FA2550-09-R-8001 Atch 2 DD254.pdf

FA2550-09-R-8001

Attachment 2

ATTACHMENT 1

DD 254, Continued

Solicitation No: FA2550-09-R-8001

OMINS

Block 7 Continued:

Subcontractor Cage Code Cognizant Security Office

Block 8A Continued:

Sites: Cognizant Security Office

22 Space Operations Squadron/MAO 50SW/IP

Bldg 442 50 SW OSS/INS

Schriever AFB 80912 Schriever AFB, CO 80912

Block 10a. Continued:

The contractor shall, in addition to the requirements set forth in the National Industrial Security

Program Operating Manual (NISPOM) and the communications security (COMSEC)

Supplement to the Industrial Security Manual (DoD 5200.22S-1), comply with the written instructions of the installation commander regarding COMSEC matters. Access to COMSEC material and information is restricted to US citizens holding final US Government clearance and is not releasable to persons holding only a reciprocal clearance. Disclosure, to include subcontracting, of COMSEC information by a contractor requires prior approval of the contracting activity. Access to COMSEC information requires special briefings at the contractor facility. NOTE: COMSEC/CRYPTO briefing applies to the use and control of crypto equipment and specialized COMSEC publications.

Block 10e. Continued:

SCI/Non-SCI Intelligence Information Access: The contractor may need access to classified intelligence information. If this access is authorized, the contractor shall comply with dissemination requirements specified in Block 12 of the DDFM 254, this attachment, and the other intelligence directives per the SSO.

Block 10f Continued:

The contractor will comply with all Program Protection Plan/System Protection Guides specified in the applicable Delivery Order Performance Work Statement (PWS) or the Contract DD Form

254. The contractor will require access to classified information/material up to and including

TOP SECRET. The contractor will establish and maintain an access list of all employees approved for access to TOP SECRET portions of the contract. A copy of the list will be furnished to the Program Security Office (PSO). The contractor will immediately inform the

PSO of a TOP SECRET accessed employee’s reassignment to other duties not associated with this contract, to include termination. All TOP SECRET work associated with this contract will be accomplished within an accredited approved area for TOP SECRET work. TOP SECRET information of material will be safeguarded in a manner that provides positive control by TOP

SECRET accessed personnel only and within facilities approved by DIA.

TOP SECRET information will not be released to contractor employees without the establishment of a specific need-to-know and TOP SECRET access approval. TOP SECRET material concerning this contract will not be disclosed, discussed, or released to any individual not employed on the contract without specific written approval of the PSO. Upon completion/cancellation of the TOP SECRET portion of this contract, the contractor will comply with the provisions of the NISPOM for disposition of TOP SECRET material in their custody or call the PMO for direction.

Requests for interpretation of TOP SECRET information and its safeguarding requirements or additional classification guidance on SA portions of the contract will be directed to the PSO.

The following security and classification guidance is provided for Special Access Program performance.

DOD 5220.22-M. NISPOM

DCID’s 6/3 and 6/9

Joint DODIIS/Cryptologic SCI Information Systems Security Standards, 28 Mar 97

(FOUO)

DOD Directive 5-5105 21 (M-1)

Block 10g. Continued:

The contractor is approved access to NATO classified information. Contract personnel require a

NATO briefing prior to access and final US Government clearance at the appropriate level.

Refer to NISPOM, Section 7 for specific guidance.

Block 10j. Continued:

FOUO is not a classification. Originators mark records when they create them to call attention to

FOUO content. An FOUO marking does not mean you must withhold a record under the FOIA.

You will need to review requested records. Examine records with and without markings to identify information that needs protection and is exempt from public release or to decide whether discretionary release is appropriate.

Information in a technical document that requires a distribution statement per AFI 61-204, Discretionary Scientific and Technical Information must show that statement. The originator must also mark the information FOUO, as appropriate.

Mark an unclassified document containing FOUO information “For Official Use Only” at the bottom, on the outside front cover (if any), on each page containing FOUO information, on the back page, and on the outside of the back cover (if any).

In unclassified documents, the originator must also mark individual paragraphs that contain

FOUO information to alert users and assist in review.

In a classified document, mark: An individual paragraph that contains FOUO, but not classified information, by placing “(FOUO)” at the beginning of the paragraph.

Mark the top and bottom of each page that has both FOUO and classified information, with the highest security classification of information on that page.

