Enclosure 3_OTC 7000 CSPMay 2023_Signed_KTR_Redacted.pdf

CUI

Change Log

DATE REASON MADE BY

26 April 2023 Initial creation and review of CSP Murphy, Joel 22 May 2023 Review conducted by GSSO Murphy, Joel / Capt Piller 26 May 2023 Review conducted by Navy SSO Murphy, Joel / Spates, James 05 June 2023 Review conducted by USMC PSO Hamner, John

Table of Contents

SECTION 1: Organizational Roles and Responsibilities 1-1 Deputy Director, USMC, Special Access Program Central Office (SAPCO)

1-2 Program Security Officer (PSO) 1-3 Special Access Program Facility Accrediting Official (SAO)

1-4 Navy Special Security Officer (SSO) 1-5 Marine Special Security Officer (SSO)

1-6 Defense Intelligence Activity (DIA)

1-7 Site Security Manager (SSM) 1-8 Certified TEMPEST Technical Authority (CTTA)

1-9 MCAS Iwakuni Provost Marshal’s Office (PMO) 1-10 ICD 705 Construction Standards QC Specialist

1-11 Contracting Officer (KO) 1-12 Contracting Officer’s Representative (COR)

1-13 Government Project Manager SECTION 2: General Information

2-1 Facility Layout 2-2 Secure Area Facility ID

2-3 Accrediting Organization:

2-4 Location of Work 2-5 Estimated construction state date

2-6 Estimated completion date 2-7 Estimated cost for the project

2-8 Security in Depth 2-9 Contractor Clearance

2-10 Contractor Requirements 2-11 Prohibited Personnel

2-12 Unique Badge System 2-13 Physical Security

2-14 Labor country of origin SECTION 3: Purpose

3-1 Intent

3-2 Scope 3-3 Responsible Parties

3-4 Updates to the CSP 3-5 Distribution

SECTION 4: Project Details

4-1 Project Purpose

4-2 Facility specifics:

4-3 CSP applicability

4-4 Construction Site SECTION 5: Facility Construction and Design Considerations

5-1 Construction Site Security:

5-2 Administration:

5-3 Labor:

5-4 Access Procedures and Personnel Screening:

5-5 Construction Considerations (examples):

5-6 STC Door Installation: ................................................................. Error! Bookmark not defined.

5-7 HVAC Construction:

5-8 Dielectric Breaks:

5-9 Unclassified Cable Control:

SECTION 6: Acoustic Testing 6-1 Secure Areas Acoustic Testing:

SECTION 7: References APPEXDIX A – Facility Floor Plan, 1st Floor

APPENDIX B – Site Plan APPENDIX C – Acronyms and Terms

APPENDIX E – Transit Security Plan APPENDIX F – Prohibited Countries

APPENDIX G – Labor Security Synchronization Matrix

SECTION 1: Organizational Roles and Responsibilities

1-1 Deputy Director, USMC, Special Access Program Central Office (SAPCO) The Deputy Director, USMC SAPCO Headquarters Marine Corps, Program and Resources, Special Programs (HQMC, P&R, RPX) will act as executive agent and Cognizant Security Authority (CSA) for security issues and concerns.

• Name: David J. Stiffler

• Office: 703-692-5892

• Email: david.stiffler@usmc.mil

1-2 Program Security Officer (PSO) The PSO is designated in writing by the Director, USMC SAPCO or designee. The PSO is also appointed as the Special Access Program Facility Accrediting Official (SAO) and provides oversite to the Site Security Manager (SSM).

• Name: John Hamner

• Office: 315-255-7527

• Email: john.hamner@usmc.mil

1-3 Special Access Program Facility Accrediting Official (SAO) The SAO is designated in writing by the Director, USMC SAPCO or designee. The SAO ensures that National Level and DoD Security directives, instructions, policies and standards are implemented in the Requests for Proposal (RFP), contract, SOW, CSP and SSM guidance. The SAO will require assistance from Marine Corps Air Station (MCAS) Iwakuni and Tenant Unit assigned security professionals with regards to security expertise for general security, counterintelligence, and force protection issues to ensure regulatory requirements are implemented. The SAO provides security oversight of all aspects of ICD 705 construction. The SAO will review and approve the concept, design, and final drawings, relating to Secure Areas.

• Name: TBB

• Office: TBD

• Email: TBD

1-4 Navy Special Security Officer (SSO) The SSO is responsible for all SCI material within Carrier Air Wing 5 (CVW-5) and works with the Navy Regional SSO to accredit all Sensitive Compartmented Information Facilities (SCIF). The CVW-5 SSO can appoint individuals to act as Special Security Representatives, for specific site locations, and is the single point of contact for all SCIF matters. For this project the Navy SSO will be the Point of Contact for B-Wing concerns.

• Name: Mr. James Spates

• Office: 315-255-1920

• Email: james.spates@fe.navy.mil

1-5 Marine Government Special Access Program Officer (GSSO) The GSSO is responsible for all Special Access Program Facilities (SAPF) material within Marine Aircraft Group 12 (MAG-12) and works with the Marine Corps Regional PSO to accredit SAPF spaces.

The MAG-12 GSSO can appoint individuals to act as Special Security Representatives for specific site locations. For this project the GSSO will be the Point of Contact for C and G-Wing concerns.

