Security Requirments for Construction Contract Template Aug 10.doc

Attachment 6

7. SECURITY REQUIREMENTS FOR CONSTRUCTION CONTRACTS – 9 Aug 2010

7.1. Obtaining and Retrieving Identification Media. As prescribed by the AFFARS 5352.242-9000, Contractor access to Air Force installations, the contractor shall comply with the following requirements:

a. The contractor shall obtain base identification and vehicle passes for all contractor personnel who make frequent visits to or perform work on the Air Force installation(s) cited in the contract.

b. No later than three days prior to work commencing, the contractor shall submit a written request on company letterhead (or e-mail correspondence) to the 902 CES Project Manager (with copy to Contract Administrator), with the following required information: project title, project number, contract number, location of work site, contract start and stop dates, work schedule, and names of contractor employees needing access to the base, including full legal name, date of birth, sex, race, SSAN, state issued I.D. Card/Drivers License #, and name of sub-contractor if not employed directly by contractor (Government will provide template to be used in submitting visitor pass request). The authorized Project Manager will review the request for completeness and then forward it to the issuing base pass and registration office or security forces for processing. The contractor’s request for visitor passes must be submitted at least three working days prior to date pass is to be issued. Contractors will present government (state or federal) issued ID, and INS Form 9 (I9), before being issued a pass to enter the installation. At the time of issuance, a Wants and Warrants check is conducted for every contractor. Personnel employed by the contractor must get a pass for their privately owned vehicles at Bldg. #1032, Visitor Reception Center, with proof of following:

(1) Liability Insurance

(2) Current License Plates

(3) Current State Inspection Sticker (If Required)

(4) Valid State Driver License

(5) A phone number for sponsor on base

c. Vehicles owned by the contractor with the company names permanently printed on them are not required to obtain a pass as long as a current work order is presented at the time of entry. However, current liability insurance, state inspection sticker, and registration is required. The person driving the vehicle must have a valid operator license for the type of vehicle.

d. The contractor is responsible for ensuring employees report to Bldg. # 1032, Visitor Reception Center, to present their INS Form 9 (I9) before being issues a visitor pass.

e. Upon completion or termination of the contract or expiration of the identification passes, contractors shall ensure that all base identification passes issued to contractor employees are returned to the issuing office. If a contractor employee has been terminated, the pass will need to be retrieved and returned to Security Forces so that employee does not have base access. If the pass is not retrieved then SF will need to be notified so base access is not allowed. Upon completion of the contract return all issued installation access passes to the issuing authority.

f. Failure to comply with these requirements may result in withholding of final payment.

7.2. Pass and Identification Items. The Host Unit shall ensure the following pass and identification items required for contract performance are obtained for employees and non-government owned vehicles:

a. Installation Access Pass (IAP) (DBIDS),, Visitor/Vehicle Pass (AFI 31-204), used for contracts for less than one year to include one-day visits (i.e. warranty work).

b. Installation Access Card (IAC) (DBIDS), Civilian Identification Card (AETCI 36-3001), used for contracts one year or more which do not require access to controlled areas or government computer systems.

c. DoD Common Access Card (CAC), (AFI 36-3026), used for contracts for more than one year and requirement exists for access to the government computer systems and software. CAC applications are accomplished by Trusted Agents via the Contractor Verification System (CVS).

7.3. Suitability Investigations. Contractor personnel shall successfully complete, as a minimum, a National Agency Check with Inquiries (NACI), before operating government furnished workstations that have access to Air Force e-mail systems. The contractor shall comply with the DoD 5200.2-R, Personnel Security Program, AFI AFI33-100, User Responsibilities and Guidance for Information Systems, and AFI 33-200, Information Assurance (IA) Management, requirements. NACI investigations requests are initiated using the Standard Form (SF) 85P and are submitted to the installation Information Protection Office through the Unit Security Manager. NACI investigations are different from the wants and warrants checks, and are provided by the government at no additional cost to the contractor.

7.4. Unescorted Entry to Restricted Areas. When work under this contract requires unescorted entry to controlled or restricted areas, the contractor shall comply with AFI 31-101, Integrated Defense, Personnel Security Program Management, as applicable. Contractor personnel shall be the subject of a favorably completed NACI investigation to qualify for unescorted entry to a restricted area. In addition, the Air Force shall submit NACI investigations for contractor employees at no additional cost to the contractor.