Mark “FOUO” at the bottom of each page that has FOUO but not classified information.

If a classified document also contains FOUO information or if the classified material becomes

FOUO when declassified, place the following statement on the bottom of the cover or the first page, under the classification marking: NOTE: If declassified, review the document to make sure material is not FOUO and not exempt under DoD 5400.7, AF Supplement before public release.

Mark other records, such as computer printouts, photographs, films, tapes, or slides, “For

Official Use Only” or “FOUO” so the receiver or viewer knows the record contains FOUO information.

Mark FOUO material sent to authorized persons outside the DoD with an explanation typed or stamped on the document.

Transmitting FOUO:

DoD components, officials of DoD components, and authorized DoD contractor’s consultants, and grantees send FOUO information to each other to conduct official DoD business. Tell recipients the status of such information, and send the material in a way that prevents unauthorized public disclosure. Make sure documents that transmit FOUO material call attention to any FOUO attachments. Normally, you may send FOUO records over facsimile equipment. When deciding whether to send FOUO records over facsimile equipment, balance the sensitivity of the records against the risk of disclosure. To prevent unauthorized disclosure, consider attaching special cover sheets (i.e. AF Form 3227, Privacy Act Cover sheet, for Privacy

Act Information), the location of sending and receiving machines, and ensure authorized personnel are available to receive FOUO information as soon as it is transmitted. FOUO information may be passed to official in other departments and agencies of the executive and judicial branches to fulfill a government function. Mark the records “For Official Use Only,” and tell the recipient the information is exempt from public disclosure under the FOIA and whether it needs special handling.

Electronically and Facsimile Transmitted Messages. Each part of electronically and facsimile transmitted messages containing FOUO information shall be marked appropriately. Unclassified messages containing FOUO information shall contain the abbreviation “FOUO” before the beginning of the text. Such messages and facsimiles shall be transmitted in accordance with communications security procedures whenever practicable.

Transporting FOUO:

Records containing FOUO information shall be transported in a manner that prevents disclosure of the contents. When not commingled with classified information, FOUO information may be sent via first class mail or parcel post. Bulky shipments, such as distributions of FOUO

Directives to testing materials that otherwise qualify under postal regulations may be sent by fourth-class mail.

Mark each part of a message that contains FOUO information. Unclassified messages containing

FOUO information must show the abbreviation “FOUO” before the text begins.

Safeguarding FOUO Information:

During normal duty hours: During normal working hours, records determined to be FOUO shall be placed in an out-of-sight location if the work area is accessible to non-government personnel.

During Non-duty Hours: At the close of business, FOUO records shall be stored as to prevent unauthorized access. Filing such material with other unclassified records in unlocked files or desks, etc., is adequate when normal U.S. Government or Government-contractor internal building security is provided during non-duty hours. When such internal security control is not exercised, locked buildings or rooms normally provide adequate after-hours protection. If such protection is not considered adequate, FOUO material shall be stored in locked receptacles such as file cabinets, desks, or bookcases. FOUO records that are subject to the provisions of the

National Security Act of 1959 (reference (aa)) shall meet the safeguard outlined for that group of records.

Termination, Disposal and Unauthorized Disclosures:

Termination: The originator or other component authority; e.g., initial denial and appellate authorities, shall terminate “For Official Use Only” markings or status when circumstances indicate that the information no longer requires protection from public disclosure. When FOUO status is terminated, all known holders shall be notified, to the extent practical. Upon notification, holders shall efface or remove the “For Official Use Only” markings, but records in file or storage need not be retrieved solely for that purpose.

Disposal: Non-record copies of FOUO materials may be destroyed by tearing each copy into pieces to prevent reconstructing, and placing them in regular trash containers. When local circumstances or experience indicates that this destruction method is not sufficiently protective of FOUO information, local authorities may direct other methods but must give due consideration to the additional expense balanced against the degree of sensitivity of the type of

FOUO information contained in the records.

Record copies of FOUO documents shall be disposed of in accordance with the disposal standards established under 44 U.S.C. 3301-3314 (reference (ab)), as implemented by DoD

Component instructions concerning records disposal.

Unauthorized disclosure: The unauthorized disclosure of FOUO records does not constitute an unauthorized disclosure of DoD information classified for security purposes. Appropriate administrative action shall be taken, however, to fix responsibility for unauthorized disclosure whenever feasible, and appropriate disciplinary action shall be taken against those responsible.

