DD_Fm_254_23_May_16.pdf

Attachment 2, FA2550-16-R-8001 1

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort.)

1. CLEARANCE AND SAFEGUARDING

a. FACILITY CLEARANCE REQUIRED

TOP SECRET

b. LEVEL OF SAFEGUARDING REQUIRED

SECRET

2. THIS SPECIFICATION IS FOR: (x and complete as applicable) 3. THIS SPECIFICATION IS: (x and complete as applicable)

a. PRIME CONTRACT NUMBER

a. ORIGINAL (Complete date in all cases)

DATE (YYMMDD)

b. SUBCONTRACT NUMBER

b. REVISED (Supersedes all previous specs)

Revision No.

c. SOLICITATION OR OTHER NUMBER

FA2550-16-R-8001

DUE DATE (YYMMDD)

c. FINAL (Complete Item 5 in all cases)

4. THIS IS A FOLLOW-ON CONTRACT? YES NO. If Yes, complete the following:

Classified material received or generated under _____ (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? YES NO. If Yes, complete the following:

In response to the contractor’s request dated , retention of the identified classified material is authorized for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE

b. CAGE CODE c.COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE

b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip code)

8. ACTUAL PERFORMANCE

a. LOCATION

See Item 13

b. CAGE CODE

c. COGNIZANT SECURITY OFFICE(Name, Address, and Zip Code)

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

Innovation, Integration and Information Support (3IS) contract for the USAFWC

10. THIS CONTRACT WILL REQUIRE ACCESS TO: YES NO 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER CONTRACTOR’S

FACILITY OR A GOVERNMENT ACTIVITY

b. RESTRICTED DATA b. RECEIVE CLASSIFIED DOCUMENTS ONLY

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION c. RECEIVE AND GENERATE CLASSIFIED MATERIAL

d. FORMERLY RESTRICTED DATA d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. INTELLIGENCE INFORMATION: e. PERFORM SERVICES ONLY

(1) Sensitive Compartmented information (SCI) f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES

(2) Non-SCI g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL INFORMATION

CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER

f. SPECIAL ACCESS INFORMATION h. REQUIRE A COMSEC ACCOUNT

g. NATO INFORMATION i. HAVE TEMPEST REQUIREMENTS

h. FOREIGN GOVERNMENT INFORMATION j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

i. LIMITED DISSEMINATION INFORMATION k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

j. FOR OFFICIAL USE ONLY INFORMATION l. OTHER (Specify)

k. OTHER (Specify) AIS processing of SCI and Secret is authorized Access to ACCM Required

DD Form 254; DEC 99 Previous editions are obsolete. 805/340

Attachment 2, FA2550-16-R-8001 2

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release

Direct Through (Specify):

HQ ACC/A2S HQ ACC/PA HQ USAF/A2RS-CSA HQ ACC/A8Z HQ ACC/A3IZ

209 Thornell Ave 115 Thompson St, Ste 211 1700 AF Pentagon 204 Dodd Blvd, Ste 160 205 Dodd Blvd, Ste 101 Langley AFB VA 23665 Langley AFB VA 23665 Washington, DC 20330 Langley AFB VA 23665 Langley AFB VA 23665

PUBLIC RELEASE OF CLASSIFIED INFORMATION, TO INCLUDE SCI AND SAP IS NOT AUTHORIZED. See Attachment 4 for SAP related information release.

to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

Contract Expires: 31 Jan 22 (5-year ordering period)

Item 10 & 11, see Attachment 1 for further guidance.

Item 10e(1)(2), see Attachments 2 and 3.

Item 10f: DSS has no responsibility for SAP material. See Attachment 1 and 4 for further guidance.

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract. (If Yes, identify the Yes No pertinent contractual clauses in the contract document itself, or provide any appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

- USAFWC Det 1 Security is the cognizant security authority for all collateral material released to or developed under this contract. Report all incidents to the USAFWC Det 1 Security.

- A Visitor Group Security Agreement (VGSA) will be secured with the host base Information Protection Office. The prime contractor is responsible to ensure that the subcontractors comply with all aspects of the VGSA.

- See Attachment 3 for SCI Release of SCI Intelligence Information/Non-SCI Release of Intelligence Information for additional security requirements. Prior approval of the contracting activity is required for subcontracting. All DD Forms 254 prepared for a subcontract by the prime will be forwarded to the government contracting monitor, AFOSI PJ PSO and SSO ACC for review and concurrence prior to award of the subcontract. Access to intelligence information will require special briefings and a final US Government Top Secret clearance with ICD 704 eligibility.

- See Attachment X 4 for additional SAP security requirements.

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. (If Yes, explain and identify specific Yes No areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

- When contractors are designated as Visitor Groups on Air Force installations, Industrial Security Reviews for collateral classified information will be conducted by the servicing Information Protection Office.

- SSO ACC (HQ ACC/A2S) has exclusive security responsibility for all SCI classified material released to or developed under this contract and held at the government SCI facility and/or the contractor’s SCI facility. DSS retains cognizance only over Non-SCI material released to or developed under the contract and held within the contractor’s cleared facility.

- See Attachments 4 and 5 for additional SAP security requirements.

