Attachment H - Security Requirements.doc

Attachment H

BEP-10-0001

BUREAU OF ENGRAVING AND PRINTING

Security Requirements for Distinctive Currency Paper

September 9, 2005 The following requirements provide for essential physical security, control, and employee suitability measures to be considered for implementation by contractors. These measures apply to all "prime" and "sub" contractors who, as a result of a contract with the Bureau of Engraving and Printing (BEP), will receive, utilize, or produce United States securities or instruments of reproduction for the United States Government. United States securities/instruments of reproduction, hereafter referred to as U.S. securities, include: U.S. currency paper, distinctive features, i.e., threads, fibers, watermarks, government furnished property, and instruments required to produce these features such as artwork, designs, images, waxes, molds, screening, and templates, etc. U.S. securities are considered to be, and remain, the property of the U.S. government.

WARNING! WARNING! WARNING!

THE UNAUTHORIZED POSSESSION AND REPRODUCTION OF ANY U.S.

OBLIGATION, SECURITY, DISTINCTIVE COMPONENTS, PAPER,

AND/OR INSTRUMENTS OF REPRODUCTION IS STRICTLY

PROHIBITED BY TITLE 18, U.S. CODE

Contractor responsibilities regarding protection requirements for U.S. securities encompass a broad scope of controls and protective measures. These include, but are not limited to comprehensive accountability and control, physical protection, loss prevention, and employee suitability (personnel clearance) programs. Accordingly, it will be the responsibility of the contractor to establish and maintain effective measures which will insure the integrity of U.S. securities and/or instruments of reproduction throughout all phases of the contract.

A written plan detailing the measures that will be employed for the protection of U.S. securities shall be submitted and approved by the BEP's Office of Security prior to award of a contract and prior to the receipt of any U.S. securities. All security plans and revisions will be effective only after written approval has been obtained from the Chief, Office of Security, BEP. This approval is contingent upon verification of the existence of the protective security measures reflected in the security plan.

The BEP Office of Security reserves the right to conduct initial and unannounced periodic site inspections to determine the vulnerability of U.S. securities based upon the protective measures proposed by the security plan. No changes in the control, handling, location, and/or storage of U.S. securities shall occur until a revised security plan is approved in writing by the Chief, Office of Security, BEP.

In proposals requiring bid samples of U.S. securities, solicitations requiring the use of U.S. securities only for equipment factory inspection tests, or for specific short term contracts, the security plan may provide means for temporary protection of the project to include labor intensive measures using appropriately cleared personnel. These temporary measures shall be addressed in the plan. However, prior to contract award, the contractor shall comply with protection requirements as prescribed herein.

The BEP considers all areas where U.S. securities are utilized, manufactured, or stored, including critical components/features and/or controlled ingredients necessary to produce these items as critical or vulnerable areas. At a minimum, the following categories shall be considered in the development of a physical security program:

I.

Perimeter Security:

A continuous fence, at least eight feet high with wired outriggers, should clearly demarcate the area or property to be protected. The fence should effectively deter or delay unauthorized intrusions. The fence should also provide for the orderly controlled ingress or egress of vehicular and pedestrian traffic. Each vehicular access/egress point shall be manned by a security guard when open. Pedestrian access of the perimeter shall be controlled by a means that allows access to only one person at a time, and is controlled by an automated card access system and monitored by closed circuit television (CCTV).

Lighting must be sufficient to allow security guards to detect all approaches/intrusions of the perimeter. Lighting should be sufficient to allow unrestricted viewing of the perimeter by the naked eye or by CCTV without adjustments.

CCTV coverage and security guard monitoring/presence must be sufficient to detect/respond to all approaches/intrusions of the perimeter. CCTV camera coverage should allow viewing of all perimeter and adjacent areas. CCTV camera coverage should extend to perimeter points of pedestrian and vehicular ingress/egress and should readily identify individuals/vehicles without adjustments by the operator/security guard. The perimeter should be free of obstructions that could impair observation of the area by security guards.