• Name: Captain Robert Piller

• Office: 315-255-7527

• Email: robert.piller@usmc.mil

1-6 Defense Intelligence Activity (DIA) Accreditation of all SCI facilities is the responsibility of the DIA throughout the DoD. As such, SCI level SCIF’s need to have a separate accreditation, divorced from the Special Access Program Facility Accreditation process. While both facilities are designed to the same ICD 705 standards, the accreditation of SCI facilities belongs solely to DIA.

1-7 Site Security Manager (SSM) The SSM is sourced from the mission owner unit and will work directly with the PSO and GSSO for the duration of the project. The SSM must be properly trained in ICD 705 construction with a completion certificate available to the PSO. The SSM is the lead and point of contact for all construction site security, and is responsible for coordinating and overseeing all facets of site-specific security for the project construction and execution of the CSP. This includes physical, technical, personnel, procedural security requirements, and periodic technical tests and inspection of work performed. The SSM ensures security integrity of the facility until the United States Government accepts the facility from the construction contractor and has oversight on all aspects of project security, maintains unfettered access to the construction site, and controls and supervises the entire security team. The SSM will maintain copies of project documentation, such as the work schedules, access rosters, scope of work, construction review meeting minutes, inspection reports, security violation reports, and a detailed pictorial archive that will be used for the final accreditation of the Secure Areas. The SSM will be assigned to the project until the tenants take occupancy, is reassigned, or is relieved by the PSO.

• Name: Joel Murphy

• Office: 315-253-6004

• Email: joel.w.murphy@usmc.mil

1-8 Certified TEMPEST Technical Authority (CTTA) The CTTA is responsible for reviewing the Secure Area construction and design to determine if TEMPEST countermeasures are required and to recommend the most cost-effective solutions. The JSF Facility Protection Document (FPD), Attachment A, Revision J provides a minimum TEMPEST requirement for any facility. However, there are certain high cost facility requirements such as shielding or power filters that must be determined on an individual review basis. To initiate this review with the CTTA, please complete Section C of the Enclosure (1) Facility Checklist and submit to the CTTA along with any supporting documentation. The Facility Checklist shall be updated at regular design and construction intervals to accurately reflect the construction as it concerns TEMPEST. It is recommended that the CTTA be included in the 35%, 65%, and 95% design review. A CTTA or representative shall also complete a TEMPEST inspection during construction before drywall installation, after construction is complete, and then after equipment is installed to validate facility TEMPEST countermeasures. All contact with the CTTA will be coordinated through the PSO.

1-9 MCAS Iwakuni Provost Marshal’s Office (PMO) PMO has armed response and Law Enforcement authority for breaches to security and emergencies and provides Physical Security and Force Protection support.

• Office: 315-253-7518

• Email: pmo_physec@usmc.mil

1-10 ICD 705 Construction Standards QC Specialist This recommended position is a security best-practices Subject Matter Expert (SME) position, sourced by the Prime contractor, to provide on-site, timely ICD 705 construction guidance to the Prime and Sub-contractors. Contractors with experience constructing ICD 705-compliant facilities should have such a SME on staff and make them available for this project. This is not a government position, nor do they perform government functions; they are not a replacement or substitute for the SSM or any other government security position. This SME is part of the Prime Contractor’s Quality Control Organization. If provided by the Prime Contractor, the ICD 705 Construction Standards QC Specialist must be properly trained in ICD 705 construction with a completion certificate available to the SSM and PSO. They are responsible for the ongoing coordination and review of architectural, structural, fire protection, mechanical, plumbing, electrical and communications systems to assure construction associated with Secure Space areas meets required standards. The Secure Space Construction Standards QC Specialist will work directly with the SSM to detail a pictorial archive of the project for the PSO. The ICD 705 Construction Standards QC Specialist shall also coordinate with government representatives who must periodically review the construction and ultimately must certify the secure spaces.

• Name: TBD

• Office: TBD

• Email: TBD

1-11 Contracting Officer (KO) The KO is a government position that has the authority to bind the Federal Government of the United States to a contract. The KO is responsible for ensuring all necessary actions for effective contracting and compliance with the terms of the contract, and safeguarding the interest of the United States in its contractual relationships. The KO have the authority to start/stop work implementing non-contracted changes that may affect the performance of the contract.

• Name: TBD

• Office: TBD

• Email: TBD

1-12 Contracting Officer’s Representative (COR) The COR is a government officer in Construction Manager positions with the authority to negotiate funds for the government. The COR has the authority to act on behalf of the KO.

Marine Corps COR:

• Name: TBD

• Office: TBD

• Email: TBD

Navy COR:

• Name: Mr. Kenneth Morrison

• Office: 315-253-7219

• Email: kenneth.t.morrison@us.navy.mil

1-13 Government Project Manager The Government Project Manager is responsible for management of the project (scope, cost, and schedule) from preliminary design authorization to project closeout. The PM maintains overall management responsibilities for the project team.