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL

S. KRISTIN DAVIS ULMA

b. TITLE Contracting Officer

c. TELEPHONE (Include Area Code)

(719) 567-3451

d. ADDRESS (Include Zip Code) 50th Contracting Squadron 210 Falcon Parkway, Suite 2116 Schriever AFB CO 80912

17. REQUIRED DISTRIBUTION

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINSTRATIVE CONTRACTING OFFICER

f. OTHERS AS NECESSARY Director, Defense Courier Service

ACC/A2SD (ACC SSO)

50 SW/IP

21 SW/IP

USAFWC Det 1 SO SAF/AAZ (through AFOSI PJ)

e. SIGNATURE

Attachment 2, FA2550-16-R-8001 3

DD FORM 254 Reverse, DEC 99 *U.S. GPO: 1991-548-195/20024

Attachment 2, FA2550-16-R-8001 4

APPROVAL SIGNATURE BLOCKS FOR DD FORM 254

CONTRACT NO: FA2550-16-R-8001

CONTRACT EXPIRATION DATE: 31 January 2022

Approved/Disapproved Approved/Disapproved

XXXXX XXXXX

Industrial Security Specialist Industrial Security Specialist

50 SW/IP 21 SW/IP

Program Security Officer Industrial Security Officer

AFOSI PJ/OL-D HQ ACC/A2SD

Chief, SSO Operations Chief, ACC Integrated Joint Special HQ Air Combat Command Technical Operations

Program Manager/COR Chief of Security USAFWC Det 1 Program Management USAFWC Det 1 Security Office

Attachment 2, FA2550-16-R-8001 5

Attachment 1 DD Form 254, Items 8-11 Continued

Contract No: FA2550-16-R-8001

ITEM 8a. ACTUAL PERFORMANCE LOCATION. Additional contract performance locations are as follow:

(1) US Air Force Warfare Center (Space) (2) USAFWC/A3 24 Talon Way 4370 N. Washington Blvd Schriever AFB CO 80912 Nellis AFB NV 89191

(3) 17 TS, Det 2 (4) 17 TS, Det 3 1 NORAD Road, Suite 101-215D 1225 Jupiter Street Cheyenne Mountain AS CO 80906 Patrick AFB FL 32925

(5) Advanced Space Operations School (6) 17 TS, Det 3 Operating Location A 236 Paine Street (Bldg 1876) 1515 Iceland Avenue, Suite 220 Peterson AFB CO 80914 Vandenberg AFB CA 93437

(7) CISF (Bldg 2025) (8) 14 AF 1050 East Stewart Avenue 747 Nebraska Avenue, Suite B106 Peterson AFB CO 80914 Vandenberg AFB CA 93437

(9) OPIR Integrated Program Office (10) 505 TS Bldg 202 3950 N. Lewiston Street 3663 Tyndall Ave Aurora, CO 80011 Nellis AFB, NV 89191

(11) Air & Space Intelligence Center (NASIC) (12) ACC/AZ Building 856, 4180 Watson Way 204 Dodd Blvd, Building 602 Room 160 Wright-Patterson AFB OH 45433 Langley AFB VA 23665

(13) HQ AFSPC (Bldg 1) Peterson AFB CO 80914

ITEM 10 a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION. Contractor will require access to COMSEC information at the on-base locations listed in item 8a. Contractor will not require their own COMSEC account. Access will be controlled by the sponsoring agency. Contractor will protect COMSEC material IAW directives deemed necessary by the installation COMSEC officer. Access to COMSEC material by personnel is restricted to US citizens holding final US Government clearances. Such information is not releasable to personnel holding only reciprocal clearances.

ITEM 10b. RESTRICTED DATA. Access to RESTRICTED DATA requires a final US Government clearance at the appropriate level.

ITEM 10c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION (CNWDI). The contractor is permitted access to CNWDI in performance of this contract. The government program manager or designated representative will ensure the contractor security supervisor is briefed for CNWDI. Access to CNWDI requires a final US Government clearance at the appropriate level. Permission of the Air Force is required for subcontracting CNWDI.

Attachment 2, FA2550-16-R-8001 6

ITEM 10d. FORMERLY RESTRICTED DATA. Access to FORMERLY RESTRICTED DATA requires a final US Government clearance at the appropriate level.

ITEM 10f. SPECIAL ACCESS INFORMATION. The contractor will require access to various levels of SAP material. SAP access is not automatic. The contractor must adhere to the special access requirements or procedures developed by the SAP OPR. SAF/AQL and SAF/AAZ are the OPRs for Special Access Programs and have exclusive security responsibility for all SAP material released or developed under this contract. Defense Security Service (DSS) has no security responsibility or oversight for SAP material. See Attachment 4 for further guidance. The following locations from Item 8a are authorized special access performance locations based on valid accreditation and approvals:

Item 8a(1) Item 8a(2) Item 8a(5) Item 8a(8) Item 8a(14) Item 8a(15)

ITEM 10g. NATO INFORMATION. Special briefings are required for access to NATO IAW AFI 31-406, Applying NATO Protection Standards. Prior approval of the contracting activity is required for subcontracting. Access to classified NATO information requires a final US Government clearance at the appropriate level.