7.5. Listing of Employees. The contractor shall maintain a current listing of employees. The list shall include employee's name, social security number, and date of investigation if service work involves unescorted entry to Air Force restricted or other sensitive areas designated by the installation commander. The list shall be validated and signed by the company Facility Security Officer (FSO) and provided to the contracting officer prior to the contract start date. Updated listings shall be provided when an employee's status or information changes.

7.6. Freedom Of Information Act Program (FOIA). The contractor shall comply with DoD Regulation 5400.7-R/Air Force Supplement, DoD Freedom of Information Act Program, requirements. The regulation sets policy and procedures for the disclosure of records to the public and for marking, handling, transmitting, and safeguarding For Official Use Only (FOUO) material. The contractor shall comply with AFI 33-332, Privacy Act Program, when collecting and maintaining information protected by the Privacy Act of 1974 authorized by Title 10, United States Code, Section 8013. The contractor shall remove or destroy official records only in accordance with AFMAN 33-363, Management of Records, or other directives authorized in AFI 33-322, Records Management Program.

7.7. Reporting Requirements. The contractor shall comply with AFI 71-101, Volume- 1, Criminal Investigations, and Volume-2, Protective Service Matters, requirements. Contractor personnel shall report to an appropriate authority, any information or circumstances of which they are aware may pose a threat to the security of DoD personnel, contractor personnel, resources, and classified or unclassified defense information. Contractor employees shall be briefed by their immediate supervisor upon initial on-base assignment and as required thereafter.

7.8. Personnel Security. Contractor personnel requiring unescorted entry to controlled or restricted areas designated by the installation commander, shall comply with base access requirements. These requirements are contained in AFI 31-101, for installation access and AFI 31-501, for suitability determinations.

7.9. Additional Security Requirements. In accordance with DoD 5200.1-R and AFI 31-401, the contractor shall comply with AFI33-100, User Responsibilities and Guidance for Information Systems ; AFI 33-200, Information Assurance (IA) Management; applicable AFKAGs, AFIs, and AFSSIs for Communication Security (COMSEC); and AFI 10-701, Operations Security (OPSEC). The contractor will comply with DoD Standard 22/Force Protection Condition Measures, DoD Standard 25/Level I-AT Awareness Training, and associated tasking contained in AFI 10-245, Antiterrorism (AT) standards. Level I AT Awareness training is available for contractor personnel and can be requested by calling 652-1357/1905 or by visiting Bldg 863, Rm 129.

7.10. Physical Security. Areas controlled by contractor employees shall comply with base Operations Plans/instructions for FPCON procedures, Random Antiterrorism Measures (RAMS) and local search/identification requirements. The contractor shall safeguard all government property, including controlled forms, provided for contractor use. At the close of each work period, government training equipment, ground aerospace vehicles, facilities, support equipment, and other valuable materials shall be secured. During increased FPCONs, contractors may have limited access to the installation and should expect entrance delays.

7.11. Entry Procedures to Controlled/Restricted Areas. The contractor shall comply and implement local base procedures for entry to Air Force controlled and restricted areas.

7.12. Key Control. The contractor shall establish and implement key control procedures in the Quality Control Plan to ensure keys issued to the contractor by the government are properly safeguarded and not used by unauthorized personnel. The contractor shall not duplicate keys issued by the government.

7.13. Lost Keys. Lost keys shall be reported immediately to the contracting officer. The government replaces lost keys or performs re-keying. The total cost of lost keys, re-keying or lock replacement shall be deducted from the monthly payment due the contractor.

7.14. Government Authorization. The contractor shall ensure its employees do not allow government issued keys to be used by personnel other than current authorized contractor employees. Contractor employees shall not use keys to open work areas for personnel other than contractor employees engaged in performance of their duties, unless authorized by the government functional area chief.

7.15. Lock Combinations. The contractor shall establish procedures in local OIs ensuring lock combinations are not revealed to unauthorized persons and ensure the procedures are implemented.

7.16. Traffic Laws. The contractor and their employees shall comply with base traffic regulations.