• Name: TBD

• Office: TBD

• Email: TBD

SECTION 2: General Information

2-1 Facility Layout

2-2 Secure Area Facility ID Building 7000

2-3 Accrediting Organization:

HQMC, P&R (RPX) and DIA

2-4 Location of Work A-Wing, B-Wing, C-Wing, D-Wing, and G-Wing

2-5 Estimated construction state date

2-6 Estimated completion date

2-7 Estimated cost for the project See Form 1391

2-8 Security in Depth

a. (CUI) Installation Control: MCAS Iwakuni is protected by armed military.

b. (CUI) Installation Perimeter: Meets all physical security requirements contained in MCO

5530.14A without waiver.

c. (CUI) Construction Site: During general construction the site (Building 7000) will be surrounded by a security fence. At the end of each day the construction fence will be locked.

Periodically throughout the evening, on weekends, and on holidays MCAS Iwakuni PMO will conduct security checks of the construction site. This will become a part of their scheduled rounds and documented at PMO.

• Any change or modification to the perimeter must be officially requested by the COR or the Prime Contractor and approved by PMO Physical Security.

d. (CUI) Adjacencies: The construction site is located well within the established perimeter of

MCAS Iwakuni. Foreign owned/controlled facilities aboard MCAS Iwakuni are located opposite side of the base. Based on this there are no adjacency issues.

e. (CUI) Risk Assessments: Assessments of MCAS Iwakuni and the surrounding areas have been conducted by NCIS. Due to the classification of these assessments they cannot be included as a part of this plan but are available for review to those with the appropriate security clearance and a Need to Know (determined by the PSO/SSO).

2-9 Contractor Clearance All HVAC design and construction contracts will be awarded to U.S. companies using U.S. persons (an individual who has been lawfully admitted for permanent residence as defined in 8 U.S.C. 1101(a)(20) or who is a protected individual as defined by Title 8 U.S.C. 1324b(a)(3)).

Secure Area finish work (work that includes closing up wall structures; installing, floating, taping and sealing wallboards; installing trim, chair rail, molding, and floorboards; painting; etc.) shall be accomplished by U.S. citizens, as outlined in the project specifications. The SSM and a sponsor for the contracted construction company are required to work with MCAS Iwakuni Station Provost Marshal Office (PMO) and the contracted construction company to verify citizenship status of all contracted construction company employees and subcontractors designated to work on site via D-BIDS.

Personnel attempting to work on this project who do not meet the above requirements will be reported to the SSM, PSO, and SSO immediately.

2-10 Contractor Requirements Specified in this CSP and its subsequent revisions, subsequent to the issuance of the Notice to

Proceed (NTP). Any deviations or inability to follow these provisions must be submitted in writing to the KO, SAO, and SSO and approved by the USMC Deputy SAPCO and DIA before waiver. The construction contractor will:

a. Allow unrestricted site access by U.S. Government and designated inspectors and security personnel as authorized by the Contracting Officer/COR and SSM. SSMs shall have 24-hour unrestricted access to on-site construction offices and areas to conduct security inspections.

Keys and/or combinations to site/trailer locks will be provided to the SSM for the duration of the project. The SSM will conduct unannounced security surveys at random intervals to meet appropriate security procedures. Safety restrictions apply to all personnel.

b. Secure Areas – Any areas within the construction site or Building 7000 that utilize keys will have a set provided to the SSM, PSO, and SSO. During finish work within the Secure Area, all access to the Secure Area must be closed and locked when not in use. The Prime Contractor will maintain keys to the Secure Area and ensure they are only open when Access Control Personnel (mission owner provided) are present. A key control process must be always maintained and the process approved by the PSO and SSO.

c. Perform required security work when directed by the Contracting Officer/COR and SSM to protect sensitive information and materials, address security incidents, and address unauthorized accesses to the work site.

2-11 Prohibited Personnel The construction contractor (including subcontractors) is prohibited from acquiring labor or services from foreign-owned companies or non-U.S. persons. Any requests to deviate from this requirement will be presented to HQMC SAPCO via the PSO and to DIA via the SSO. This requirement may not be delegated.

2-12 Unique Badge System Badges will be issued and returned daily by the SSM or by security monitoring personnel designated by the SSM for all personnel requiring access to the Secure Work Area. Badges are a sensitive item and the SSM must keep positive control of excess badges along with conducting periodic inventories of issued badges. All personnel authorized to work in the Secure Work Area will display their badges at all times.

1) All TOP SECRET cleared U.S. personnel requiring repeated access to the Secure Work Area will be issued YELLOW badges that indicate a no escort required in areas approved by the

SSM.

2) All SECRET cleared U.S. personnel requiring repeated access to the Secure Work Area will be issued BLUE badges.

3) U.S. Personnel visiting the site must have a visit request completed prior to their arrival. They will be issued a RED visitor badge upon entry to the site and must surrender their Common Access Card (CAC) card upon arrival and receipt of badge. Visitors are not permitted to bring Personal Electronic Devices (PEDs) into the Secure Work Area and visitors will adhere to all Physical Security procedures. Uncleared visitors will be escorted by site security personnel at all times while in the Secure Area.

2-13 Physical Security The Secure Work Area will be locked up with a CDX-10 lock outside of duty hours. Space owners will be responsible for the combination to access the Secure Work Area.

