Section_J _Attachment_3 _DD_Form_254_Continuation_Sheets.pdf
PDF 81 KB Posted
- Attached to
- Information Technology Capabilities Contract (ITCC) II Federal contract opportunity
- Solicitation number
- FA4600-14-R-0017
About this file
This document is a continuation sheet for a DD Form 254 detailing security requirements for a federal contract opportunity. The contract is for Information Technology Capabilities Contract (ITCC) II support for United States Strategic Command. It requires access to classified information up to the Top Secret and Top Secret/SAP levels, including intelligence information, restricted data, critical nuclear weapon design information, formerly restricted data, sensitive compartmented information, NATO information, and special access programs. The contractor must have facilities and personnel with the appropriate security clearances and follow standards including the National Industrial Security Program Operating Manual, Intelligence Community Classification and Control Markings Implementation Manual, and program security directives.
3 Continuation
View the file
Other files for this federal contract opportunity
Show all 50
Information Technology Capabilities Contract (ITCC) II has more files on GovTribe.
On GovTribe
Work with this file on GovTribe
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Continuation Sheet for DD Form 254 (Page 3 of 11) Contract No. FA4600-14-R-0017 Dated YEAR MM DD
BLK. 13: SECURITY GUIDANCE
A. National Industrial Security Program Operating Manual (NISPOM), 28 Feb 2006
DOD Overprint to the NISPOM SUP, 01 Apr 2004 DOD 5105.21-M-1, Sensitive Compartmented Information Administrative Security Manual, 19 Oct Signal Intelligence Security Regulation (SISR), 26 May 1999 Imagery Policy Series (IPS) May 2003 Intelligence Community Classification and Control Markings Implementation Manual, 31 May 2011
B. The designated Contracting Officer Representative (COR) for security issues under this contract is:
TBD
901 SAC Blvd, Suite XXX Offutt AFB, NE 68113 402-294-8254
C. This contract will involve handling and storage of classified material. Contractor has responsibility for alarmed areas (except SCI facilities) and properly escorting both contractor and government visitors (except SCI facilities). Contractor is directly accountable for security actions and government rule compliance to include COMSEC, NATO and OPSEC requirements. Contractor will be subject to investigation and potential adverse action in the event of security deviations and violations.
D. Ref Item 10a. For on-base performance, COMSEC is incumbent on the government. COMSEC material/information may not be released to DOD contractors without Air Force Cryptological Support Center (AFSC) approval. Contractor must forward request for COMSEC material/information to the COMSEC officer through the program office. The contractor is governed by DOD 5220.22-S COMSEC supplement to the NISPOM in the control and protection of COMSEC material/information.
Access to COMSEC material by personnel is restricted to U.S. citizens holding final U.S. Government clearances. Such information is not releasable to personnel holding only reciprocal clearances.
Personnel must receive the required COMSEC briefing. Prior approval is required from the Government Contracting activity prior to granting access to COMSEC to a subcontractor.
E. Ref Item 10b. Contractor may require access to RESTRICTED DATA. Access to RESTRICTED
DATA requires a final U.S. Government clearance at the appropriate level.
F. Ref Item 10c. Contractor may require access to CRITICAL NUCLEAR WEAPON DESIGN
INFORMATION (CNWDI). FILL IN NAME OF CONTRACTOR is permitted access to CNWDI in performance of this contract. The government program manager or designated representative will ensure the contractor security manager is briefed for CNWDI.
G. Ref Item 10d. Contractor may require access to FORMERLY RESTRICTED DATA. Access to
FORMERLY RESRICTED DATA requires a final U.S. Government clearance at the appropriate level.
H. Ref Items 10e. (1) and 10e. (2). Contractor may require access to INTELLIGENCE INFORMATION.
1. Access to Intelligence Information requires the following:
a) All intelligence material released to the contractor remains the property of the US Government and may be withdrawn at any time. Contractors must maintain accountability for all classified intelligence released into their custody.
b) The contractor must not reproduce intelligence material without the written permission of the originating agency, through USSTRATCOM/J2. If permission is granted, each copy shall be controlled in the same manner as the original.
