationally to the the OPTEVFOR SIO. The SSM will manage the SSM Staff daily and all security operations of this project. The SSM will not provide contractual nor 'means and methods' direction to the GC or any subcontractors, however, the SSM has full authority to ensure project compliance with this CSP, the ICD-705 (and associated documents), and other project specific security requirements by all personnel associated with this project. The SSM will make every attempt to not impact the contractor(s) work, to include stopping work, for any reason, however, the SSM does have the authority granted by the AO to fully enforce this CSP and the ICD-705 to ensure final facility accreditation potential is maintained, to include stopping work if determined to be absolutely necessary. The SSM SHALL NOT be contracted by, nor under, the GC or any subcontractor.

Construction Surveillance Technician (CST) - The CST will be a Top-Secret (TS) c l ePaargeed3 Uo f. S2 3.

Citizen trained and CceOrNt i fTieRdOaLs LaECDSTU.NTChLeACSSSTIFreIEpoDrtIsNdFirOecRtlMy AtoTtIhOeNSS(CMUaIn) d only the SSM has authority to give direction to the CST (all direction to the CSTs shall come from only the SSM). The CST is not a Quality Control (QC) nor Quality Assurance (QA) representative for either the GC nor government. All documentation, to include photographs, produced by the CST shall not be released outside the SSM Staff without SSM/AO approval. The CSTs SHALL NOT be contracted by, nor under, the GC or any subcontractor.

Access Control Watch(ACW) -The ACW will be a Secret (S) cleared U.S. Active Duty member trained and certified as an ACW. The ACW reports directly to the SSO and only the SSO has authority to give direction to the ACW. The ACWs SHALL NOT be contracted by, nor under, the GC or any subcontractor.

SSM Staff - The collective group of: SSM, CST-Lead, and CST personnel. The term SSM Staff shall apply to any combination of these personnel.

3. SITE SECURITY MANAGER (SSM)

The SSM is the single point of contact for security matters related to this construction project.

The SSM shall operationally report directly to the OPTEVFOR SIO.

Name: Daniel Fugett, USN CIV, GS-13 Email: fugettd@nmic.ic.gov Phone: 757-457-6406

4. STATEMENT OF CONSTRUCTION PROJECT

The UGCF will renovate a stand-alone, single-story 3,000 Square Foot (sqft) building for OPTEVFOR. CA-7 is located in Norfolk, Virginia and is not on a military installation. The renovation will result in the conversion of CA-7 from a gymnasium to a secure facility that supports mission operations. The secure facility will include compartmented areas for multiple operation support, offices, conference rooms, and storage.

The current facility is used as an unclassified building used by US Government personnel for fitness, meetings, and other administrative operations. There are no personnel assigned to CA-7 as their permanent workspace. Operations that include CA-7 shall end No-Less-Than thirty (30) days prior to the start of C7RP. The GC shall demolish all non-structural aspects of CA-7 during Phase I of this project. Only structural steel, concrete, and other load- bearing elements shall remain after demolition.

Once demolition is complete, and Phase 1 requirements are met, renovation of the facility will be started under Phase 2 of the project.

5. LOCATION OF WORK

Building CA-7, Norfolk, Virginia 23505, United States of America.

6. C7RP PLANNED START DATE

Summer 2025 (approximate date, will be updated by SSO)

7. C7RP PLANNED COMPLETITION DATE

Summer 2027 (approximate date, will be updated by SSO)

8. RISK ASSESSMENT AND MANAGEMENT

The risk assessment for this project was completed by the Naval Criminal Investigative Service as part of the Southeast Virginia Local Threat Assessment and will be held by the SSO for the duration of this project. The risk assessment will be reviewed periodically, and modified as necessary, so the CSP measures can be updated to bring it in line with the most current risk analysis.