An 8 foot, vision obscuring chain link security fence will be erected around the Secure Storage Area (SSA) before construction begins with one access control point for personnel and vehicles under the control of the security monitoring personnel. Cleared American Guards (CAGs) will inspect the entire fence line daily for breeches. This fence can be constructed of a chain link fence with privacy slats installed, aluminum sheeting or other material that completely obscures vision into the SSA. This will prevent unauthorized personnel who approach the SSA from viewing or photographing activity within the SSA.

A security lighting system will be in place and operational before work commences in the Secure Work Area. The security lighting will provide lighting coverage for the SSA and Access Control Point (ACP).

Lighting fixtures will be placed to support and not conflict with CCTV coverage. The lighting system will have an automatic restart function, allowing the lights to return to full brilliance within 90 seconds of restart. An automatic switchover to an emergency generator source will be in place in case of power interruption.

CAGs will search all toolboxes, containers, and personnel for prohibited items in accordance this CSP and the Site Security Monitoring Service Standard Operating Procedures (SOP).

Cameras, photography and videotaping are not permitted on or nearby the construction site except when specifically approved. The SSM is the approving authority for all non-PSO/SSO spaces. If the space is managed by the PSO or SSO then the PSO or SSO will be the approving authority. Only approved security personnel can take pictures. Written requests for the approval of photographic devices must be made 10 working days prior to the date intended for such activity and only approved cameras will be authorized in spaces that fall under the PSO or SSO. The US Government reserves the right to deny any release that is not for official or authorized use. The SSM, SSO, and GSSO must screen and approve all photos, video, exposed film, negatives, memory sticks and/or cards when they leave the secure construction area.

Possession of Prohibited Items: Anyone discovered bringing prohibited, banned or illegal items onto the construction site will be immediately removed from the site and may be permanently barred, as determined by the SSM.

2-14 Labor country of origin Only U.S. Persons may participate in the modification of Building 7000’s HVAC. All personnel must undergo security vetting prior to site access as noted previously. Access to the construction site shall be denied or withdrawn if any security checks reveal a felony criminal record.

Local national employees (LNE) personnel will have limited and supervised access to the Non-Secure Work Areas for transportation and movement of material. LNEs will remain under constant surveillance by CSTs when working on the project. LNEs will be advised to not loiter on the project site when not actively engaged in construction tasks. Interior finish work will be accomplished by U.S. Citizens holding at least a Secret clearance only.

All persons hired to work on this project (whether through the Prime Contractor or Subcontractor) who are U.S. persons as previously defined but are citizens of any foreign country other than the U.S (including dual U.S. citizens), will be reported to the SSM and PSO NO LESS THAN seven (7) business days prior to the individual arriving on-site for work. Information required to be reported include:

• Full Name

• Country(ies) of Citizenship

• Passport Number/Identification Number, including copy of Passport or ID

• Contact information, including full residential address and phone number

SECTION 3: Purpose

3-1 Intent

This CSP sets forth security procedures and requirements for the project construction site. Guidance in this document provides clear procedures for securing the construction site and for the progressive increase in the level of security supervision during the course of the construction project, as the facility goes from site preparation to construction, through phased lockdown and occupancy, to final lockdown and mission operation.

Note: All references to “Sensitive Compartmented Information Facility” or “SCIF” in the references herein and in relevant references are synonymous with “Special Access Program Facility” or “SAPF”.

3-2 Scope

This CSP applies a risk-based rationale to provide the highest level of security in a resource constrained environment. This CSP remains in force until the project is complete.

3-3 Responsible Parties

The success of the project depends on the mutual partnering between Naval Facilities Engineering Command (NAVFAC), KO, PSO, PMO, SSO, and the SSM overseeing the construction contract and the United States Government representative identified in the Organizational Roles and Responsibilities section. All Requests for Proposals (RFP) and Statements of Work (SoW) for the project will use this CSP as guidance.

3-4 Updates to the CSP

This CSP is a living document that will be regularly reviewed, and updated as required, to reflect changing conditions and the current status of the project. This CSP may be supplemented as required by site-specific policies and procedures as issued by the project SSM, with approval of the SSO & PSO.

Also, the project SSM may publish notices, bulletins, and other information to correct a security hazard and/or inform the workforce as needed. Changes to the CSP, whether minor or significant, may only be amended by the SSO & PSO.

3-5 Distribution

This CSP will be released IAW the document Distribution Statement. This CSP may be released during contract solicitation/RFP by NAVFAC after coordination with the project SSO & PSO. Final determination as to releasable information lies with the SSO & PSO. When released as a part of the solicitation/RFP, this CSP is for use only as a means for contract bidders to incorporate the CSP requirements into their proposals, and for operational use during site construction. Public or unrestricted distribution is prohibited.

SECTION 4: Project Details

4-1 Project Purpose HVAC upgrade for building 7000 to maintain proper temperature and humidity for F35 simulators.

Simulators assist personnel to perform critical mission activities in preparation for directed exercise or real-world operations.

4-2 Facility specifics:

The building for the project consists of four (4) secure areas supporting F-35, F-18, E-2, and C-130 simulators. The administration and maintenance areas will include command office suites, Secure Areas, storage, restroom facilities, plus supporting utility rooms for mechanical and plumbing, electrical, telecom (including but not limited to Government Classified and Unclassified systems), fire protection and alarm.