ITEM 10j. FOR OFFICIAL USE ONLY INFORMATION (FOUO). FOUO information provided under this contract shall be managed and safeguarded IAW DoDM 5200.01, Volume 4, Enclosure 3. See FOUO attachment for guidance.

ITEM 10k. OTHER. Access to SCI and/or Collateral networks at the government work location is authorized. Access to already established networks at the contractor location is authorized. The contractor will not establish classified networks at the contractor location without government authorization.

For SIPRNet and/or other Secret systems: The government will provide classified network access to include e-mail and web browser. Contractors will be held accountable for actions they initiate on the network and will conduct business IAW USAF, ACC, and local base instructions and policies. Sponsor government agency will provide Information Assurance training prior to contractor access to network services.

For JWICS and/or other SCI systems: The government will only provide JWICS and/or access to other SCI systems to include e-mail and web access provided the contractor meets ALL SCI eligibility and training requirements and maintains the appropriate SCI access level.

Contractors will be held strictly accountable for all actions they initiate on the network and will conduct business IAW USAF, ACC, and local base instructions and policies. Privileges will be terminated if contractor does not maintain a current TS investigation.

STE access is required for contract performance. Access will be controlled by the sponsoring agency. Contractor will follow requirements IAW AFI 33-201 V9.

Attachment 2, FA2550-16-R-8001 7

Contract performance may require participation in the Joint Staff Focal Point Program (FPP) and access to Alternative or Compensatory Control Measures (ACCM) information IAW CJCSM 3213-02C. Handling of ACCM/FPP information will be done "onsite" at government facilities only.

ITEM 11c. RECEIVE AND GENERATE CLASSIFIED MATERIAL. The contractor requires access to classified source data in support of the work effort. Any extracts or use of such data requires the contractor to apply derivative classifications and markings consistent with the source documents. Security classification guidance will be available to the contractor.

All classified information shall be returned to the government upon termination of the contract.

ITEM 11d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE. The contractor must provide adequate storage for classified hardware to the level of Secret material which exceeds 2 cubic feet (a safe drawer) but not more than 8 cubic feet (a 4-dr safe.

ITEM 11f. HAVE ACCESS TO US CLASSIFIED INFORMATION OUTSIDE THE US, PUERTO RICO, US POSSESSIONS AND TRUST TERRITORIES. Travel in performance of this contract is authorized to Australia, Belgium, Canada, Germany, Greenland, Italy, Japan, Mexico, Netherlands, S. Korea, and UK.

ITEM 11g. USE OF THE DEFENSE TECHNICAL INFORMATION CENTER (DTIC) SERVICES. The contractor will prepare applicable documentation (DD Forms 1540 and 1541) to establish services with DTIC. The contracting official and project manager must critically review and clearly establish the contractor’s need-to-know.

ITEM 11i. HAVE EMSEC (TEMPEST) REQUIREMENTS. See AFI 33-203, The Air Force Emission Security Program, for additional guidance and requirements not specified in the NISPOM. See EMSEC attachment for further guidance.

ITEM 11j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS. The Contractor will implement the government’s OPSEC program. See OPSEC attachment for further guidance.

ITEM 11k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE (DCS). This contract requires the use of the Defense Courier Service system. The contractor must request DCS services from the Commander, Defense Courier Service, ATTN: Operations Division, Fort George G. Meade, MS 20755-5370. It is the responsibility of the contractor to comply with DCS policy and procedures.

Attachment 2, FA2550-16-R-8001 8

Attachment 2 DD Form 254, Block 13 Continued Contract No: FA2550-16-R-8001

ITEM 13a: Contract Expiration: 31 Jan 22

ITEM 13b: The SCIFs at the following locations will be used to perform SCI contractual requirements:

(1) USAFWC Det 1 Building 24, Rooms, 1107, 1101, 1114, 1501, 1517, 1607, 1701, 1706, 1810, 2001, Schriever AFB CO

(2) MDIOC, Building 720, Room, 2307, Schriever AFB CO

(3) ASOpS, 236 Paine St, Bldg 1876, Room 139, Peterson AFB CO

(4) OPIR Integrated Program Office, 3950 N Lewiston St, Aurora, CO

(5) Air and Space Intel Center (NASIC), 4180 Watson Way, Wright-Patterson AFB OH

(6) ACC/AZ, 204 Dodd Blvd, Bldg 602 Rm 160, Langley AFB VA

Non ACC SCIFs will be used only when covered by a co-utilization Memorandum of Agreement (MOA) between ACC and the sponsor of the facility.

ITEM 13c: Security Guidance. The following document with subsequent revisions or changes will be used for specific security classification guidance on this contract SCI.

Inquiries pertaining to classification guidance on SCI will be directed to the USAFWC Det 1

COR.