Operational Security (OPSEC) and Information Security (INFOSEC) - OPSEC and INFOSEC will be paramount in protecting the integrity of this project. OPSEC/INFOSEC principles are critical for protecting the operational activities and security of US interests. Knowingly violating OPSEC and/or INFOCSEC requirements may result in removal from this project by the SSO due to unnecessary increased risk. OPSEC/INFOSEC basic practices for this project include, but are not limited to:

a) The term SCIF or SAPF should not be used when describing the work, space, or end use and should not be used in project documentation outside of this CSP, by any parties other than the OPTEVFOR and the SSM Staff. All other personnel should use the term "Secure Facility" or "C7RP" when describing the SCIF Space.

b) US Government information, as well as proprietary information (PROPIN), such as plans, projects, designs, and miscellaneous documentation developed prior to, during and after the construction project will be protected In Accordance With (IAW) ICD and ICS 705 standards, DoDM 5103.21, and DoD 5200.01.

c) Vendors/manufactures shall not be told the name of the end user, name of this project, nor that the work is classified, sensitive, or otherwise related to US national security.

d) Project plans, documents, submittals, specifications, schedules, etc. shall only be provided to those that need them. The SSO will provide final confirmation on the release of plans when need to know questions arise.

e) No project information, details, specifications, descriptions, or photographs shall be uploaded to the internet, shared with non-vetted personnel, or used in any way not specifically approved by the SSO.

f) Names of the SSM, CSTs, and other security personnel on this project shall not be shared with anyone that does not have a need to know. The SSO will confirm who has a need to know if there is a question.

9. SECURITY IN DEPTH (SID) DOCUMENTATION

The Security-in-Depth associated to this project includes:

a) C7RP is not located on a military installation.

b) Concrete vehicle barriers are placed on the Street side of the facility.

There are no barriers on the parking lot sides.

c) The SCS will have an FE-6 perimeter fence surrounding the area with pedestrian and vehicle gates accesses, closed circuit television, and perimeter lighting.

d) Access to the SCS and/or SSA will be controlled by Secret cleared active duty military members during all hours of operations.

e) All personnel are subject to security inspections by the SSM Staff when entering/exiting the SCS and SSA.

f) US Top-Secret cleared CSTs, specially trained and certified, will provide surveillance coverage of all personnel within the facility.

10. ADJACENCIES TO CONSIDER

This project is not located on a military installation and the US Government does not have control of the area surrounding building CA-7. Building CA-7 is approximately 70 feet offset from the Street, but resides across the street from military and non-military residences. Norfolk base security shares jurisdiction of the streets next to the facility with the Norfolk police department. Use of perimeter lighting will need to be configured to prevent light spillage into the residence area. Additionally, OPEVFOR is adjacent to a military residence complex. Residents have been known to park vehicles and “hang out” in the OPTEVFOR parking lot that is adjacent to CA-7. Restriction of the parking lot area by OPTEVFOR will be addressed during construction. A 15-minute military police response time from NSA Hampton Roads is expected for all events/buildings at the OPTEVFOR complex (bldgs. CA-10, CA-7, NH-495).

Construction mitigations will need to be implemented to address concerns.

11. CONTROL OF CONSTRUCTION PLANS AND DOCUMENTS

For the purposes of this CSP, design information and project related documents/ information, will be considered as official/controlled documents and shall never be shared with anyone who does not have a validated need to know. The SSO shall confirm valid, and final, need to know if ever in question. Design information and project related documents/information includes, but is not limited to, the following types of information: Drawings, Blueprints, Schematics, Schedules, Memorandums, Sketches, Meeting minutes, Vendor Lists, Access Rosters, and Project Emails.

Construction documentation will only be disseminated to designated individuals with valid need to know and shall not be posted to public websites.

Only US Government or Official Contractor systems utilizing commercially available technical/information assurance controls shall be utilized to store, safeguard and transmit/receive email, tasking's or other correspondence relating C7RP. The use of private email services such as Gmail, Yahoo, Hotmail, Facebook, Snapchat, WhatsApp, or others shall not be used.

When no longer needed, all project documents, blueprints, plans, designs, meeting minutes, and other related documents shall be physically destroyed by the GC.

12. CONTROL OF OPERATIONS

There will be no operations in building CA-7 during this renovation project.

13. PROCURMENT, SHIPPING, AND STORAGE OF MATERIALS

a) Procurement & Shipping of Materials

1. All construction materials shall be procured from only US owned vendors located within the US.

2. Materials shall be shipped from the vendor location directly to the SSA located within the SCS fence line of this project.

3. Shipping labels, receipts, and/or 'bills of lading' shall not include any project details; to include but not limited to: name of project, end user, SCIF, SAPF, or other details that could indicate the end use of the facility the materials are destined for.

4. The GC shall provide the SSM 24 hours' notice of material delivery to this project to all for proper staffing of SSM Staff personnel.