4-3 CSP applicability The project timeline covered by this CSP begins when contracts are issued and concludes when the project is completed, and the government has accepted the upgraded HVAC system.

4-4 Construction Site The project construction site will be monitored and controlled according to the requirements in the USMC Physical Security Program Manual, Marine Corps Order (MCO) 5530.14A (or subsequent revisions).

a. The term "construction site," "project site," “secure perimeter,” and "secured construction site" includes the entirety of the project site. Note: Security requirements apply to the entire site;

exceptions are noted.

b. Site access will be controlled into and out of the construction site via a single Access Control

Point (ACP). Building 7000 consists of three vehicle gates and one pedestrian gate. ACPs will be grouped by their purpose. Vehicle gates will be secured when not in use and when there is not a CAG present to control access. Personnel gates will be secured when not in use or when there is not a CAG present to control access. Building 7000 site access will be managed by employees of the Prime Contractor. While related to site security, this function performs as both security AND safety and is a standard procedure for all construction projects aboard military bases.

1) The ACP will serve as the primary personnel point of entry and exit to and from the work site. Only contractor work-site personnel who are on the SSM-approved weekly access rosters, who have checked-in, and are wearing approved identification, will be granted access to the worksite. Construction site access control must include effective entry and exit screening and search procedures. Workers and their belongings/equipment may be screened for contraband by contractor site Foreman or Project Manager according to company policy. Note: Additional screening may be implemented by the SSM with PSO and SSO approval, especially during Secure Area finish work.

2) PEDs are prohibited in Secure Areas during the finish work phase. The contractor will provide facilities to secure PEDS outside of the Secure Areas.

Contractor or Government PEDs are authorized only by the SSM with PSO and SSO approval. A prominent sign, printed in English and in Japanese, shall list all prohibited and restricted items, and shall be posted at all construction area entry points. Personal bags, parcels, or packages shall not be allowed on the construction site by uncleared workers unless procedures are established for searching and safekeeping of such items.

3) Additional ACPs may be designated for deliveries of large items by the Project

Manager or SSM working in conjunction with the MCAS Iwakuni PMO Physical Security. If additional ACPs are necessary, supplemental guidance will follow.

c. During non-working hours, the construction site will be secured as designated by the Project

Manager and SSM. The perimeter will be patrolled by MCAS Iwakuni PMO police patrols per

PMO SOP.

d. Emergency contact information will be posted at all ACPs and site entry/exits. Emergencies are to be reported to MCAS Iwakuni PMO, SSM, SSO, and PSO. Contractors will also follow contractual notification procedures.

e. Secure Storage Area (SSA): The SSA will be located within the perimeter of the construction site, in a separate fenced-off secure area manned 24/7 by CAGs. All Secure Facility designated construction material will be delivered to and inspected prior to being stored in the SSA until required by the Construction Contractor.

SECTION 5: Facility Construction and Design Considerations

5-1 Construction Site Security:

a. The SSM will observe and inspect construction within the Secure Areas throughout the construction process to ensure security policies are followed. The GSSO and SSO will also observe and inspect their areas as required.

b. The SSM will conduct random unannounced inspections of the construction site to include inspections of the contractor field offices.

c. Photography on the installation is restricted and must follow MCAS Photography Orders. Only approved security personnel are authorized to take photographs on an approved camera by the SSM, PSO, and SSO, of the Secure Areas of the construction site. The construction contractor will provide the SSM the make, model, and serial number of official (contractor-and/or government-owned) cameras (and SD/memory cards) and only those cameras are authorized on-site. All violations will be reported to the MCAS Iwakuni PMO, the SSM, SSO, and PSO. Security personnel will take progress photos throughout each phase in all secure and adjacent areas, organize them by room/area, and will provide to the SSM as requested. Two copies of all photos and final as-builts will be provided to the SSM in digital format (CD/DVD) at the completion of the project. Waivers to this requirement will only be approved by the SSO and PSO.

d. The SSM and designated representatives will have complete, unrestricted and unannounced

24/7 access to the work site to ensure proper security procedures are being maintained. The prime contractor will provide the SSM, SSO, and PSO a dedicated hard-hat, reflective vest, and other required Personal Protective Equipment (PPE)(SSM, PSO, and SSO will provide own protective footwear).

e. A unique project site picture ID card and temporary pass system shall be implemented for access control. The prime contractor site manager will develop a visual method to identify authorized workers while on-site, with workers conducting finishing work conspicuously identifiable from general site workers. For PSO spaces, only PSO approved security personnel can provide access control. The process will be reviewed by the SSM, with coordination with the PSO and SSO.

f. The SSM shall document security violations and/or deviations from this CSP. The SSM will notify the SSO, PSO and COR within 24 hours of any significant deviations. Multiple security violations may result in denial of site access.

g. All Secure Area construction logs and records created will be kept on file by the contractor and made available to the SSM, SSO, and PSO for inspection upon request. Digital copies of these logs will be provided to the SSM upon project completion as part of the accreditation artifacts package.