All visitors/contractors should be identified prior to admittance at the perimeter of the facility. Visitors will be processed at a single designated control center manned by a security guard.

II.

Curtilage Area:

The Curtilage Area is defined as that area between the perimeter fence and the exterior of the building(s) where U.S. securities are present. Lighting must be sufficient to allow security guards to detect all intrusions of the curtilage area, which includes all areas between the perimeter line and buildings where U.S. securities are processed/stored. Lighting should be sufficient to allow unrestricted viewing of the curtilage area by the naked eye or by CCTV without adjustments.

CCTV coverage and security guard monitoring/presence must be sufficient to detect/respond to all intrusions of the curtilage. The curtilage should be free of obstructions that could impair observation of the area by security guards.

III.

Building Exterior:

Building Exterior is defined as the exterior area of a building where U.S. securities are present and includes exterior doors, walls, and windows. Lighting must be sufficient to allow security guards to detect all intrusions of the building exterior where U.S. securities are processed/stored. Lighting should be sufficient to allow unrestricted viewing of the building exterior by the naked eye or by CCTV without adjustments. The building exterior should be free of obstructions that could impair observation of the area by security guards.

CCTV coverage and security guard monitoring/presence must be sufficient to detect/respond to all intrusions of the building exterior. CCTV camera coverage shall include the entire building exterior as well as the interior views of exterior rollup doors, including control stations established at entrances and departure points, and during all phases of the loading of U.S. securities.

Building exterior doors allowing access to areas where U.S. securities are present shall be constructed in accordance with Hollow Metal Door Manufacturers (HMM) Specification 863. Doors shall consist of a 14-gauge steel, flush mounted, self-closing and latching, hollow metal door set into a 12-gauge steel frame and shall be hung using non-removable pins. All hardware shall be appropriate for the door installed. Roof hatches or other related openings shall be of similar construction. Doors and roof hatches should be protected by high-security type locks.

Exterior cargo doors affording access to areas where U.S. securities are present shall be constructed of at least 18-gauge steel slats with continuous end locks. The bottom bar of the door shall consist of two steel angles, at least one-quarter inch thick. Door guides shall be at least one-quarter inch thick. Cargo doors shall be configured with a high-security locking device at each lower corner and installed over concrete floors/surfaces. CCTV coverage of rollup doors should include both internal and external views.

Authorized employees shall access buildings where U.S. securities are present only through control stations established at entrances and departure points. These control stations shall be controlled by an automated access control system (i.e., card access) and monitored by CCTV.

Emergency egress doors shall be constructed to the same standards as prescribed for exterior doors. Emergency egress doors, roof doors and /or hatches shall be equipped with balanced magnetic switches and audible, local alarms. CCTV systems shall be sufficient for alarm assessment.

Electronic intrusion detection systems should include balanced magnetic switches for all exterior doors permitting access to areas where U.S. securities are present. Cargo doors should be protected by a magnetic switch as well as dual-tech motion detectors on each side of the door.

In areas where U.S. securities are present all windows shall be alarmed to detect intrusions. Windows shall be protected by security bars, security screening, or window glazing to preclude window breakage. In addition, windows that permit public view of U.S. securities will be opaqued. Openings, i.e., vents, ducts, etc., will be protected by security bars and/or security screening so as to preclude the unauthorized removal of U.S. securities.

IV.

Building Interior:

A central command guard station shall be located within a building that houses U.S. securities. The central command guard station shall monitor all alarms/CCTV cameras and maintain direct and back up communications with local fire/police authorities. In the event of a power failure, a standby generator shall exist to operate all security systems including: Alarms, automated access systems, CCTV, communications, and security lighting. Access to the central command center shall be rigidly controlled and alarmed in addition to being sufficiently hardened, e.g., bulletproof glass, reinforced concrete, etc.