5. Delivery notice from the GC to the SSM shall identify at least:

i. Number of trucks making deliveries,

ii. Delivery location (SSA or SCS) and,

iii. Delivery time (if known).

b) Material Storage / Secure Storage Area (SSA)

1. All materials shall be delivered to and stored in the SSA until required for use unless specifically approved by the SSM to be stored elsewhere.

2. The SSA shall be a fenced in area completely contained within the SCS. The GC shall determine how large the SSA area is based on the quantity of materials they need to store within it at peak construction.

3. All materials shall be delivered to the SSA no-less-than three (3) business days prior to intended use to allow for SSM Staff inspections. All materials delivered to the project shall be subject to SSM Staff inspection, however, the SSM shall determine which materials shall be inspected and which may not be. This determination will not be shared without anyone outside of the SSM Staff.

4. The SSM shall notify the SIO if any materials are denied for use on this project as the result of SSM Staff inspection. If the SSO does not notify the GC that a material is denied for use, the GC may pick up the materials from the SSA three

(3) business days after delivery, or sooner if approved by the SSO.

i. The SSA shall be opened twice per day for two hours each opening to allow for material removal by the GC.

ii. The SSA shall be closed for material pick-up the remaining hours of each day to allow for SSM Staff material inspections.

c) SSA Access

1. Full and complete access to the SSA shall be restricted to SSM Staff only. All other personnel associated with the project may request access to the SSA through the SSM when they believe access is needed. Requests for SSA access should be submitted at least 24 business hours in advance. Other than the SSM, SSM Staff members are not authorized to grant access to the SSA to anyone not part of the SSM Staff. Access to the SSA will be approved on a case-by-case basis by the

SSM.

14. CONSTRUCTION WORKERS, OTHER PERSONNEL, AND COMPANIES

The SSO shall create a Master Access Roster (MAR) for use on this project that will identify all persons who are approved for SCS and/or project information access and separately shall identify anyone who has been denied for use on this project.

Personnel Requirements & Restrictions. All shall be US citizens or US persons who have been positively vetted in accordance with section 14 of this CSP.

Personnel Vetting Requirements. The Personnel Vetting requirements apply to all persons that will work on this project and/or will have access to project information (e.g. blueprints, designs, customer information, etc.) regardless of if they will physically access the SCS, SSA, or project site. For anyone requesting access to the project site/information, the following information must be submitted to the SSM at least twenty-one (21) days prior to requested access:

a) Uncleared Personnel (persons without a valid and active U.S. security clearance)

a. Company Name

b. Full name and, if applicable, aliases

c. Date of Birth (D.O.B.)

d. Social Security Number (SSN)

e. Place of Birth (P.O.B.) City, State, Country

f. Current Citizenship

g. Dual/Multi-citizenships

h. Previous citizenships (if applicable)

i) If not a citizen by birth, provide date(s) that current citizenship was obtained and previous citizenship forfeited (if applicable). Additional information/documentation may be required for non-US citizens and/or naturalized US citizens.

i. Position Title or Major Duties

j. Current home address

k. Phone Number & Email address

l. Color photocopy of valid US photo ID. Acceptable forms of ID include:

i) US Driver's License

ii) US Passport

iii) US Passport Card

m. If non-US citizen, provide color photocopy of US resident/work permit.

n. Signed Non-Disclosure Agreement (NOA) (Appendix A)

NOTE: The SSO shall notify the GC/UGCF when approvals or denials are made for submitted person(s). The SSO reserves the right to deny access pending additional details if any of the above information is not included in the submission or is not accurate. The 21-day vetting clock will not start until the SSO receives a complete and accurate submission.

The SSO will implement measures to protect all PII that is submitted and will not provide any PII to any person who does not have a need to know.

b) Cleared Personnel (persons with an active US Secret or above security clearance)

a. Company Name

b. Full name and, if applicable, aliases

c. Social Security Number (SSN)

d. Position Title or Major Duties

e. Color photocopy of valid US photo ID.

f. Signed Non-Disclosure Agreement (NOA) (Appendix A)

g. The SSO shall notify the GC/UGCF when approvals or denials are made for submitted person(s).

