ATCH_20_DD254.pdf

1. CLEARANCE AND SAFEGUARDING

DEPARTMENT OF DEFENSE a. FACILITY CLEARANCE REQUIRED

CONTRACT SECURITY CLASSIFICATION SPECIFICATION SECRET

(The requirements of the DoD Industrial Security Manual apply

b. LEVEL OF SAFEGUARDING REQUIRED to all security aspects of this effort.)

NIA

2. THIS SPECIFICATION IS FOR: (X and complete as appUcable) 3. THIS SPECIFICATION IS: (X and complete as apph'cable)

a. PRIME CONTRACT NUMBER x DATE (YYYYMMDD)

a. ORIGINAL (Complete date in all cases) 20170210

b. SUBCONTRACT NUMBER b. REVISED I REVISION NO. DATE (YYYYMMDDJ (Supersedes all previous specs) x c. SOLICITATION OR OTHER NUMBER DUE DATE (YYYYMMDD) DA TE (YYYYMMDD) F3PF I A 7046A WO I 20190101 c. FINAL (Complete Item 5 in all cases)

4. IS THIS A FOLLOW-ON CONTRACT? L_jYES l.XJ NO. If Yes. complete the following:

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract

5. IS THIS A FINAL DD FORM 254? L_JYES LXJ NO. If Yes. complete the following:

In response to the contracto(s request dated . retention of the dass1fied matenal is authorized for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME. ADDRESS, ANO ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Nsme. Address. and Zip Code)

7. SUBCONTRACTOR

a. NAME. ADDRESS. ANO ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name. Address. and Zip Code)

8. ACTUAL PERFORMANCE

a. LOCATION b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name. Address. and Zip Code)

56 RMO/ ACTS. 7101 Jcrstad Ln. Luke Af-B. AZ 85309-1661 56 F\V/11' 7254 N Fighter Country Ave. Luke AFB AZ 56 RMO/ ACTS. 2008 Front St. Gila Bend AFAF. AZ 85337 85309-1428

54 F(i/OSS. 832 Nighthawk. Holloman AFB. NM 88330 -19 WG/IP. 681 Second S1rcct. Suite 100. llolloman AFB. Ntvl

88330

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

Operations and Maintenance tO&M) of the Air Combat Training System (ACTS) al the aforementioned sites in Block Sa. Sec PWS for further detai ls.

10. CONTRACTOR WILL REQUIRE ACCESS TO: YES NO 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

• COMMUNICATIONS SECURITY (COMSEC) INFORMATION x " ca1.i1R'A~8~·l°Fxgt~~{.'"&~ l~~~R"Nr!.~7N~bri'Vl~'<UI "~" x b RESTRICTED DATA x b. RECEIVE CLASSIFIED DOCUMENTS ONLY x

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION x t. RECEIVE AND GENERATE CLASSIFIED MATERIAL x d FORMERLY RESTRICTED DATA x d. FABRICATE. MODIFY. OR STORE CLASSIFIED HAROWARE x

e. INTELLIGENCE INFORMATION e. PERFORM SERVICES ONLY x

(1) SenS1tJve Compa~mented Information (SCI) x t ~~~fd"~fc"8. L0su~o~~~I&'~~ A~D0f~JW~~~M~~M%JHE u.s .. x (21 Non.SCI x 9' ~~~PJ~YD'Wcft'6h0oY~£~~£~cS~~'.ttf~dl~filieD¥rd'N1~~~~;.L '"ru"m' '•u• x

( , SPECIAL ACCESS INFORMATION x h. REOUIRE A CO.~SEC ACCOUNT x 9 NATO INFORMATION x i. HAVE TEMPEST REQUIREMENTS x II FOREIGN GOVERNMENT INFORMATION x J HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS x I LIMITED DfSSEMINA TION INFORMATION x k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE x I· FOR OFFICIAL USE ONLY INFORMATION x I. OTHER (Specify) x

k. OTHER (Specify) x AFFARS 5352.20-1-9000. Notificalion of Government Sccuri1)

Acth·ity and Visi1or Group Security Agreement applies and \\ill be completed between the installation commander and the contractor