DCID 1/20 - Security Policy Concerning Travel and Assignment of Personnel with Access to

SCI (29 DEC 91)

DCID 6/1 - Security Policy for Sensitive Compartmented Information and Security Policy

Manual (1 MAR 95)

ICD 301 – National Open Source Enterprise [formerly DCID 1/7] (11 JUL 06)

ICD 704 - Personnel Security Standards and Procedures Governing Eligibility for Access to

Sensitive Compartmented Information and Other Controlled Access Program Information [formerly DCID 6/4] (1 OCT 08)

ICD 705 – Sensitive Compartmented Information Facilities [formerly DCID 6/9] (26 MAY 10)

DoDM 5105.21, Vol 1 – Sensitive Compartmented Information (SCI) Administrative Security

Manual: Administration of Information and Information Systems Security (OCT 12)

DoDM 5105.21, Vol 2 – Sensitive Compartmented Information (SCI) Administrative Security

Manual: Administration of Physical Security, Visitor Control, and Technical Security (OCT 12)

Attachment 2, FA2550-16-R-8001 9

DoDM 5105.21, Vol 3 – Sensitive Compartmented Information (SCI) Administrative Security Manual: Administration of Personnel Security, Industrial Security, and Special Activities (OCT 12)

AFI 14-302 – Control, Protection, and Dissemination of Sensitive Compartmented

Information (18 JAN 94)

AFI 14-303 – Release of Intelligence to U.S. Contractors (1 APR 99)

AFMAN 14-304 – The Security Use, and Dissemination of Sensitive Compartmented

Security Information (1 MAY 99)

EO 12333 – United States Intelligence Activities (AMENDED by EO 13470, 2008)

EO 13526 – Classified National Security Information (29 DEC 09) {replaced EO12958}

ITEM 13d: Inquiries pertaining to classification guidance on SCI will be directed to the USAFWC Det 1 COR.

ITEM 13e: SCI data generated by the contractor will require security handling and controls beyond those in the National Industrial Security Program Operating Manual (NISPOM).

These supplemental instructions will be furnished and/or made available to the contractor thru the USAFWC Det 1 COR by the User Agency Special Security Office, ACC SSO.

ITEM 13f: Names of personnel to support this effort will be provided under separate cover to USAFWC Det 1 Security. Forms requesting Special Background Investigations will be prepared in accordance with the NISPOM and submitted to Defense Security Service (DSS).

ITEM 13g: The contractor will establish and maintain a current access list of those employees working on this contract. A copy of this list will be furnished to the USAFWC Det

1 COR.

ITEM 13h: The contractor will advise the USAFWC Det 1 COR and USAFWC Det 1 Security Office immediately upon reassignment of personnel to other duties not associated with this contract.

ITEM 13i: Release of Information. SCI with restrictive caveats (e.g., ORCON, PROPIN, etc.) will be released to contractors only when originator approval has been obtained. The contractor will control SCI, which has been originated or obtained under this contract as follows: The contractor may release such material to any contractor employee working against a billet under this contract only when a need-to-know exists. The contractor will release such material to any Special Security Office personnel assigned to ACC or DIA upon demand by such personnel. The contractor may release such material to any other personnel, including contractor and subcontractor employees, and employees of any Federal Government agency, only upon prior written approval from the USAFWC Det 1 COR. An access certification to an ACC contractor-occupied SCIF does not constitute approval to release ACC contractual material to these other personnel; USAFWC Det 1 COR approval is nevertheless required. USAFWC Det 1 COR approval of an ACC contractor visit certification

Attachment 2, FA2550-16-R-8001 10 or permanent certification to another facility will constitute approval to discuss contractual material at facility to be visited.

ITEM 13j: Any SCI released to the contractor in support of this contract remains the property of DoD department, agency, or command that releases it. The contractor will maintain active accountability of all SCI released to his/her custody, regardless of whether the release is within a contractor or US Government SCIF. Upon completion/cancellation of the contract, the contractor must return all such material to the USAFWC Det 1 COR unless a follow-on contract specifies that the material will be transferred to a subsequent contract. SCI inventories will be conducted IAW DoD 5105.21, ICD 705, and AFMAN 14-304.

ITEM 13k: A SCIF will not be established by the contractor.

ITEM 13l: This contract may require the use of the Defense Courier system. Schriever SSO will validate Defense Courier Service requirements.

ITEM 13m: Reserved.

ITEM 13n: Contractor Facility Security Officers (FSOs) must coordinate with the USAFWC Det 1 COR and obtain the concurrence of the USAFWC Det 1 Security Office and ACC SSO prior to subcontracting any portion of SCI efforts involved in this contract.

ITEM 13o: No contractor personnel will be granted access to SCI material under this contract unless they are filling a DoD SCI billet. The contractor will coordinate with COR to ensure adequate billets are requested under this contract. Multiple contract employees sponsored by the organizations other than ACC must be certified to the ACC SSO for use on the contract.

ITEM 13p: A CSSO will not be appointed for this effort. Nomination(s) for SCI access will be sent to USAFWC Det 1 Security.

ITEM 13q: Contractor will not use references to SCI accesses, even by unclassified acronyms, in advertising, promotional efforts, or recruitment for employees.

ITEM 13r: The following activity is designated as the User Agency SSO for SCI requirements IAW DIA Manual 50-5: ACC SSO, HQ ACC/A2SD, Langley AFB VA 23665.

ITEM 13s: Foreign Disclosure. Requests for information received by the contractor from a foreign national shall be reported to USAFWC Det 1 Security, HQ ACC/A8IF, ACC SSO, and 50 SW/IP. Requests from foreign nationals to visit contractor activities associated with this contract shall be denied unless properly sponsored by the government program/project manager, regardless of the classification. The contractor shall obtain written approval from HQ ACC/A8IF prior to presenting any contract-associated information at any scientific/technical meeting where foreign nationals are in attendance. The contractor shall refer all requests for presentation materials where contract-associated information is contained, to HQ ACC/A8IF via USAFWC Det 1 Security and ACC SSO.