NOTE: The SSO reserves the right to deny access pending additional details if any of the above information is not included in the submission or is not accurate. The 21-day clock will not start until the SSO receives a complete and accurate submission. The SSO will implement measures to protect all PII that is submitted and will not provide any PII to any person who does not have a need to know.

c) Visitors. Visitors are identified as anyone who is not designated for, or does not need, regular site access. Visitors fall into two categories:

a. Approved for site access, infrequent visitors. Infrequent visitors will be on the MAR and identified as an infrequent visitor. Infrequent visitors must be vetted per section l4.c of this CSP, but do not visit the site frequently enough to warrant a permanent site badge. When added to the MAR, infrequent visitors may access the site as required during normal hours of operations and will adhere to all standard security requirements. While they will not be assigned a permanent site badge, an infrequent visitor must still read and sign the Site Security Briefing, given by the SSM or designee, prior to accessing the SCS for the first time.

b. Exceptional/emergency circumstance, unvetted visitors. Unvetted visitors shall be approved by the SSO in exceptional circumstances only and must be US citizens.

Unvetted visitors require an escort by GC or UGCF personnel and must be escorted always when on the project site. If the GC/UGCF requires unvetted visitor access to the project site, the request shall be sent to the SSM as soon as possible, ideally 24 business hours in advance, but not less than 2 hours in advance. Last minute notice is not grounds for expedited approval. When requesting site access for an unvetted visitor, the request must include the following:

i) Reason/justification/need for site access

ii) Name of visitor(s)

iii) Company/Organization of visitor(s)

iv) Confirmation of US citizenship

v) Color photocopy of valid US photo ID

vi) Date(s) and Time(s) of requested access

vii) Escort(s) name(s), and position (the person escorting the visitor while on the project site, must be a GC/UGCF employee).

d) VIP visits (e.g., General/Admiral level officers) will be handled on a case by case basis and are not covered in this CSP.

e) Company Vetting Requirements. All companies supplying construction workers, design professionals (e.g., architects), and other personnel to work on this project and/or will have access to project information (e.g., blueprints, designs, customer information, etc.)

regardless of if they will physically access the SCS, SSA, or project site must be submitted to the SSM at least thirty (30) days prior to requested access. Personnel and the company they work for must both be approved through the vetting processes of this CSP prior to being granted access to the project site and/or project information. The GC shall submit a Statement of Affiliation (SOA) (Appendix B) for each company, subcontractor, consultant, and other support organizations intended for use on this project to the SSM at least forty-five (45) days prior to requested access.

f) General Contractor Pre-qualification of Sources. Prior to the proposal/bidding phase of this construction project, the UGCF shall release a Pre-qualification of Sources Notice for all interested GCs. Sources (interested GCs) will be pre-qualified in accordance with DFARS 236.272. Under these procedures, Offerers will be required to submit a Statement of Affiliation (SOA) (Appendix B). The Government will evaluate the SOA and determine a list of qualified Offerers to which the Request for Proposal (RFP), including plans and specifications, will be sent.

g) Security Violations and Removal from the Project. Any person(s) who violate(s) the requirements of this CSP, willfully ignore(s) or refuse(s) to follow SSM Staff direction or creates an increased risk (intentional or unintentional) to the overall project may be immediately removed from the project by the SSO. Removal from the project may be temporary or permanent and may include only the SCS/SSA or then entire project and all aspects of it, to include removal of access to designs/plans, meetings, and other project

Page 10 of activities. Removal from the project shall be a last resort by the SSO exercised only when necessary to protect the integrity of the facility/project and/or the operational and end user mission. Removal from the project for a security violation(s) shall be at no cost to the US government.

15. SITE SECURITY

a) Perimeter Fence. The GC shall be responsible for providing and maintaining an FE-6 perimeter fence for both the SCS and SSA for this project. The UGCF shall provide a site outline to the GC identifying where the fence shall be installed. There shall be one personal gate connected to the ACF front entrance and one vehicle gate for the sally port entrance at the SCS. The GC shall remove the perimeter fence(s) upon project completion and installation of permanent fence, as approved by UGCF and the SSM.

b) Perimeter Lighting. The GC shall be responsible for providing perimeter lighting for both the SCS and SSA for this project. Lighting includes all components required to achieve 100% visibility of the perimeter fence during hours of darkness, including, but not limited to: light fixtures, power (solar power is not acceptable), poles for mounting, conduits, trenching, and replacement parts. Lighting shall provide a minimum 4 lux at all points along the fence line. The sally port vehicle search area lighting shall be at minimum 100 lux. All lighting shall be provided and installed in accordance with UFC 3-530- 01, with the SSM retaining final approval on acceptable lighting for security purposes. All perimeter fence and sally port lighting shall use a photoelectric switch that automatically cycles the lighting on during periods of low light or darkness. The photoelectric switch shall be installed on the exterior of the ACF, as approved by the SSM. All manual lighting controls shall be operated from within the ACF. The GC shall remove the perimeter lighting upon project completion and installation of permanent lighting, as approved by UGCF and the SSM.