DD FORM 254, DEC 1999 PREVIOUS EDITION IS OBSOLETE. Adobe Professional X

1 FA3002-18-R-0010, Air Combat Training System Attachment 20

1 2. PU BLIC RELEASE. My information (classified or unclassified) pertaimng to lhis contract shall not be released for pu blic dissemination except es provided by the Industrial Secunty Manual or unless it has been approved for public release by appropnate U.S. Government a uthori ty . Proposed publ ic releases shall be submitted for approval prior to release c:::J Direct 00 Through (Specify)

I n formation requi ring AF or DoD- leve l review wi l l be lorwarded b) the enUJ· lcvc l public affairs office through the MAJCOM/DR U Pub l ic A ffairs Office to tho: ccrctary of the A ir Force. Office of Public Affairs. Sc:curity and Rcvie,1 Div ision (SAF/PAX). 1 690 A i r Force Pentagon. Washington DC 20330- 1 690 to the Directorate for Freedom ol lnformalion and Security Review. Office of the Assistant Secretary of Defense (Public Affairs)" for review.

' In the ease of non-DoD User Agencies. req uests for disclosure shall be submi1lcd to that agency.

1 3. SECURITY GUI DANCE. The security classif1Cation guidance needed for this classified effort is identified below If any difliculty is encountered in applying this guidance or if any other contnbuting factor indicates a need for changes In this guida nce. the contractor is authorized and encouraged to provide recommended changes: to chal lenge the guidance or the classification assig ned to any information or material fumlshed or generated under this contract; and to submit any questions for interpretation of th is guidance to the official l<lentified below. Pending final decision. the information involved shal l be ha ndled and protected at the highe st level of classiricaoon assigned or recommended (AU in as appropnate for the classined effort Attach. or forward under separate co1Tespondence. any documents/guideste,ttracts referenced herein. Add additional pages es needed to provide comp/ere guidance.)

I tem I Oa: Access 10 accountable COMSEC infom1at ion is requ i red for contract performance . Contractor w i l l be requ i red to contact the host base COM SEC manager for procedures to access COMSEC informat ion . Contractor may be requ i red to obtain Fom1al Cl)· ptograph ic Access (FCA ), as directed by the Responsible Officer (CRO). Access to COMSEC material is restricted to US cit izens ho ld ing fina l U.S . govemment c l earances.

Item I Oj : FOUO informat ion provided under this contract sha l l be safeguarded as spec i fied in the attachment I "Protec t ing for Official U se Only l n fonnat ion . " Item I l a: Contract perfom1ancc is restricted to locations ident i fied in 8a above . Us ing act iv ity wi l l provide security class i fication gu idance for performance of th i s contract .

Item I l e : Contract is for Air Combat Tra in ing System services. C lassificat ion requ i rements wil l be provided by the using agency.

Item I I J : Contractor wi l l integrate OP SEC requ irements for protect ing cr i t ical i nformation under AF I I 0-70 I , Operat ions Securiry, as specified in the attachment 2. ''Operat ions Securi ty'" I . Detailed security classificat ion guidance is provided by P5CTS/TCTS Security C lassification G u ide (SCG) dtd 9 Jan 1 7 and A utonomous ACTSffCTS Security Classi fica1ion Guide for U SAF Air Combat Train ing System ( ACTS ).

2. The contractor w i l l requ i re access co c lassi fied infomiat ion up ro and i ncluding Secret.

3. The h ighest level of information generated wil l be Secret . The techn ica l program manager wi l l app ly c lass ification level d downgrading/dec lassi ficat ion of exemption for a l l in formaL ion produced .

HILSCH ER. N ICO ::-::..--=:=.-=·=;:...., WEBER.GLENN . =.�:�"!..o L I .L . 1 243723678 =-==-=-· R.JR. 1 1 2 1 4 1 4658 ::::;:.:. ..... . ,. • .....,

0. 10 ! 7 01 1,01 41 ..JI �

NICOL I L . H I LSCH ER, M Sgt USA F GLEN1 R. WEBER, GS- 1 1 , OA F' A ETC/A30 Un i t Security Manager

41:iCR , C TV . DAF 802 SFS/I P 'J...1 tfl fl-f: .. r{502 CS/SCXS (Computer/COMSEC access)

1 4. AD DITIONAL S ECURITY REQUIR EMENTS. Requireme nts. in addition to ISM requirements. are established for this contract. , .� Yes LJ No {If Yes. identify the pertinent contractual clauses in the contract document itself. or provide an appropriate statement which identffies the addiDonal requirements Provide a copy of the requirements to the cognizant security office Use Item 13 if additional space is needed.)

