DD254 Continuation Sheet for On-base Only Secret_NIPR-SIPR.pdf

CONTINUATION OF DD FORM 254 FOR ON BASE SAMPLE SECRET_SIPR,

SOLICITATION NUMBER – FA945X-23-R-X0001 Call 001

Item 12. (Continuation):

In order to comply with DFARS 252.204-7000, Disclosure of Information, the items of the information to be released are required at least 45 days prior to the scheduled release date. Per AFI 10-701, all requested released items must have an OPSEC security and policy review prior to a release approval. The Technical Point of Contact will load the requested public release requested document for the Contractor to the AFRL internal review process in the OPSEC Tool application to meet the OPSEC security and policy review requirement. Once approved, the document will receive a Public Affairs release number. Final approval must occur prior to release outside of government channels. Items submitted through the review process must derive from a government representative if being released by a DoD contractor. Unclassified information does not equal publicly releasable. Information requiring AF or DoD-level review will be forwarded by the entry-level public affairs office through the AFIMSC Public Affairs Office to the Secretary of the Air Force, Office of Public Affairs, Security and Review Division (SAF/PAX), 1690 Air Force Pentagon, Washington DC20330- 1690. MAJCOM/DRUs will send information requiring AF or DoD-level review directly to SAF/PAX. NO PUBLIC RELEASE IS AUTHORIZED FOR NON-SCI or SCI.

Item 13. (Continuation):

Contractor shall follow security classification guidance on information, hardware and equipment as provided in the following security classification guides: List Applicable SCGS, Title, Version and date. The Contracting Officer will provide other Security Classification Guides under separate cover as tasks are assigned. Revised Security Classification Guides will be provided under separate cover and will require revising the DD Form

254. The Contractor shall comply with any revisions to that Security Classification Guide. Document classification markings will be done in accordance with E.O. 13526 and DoDM 5200.01, Volume 2, Marking of Classified Information, 24 Feb 2012, and supplements thereto. The contractor must comply with special OPSEC requirements contained in the contract or addendum thereto. The requirements, restrictions and other safeguards prescribed by the National Industrial Security Program Operating Manual (NISPOM) 32 CFR Part 117 and its supplements apply to all classified performance. The prime contractor must contact AFRL/RDOSC at (505) 846-0536, AFRL Industrial Security Oversight Office for execution of the Visitor Group Agreement (VGA) and submit a company letter identifying on-site key personnel management officials or company representatives and a security focal point of contact for security related matters (normally FSO) prior to on-base operations. Prime contractor is responsible to ensure on-base subcontractors execute a VGA with AFRL/RDOSC prior to on-base operations. The prime contractor must include a provision in each on-base subcontract requiring subcontractors to contact AFRL/RDOSC and execute a VGA prior to beginning on-base operations. All Signature Coordination Blocks (only list applicable coordination blocks – see NOTE below):

Government Project Manager: Capt. Colton X. Mott, AFRL/RVBX, 3550 Aberdeen SE, Kirtland AFB, NM 87117, (505) 846-1925.

BAA’s/Solicitations are only signed by the Contracting officer in Item 17h on the DD 254.

AFRL/RVKB, Jessica Perez, Contracting Officer, 3550 Aberdeen SE, Kirtland, AFB, NM 87117:

AFRL/RDOSC, Industrial Security, 3550 Aberdeen SE, Kirtland AFB, NM 87117:

AFRL/RDOSC, OPSEC, 3550 Aberdeen SE, Kirtland AFB, NM, 87117:

AFRL/RVIC, ISSM/O (IA), 3550 Aberdeen SE, Kirtland AFB, NM 87117:

AFRL/RDOI, SSO, 3550 Aberdeen SE, Kirtland AFB, NM 87117:

AFRL/RDOS, Chief Information Protection (IP), William C. Bulloch, 3550 Aberdeen Avenue SE Kirtland

AFB, NM 87117:

10.a.: The contractor will need administrative access to classified COMSEC material. The contractor will not receipt, copy, or generate classified COMSEC material. (If SIPRNet is required)

10.b.: The contractor is permitted access to RESTRICTED DATA (RD) in the performance of this contract.

Access to RD requires a final U.S. Government clearance at the appropriate level.

10.c.: The contractor is permitted access to Critical Nuclear Weapons Design Information (CNWDI) in performance of this contract. The government project manager or designated representative will ensure the contractor is briefed for CNWDI prior to access being granted. DCSA briefs the contractor for access to CNWDI, upon request.

10.d.: The contractor is permitted access to Formerly Restricted Data (FRD) in the performance of this contract. Access to FRD requires a final U.S. Government clearance at the appropriate level.

10.e. (2): The contractor requires access to NON-SCI intelligence materials. Prior approval of the contracting activity is required for subcontracting. Access to intelligence information requires a final U.S. Government clearance at the appropriate level and will only be done at authorized government facilities. Non-SCI Intel can be at the SECRET level. Attachment will be provided upon award.

10.g.: The contractor is permitted access to North Atlantic Treaty Organization (NATO) information in performance of this contract. The government project manager is the designated representative that will ensure the contractor Facility Security Officer and concerned employees are NATO briefed prior to access being granted. Prior approval of the contracting activity is required for subcontracting. Access requires a final U.S.