Attachment 2, FA2550-16-R-8001 11

ITEM 13t: Visitor Group Security Agreement (VGSA).

(1) Contract performance on a military installation involving access to classified information is categorized as VGSA activity. As such, security requirements for VGSAs on military installations are negotiated through a Visitor Group Security Agreement.

(2) The contractor shall enter into a security agreement between the installation commander (which is delegated to the Installation Information Security Program Manager);

and a home office management representative who has authority to enter into contractual agreements. The VGSA, written by the security inspection oversight authority, will formalize those actions performed by the installation for the contractor, such as secure storage, classified reproduction, destruction and transmission; police/guard services; prescribed security forms; special security instructions, local security directives, and security oversight inspections performed by government personnel. The VGSA will also formalize those actions required by a joint effort between the government and the contractor, such as packaging and addressing classified mail; security checks, internal security controls, and emergency classified protection measures. The VGSA requirement applies to all performance locations.

ITEM 13u: The contractor will require a polygraph for any individual with a need for an NSA account.

Attachment 2, FA2550-16-R-8001 12

Attachment 3 DD Form 254, Block 14 Continued

RELEASE OF SCI/NON - SCI INTELLIGENCE INFORMATION

TO DOD CONTRACTORS

ATTACHMENT TO DD FORM 254 FOR CONTRACT NO: FA2550-16-R-8001

CONTRACT EXPIRATION DATE: 31 Jan 22

RELEASE OF SENSITIVE COMPARTMENTED INFORMATION (SCI) INTELLIGENCE

INFORMATION TO US DoD CONTRACTORS

1. Requirements for access to SCI:

a. All SCI will be handled in accordance with special security requirements, which will be furnished by the local supporting/servicing Special Security Office (SSO) or Special Security Representative (SSR) through HQ ACC/A2SD (ACC SSO). Specific security directives provided by the SSO will be included in Block 13 of the DD Form 254.

b. SCI will not be released to contractor employees without specific release approval of the originator of the material as outlined in governing directives; based on prior approval and certification of “need-to-know” by the designated USAFWC Det 1 Contracting Officer’s Representative (COR).

c. Names of contractor personnel requiring access to SCI will be submitted to the COR for approval. (The USAFWC Det 1 COR is identified on the signature page of the DD Form 254 or by COR appointment letter.) Upon receipt of written approval from the USAFWC Det 1 COR, the company security officer will submit request(s) for special background investigations in accordance with the NISPOM to the Intelligence Support Office. The contractor must follow the instructions provided by the Intelligence Support Office.

d. Inquiries pertaining to classification guidance on SCI will be directed through USAFWC

Det 1 Security to the responsible USAFWC Det 1 COR as indicated on the DD Form 254 or by COR appointment letter.

e. SCI furnished in support of this contract remains the property of the Department of

Defense (DoD) department, agency, or command originator. Upon completion or cancellation of the contract, SCI furnished will be returned to the direct custody of the supporting SSO, or destroyed IAW instructions outlined by the USAFWC Det 1 COR.

f. SCI will be stored and maintained only in properly accredited facilities at the contractor location, if applicable.

2. The USAFWC Det 1 Contracting Officers Representative (COR) will:

a. Monitor the day-to-day activities of DoD SCI contracts and serve as a technical representative. The USAFWC Det 1 COR serves as a point of contact for the contractor, USAFWC Det 1 Security and ACC SSO.

Attachment 2, FA2550-16-R-8001 13

b. Review the SCI product for contract applicability and determine that the contractor requires the product to complete contractual obligations.

c. Prepare or review contractor access requests to ensure satisfactory justification (need-to-know) and completeness of required information.

d. Prepare and maintain a current SCI employee roster with an information copy to

USAFWC Det 1 Security.

e. Approve and coordinate visits by contractor employees through USAFWC Det 1

Security when such visits are conducted as part of the contract effort.

f. Maintain records of all SCI material provided to the contractor in support of the contract effort. By 15 January (annually), provide the contractor, for inventory purposes, with a complete list of all documents transferred by contract number, organizational control number, copy number, and document file.

g. Determine dissemination of SCI studies or materials originated or developed by the contractor.

h. Within 30 days after completion of the contract, provide written disposition instructions for all SCI material furnished to, or generated by, the contractor with an information copy to

ACC SSO.

i. Review and forward all contractor requests to process SCI electronically to USAFWC

Det 1 Security for coordination through appropriate SCI channels.

j. Request for release of intelligence material to a contractor must be prepared by the

USAFWC Det 1 COR and submitted to ACC SSO. This should be accomplished as soon as possible after the contract has been awarded. The request will be prepared and accompanied with a letter explaining the requirement and copies of the DD Form 254 and Statement of Work (SOW).