c) Access Control Facility (ACF). The ACF serves as the sole entry point for personnel to enter and exit the project site. The GC shall be responsible for providing and maintaining an ACF for this project. The ACF shall include the following rooms/areas:

a. Personnel ingress/egress area with enough space for personnel inspection

b. Badge creation office/SSM private office

c. ACW operations area

d. Attached, or easily accessible bathroom facility

e. Open space for administrative operations

f. Securable storage closet

The ACF shall be no-less-than 500 sqft and will be a climate-controlled facility with power and water connections. The GC shall submit a proposed ACF floor plan to the SSM prior to procurement of the ACF. The SSM shall provide approval or required changes within five (5) business days of receipt of the floorplan from the GC. The GC shall remove the ACF upon project completion, as approved by UGCF and the SSM.

d) Access Control. Prior to accessing the SCS for the first time all persons must have been placed on the approved SSM MAR (or be an approved visitor), received a notice of security policies and procedures provided by the SSM or designee, and be issued a site access badge. All personnel are subject to complete and full inspection by the SSM Staff when entering and exiting the SCS. All persons accessing the SCS must display their previously issued site badge. Persons without a site badge will not be granted access to the SCS.

a. If an approved person who has been previously issued a site badge forgets their badge, they must notify the GC who will notify the SSM, and a temporary badge may be issued for a single day access. Repeatedly forgetting a badge may result in removal from the MAR, temporarily or permanently.

e) Sally Port. The GC shall provide a vehicle control point located directly next to the ACF that will serve as the only entry and exit point for vehicles (or heavy equipment and other items too large to hand carry through the ACF) entering or exiting the SCS. All vehicles shall enter the SCS through the Sally Port and shall be subject to SSM Staff inspection with each entrance/exit. The GC is responsible for sally port construction and all operational maintenance for the life of this contract. The GC shall remove the Sally Port upon project completion, as approved by UGCF and the SSM.

f) SSM Staff Daily Operations, Responsibilities, and Minimum Requirements. The SSM staff daily operations, responsibilities, and minimum requirements are described in the security contractor Performance Work Statement (PWS) and are not part of this CSP.

g) Construction Surveillance. All project material and personnel are subject to 100% surveillance by the Construction Surveillance Technicians (CST) when on the SCS or the SSA. The CSTs report directly to the SSM and are not subject to any operational guidance, direction, or orders from any person, organization, or entity other than the

SSM.

h) CST Presence. CSTs will have full access to the entire SCS at all times unless otherwise directed by the SSM. CSTs are required to be present at all times during hours of SCS or SSA operation. The CSTs will take written notes of all actions of persons on the SCS or in the SSA, which will be turned into the SSM at the end of each workday for review.

Specific CST documentation requirements are outlined in the security contractor PWS.

Any person who enters the SCS or SSA will be subject to photography by the SSM Staff.

No persons are authorized to interfere with the SSM Staff while they are performing their duties unless it is related to life safety. All concerns with the SSM Staff should be directed to the SSO or UGCF who will speak directly to the SSM. The CSTs will not impede work progress unless authorized by the SSO.

16. SECURITY ADMINISTRATION

The SSM will maintain all administrative documents, logs, and records related to the security of this project to be included in the final accreditation package. This includes but is not limited to:

all administrative actions completed by the SSM Staff (CST Observation Notes, Visitor Logs, Material Delivery Logs, Incident Reports, Photos, Vehicle Logs, Access Control Logs, SSA Logs); the MAR; SSM Staff SOPs; and any other documents, logs, or reports produced by the SSM Staff. All security administration documentation shall be handled in accordance with section 11 of this CSP.