Unauthorized disclosure of FOUO information that is protected by the Privacy Act (reference d) may also result in civil and criminal sanctions against responsible persons. The DoD Component that originated the FOUO information shall be informed of its unauthorized disclosure.

Block 10k. Continued:

The contractor is authorized three (3) SCI billets which will be managed by the 50 th

SSO.

Block 11f Continued:

Have access to U.S. Classified information outside the U.S., Puerto Rico, U.S. Possessions and

Trust territories. Locations would be based upon sites being visited.

Block 11h. Continued:

The Government will provide all appropriate guidance for the contractor’s access and maintenance of accountable COMSEC material.

Block 11j. Continued:

The contractor will have Operations Security (OPSEC) requirements. The contractor shall comply with the provisions of AFI 10-701 and other written instructions provided by the User

Agency Operations Security (OPSEC) Program. Contractors working at military installations will participate in the Installation OPSEC Program and will receive/attend periodic training along with military and government civilian counterparts.

Block 11l. Continued:

Classified automated data processing will occur as part of the contract. When processing classified information on Government furnished data processing equipment in a Government facility, the contractor shall comply with the provisions of the DoD Information Technology

Security Certification and Accreditation Process (DITSCAP), DoD 5200.40 and other contractual documents required by AFSPC, 50 SW, or the 50 th

SSO.

Block 12. Continued:

There shall be no voluntary public release of information concerning this contract. Requests for public release of information concerning this contract shall be submitted to 50 SW/PA, 210

Falcon Parkway, Ste 2102, Schriever AFB, CO 80912-2102. No other dissemination of information is authorized. The prohibition extends to all publication and conversations of an informational nature both internal and external, and to all conversations except those required for the conduct of business.

Block 13. Continued:

Block 13b. Continued:

The following documents with the subsequent revisions or changes will be used for specific security classification guidance on this contract:

DoD S5105.21-M-1

DoD 5220.22-M

DoD 5200.28

DIAM 50-5 Rev I&II

DCID 1/7

AFMAN 14-304

AFI 14-302

AFI 14-303

AFI 37-131

AFSCN Security Classification Guide (SCG)

DSCS III SCG

SKYNET IV SCG

NATO IV SCG

NATO III SCG

DSP SCG

GPS SCG

MILSTAR SCG

Program Protection, Systems Security Engineering and Product Security

The contractor shall protect classified security information, special access and unclassified controlled information, technologies and critical systems as prescribed in Space Systems

Protection Guides established under DoD 3500.2, as well as traditional Security Classification

Guides applicable to non-DoD Space Programs.

The Prime Contractor, Xxxxxxxxxxxx, assures subcontractor compliance with Contractor

Integrated Visitor Group Security Agreement for this contract.

Block 13c. Continued:

The supporting special security office is 500 OSS/INS (SSO Schriever).

Block 13d. Continued:

Inquiries pertaining to classification guidance on SCI will be directed to the Contract Monitor.

Block 13e. Continued:

SCI data furnished to or generated by the contractor will require security handling and controls beyond those in the NISPOM. These supplemental instructions will be furnished and/or made available to the contractor through the Contract Monitor by the User Agency SSO Schriever.

Block 13f. Continued:

Names of contractor personnel requiring access to SCI will be submitted to the SCI Contract

Monitor. Forms requesting Special Background Investigations will be in accordance with current Defense Security Service EPSQ guidance and submitted by the contractor.

Block 13g. Continued:

The contractor will establish and maintain a current list of those employees working on this contract. A copy of the list will be furnished to the SCI Contract Monitor for those requiring access to SCI material.

Block 13h. Continued:

The contractor will advise the SCI Contract Monitor immediately upon reassignment of personnel to other duties not associated with this contract.

Block 13i. Continued:

Release of Information: SCI with restrictive caveats will be released to contractors only when originator approval has been obtained. The contractor will control SCI that has been originated or obtained under this contract as follows: the contractor may release such material to any contractor employee working against a billet under this contract only when need-to-know exists.

The contractor will release such material to any SSO personnel assigned to 50OSS/INS, HQ

AFSP, or DIA, upon demand by such personnel. The contractor may release such material to any other personnel, including contractor and subcontractor employees, and employees of any

Federal Government agency, only upon prior written approval from the SCI Contract Monitor.