Ref blk 1 1 1 : AFFAR " 352 .204-9000, Not ification of Govcmment Security Act i v ity and V isitor Group Security Agreement applies and w i l l he completed between the insta l la t ion commander and the contractor.

1 5. INSPECTIONS. Elements of this contract are outside the Inspection respons1bi1Jty of the cognizant secunty office. � Yes LJ No (If Yes. exp/am and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

Ref hlk 8c: The Dc li!nse Security Scn·icc (DSS ) is re l ieved or al l industrial so:eur ity review rcsponsib i l i1 i.:s for the contractor's pcrfonnancc on Air Force i nstal lat ions. Industria l security o\·e rs ight wi l l he prov ided by th� host I I' offic.: .

1 6. CERTIFI CATION AND SIGNATURE. Security req u i rements stated herein are complete an d adequate fo r safeguard ing the classified Information to be released or generated under this c lassified effort. Al l questions shall be referred to the official named bel ow.

b. TITLE c. TELEPHONE (Include Aree Code) a . TYPED NAME OF CERTIFYING OFFICIAL

3 3 8 SCONS Contract ing Officer

1 7. REQUIRED DISTRIBUTION

� a CONTRACTOR b SUBCONTRACTOR

2 1 0-652-6904

-X- c COGNIZANT SECURIT'I' OFFICE FOR PRIME AND SUBCONTRACTOR t-e-.""'s1G-NATURE

Kevin O. Grant d, AD DRESS (Include Zip Code) 202 2021 F i rst Street West J c--=- BSA-Rand

..,."'""':c, o lp e--

h. TX 7 1 50-!302

--------------------t---i d U.S ACTIVITY RESPONSIBlE FOR OVERSEAS SECURITY ADMINISTRATION -x e ADMINISTRATIVE CONTRACTING OFFICER X 1. OTHERS AS NECESSARY I P O ffices at the performance locn1 1ons

DD FORM 254 (BACK), DEC 1 999

2 FA3002-18-R-0010, Air Combat Training System

Attachment 1 to DD Form 254

1. Visitor Group Security Agreement (VGSA). The contractor shall enter into a long-term visitor group security agreement if service performance is on base. This agreement shall outline how the contractor integrates security requirements for service operations with the Air Force to ensure effective and economical operation on the installation. The agreement shall include:

a. Security support provided by the Air Force to the contractor shall include storage containers for classified information/material, use of base destruction facilities, classified reproduction facilities, use of base classified mail services, security badging, base visitor control, investigation of security incidents, base traffic regulations and the use of security forms and conducting inspections required by DoD 5220.22-R, Industrial Security Regulation, Air Force Policy Directive 16-14, Security Enterprise Governance, and Air Force Instruction 16-1406, Air Force Industrial Security Program.

b. Security support requiring joint Air Force and contractor coordination includes packaging classified information, mailing and receiving classified materials, implementing emergency procedures for protection of classified information, security checks and internal security controls for protection of classified material and high-value pilferable property.

c. On base, the long-term visitor group security agreement may take the place of a Standard Practice Procedure (SPP).

2. Obtaining and Retrieving Identification Media. As prescribed by the AFFAR 5352.242-9000, Contractor access to Air Force installations, the contractor shall comply with the following requirements:

a. The contractor shall obtain installation access passes for all contractor personnel who make frequent visits to or perform work on the Air Force installation(s) cited in the contract. Contractor personnel are required to present the installation access pass while visiting or performing work on the installation.

b. No later than ten working days prior to contract commencement, the contractor shall submit a written request on company letterhead to the program manager listing the following: contract number, location of work site, start and stop dates, and names, dates of birth, driver’s license number and state of issue for the contractor employees needing access to the base. The authorized program manager will endorse the request and forward it to the issuing installation pass and registration office or security forces for processing. Contractors shall present government (state or federal) issued ID, before being issued a pass to enter the installation. Before being issued a pass to enter the installation, a criminal history check will be conducted for every individual requesting a pass. Personnel employed by the contractor and operating a motor vehicle on the installation must possess proof of the following:

(1) Liability Insurance

(2) Current License Plates

(3) Current State Inspection Sticker (If Required)

(4) Valid State Driver License

(5) A phone number for sponsor on base

c. Vehicles owned by the contractor with the company name permanently printed on them are not required to obtain a pass as long as a current work order is presented at the time of entry. However, current liability insurance, state inspection sticker, and registration is required. The person driving the vehicle must have a valid operator license for the type of vehicle.