17. ADDITIONAL PROJECT SECURITY

a) Three Week Look Ahead Schedule. The GC shall provide the SSM a Three (3) Week work look ahead schedule on a weekly basis. The SSM will use the Three Week look

Page 12 of ahead schedule for planning of SSM Staff and resources. The three week look ahead shall include, but not be limited to: the number of workers expected per day over the following 3 weeks; the general working locations of all workers/trades and their activities; the hours of operation/site access on a daily basis; and any special activities, operations, visits, or other information the SSM should be notified about.

b) Weekly Security Meeting. The SSM will coordinate a weekly project security meeting held in the ACF. The security meeting shall be attended by the GC security manager (and other Secret cleared GC personnel with a confirmed need to know), and the UGCF. The weekly security meeting will be used to discuss changes in schedule or required inspections based on the GC provided three week lookahead schedule, security issues with project personnel, and overall security related topics.

c) SSM Staff, GC/Subcontractor, and other Government Interaction and Authorities. The SSM Staff will have full control over the entire SCS and SSA for all security matters. It is the goal of the SSM Staff to not impede, distract, or impact the GC operations in anyway, however, if the final accreditation of the facility is ever in potential jeopardy, the SSM Staff may provide direction to anyone on the SCS or SSA to protect US national security. All personnel on the SCS and/or SSA shall follow all SSM Staff direction.

Failure to follow and direction given by the SSM Staff may result in permanent removal from the project, to include access to project related information.

a. The SSM Staff shall always have unimpeded access to all areas of the SCS and

SSA.

b. The SSM Staff are not Quality Assurance (QA)/Quality Control (QC) nor Safety Officers and will not perform these functions in any capacity on behalf of any other group.

c. The SSM Staff shall not take photographs for, or on behalf of, any person(s) or group(s) outside of the SSM, CST, AO teams.

d. The SSM Staff and the GC (including all subcontractors) shall not fraternize with each other inside or outside of work in any capacity, to include, but not limited to none of the following:

i. Gifts from one party to the other, regardless of size/value.

ii. Dinners and other after work social gatherings.

iii. Sharing personal contact information (phone, email, social network, etc.)

iv. Vacation planning and/or excessive personal stories and communication.

d) GC Provided SSM Staff Safety Equipment. The SSM Staff shall be responsible for providing their own standard safety equipment for working on this project. Standard safety equipment includes: safety toe boots, hard hat, high-visibility vest, standard gloves, eye protection, standard hearing protection, and dust masks. If there are atypical or items other than the previously described standard safety requirements (e.g., special respirators, Tyvek suits, fall protection, etc.) then the GC shall provide this safety equipment for use by the SSM Staff when observing the construction work that requires it. The GC should include any construction activities that would require non-standard safety equipment on the three week look ahead schedule and describe what non-standard safety equipment will be required to the SSM. Work activities that require non-standard safety equipment may not be authorized to commence if that equipment has not been provided to the SSM Staff by the GC beforehand.

CONTROLLED UNCLASSIFIED INFORMATION (CUI)

e) Inspections (General). All materials, tools, equipment, and persons are subject to inspection at all times while on the SCS or in the SSA. The SSM Staff will make every attempt not to impact work in progress if an inspection is warranted, however, if there is a potential risk to the final accreditation of the facility, or end user mission, work may be stopped for inspection. Refusing inspections, or to provide access for inspections, may result in removal of the person(s) permanently from the SCS and have their access to the project, to include plans and documents, revoked by the SSO.

f) Badge Display. Site badges must be displayed above the waste, but below the neck, at all times when on the SCS. The badge must be visible always for the SSM Staff and if for any reason it is not visible, the SSM Staff member will direct the person(s) to display their badge.

18. PROHIBITED/RESTRICTED ITEMS AND ACTIVITIES

Any item classified as prohibited or restricted may not be brought on to the project site. Only the SSO has the authority to grant waivers for these items as deemed necessary for the performance of this contract. The GC will provide weatherproof signs in English to the SSM for posting at all SCS/SSA entry points that identify prohibited items. Any requests for prohibited item exception shall be sent to the SSO no less than five (5) business days prior to attempting to bring the item onto the project site. The GC is responsible for notifying their personnel and all subcontractors about these restrictions prior to accessing the project site. The GC is responsible for providing a storage location for cell phones, key fobs, and any other devices that their employees cannot bring onto the project site.