The contractor shall place special emphasis on pilferage and theft control measures. The contractor shall be required to provide or maintain separate controlled storage areas for the critical components of U.S. securities, e.g., distinctive fibers, threads, watermark screens, waxes, molds, sensitive test materials, etc. These storage areas shall require appropriate access controls, surveillance, and intrusion detection security systems.

All U.S. securities shall be secured in approved storage areas/containers when not in use. These areas/containers may consist of areas/vaults or other containers approved by the BEP's Office of Security. Storage containers/vaults shall be utilized in a way to prevent unauthorized access to U.S. securities. The standards for areas where U.S. securities are present are as follows:

(1) Floors and ceiling of concrete or comparable steel construction. (2) Walls constructed floor to true ceiling and hardened by the use of security mesh screening covered by standard dry wall materials, or equivalent. (3) Windows allowing access to areas where U.S. securities are present shall be protected by security bars and/or security mesh screening as well as appropriate window glazing to preclude window breakage. The interior of the storage area shall be alarmed to detect intrusion/breakage. In all cases, alarm protection shall be such that the unauthorized removal of U.S. securities is not possible. Windows that permit public view of U.S. securities shall be opaqued. (4) Openings, i.e. vents, ducts, etc., shall be protected so as to preclude the unauthorized removal of U.S. securities.

The standards for small areas storing U.S. securities such as, fibers, waxes, molds, and threads, shall be the same standards with the following exceptions. No windows shall be permitted in these areas. In lieu of a storage room, GSA Class V security storage safes may be used in an alarmed room with no windows.

V.

Security Guard Force:

The security guard force shall provide 24 hours-a-day, 7 days-a-week security coverage. The security guard force shall monitor all CCTV cameras, alarms and shall be able to detect and respond to all approaches or breaches of the perimeter, areas adjacent to the perimeter line and those between the perimeter line and building(s) where U.S. securities are located. In addition to regular perimeter patrols, the security guard force shall monitor and/or respond to all interior alarms or breaches of building(s) where U.S. securities are located. The security guard force shall also regulate the movement of personnel in and out of manufacturing, processing, and storage areas as well as regulating ingress/egress of the perimeter by pedestrian/vehicular traffic.

Security guards shall have access to at least two means of communication, e.g., radio and telephone. The security guard force shall contact all appropriate officials, i.e. local police, fire, BEP Office of Security/Police Operations Center, and federal law enforcement agencies, in a timely manner in the event of emergencies or exigent circumstances. The size of the Security Guard Force shall be sufficient to accomplish all duties specified.

All members of the security guard force are required to be fit for duty and shall be armed and possess all licenses/qualifications required by the appropriate jurisdiction.

VI.

Identification and Control of Personnel:

The BEP reserves the right to investigate and clear all persons involved in the performance of work on contracts. The contractor will submit for investigation only the names of those employees involved in the performance of the contract. The BEP shall furnish to the contractor appropriate forms and documents for each person who will be directly associated with U.S. securities. These forms and documents shall be appropriately completed by each individual concerned, and returned to the BEP Contracting Officer's Technical Representative (COTR) a minimum of 120 days prior to access to U.S. securities. Each contractor or subcontractor employee shall be issued a BEP clearance, in writing, prior to being granted access to U.S. securities. Typically, persons requiring a clearance include, but not limited to: Employees involved in research, development, and testing; designated managers and security guards; other employees requiring unrestricted access to U.S. securities; and selected carrier personnel.

The contractor shall, to the extent possible, insure that all employees associated with U.S. securities, are eligible for access clearance to U.S. securities.

Contract employees who are not U.S. citizens shall be so identified. Non U.S. citizens required to perform work on U.S. securities shall be observed by two properly cleared persons while work is being performed. The COTR shall be notified, in writing, when an employee terminates employment.

The contractor shall establish a system for the identification of individuals requiring access to the area where U.S. securities are utilized, manufactured, processed, or stored. Employees authorized access to these areas shall display pictured identification and be readily distinguished from unauthorized personnel.