3 FA3002-18-R-0010, Air Combat Training System

d. Upon completion or termination of the contract or expiration of the identification passes, the contractor shall ensure that all base identification credentials issued to contractor employees are returned to the issuing office. If a contractor employee has been terminated, the credentials will need to be retrieved and returned to issuing activity so that employee does not have base access. If the credential is not retrieved then SF will need to be notified so base access is not allowed.

e. Failure to comply with these requirements may result in withholding of final payment.

3. Pass and Identification Items. The contractor shall ensure the following pass and identification items required for service performance are obtained for employees and non-government owned vehicles:

a. Installation Access Pass (IAP) (DBIDS), Visitor/Vehicle Pass (AFI 31-113), used for contracts for less than six months to include one-day visits (i.e. warranty work)..

b. Installation Access Card (IAC) (DBIDS), (AFI 31-113), used for contracts for more than six months or more.

c. DoD Common Access Card (CAC), (AFI 36-3026), used for contracts for more than six months and requirement exists for access to the government computer systems and software. CAC applications are accomplished by Trusted Agents via the Trusted Agent Sponsorship System (TASS).

4. Security Clearance Requirements. The contractor must possess or obtain an appropriate facility security clearance, (Top Secret, Secret, Confidential-select one) prior to performing work on a classified government contract. If the contractor does not possess a facility clearance the government will request one. The government assumes costs and conducts investigations for Top Secret, Secret, and Confidential facility security clearances. The contractor shall request personnel security clearances, at the company’s expense, for employees requiring access to classified information within 15 days after receiving a facility clearance or, if the contractor is already cleared, within 15 days after service award. Due to costs involved with security investigations, requests for personnel security clearances shall be kept to the minimum amount employees required to perform contract requirements.

5. List of Employees. The contractor shall maintain a current list of employees. The list shall include employee's name, social security number, and level of security clearance. The list shall be validated and signed by the company Facility Security Officer (FSO) and provided to the contracting officer and Information Protection Office (IP Office) at each performance site 30 days prior to the service start date.

Updated listings shall be provided when an employee's status or information changes. A Visit Request for all employees with a security clearance is required to be sent through the Joint Personnel Adjudication System (JPAS), and must be updated at least annually. The contractor shall notify the Information Protection Office at each operating location 30 days before on-base performance of the service. The notification shall include:

a. Name, address, and telephone number of company key management representatives.

b. The contract number and contracting agency.

c. The highest level of classified information to which employees require access.

d. The location(s) of service performance and future performance, if known.

e. The date service performance begins.

f. Any change to information previously provided under this paragraph.

4 FA3002-18-R-0010, Air Combat Training System

6. Suitability Investigations. Contractor personnel not requiring access to classified shall successfully complete, as a minimum, a Tier 1 (T1) investigation, before operating government furnished workstations. The contractor shall comply with the DoD 5200.2-R, Personnel Security Program, AFMAN 33-152, User Responsibilities and Guidance for Information Systems, and AFI 33-200, Information Assurance (IA) Management, requirements. T1 investigation requests are initiated using the Standard Form (SF) 85 and are submitted to the installation Information Protection Office through the using agency’s Unit Security Manager. T1 investigations are different from the Wants and Warrants checks, and are provided by the government at no additional cost to the contractor.

7. Security Monitor Appointment. The contractor shall appoint a security representative for the on base long term visitor group. The security representative may be a full-time position or an additional duty position. The security representative shall work with the host organization to provide employees with training required by DoDM 5200.01, Information Security Program, AFPD 16-14, Security Enterprise Governance, and AFI 16-1404, Air Force Information Security Program. The contractor shall provide initial and follow-on training to contractor personnel who work in Air Force controlled/restricted areas.