The following items and activities are prohibited on the secure construction site:

a) Firearms, knives, or other weapons are prohibited. (Items normally used as a tool of the trade or in the normal course of construction, such as sheet-rock knives, may be permitted but must be disclosed to the SSM Staff when entering the site).

b) Ammunition or other explosives, to include powder actuated tools/materials.

c) Electronic devices are authorized on the construction site except for inside the gym and include but are not limited to:

a. Personal Electronic Devices (PEDs)

b. Computers (computers needed for work on this project shall be approved on a case- by-case basis and shall be mitigated with SSM identified actions. No computers will receive automatic, non-questioned approval)

c. Cell phones, PDAs, srnartphones, Two-way and/or portable radios

d. Wi-Fi, Bluetooth, and other wireless devices

e. Cameras & Video recorders (of any sort)

f. Thumb drives, external hard drives, or other removal media storage devices.

g. Key Fobs

d) Drugs, narcotics, barbiturates, marijuana, controlled substances, drug paraphernalia, and alcohol. (Prescription drugs must be accompanied with a valid U.S. medical prescription)

The SSM Staff reserve the right to prohibit any items, devices, or activities not covered in this list. SSM Staff personnel may prohibit any items deemed hazardous to personnel or property, or that may hinder the progress of work.

Any prohibited items discovered on the project site or attempting to be brought onto the project site are subject to confiscation by the SSM staff and may not be returned to the

Page 14 of violator. If an item is confiscated by the SSM staff and not returned, the US government will not provide any financial compensation or reimbursement to the person who violated this CSP. If an item is confiscated, then the SSM will determine on a case-by-case basis if the item may be returned to the violating individual. It is the responsibility of the GC to notify their subcontractors of the requirements of this CSP.

19. PHOTOGRAPHY

Photographs of any sorts, and for any reasons, are prohibited on this project (both on and off the SCS and SSA) without expressed written approval from the SSO prior to the photos being taken.

If the GC, UGCF, or other project stakeholder(s) requires photographs to be taken within the SCS, a written request must be sent to the SSO at least five (5) business days prior to the photos needing to be taken. The SSO shall review the request and provide approval or denial on a case-by-case basis.

No photographs taken on the SCS or of the project site shall be used by any personnel for any means not agreed to by the SSO. This includes, but is not limited to, on company websites, for Public Affairs Office (PAO), other contract proposals, or any other reason.

20. EMERGENCIES, ACCIDENTS, & SAFETY

An incident may occur which will warrant an emergency response from both government and GC safety elements. The SSM will be responsible for all security decisions during an emergency/accident and at all times life safety considerations shall take precedence over security.

In the event of an emergency/accident that requires outside/offsite assistance, e.g. fire, paramedics, or MPs; the SSM Staff on the project site shall notify the ACF of the need for emergency services via radio (NOTE: during a bomb threat, no radios shall be used on the project site). The ACF shall notify the proper emergency services and will also notify the SSM.

The SSM shall notify the GC and the UGCF. Emergency response personnel will be allowed immediate/unimpeded access to the SCS/SSA emergency location. Immediate/unimpeded access shall not be granted to non-emergency personnel. The SSM Staff shall monitor all emergency personnel when on the SCS/SSA as closely as possible, without interfering with emergency personnel operations and always from a safe distance. Emergency personnel shall be subject to search when exiting the SCS/SSA as long as the emergency has been adequately addressed and no longer deemed an emergency. If emergency personnel need to leave the site as part of their emergency operations, e.g., an ambulance leaving with an injured person; they will be allowed immediate/unimpeded access off the SCS/SSA as well.

Safety. The GC is responsible for the safety of this project site, not the SSM nor SSM Staff. SSM Staff members shall not interfere with the job duties/responsibilities of the safety officers on the project site unless it directly relates to the security of this project. Safety officers shall not interfere with the operations of the SSM Staff unless it is a life safety issue. Non-life safety issues related to the SSM Staff shall be brought directly to the SSM and/or UGCF. The SSM shall ensure that all SSM Staff members perform their job duties and responsibilities in a safe manner and in accordance with US and local laws.

21. SOUND TRANSMISSION CLASS (STC) TESTING

All areas of this facility that are Sound Transmission Class (STC) rated shall be STC tested to confirm the acoustical integrity of the design and construction and to verify protection of US National Security. The GC shall notify the SSM and UGCF in writing no less than 60 calendar days prior to when areas of the facility are ready for STC testing.

The security contractor for whom the SSM is employed shall perform STC Instrumental Testing in accordance with the ICD-705 and Chapter 9 of the Technical Specifications for the ICD/ICS- 705 for the secure space within building. The testing method provided by the security contractor must meet the ASTM E336 Standard Test Method for Measurement of Airborne Sound Attenuation Between Rooms in Buildings, based on ASTM E90 Laboratory Measurement of Airborne Sound Transmission Loss of Building Partitions and Elements.

a) All secure rooms/walls/doors are to be tested. The security contractor shall provide a written report for each area tested to the AO and UGCF verifying and identifying the numerical STC rating of each test conducted. The security contractor must provide all testing equipment, materials, and trained personnel to meet this requirement. Any GC personnel with a confirmed US Secret or above security clearance may witness the STC testing with approval by the SSM and AO but are not guaranteed permission to witness.

b) Any areas that fail to meet STC standards must be corrected by the GC prior to final acceptance of this project. STC testing results shall not be shared outside of the SSM Staff, AO, UGCF, and GC personnel with confirmed US Secret or above security clearance.