VII.

Drug Free Workplace Requirement

The contractor shall comply with requirements outlined in FAR clause 52.223-5, "Drug-Free Workplace" for a Drug-Free Workplace program. The contractor shall make all records of compliance with this requirement available for examination and confirmation to the BEP Office of Security upon request. The contractor will further prohibit any employee convicted of a criminal drug statute or otherwise in violation of the company's drug policy from performing work under this contract.

VIII.

Control and Loss Prevention:

Control points for the identification and control of all personnel shall be established at entrances and departure points (including elevator and stair landings) of all areas where the U.S. securities are being utilized, manufactured, processed, or stored.

Departments or areas where U.S. securities are utilized, manufactured, processed or stored shall be isolated from other plant operations. These areas shall be accessible only to authorized personnel directly involved in manufacturing or processing operations requiring access to U.S. securities. U.S. securities shall not be commingled with other products/instruments of reproduction of the contractor. Unauthorized persons, e.g., other customers of the contractor, shall not have access to/or view U.S. securities and related processing. Movement of personnel and equipment in and out of manufacturing, processing, and storage areas shall be rigidly controlled.

U.S. securities shall be under the control and or observation of at least two properly cleared employees at all times when the securities are not secured in an approved area/container. Uncleared persons shall be escorted by properly cleared company personnel with valid company ID badges. All U.S. securities no longer needed shall be returned to the BEP or destroyed in accordance with procedures approved by the BEP's Office of Security.

When key actuated high security locking devices are used to secure areas which house U.S. securities, a key control system shall be established to insure and preserve the integrity of the keys, locking devices and containers. When combination type locks are used, knowledge of the combination numbers shall be restricted to as few cleared employees as possible who have a need to access the area. Combinations will be changed each time a person authorized access is transferred, retires, or is otherwise removed from that position and immediately when a combination has been compromised. Automated locking devices (i.e. card actuated) shall be subject to the same criteria.

In an emergency situation the contractor, without endangering human life, shall provide a secure environment for the facility and U.S. securities contained therein. An Emergency Evacuation/Response Plan will be developed to enumerate procedures to be taken during an emergency situation. Depending on the degree of danger and again without endangering human life, attempts should be made to secure U.S. securities, either in a security container or secure area prior to evacuation. If it is not possible to secure items prior to evacuation, check points should be established at entrances to processing section(s), or at building or perimeter entrance/exit points to control entry/exist of personnel and materials to the emergency area. These check points should also ensure that U.S. securities are not removed from the premises or perimeter. Emergency personnel (fire, police, etc.) shall be escorted to rescue or attend to injured personnel and to response appropriately to the circumstances.

The contractor shall insure that fire prevention and fire protection program contains special provisions for the protection of U.S. securities. Fire prevention measures shall be in accordance with existing state/local and/or U.S. federal codes.

IX.

Movement of Securities:

Movement of U.S. securities between the contractor facilities and the BEP or between subcontractor and prime facilities shall be by an approved secured, armored, or escorted carrier. For additional requirements for movement via a secured, armored, or escorted carrier, see attachment entitled, “Transportation Requirements for Shipments of Distinctive Currency Paper".

Small quantities may be transmitted by U.S. Registered Mail or hand carried by BEP cleared personnel. However, in all instances, methods of transmitting or transporting U.S. securities shall be approved in writing by the BEP's Office of Security prior to movement.

X.

Destruction:

Unfit currency paper or unusable distinctive features shall be repulped or destroyed in such a fashion that it cannot be recognized or used as a U.S. security. Destruction of material shall be witnessed and certified by two cleared employees. A Certificate of Destruction shall be prepared to document the destruction of U.S. securities and shall include the following information regarding the destruction of the material: Date, amount, type of material, method of destruction, and the names and signatures of at least two authorized witnessing officials.