FA4600-14-R-0017
Attachment J-3
Continuation Sheet for DD Form 254 (Page 4 of 11)
c) The contractor must not destroy any intelligence material without the written permission of the originating agency, through USSTRATCOM/J2.
d) The contractor must restrict access to only those individuals who possess the necessary security clearance and who are actually providing services under the contract with a valid “need-to-know”. Further dissemination to other contractors, subcontractors, other
e) Government agencies, private individuals or organizations are prohibited unless authorized in writing by the originating agency through USSTRATCOM/J2.
f) Intelligence material must not be released to foreign nationals or immigrant aliens, whether they are consultants, U.S. contractors, or employee of the contractor and regardless of the level of their security clearance, except with advance written permission from the originator. Requests for release to foreign nationals shall be initially forwarded to the Government Contracting Officer Representative (COR) and shall include:
(1) A copy of the proposed disclosure.
(2) Full justification reflecting the benefits to U.S. interests.
(3) Name, nationality, particulars of clearance, and current access authorization of each proposed foreign national recipient.
g) Upon completion, or sooner when the purpose of the release has been served, the contractor will return all classified intelligence (furnished or generated) to the source from which received unless retention or other disposition instructions are authorized in writing by the COR.
h) The contractor must designate an individual who is working on the contract as custodian.
The designated custodian shall be responsible for receipting and accounting for all classified intelligence material received under this contract, but does not mean that the custodian must personally sign for all classified material. The inner wrapper of all classified material dispatched should be marked for the attention of a designated custodian and must not be opened by anyone not working directly on the contract.
i) Within 30 days after the final product is received and accepted by the receiving agency, classified intelligence materials released to or generated by the contractor, must be returned to the originating agency through the COR unless written instruction authorizing destruction or retention are issued. Requests to retain material shall be directed to the COR for this contract in writing and must clearly indicate the justification for retention and identify of the specific document to be retained.
j) Classification, regarding, or declassification markings of documentation produced by the contractor shall be consistent with that applied to the information or documentation from which the new document was prepared. If a compilation of information or a complete analysis of a subject appears to require a security classification, other than that of the source documentation, the contractor shall assign the tentative classification and request instructions from the COR. Pending final determination the material shall be safeguarded as required for its assigned or proposed classification, whichever is higher, until the classification is changed or otherwise verified.
k) Intelligence material carries special markings. The following is a list of the authorized control marking of intelligence material:
(1) “Dissemination and Extraction of Information Controlled by Originating (ORCON).”
This marking is used with a security classification, to enable a continuing knowledge and supervision by the originator of the use made of the information involved. This marking may be used on intelligence, which clearly identifies, or would reasonably permit ready identification of an intelligence source or method, which is particularly
Continuation Sheet for DD Form 254 (Page 5 of 11) susceptible to countermeasures that would nullify or measurably reduce its effectiveness. This marking may not be used when an item or information will reasonably be protected by use of other marking specified herein, or by the application of the “need-to-know” principle and the safeguarding procedures of the security classification system.
(2) “Authorized for Release to (Name of Country (ies)/International Organization.” The above is abbreviated ‘REL TO USA (Name of Country (ies)/International Organization).” This marking must be used when it is necessary to identify classified intelligence material the U.S. Government Originator has predetermined to be releasable or has been released through established foreign disclosure channels to the indicated country (ies) or organization.
l) The following procedures govern the use of control markings:
(1) Any recipient desiring to use intelligence in a manner contrary to restrictions established by the control markings set forth above shall obtain the advance permission of the originating agency through the COR. Such permission applies only to the specific purposes agreed to by the originator and does not automatically apply to all recipients. Originators shall ensure that prompt consideration is given to recipients’ requests in these regards, with particular attention to reviewing and editing, if necessary, sanitized or paraphrased versions to derive a text suitable for release subject to lesser or no control markings.
(2) The control marking authorized above shall be shown on the title page, front cover, and other applicable pages of documents, incorporated in the text of electrical communications, shown on graphics, and associated (in full or abbreviated form) with data stored or processed in automatic data processing systems. The control marking also shall be indicated by parenthetical use of the marking abbreviations at the beginning or end of the appropriate portions. If the control marking applies to several or all portions, the document must be marked with a statement to this effect rather than marking each portion individually.
(3) The control markings shall be individually assigned at the time of preparation of intelligence products and used in conjunction with security classifications and other markings specified by E.O. 13526 and it’s implementing security directives. The marking shall be carried forward to any new format in which the same information is incorporated including oral and visual presentations.
m) Request for release of intelligence material to a contractor must be prepared by the COR and submitted to USSTRATCOM/J2. This should be accomplished as soon as possible after the contract has been awarded. The request will be prepared and accompanied with a letter explaining the requirements along with copies of the DD Form 254 and Performance Work Statement (PWS).