Page 16 of

APPENDIX A - Non-Disclosure Agreement (NDA)

OPTEVFOR

CA-7 BUILDING RENNOVATION PROJECT

NON-DISCLOSURE AGREEMENT

I, , an individual official, employee, consultant, or subcontractor of or to (the Authorized Entity), intending to be legally bound, hereby consent to the terms in this Agreement in consideration of my being granted conditional access to certain information, specified below, that is owned by, produced by, or in the possession of the United States Government.

As used in this Agreement, Controlled Unclassified Intonation (CUI) is an over-arching term that covers any information which the loss of, misuse of, or unauthorized access to or modification of could adversely affect the national interest or the conduct of Federal programs, or the privacy to which individuals are entitled under Section 552a of Title 5, as amended, but which has not been specifically authorized under criteria established by an Executive Order or an Act of Congress to be kept secret in the interest of national defense or foreign policy. This includes information categorized by government agencies as: For Official Use Only (FOUO) and any other identifier used by other government agencies to categorize information as CUI.

I understand and agree to the following terms and conditions of my access to the information indicated above:

a) I hereby attest that I am working on the Super-Secret Facility construction project, meet the requirements of Construction Security Plan (CSP) section 14, and have a need-to- know for access to information related to this construction project.

b) I hereby acknowledge that I have received a security indoctrination concerning the nature and protection of information to which I have been provided conditional access, including the procedures to be followed in ascertaining whether other persons to whom I contemplate disclosing this information have been approved for access to it, and that I understand these procedures.

c) By being granted conditional access to the information indicated above, the United States Government has placed special confidence and trust in me, and I am obligated to protect this information from unauthorized disclosure, in accordance with the terms of this Agreement and the laws, regulations, and directives applicable to the specific categories of information to which I am granted access.

d) I attest that I understand my responsibilities and that I am familiar with and will comply with the standards for protecting such information that I may have access to in accordance with the terms of this Agreement and the laws, regulations, and/or directives applicable to the specific categories of information to which l am granted access. I understand that the United States Government may conduct inspections, at any time or place, for the purpose of ensuring compliance with the conditions for access, dissemination, handling and safeguarding information under this Agreement.

e) If I represent the prime contractor, I will have my subcontractor(s) and my suppliers complete and sign Appendix A, Controlled Unclassified Information Non-Disclosure Agreement PRIOR to releasing any copies or reproduction of any part of the solicitation documents. As the prime contractor I will keep a list of subcontractor(s) and suppliers who were provided the solicitation documents. I hereby agree that the Government reserves the right to ask the list of subcontractor(s) and suppliers who were provided a copy of the solicitation documents.

f) I will not disclose or release any information provided to me pursuant to this Agreement without proper authority or authorization. Should situations arise that warrant the disclosure or release of such information, I will do so only under approved circumstances and in accordance with the laws, regulations, or directives applicable to the specific categories of information. I will honor and comply with all dissemination restrictions cited or verbally relayed to me by the proper authority.

g) I hereby agree that material which I have in my possession and containing information covered by this Agreement, will be handled and safeguarded in a manner that affords sufficient protection to prevent the unauthorized disclosure of or inadvertent access to such information, consistent with the laws, regulations, or directives applicable to the specific categories of information. I agree that I shall return all information to which I have had access, or which is in my possession: 1) upon demand by an authorized individual; and/or 2) upon the conclusion of my duties, association, or support to the United States Government; and/or 3) upon the determination that my official duties do not require further access to such information.

h) I hereby agree that I will not alter or remove markings, which indicate a category of information or require specific handling instructions, from any material I may encounter unless such alteration or removal is consistent with the requirements set forth in the laws, regulations, or directives applicable to the specific category of information. I agree that if I use information from a sensitive document or other medium, I will carry forward any markings or other required restrictions to derivative products and will protect them in the same matter as the original.

i) I hereby agree that I shall promptly report to the appropriate…