RELEASE OF NON-SENSITIVE COMPARTMENTED INFORMATION (NON-SCI)

INTELLIGENCE INFORMATION TO US DoD CONTRACTORS

1. Requirements for access to non-SCI:

a. All intelligence material released to the contractor remains the property of the US

Government and may be withdrawn at any time. Contractors must maintain accountability for all classified intelligence released into their custody.

b. The contractor must not reproduce intelligence material without the written permission of the originating agency through the Intelligence Support Office. If permission is granted, each copy shall be controlled in the same manner as the original.

c. The contractor must not destroy any intelligence material without advance approval or as specified by the USAFWC Det 1 COR.

Attachment 2, FA2550-16-R-8001 14

d. The contractor must restrict access to only those individuals who possess the necessary security clearance and who are actually providing services under the contract with a valid need to know. Further dissemination to other contractors, subcontractors, other government agencies, private individuals or organizations is prohibited unless authorized in writing by the originating agency through the USAFWC Det 1 COR.

e. The contractor must ensure each employee having access to intelligence material is fully aware of the special security requirements for this material and shall maintain records in a manner that will permit the contractor to furnish, on demand, the names of individuals who have had access to this material in their custody.

f. Intelligence material must not be released to foreign nationals or immigrant aliens whether they are consultants, US contractors, or employees of the contractor and regardless of the level of their security clearance, except with advance written permission from the originator. Requests for release to foreign nationals shall be initially forwarded to the USAFWC Det 1 COR and shall include:

(1) A copy of the proposed disclosure.

(2) Full justification reflecting the benefits to US interests.

(3) Name, nationality, particulars of clearance, and current access authorization of each proposed foreign national recipient.

g. Upon completion or termination of the classified contract, or sooner when the purpose of the release has been served, the contractor will return all classified intelligence (furnished or generated) to the source from which received unless retention or other disposition instructions (see AFMAN 37-139) are authorized in writing by the USAFWC Det 1 COR.

h. The contractor must designate an individual who is working on the contract as custodian. The designated custodian shall be responsible for receipting and accounting for all classified intelligence material received under this contract. This does not mean that the custodian must personally sign for all classified material. The inner wrapper of all classified material dispatched should be marked for the attention of a designated custodian and must not be opened by anyone not working directly on the contract.

i. Within 30 days after the final product is received and accepted by the procuring agency, classified intelligence materials released to or generated by the contractor, must be returned to the originating agency through the USAFWC Det 1 COR unless written instructions authorizing destruction or retention are issued. Requests to retain material shall be directed to the USAFWC Det 1 COR for this contract in writing and must clearly indicate the justification for retention and identity of the specific document to be retained.

j. Classification, regarding, or declassification markings of documentation produced by the contractor shall be consistent with that applied to the information or documentation from which the new document was prepared. If a compilation of information or a complete analysis of a subject appears to require a security classification other than that of the source documentation, the contractor shall assign the tentative security classification and request

Attachment 2, FA2550-16-R-8001 15 instructions from the USAFWC Det 1 COR. Pending final determination, the material shall be safeguarded as required for its assigned or proposed classification, whichever is higher, until the classification is changed or otherwise verified.

2. Intelligence material carries special markings. The following is a list of the authorized control markings of intelligence material:

a. "Dissemination and Extraction of Information Controlled by Originator (ORCON)." This marking is used, with a security classification, to enable a continuing knowledge and supervision by the originator of the use made of the information involved. This marking may be used on intelligence, which clearly identifies, or would reasonably permit ready identification of an intelligence source or method, which is particularly susceptible to countermeasures that would nullify or measurably reduce its effectiveness. This marking may not be used when an item or information will reasonably be protected by use of other markings specified herein, or by the application of the "need-to-know" principle and the safeguarding procedures of the security classification system.

b. "Authorized for Release to (Name of Country(ies)/International Organization." The above is abbreviated "REL ." This marking must be used when it is necessary to identify classified intelligence material the US government originator has predetermined to be releasable or has been released through established foreign disclosure channels to the indicated country(ies) or organization.

3. The following procedures govern the use of control markings.

a. Any recipient desiring to use intelligence in a manner contrary to restrictions established by the control marking set forth above shall obtain the advance permission of the originating agency through the USAFWC Det 1 COR. Such permission applies only to the specific purposes agreed to by the originator and does not automatically apply to all recipients. Originators shall ensure that prompt consideration is given to recipients' requests in these regards, with particular attention to reviewing and editing, if necessary, sanitized or paraphrased versions to derive a text suitable for release subject to lesser or no control markings.

b. The control marking authorized above shall be shown on the title page, front cover, and other applicable pages of documents, incorporated in the text of electrical communications, shown on graphics, and associated (in full or abbreviated form) with data stored or processed in automatic data processing systems. The control marking also shall be indicated by parenthetical use of the marking abbreviations at the beginning or end of the appropriate portions. If the control marking applies to several or all portions, the document must be marked with a statement to this effect rather than marking each portion individually.

c. The control markings shall be individually assigned at the time of preparation of intelligence products and used in conjunction with security classifications and other marking specified by EO 13526 and its implementing security directives. The marking shall be carried forward to any new format in which the same information is incorporated including oral and visual presentations.