5-2 Administration: All blueprints, diagrams, document, plans, and technical specifications related to the construction of the Secure Areas will be marked as Controlled Unclassified Information (CUI) and will be secured in locked containers on site when not in active use and will only be accessed by personnel and contractors actively involved in construction with a need-to-know. These documents will not identify nor contain the words “Special Access Program Facility”, “SAPF”, “Sensitive Compartmented Information Facility”, or “SCIF”. All areas designed and constructed to meet Intelligence Community Directive (ICD) 705 standards will use the identifier “Secure Area.” or other approved identifiers. Under no circumstances will blueprints, diagrams, documents, plans, and technical specifications related to this project be sent on or posted to unprotected information technology systems or internet venue without encryption.

a. Marking: All Secure Area blueprints, diagrams, documents, plans and technical specifications to include finish work plans, photographs, shop drawings, and correspondence are considered Controlled Unclassified Information (CUI), shall be marked “CUI”, and will be handled in accordance with DoDM 5200.48, Controlled Unclassified Information (CUI) dated 6 March 2020 and DoDI 5230.24, Distribution Statements on Technical Documents dated 23 August 2012, with Change 3 dated 15 October 2018 (or successor guidance). The distribution statement will be displayed on all technical documents regardless of media or format.

Distribution statements shall remain in effect until changed or removed by the controlling DoD office. Removal of or tampering with control markings by unauthorized personnel is strictly prohibited. Requests to waive CUI markings on any construction design document will be requested through the SSM to the GSSO and PSO in writing (memorandum or email).

b. Control of Plans and Documents: All construction plans will be secured, when not in use, in locked containers on site and will only be accessed by personnel and contractors actively involved in construction (locking the door to the site trailer is not sufficient; CUI must be within a locked container (desk, cabinet, room, etc)). Electronic copies of the plans will be password protected or encrypted to reduce vulnerabilities and will not be distributed without SSM approval.

c. Distribution: Will be limited to individuals working directly on the project or with a legitimate need-to-know. Personnel who are granted access to CUI must sign a Non-Disclosure Agreement provided by the KO acknowledging their responsibility to protect CUI. All access requests will be vetted through the SSM and diligence will be used to minimize copies. All Secure Area blueprints, diagrams, documents, plans, and technical specifications shall be marked with the distribution statement and “CUI” Designation Indicator block below (or similar Distribution Statement as directed by the PM or COR in coordination with the PSO and GSSO) on the cover page of volumes and on any stand-alone documents produced:

Distribution Statement (to be placed conspicuously on cover and/or first page of documents):

DISTRIBUTION D. Distribution authorized to Department of Defense and U.S. DoD contractors only; Operations Security (OPSEC) and Physical Security (PHYS); Vulnerability Information, Apr 7, 2023. Other requests for this document shall be referred to the Program Security Officer, HQMC Programs & Resources (P&R), Special Programs Branch (RPX), Marine Corps Air Station Miramar: Mr. John Hamner. REMOVAL OF THIS CAVEAT IS

PROHIBITED

CUI Designation indicator Block (to be placed at bottom right of cover page and/or first page of documents):

Controlled by: HQMC P&R (RPX) Controlled by: PSO, MCAS Iwakuni CUI Categories: OPSEC, PHYS Distribution Statement: D Dissemination Control: FEDCON POC: John Hamner, 315-255-7527

d. Historical records: The contractor will provide the SSM copies of all relevant historical records and documents of this project (to include site access rosters, progress pictures, and as-builts). The SSM shall maintain these relevant historical records and documents and will provide them to the PSO/SAO/SSO on request. At the conclusion of the project, all relevant historical records and documents will be passed to the end user to be maintained as a permanent record.

e. Destruction: Documents from this project may not be disposed of in common trash or dumpsters. MCAS Iwakuni has a 100% shred policy and all CUI and Secure Area blueprints, diagrams, documents, plans, shop drawings, and technical specifications will be destroyed by shredding or burning after use. Shredded residue may be disposed of in common trash or dumpsters.

f. Security incidents: A security incident is defined as a breach, deliberate or inadvertent, of any security related policy, procedure, requirement, or condition. All suspected security concerns, issues, incidents and/or suspected violations will be immediately reported to the SSM. Failure to report a security incident will be viewed as an incident itself and may lead to work stoppage shut down and notification of the COR and KO. All personnel are required to cooperate fully with any security investigation. Prime and sub-contractors must develop sanctions for employees involved in security incidents, to include initial and repeat violations.

g. Security incident investigation/resolution: The SSM will work with the PSO, GSSO, NAVFAC, COR and contractor Project Manager to investigate and resolve every reported security incident or violation. Documentation of investigation results will be forwarded to the PSO and become a part of the SSMs official record of the project.

h. In the event of a security incident or if the factors which could lead to a security incident is present that may impact construction, the SSM will work with the PSO, GSSO, COR and KO to discuss the possibility to halt work on the construction site until the problem has been properly investigated and rectified.

i. Cost/Schedule impacts: The USG will not be held responsible for any security incident that creates an impact to schedule and/or costs, when investigation by the USG determines the fault to be an error or responsibility of contractor/sub-contractor personnel.

j. One large printed (34” x 22”) complete copy (all volumes) of each issuance of the construction plans and Basis of Design will be provided to the SSM through all stages of the construction.