Air Force restricted and controlled areas are explained in AFI 31-101, Integrated Defense.

8. Additional Security Requirements. In accordance with DoDM 5200.01, Information Security Program and AFI 16-1404, the contractor shall comply with AFSSI 7700, Emission Security (EMSEC) Program;

applicable AFKAGs, AFIs, and AFSSIs for Communication Security (COMSEC); and AFI 10-701, Operations Security (OPSEC) Instructions. The contractor shall comply with DoD Standard 22/Force Protection Condition Measures, DoD Standard 25/Level I-AT Awareness Training, and associated tasking contained in AFI 10-245, Antiterrorism (AT) standards. Level I AT Awareness training is available for contractor personnel and can be requested by calling the local installation AT Office.

9. Freedom Of Information Act Program (FOIA). The contractor shall comply with DoD Regulation 5400.7-R/Air Force Supplement, DoD Freedom Of Information Act Program, requirements. The regulation sets policy and procedures for the disclosure of records to the public and for marking, handling, transmitting, and safeguarding For Official Use Only (FOUO) material. The contractor shall comply with AFI 33-332, Privacy Act Program, when collecting and maintaining information protected by the Privacy Act of 1974 authorized by Title 10, United States Code, Section 8013. The contractor shall remove or destroy official records only in accordance with AFI 33-322 Records Management, or other directives authorized in AFI 33-364, Records Disposition—Procedures and Responsibilities.

10. Reporting Requirements. The contractor shall comply with AFI 71-101, Volume- 1, Criminal Investigations, and Volume-2, Protective Service Matters, requirements. Contractor personnel shall report to an appropriate authority, any information or circumstances of which they are aware may pose a threat to the security of DoD personnel, contractor personnel, resources, and classified or unclassified defense information. Contractor employees shall be briefed by their immediate supervisor upon initial on-base assignment and as needed thereafter.

1. Physical Security. Areas controlled by contractor employees shall comply with base Operations Plans/instructions for FPCON procedures, Random Antiterrorism Measures (RAMS) and local search/identification requirements. The contractor shall safeguard all government property, including controlled forms, provided for contractor use. At the close of each work period, government training equipment, ground aerospace vehicles, facilities, support equipment, and other valuable materials shall be secured. During increased FPCONs, contractors may have limited access to the installation and should expect entrance delays.

12. Operating Instructions. For controlled areas used exclusively by the contractor, the contractor shall develop an Operating Instruction (OI) for internal circulation control, protection of resources and to

5 FA3002-18-R-0010, Air Combat Training System regulate entry into Air Force controlled areas during normal, simulated and actual emergency operations.

The OI shall be written in accordance with AFI 31-101, the local base Operations Plan usually referred to as an OPLAN and AFI 10-245, Air Force Antiterrorism (AT) Standards, and coordinated through the

ISPM.

13. Key Control. The contractor shall establish and implement key control procedures in the Quality Control Plan to ensure keys issued to the contractor by the government are properly safeguarded and not used by unauthorized personnel. The contractor shall not duplicate keys issued by the government.

Report lost keys to the CO within 24 hours after occurrence. The government replaces lost keys or performs re-keying. The total cost of lost keys, re-keying or lock replacement shall be deducted from the monthly payment due to the contractor. The contractor shall ensure its employees do not allow government issued keys to be used by personnel other than current authorized contractor employees.

Contractor employees shall not use keys to open work areas for personnel other than contractor employees engaged in performance of duties, unless authorized by the government functional area chief.

14. Lock Combinations. The contractor shall establish procedures in local OIs ensuring lock combinations are not revealed to unauthorized persons and ensure the procedures are implemented. The contractor is not authorized to record lock combinations without written approval by the government functional area chief. Records with written combinations to authorized secure storage containers or Secure Storage Rooms (SSR), shall be marked and safeguarded at the highest classification level as the classified material maintained inside the approved containers. The contractor shall comply with DoD 5200.01, Vol 3 security requirements for changing combinations to storage containers used to maintain classified materials.

15. Traffic Laws. The contractor and their employees shall comply with base traffic regulations.

16. Healthcare. Healthcare provided at the local military treatment facility on an emergency reimbursable basis only.

FA3002-18-R-0010, Air Combat Training System