Government clearance at the appropriate level. Forward NATO classified materials needed by the contractor only from an Air Force Sub-registry directly to the contractor concerned.

10.h.: The contractor is permitted access to Foreign Government information. Access to Foreign Government information requires a final U.S. Government clearance at the appropriate level.

10.j.: The contractor shall comply with DoDI 5200.48, Controlled Unclassified Information, AFI 16-1404 Air Force Information Security Program, Air Force Guidance Memorandum 2020-16-01, Air Force Guidance Memorandum for CUI, 23 Jul 20, and DoDM 5400.7-Air Force Manual 33-302, DoD Freedom of Information Act (FOIA) Program. The contractor shall monitor CUI aggregation and compilation based on the potential to generate classified information pursuant to security classification guidance addressing the accumulation of unclassified data or information.

10.k.: Access to SIPRNET IS required in performance of this contract. NATO awareness training is required prior to having access to the SIPRNet.

11.c.: All work performance on base will be performed by to be determined upon award of this contract.

Contractor performance is restricted to (enter name and address of the government activity in Item 8.a.). Using contractor or activity will provide security classification guidance for performance of this contract. The contractor requires access to classified source data up to and including SECRET in support of the work effort.

Any extracts or use of such data requires the contractor to apply derivative classifications and markings consistent with the source documents. Use of “Multiple Sources” on the “Derived From” line necessitates compliance with the NISPOM, 32 CFR 117.13 and use of bibliography, classification, declassification, and markings will be in accordance with EO 13526 and the DoDM 5200.01, Volume 2, Marking of Classified Information, 24 Feb 2012, and supplements thereto.

11.g.: The contractor is authorized to use the services of Defense Technical Information Center (DTIC) and is required to register at https://discover.dtic.mil/dtic-registration-benefits/dtic-registration/. You may be required to complete a DD Form 2345, Military Critical Technical Data Agreement. The contracting activity must be involved in certifying need-to-know to DTIC. If you need help registering, you can find information here https://reg.dtic.mil/help/index.html or call DTIC at 1-800-225-3842.

11.l.: The contractor shall comply with DoDI 5200.48, Controlled Unclassified Information, AFI 16-1404 Air Force Information Security Program, Air Force Guidance Memorandum 2020-16-01, Air Force Guidance Memorandum for CUI, 23 Jul 20, and DoDM 5400.7-Air Force Manual 33-302, DoD Freedom of Information Act (FOIA) Program. The contractor shall monitor CUI aggregation and compilation based on the potential to generate classified information pursuant to security classification guidance addressing the accumulation of unclassified data or information.

11.m.: See Section I of the general provisions for the clause titled Notification of Government Security Activity, AF FAR Sup 5352.204-9000 for on base classified processing.

Item 14. (Continuation):

11.j.: OPSEC. The contractor shall provide operations security (OPSEC) protection for all sensitive/critical information in accordance with AFI 10-701 and the (RV/RD OPSEC Plan or specific Program OPSEC Plan).

The applicable Critical Information and Indicator List (CIIL) will be provided under separate cover. It is incumbent upon the contractor to request this document via the contracting officer or directly to the OPSEC Program Office. The contractor shall describe the steps necessary to protect sensitive and Critical Program Information (CPI) to their staff and communicate any sensitivity to the government for the work they complete.

The contractor will include OPSEC awareness, Program Protection, and Counter Intelligence education and awareness training to all personnel as part of their standard security program on an annual basis. New contracted employees shall be trained within 90 days. Technology Protection unique security measures may apply. The contractor must also adhere to any Program Protection Plans (PPP) that may cover the protection of sensitive and/or CPI under their respective contract. On-site/on-base contractors will participate in the ongoing efforts and requirements laid out by the PRS OPSEC Program and Program Protection Lead.

Items intended for public release shall be processed through the internal AFRL RD/RV review process (OPSEC Tool). Final approval must occur prior to release outside of government channels. Items submitted to the OPSEC Tool must derive from a government representative if being released by a DoD contractor. Unclassified information does not equal publicly releasable. All information deemed CUI or unclassified must be marked according to the originating office's instructions and AFI 61-201.

FOIA requests for information are to be worked by the government Office of Primary Responsibility (appointed by the 377th FOIA Office) and the AFRL FOIA office. An OPSEC assessment will be completed on all information being released via the FOIA.

Proprietary information must be protected in accordance with non-disclosure and other applicable contractual (if any) agreements.

11.m.: The contractor will provide AFRL/RDOSC, 3550 Aberdeen Ave SE, Kirtland AFB, NM 87117, and the Servicing Security Activity (SSA) with all information required by the Notification of Government Security Activity Clause, and any additional information and/or documentation that is required by that office.

Item 15. (Continuation):

10.e (2).: AFRL/RDOI has inspection oversight Non-SCI Intelligence Classified.

Defense Counterintelligence and Security Agency (DCSA) is relieved of inspection responsibility for portions performed on Kirtland AFB more than 90 days a year. AFRL/RDOSC has security oversight for collateral work conducted on Kirtland AFB at the Phillips Research Site. The servicing security activity (SSA), AFRL/RDOSC, will maintain oversight, control and supervision of the contractor's work performance at Kirtland AFB, NM.