An access certification to an AFSPC contractor-occupied SCIF does not constitute approval to release AFSPC contractual material to these other personnel: Contract Monitor approval is nevertheless required. Contract Monitor approval of an AFSPC contractor visit certification or permanent certification to another facility will constitute approval to discuss contractual material at facility to be visited.

13j. Continued:

Any SCI released to the contractor in support of this contract remains the property of the DoD

Department, agency, or command that releases it. The contractor will maintain active accountability of all SCI released to his custody, regardless of whether the release is within the prime contractor SCIF or the government SCIF. Upon completion/cancellation of the contract, the contractor must return all such material to SSO Schriever unless a follow-on contract specifies that material will be transferred to a subsequent contract. SCI inventories shall be conducted IAW DoD S 5105.21-M1 and AFMAN 14-304, jointly by the contract monitor and

CSSO of the contractor.

13k. Continued:

SCI material released to the contractor under this contract will be separately stored and worked on only in facilities either accredited through AFSPC or another accredited agency and properly covered by a co-utilization Memorandum of Agreement (MOA) between AFSACP and the sponsor of the facility. AFSPC sponsored SCIFs will not be co-utilized for other government agency contracts unless properly covered by a MOA. The supporting SSO is SSO Schriever.

13l. Continued:

Electronic processing of classified information is permitted only when the requirements of

AFMAN 14-304 have been met as determined by an accredited TEMPEST authority. This contract requires electronic processing of SCI. TEMPEST accreditation of ADPS must be obtained IAW the above reference. Operational accreditation of ADPS using software must be obtained IAW DIA 50-5 VL II. Security provisions of DIA Manuals 50-3, 50-4, 50-5 VOL I, and AFMAN 14-304 also apply and are part of this contract. If there is an AFSCP sponsored

SCIF at the contractor facility, the Contractor Special Security Officer (CSSO) will appoint and

Information Systems Security Officer (ISSO) and advise SO Schriever of this appointment.

13m. Continued:

Contract Special Security Officers (CSSOs) must coordinate with the SCI Contract Monitor, and obtain the concurrence of SSO Schriever prior to subcontracting any portion of the SCUI efforts involved in this contract.

13n. Continued:

No contractor personnel will be granted access to SCI material under this contract unless they are filling a DoD SCI billet. The contractor will coordinate with the SCI Contract Monitor to ensure adequate billets are requested under this contract. Multiple contract employees sponsored by organizations other than Space Command must be certified by SSO Schriever for use on this contract.

13o. Continued:

The contractor will designate a Contractor Special Security Officer to SSO Schriever. The POC will be responsible for all personnel and information security transactions between the contractor and SSO Schriever.

13p. Contractor will not use references to SCI accesses, even by unclassified acronyms, in advertising, promotional efforts, or recruitment for employees.

13q. Continued:

The Defense Security Service is relieved of all industrial security inspection responsibilities for the work performed at Schriever AFB, CO. 50OSS/INS (SSO Schriever) will provide security oversight and arrange for inspections according to the contractor Visitor Group Security

Agreement established between the contractor and the government at Schriever AFB.

50OSS/INS (SSO Schriever will also arrange for site security within the Peterson Complex at

Colorado Springs, CO.

13r. Continued

The following activity is designated as the User Agency SSO for SCI requirements:

50 OSS/INS (SSO Schriever)

401 O’Malley Ave, Suite 23

Schriever AFB, CO 80912-4023

14. Continued:

See paragraphs 13c through 13r above.

17. Continued:

17a. Continued:

TBD

17b. Continued:

17c. Continued:

17e. Continued

50 CONS

Schriever AFB, CO 80912

17f. Continued:

22 Space Operations Squadron

50 SW/IP

50 NOG/NOP

Approve/Disapprove Approve/Disapprove

WILLIAM M. FARLEY, DAFC DONALD M. BLASIUS, DAFC,

Industrial Security Specialist Chief, AFSCN Mission Integration

50 SW/IP 22 Space Operations Squadron

Schriever AFB, CO 80912 Schriever AFB, CO 80912

(719) 567-5698 (719) 567-3741

Approve/Disapprove

MICHAEL A. KREIFELS

Chief, Schriever Special Security Office

50 OSS/INS

Schriever AFB, CO 80912

(719) 567-2677