This is not only for the secure areas, but for the entire Building 7000 site, as there are many variables which can affect security.

k. A security submittal will be provided to the SSM that includes the final design submission and a Security Package for all secure spaces. The security package consists of a design report and separate drawing set. The drawing set consists of a consolidated separate set of floor plans depicting functional utilization of spaces, mechanical units, communication wiring, architectural details and sections, and furniture and equipment layout within the secure spaces. Room sizes or dimensions must be included in the drawing set and Secure Space Plans will be submitted as a separate package from the remaining Building Floor Plans. The design report will contain details about how the construction meets the ICD 705 requirements.

(wall types, STC-Rated Doors, Windows, Ceilings, etc.) to include the actual “brochures” or technical data for all the security special items such as doors, locks, etc.

l. The construction security team will participate during all construction milestone periods that require inspection of critical areas before the construction contractor is allowed to proceed with the next task. Milestones include but are not limited to inspection of all points that will permanently be sealed when the task is complete. It is imperative there is clear communication between the contractor, NAVFAC, and the security team. These areas will be discussed at the quality control meeting occurring each week and placed on the two-week look ahead. If any of the areas are sealed without prior coordination with NAVFAC and the security team, the contractor will be held liable for dismantling the area for proper inspection.

5-3 Labor:

a. Suspicious persons: Suspicious persons loitering near the site will be reported to MCAS

Iwakuni PMO and the SSM immediately.

b. Interior finish work: Interior finish work in the Secured Work Areas of the project Secure Area will be accomplished by U.S. persons. Use of PEDs (phones, computers, tablets, etc.) are prohibited. The contractor will ensure only official-use electronics are on site. This provision is subject to random, unannounced inspection by the SSM at any time and violators are subject to detention by the MCAS Iwakuni PMO, removal from the site and seizure and/or erasure of electronics. For this document’s purpose, finishing work is defined as any work which when installed will render materials previously installed non-inspectable without the use of tools or resulting in re-work. Examples of finishing work include installing insulation or hanging drywall on the inside of the secure space. All questions or clarification will be directed towards NAVFAC and/or the SSM.

c. The contractor will notify the SSM at least one week prior to any Secure Area work. Personnel not authorized through DBIDS by MCAS Iwakuni PMO are not authorized to work within the Secure Area. If unauthorized personnel are found to be working on the secure area, the SAO, GSSO, and KO will be notified immediately, and a determination will be made to determine if construction of the Secure Areas will be stopped. Any expenses incurred to remediate security concerns (incl: re-work, invasive inspection accommodation, schedule impacts) due to negligence to meet this requirement will be the burden of the contractor to bear.

5-4 Access Procedures and Personnel Screening:

a. After installation access vetting by the MCAS Iwakuni PMO, the contractor will provide rosters of personnel who require permanent and temporary (daily) site access to the SSM and keep a copy on-site.

1) Personnel who require permanent or repeated access to the project site will submit an access request as discussed under General Information.

2) U.S. persons with permanent/repeated access, i.e., permanent project site workers, will be indicated as such on the access roster.

b. Access roster: The construction site manager will develop and deliver to NAVFAC and the

SSM a construction site access roster along with the "two-week look ahead” (two-week project schedule). This access roster will be vetted as discussed in General Information and will identify each worker by company and trade (i.e. plumber, electrician, drywall, etc.).

Construction site access is restricted to only those personnel on the access roster, without exception. Unannounced visitors may be turned away and denied access. Security monitoring personnel will use the SSM-approved access roster to validate all personnel for access to the construction site, including the visitor access lists.

c. Access control procedures: The construction site manager will control the perimeter of the worksite and validate all personnel entering the site. Personnel controlling ACP will limit access to the construction site only to personnel on the access roster as follows:

1) All personnel will be screened when working on the Secure Area finish work and remove all PEDs from their person before entering the Secure Work Area as discussed in Section 4: Project Details

2) A daily record of personnel entering and exiting the site will be maintained and turned in to the SSM weekly. These records may be transmitted physically or electronically.

d. Access Restriction or Challenge: The SSM shall reserve the right to challenge, escort and/or deny construction site access to any person. Resolution of conflicts which impact contract performance will require additional evaluation and may require resolution between the COR, PM, SSO, and PSO. The SSM, as the on-site agent for the PSO and SSO, is the authority for site access at all times.

e. Access Revocation: The construction contractor Project Manager will notify SSM immediately in writing if contractor personnel are terminated or no longer require access to the construction site. Email is an acceptable means of notification. The SSM will notify the PMO of terminated personnel and maintain a log to be available at site security entrances. Site access for terminated/inactive personnel will be prohibited.

f. Visitor access: All visitor requests during and after finish work to Secure Areas must be coordinated between NAVFAC and the SSM. Visitors are any personnel (government or contractor) who are not working on the project and do not have a Need to Know. Visit requests to the Secure Area(s) must be in writing and submitted at least 96 hours prior to the proposed visit. U.S. personnel visiting the site must have a visit request completed prior to arrival and must be approved by the Station PMO and will be forwarded to the SSM as a memorandum for the record as each visit occurs. Visitors are not permitted to bring PEDs into the secure work area and photography is prohibited. Visitors will adhere to all access control procedures.

Visitors will be escorted at all times while in the secure work area.

1) Failure to provide access proposal within the required timeframe may result in access denial.

2) Upon approval of the visit request, visitors will be placed on the access list for those day(s) approved.