4. Request for release of intelligence material to a contractor must be prepared by the

Attachment 2, FA2550-16-R-8001 16

USAFWC Det 1 COR and submitted to ACC SSO. This should be accomplished as soon as possible after the contract has been awarded. The request will be prepared and accompanied with a letter explaining the requirements and copies of the DD Form 254 and Statement of Work (SOW).

Attachment 2, FA2550-16-R-8001 17

FOR OFFICIAL USE ONLY (FOUO)

Ref. to Item 10J of DD Form 254

DoDM 5200.01-V4, 24 February 2012, Enclosure 3 is the guidance publication for this area.

1. Description. “For Official Use Only (FOUO)” is a Department of Defense designation that is applied to unclassified information that may be exempt from mandatory release to the public under the Freedom of Information Act (FOIA). The FOIA specifies nine exemptions that may qualify certain information to be withheld from release to the public, if, by its disclosure, a foreseeable harm would occur. They are:

a. Exemption 1. Information that is currently and properly classified.

b. Exemption 2. Information that pertains solely to the internal rules and practices of the agency that, if released, would allow circumvention of an agency rule, policy, or statute, thereby impeding the agency in the conduct of its mission.

c. Exemption 3. Information specifically exempted by a statute establishing particular criteria for withholding. The language of the statute must clearly state that the information will not be disclosed.

d. Exemption 4. Information such as trade secrets and commercial or financial information obtained from a company on a privileged or confidential basis that, if released, would result in competitive harm to the company, impair the Government's ability to obtain like information in the future, or protect the Government's interest in compliance with program effectiveness.

e. Exemption 5. Inter- or intra agency memorandums or letters containing information considered privileged in civil litigation. The most common privilege is the deliberative process privilege, which concerns documents that are part of the decision-making process and contain subjective evaluations, opinions, and recommendations. Other common privileges are the attorney-client and attorney work product privileges.

f. Exemption 6. Information, the release of which could reasonably be expected to constitute a clearly unwarranted invasion of the personal privacy of individuals.

g. Exemption 7. Records or information compiled for law enforcement purposes that:

(1) Could reasonably be expected to interfere with law enforcement proceedings;

(2) Would deprive a person of a right to a fair trial or impartial adjudication;

(3) Could reasonably be expected to constitute an unwarranted invasion of the personal privacy of others;

(4) Disclose the identity of a confidential source;

(5) Disclose investigative techniques and procedures; or

Attachment 2, FA2550-16-R-8001 18

(6) Could reasonably be expected to endanger the life or physical safety of any individual.

h. Exemption 8. Certain records of agencies responsible for supervision of financial institutions.

i. Exemption 9. Geological and geophysical information (including maps) concerning wells.

2. General.

a. It is the responsibility of the document’s originator to determine at origination whether the information may qualify for FOUO status and to ensure markings are applied as required. Further details on the types of information that may qualify for the specified exemptions and FOUO status can be found in Chapter 3 of DoD 5400.7R.

b. Information that is currently and properly classified shall be withheld from mandatory release under the first exemption of the FOIA. The marking “FOR OFFICIAL USE ONLY” (FOUO) is applied to information that may be exempt under one or more of the other eight exemptions. By definition, information shall be unclassified in order to be designated FOUO. If an item of classified information is declassified, it may be designated FOUO if it qualifies under one of the other exemptions of the FOIA. This means that:

(1) Information cannot be classified and FOUO at the same time. Therefore, classified documents containing FOUO information cannot bear an overall document marking of FOUO. However, portions or pages of a classified document, that contain only FOUO information will be marked as FOUO.

(2) Information that is declassified may be designated FOUO, only if it is believed to fit into one or more of the last eight exemptions (exemptions 2 through 9).

c. FOUO is not authorized as a means of protecting information that otherwise doe not merit protection as classified for national security reasons.

d. The FOIA provides that, for information to be exempt from mandatory release, it must fit into one of the qualifying categories and there must be a legitimate Government purpose served by withholding it. Simply because information is marked FOUO does not mean it automatically qualifies for exemption. If a request for a record is received, the information must be reviewed to see if it meets this dual test. On the other hand, the absence of the FOUO marking does not automatically meant the information must be released. Some types of records (for example, personnel records) are not normally marked FOUO, but may still qualify for withholding under FOIA.

3. Marking.

a. Marking information FOUO does not automatically qualify it for exemption from public release pursuant to the FOIA. If a request for a record is received, the information shall be reviewed to determine if it actually qualifies for exemption. Similarly, the absence of the FOUO marking does not automatically mean the information shall be released. Some

Attachment 2, FA2550-16-R-8001 19 types of records (for example, personnel records) are not normally marked FOUO, but may still be withheld under the FOIA. Information marked FOUO shell not specify, or have annotated, a FOIA exemption number. All DoD unclassified information must be reviewed before it is released to the public or to foreign governments and international organizations.

b. Information that has been determined to qualify for FOUO status should be indicated by markings when included in documents and similar material. Markings are to be applied at the time documents are created to properly protection of the information. When a classified document or portion thereof is declassified, FOUO markings may be applied, if applicable, to protect the information.

c. Unclassified documents and material containing FOUO information shall be marked as follows:

(1) Each document determined to contain FOUO information shall indentify the originating agency or office. This information shall be clear and complete enough to allow someone receiving the document to contact the office if questions or problems about the designation or markings arise.

(2) Documents shall be marked "FOR OFFICIAL USE ONLY" at the bottom of the front cover (if there is one), the title page (if there is one), the first page, and the outside of the back cover (if there is one). Optionally, for consistency with classified systems, the document may be marked “UNCLASSIFIED//FOR OFFICIAL USE ONLY.”

(3) Internal pages of the document that contain FOUO information shall be marked “FOR OFFICIAL USE ONLY” at the bottom. Optionally, for consistency with classified systems, internal pages may be marked “UNCLASSIFIED//FOR OFFICIAL USE ONLY” or “UNCLASSIFIED//FOUO”; in such case internal pages shall be marked at both the top and bottom.

(4) Portion Marking FOUO Information. Subjects, titles, and each section, part, paragraph, or similar portion of an FOUO document shall be marked to show that they contain information requiring protection. Use the parenthetical notation “(FOUO)” (or optionally “(U//FOUO) to identify information as FOUO for this purpose. Place this notation immediately before the text.

(5) Each part of electronically transmitted messages, including e-mail, containing FOUO information shall be marked as required above.

(6) Transmittal documents that have FOUO attachments, but no classified material attached, shall be marked with the following statement or a similar one: “FOR OFFICIAL

USE ONLY ATTACHMENT.”

(7) When FOUO information is contained in media or material (including hardware and equipment) not commonly thought of as documents (e.g., computer files and other electronic media, audiovisual media, chart, maps, films, sound recordings), the requirement remains to identify, as clearly as possible, the information that requires protection. The main concern is that holders and users of the material are clearly notified of the presence of FOUO

Attachment 2, FA2550-16-R-8001 20 information. The markings shall be applied either on the item or the documentation that accompanies it.

(8) Classified documents and material containing FOUO information shall be marked as required by Volume 2 of DoDM 5200.01, as applicable), with FOUO information identified as follows:

a Overall markings on the document shall follow the rules in NISPOM Chapter

4. No special markings are required on the face of the document because it contains FOUO information.

b Portions of the document shall be marked with their classification as required by NISPOM Chapter 4.If there are unclassified portions that contain FOUO information, they shall be marked with "FOUO" in parentheses at the beginning of the portion. Since FOUO information is, by definition, unclassified, the "FOUO" is an acceptable substitute for the normal "U."

c Pages of the document that contain classified information shall be marked as required by NISPOM Chapter 4. Pages that contain FOUO information but no classified information will be marked "FOR OFFICIAL USE ONLY" at the top and bottom.

d. FOUO documents and material disseminated outside the Department of Defense shall also bear an expanded marking on the outside of the front cover, first page, or at the beginning of the text that states that the information may be exempt from mandatory disclosure in accordance with the FOIA. A statement similar to that shown below is sufficient. A FOIA exemption number shall NOT be applied.

e. Technical documents that require a distribution statement restricting disclosure and/or an export control warning notice pursuant to DoDD 5230.24.

4. Access to FOUO Information.

a. No person may have access to information designated as FOUO unless that person has been determined to have a valid need for such access in connection with the accomplishment of a lawful and authorized Government purpose.

b. The final responsibility for determining whether an individual has a valid need for access to information designated as FOUO rests with the individual who has authorized possession, knowledge or control of the information and not on the prospective recipient.

c. Information designated as FOUO may be disseminated within the DoD Components and between officials of DoD Components and DoD contractors, consultants, This document contains information that may be exempt from mandatory disclosure under the

Freedom of Information Act.

Attachment 2, FA2550-16-R-8001 21 and grantees to conduct official business for the Department of Defense, provided that dissemination is not further controlled by a Distribution Statement.

d. DoD holders of information designated as FOUO are authorized to convey such information to officials in other Departments and Agencies of the Executive and Judicial Branches to fulfill a government function provided such dissemination is consistent with any further controls imposed by distribution statements or other regulations. If the information is covered by the Privacy Act of 1974, as amended, disclosure is only authorized if the requirements of DoD 5400.11-R are satisfied.

e. Release of FOUO information to Congress is governed by DoDI 5400.4. If the information is covered by the Privacy Act of 1974, as amended, disclosure is authorized only if the requirements of DoD 5400.11-R are also satisfied.

f. DoDI 7650.1 governs release of FOUO information to the General Accounting Office (GAO). If the information is covered by the Privacy Act of 1974, as amended, disclosure is authorized only if the requirements of DoD 5400.11-R are also satisfied.

g. FOUO information may be shared with State, local, or tribal government officials, provided a specific need to know has been established and the information is shared in furtherance of an official governmental purpose. In all cases, the recipient must agree to the stipulation that the information shall be withheld by the recipient from public release. Records thus shared shall be marked in accordance with paragraph 3 of this attachment, and the recipient shall be advised whether special handling instructions do or do not apply.

5. Protection of FOUO Information

a. During working hours, reasonable steps shall be taken to minimize risk of access by unauthorized personnel. After working hours, store FOUO information in unlocked containers, desks or cabinets if Government or Government-contract building security is provided. If such building security is not provided, store the information in locked desks, file cabinets, bookcases, locked rooms, etc.

b. FOUO information and material may be transmitted via first class mail, parcel post or, for bulk…