3) Visitors will sign the visitor log maintained by the ACP.

4) Upon departure, visitors will log departure time.

5-5 Construction Considerations:

a. Construction Material Acquisition

1) Requirements: The Construction Contractor will be responsible for procuring all construction materials for the secure area. All construction material acquired for the modification of the facility will be subject to security controls. The specific controls used will vary depending on the type of materials and procurement methods used (i.e. inspectable materials will have specific security controls for acquisition and transportation that are different from non-inspectable materials).

2) In general, construction materials will be subject to security controls at either the point of procurement and transport (e.g., purchased from the U.S. through a ''trusted source" and shipped secure), or upon arrival to the site, prior to acceptance to the SSA (e.g., purchased locally, shipped to site unsecure and inspected upon arrival). If materials are procured from a trusted source in the U.S. or locally via a random procurement process, they will be transported to the construction site securely (e.g. under CAG escort the entire time) and placed in the SSA without further inspection. If materials are procured from approved local sources and/or transported to the jobsite unsecured, the materials will be inspected by pallet x-ray and visual inspection by CSTs prior to acceptance into the SSA for use in the project.

3) Vendors, both in the U.S. and Japan, will be vetted by the AO’s office to ensure that they have no ownership, partnering relationships or ties from countries on the prohibited countries listed in Appendix F prior to any binding agreements for goods or services being finalized. Other vendors and other service providers may be barred from participating in this project based on contract requirements or notification from the SSM or COR.

4) Avoidance of prohibited countries during transit. The Construction Contractor will develop a comprehensive shipping plan for items that require secure shipment in accordance with the Transit Security Plan found in Appendix E. The Contractors’ shipping plan tailored to the Secure Facility project must have written SSM /AO approval prior to the commencement of procurement and shipping operations

5) Construction materials intended for use in the secure area, or that penetrate the boundary in any manner, will be categorized as “inspectable” or “non-inspectable”.

Acquisition and security control methods for materials to be used for secure construction within the project will vary depending on whether they are considered inspectable or non-inspectable. The list of inspectable and non inspectable materials is attached to this CSP as appendix D.

b. Interior Secured Space Wall Construction:

Figure 3: Interior Secured Space Wall Construction Example.

1) The above wall type is an acceptable option for construction for walls between rooms that are within a Secure Area perimeter, the wall assembly shall be STC 45, unless otherwise dictated in the approved plans and shall comply with ICS/ICD 705 except for the metal stud gauge and spacing. It should be noted, there may be several interior walls which require STC 50; in this situation, the contractor will adjust accordingly to meet the STC requirement.

2) For all walls, the SSM will conduct periodic inspections to ensure all requirements of the IC Tech Specs are met during the construction. Some of the requirements the SSM will be inspecting are:

a) The entire wall assembly will be finished and painted from true floor to true ceiling.

b) Approved gauge continuous track (top & bottom) with anchors at 32” o.c.

maximum –bed in continuous bead of acoustical sealant.

Figure 4: Acoustical Sealant Continuous Bead Example

c) When two layers of gypsum are used, all seams will be off-set, all seams on each layer will have mud and tape applied.

d) When only three layers of gypsum are used, the second layer will be on the secure side.

e) All partitions will be sealed continuously with acoustical sealant whenever it abuts another element (e.g. wall, column, mullion, etc).

f) All electrical or communication outlets and wiring are required to be surface mounted on all acoustical rated walls.

g) Only sound attenuation material will be used for insulation within the walls and must be fastened to prevent sliding down and leaving a void at the top.

h) There will be no un-necessary hardware or penetrations within sound attenuated walls, to include at the true ceiling and true floor.

i) RF shielding must not be punctured or disturbed by penetrations or fixtures.

5-6 HVAC Construction and RF Shielding Requirements:

a. Minimize, as much as possible, all HVAC penetrations through the Secure Area perimeter.

b. Even small perforations or holes in the shielding layer can greatly deteriorate its ability to attenuate RF signals. Strict adherence to the methods identified in the “Radio Frequency Architectural Shielding Materials Attenuation Characterization Study – V 1.0 September 24, 2019” shall be followed to maintain the efficacy of the shielding. A copy of this document can be provided by the SSM for reference.

c. If there is no alternative to penetrations, then a design and engineering proposal shall be delivered to the SSM at least 60 days in advance of penetration site preparation. The SSM will screen and review the proposal. After the SSM has reviewed and provided recommendations to the PSO for approval, comments, and actions, the PSA shall provide a response to the SSM. The SSM shall distribute the information as needed to the affected parties. The PSO should provide a response within 30 days of receipt but no later than 14 days prior to the intended site. For B-Wing all requests will go through the Navy SSO.

All proposals shall include:

1) An explanation of why alternate (non-penetrating) options are not possible

2) A description of how work will be accomplished; specifically what tools will be used and what they will be used for. For example, shielding will be removed around the area with razors and scarpers; a concrete hammer drill will be used to drill until rebar or obstructions are met; air (or otherwise powered) chisels will be used to expand or shape concreate openings, torches will be used to cut, bend, or reshape rebar, reciprocal saws or cutting wheels may also be used to cut into concreate or rebar. A diagram will also be provided showing the penetration with elevation

3) Coordinating requirements with…