2. Requirements for access to Sensitive Compartment Information (SCI):
a) All SCI will be handled in accordance with special security requirements furnished by
USSTRATCOM/J2.
b) SCI will not be released to contractor personnel without specific release approval of the originator of the material as outlined in governing directives; based on prior approval and certification of “need-to-know” by the designated COR.
c) Names of contractor personnel requiring access to SCI will be submitted to the COR for approval. Upon receipt of written approval from the COR, the company’s Contractor Special Security Officer (CSSO) will submit request(s) for single scope background investigations in accordance with the NISPOM to the Defense Industrial Security Clearance Office (DISCO), following the instructions provided by USSTRATCOM/J050.
Continuation Sheet for DD Form 254 (Page 6 of 11)
d) Inquiries pertaining to classification guidance on SCI will be directed through the CSSO to the COR.
e) SCI furnished in support of this contract remains the property of the Department of Defense (DOD), agency, or command originator. Upon completion or cancellation of the contract SCI will be returned to the direct custody of USSTRATCOM/J2 or destroyed IAW instructions outlined in governing directives. See DOD 5105.21-M-1 for complete guidance of handling SCI.
f) All SCI material will be worked on, stored, and maintained only in properly accredited facilities.
3. The government Contracting Officer Representative (COR) will:
a) Monitor the day-to-day activities of DOD SCI contracts and serve as a technical representative. The COR serves as a point of contact for CSSO and USSTRATCOM/J2.
b) Review the SCI product for contract applicability and determine that the contractor requires the product to complete contractual obligations.
c) Prepare or review contractor access requests to ensure satisfactory justification (need-to-know) and completeness of required information.
d) Prepare and maintain a current SCI employee roster with an information copy to
USSTRATCOM/J2.
e) Approve and coordinate visits by contractor employees when such visits are conducted as part of the contract effort.
f) Maintain records of all SCI material provided to the contractor in support of the contract effort. By 15 January (annually), provide the contractor, for inventory purposes, with a complete list of all documents transferred by contract number, organizational control number, copy number, and document file.
g) Determine dissemination of SCI studies or materials originated or developed by the contractor.
h) Within 30 days after completion of the contract, provide written disposition instructions for all SCI material furnished to, or generated by, the contractor with an information copy to USSTRATCOM/J2.
i) Review and forward all contractor requests to process SCI electronically to the
USSTRATCOM/J2 for coordination through appropriate SCI channels.
j) Request for release of intelligence material to a contractor must be prepared by the COR and submitted to the USSTRATCOM/J2. This should be accomplished as soon as possible after the contract has been awarded. The request will be prepared and accompanied with a letter explaining the requirements along with copies of the DD Form 254 and Performance Work Statement (PWS).
I. Ref Item 10f. SPECIAL ACCESS INFORMATION. This contract may require access to Air Force
B-2 Special Access Program at the user agency (USSTRATCOM/ST/CI) facility. Air Force officials have advised that the Defense Investigative Service is relieved of responsibility for all B-2 information and material and the Air Force will accept inspection responsibility. Security oversight for this program is the responsibility of USSTRATCOM/J84, Offutt AFB NE 68113-5001, telephone 402- 294-8347. IAW JAFAN 6/0, dated 29 May 2008, the PSO for the B-2 Program will review and coordinate the DD Form 254 with the Government Contracting Officer (GCO). For subcontracts, the prime CPSO will prepare a proposed DD Form 254 and forward it to the PSO for review before release
Continuation Sheet for DD Form 254 (Page 7 of 11) to subcontractors. Personnel nominated for program access must submit their Standard Form 86, current within one year to USSTRATCOM/J84 for program access eligibility screening. A B-2 Security Classification Guide is available for review at USSTRATCOM/J84.
J. Item 10g. NATO INFORMATION. This means information belonging to, and circulated by, the
North Atlantic Treaty Organization (NATO). Contractor may require access to NATO COSMIC Top Secret ATOMAL for unescorted entry into selected areas for contract performance. Provisions of NISPOM, Chapter 10, Section 7, apply. Special briefings are required for access to NATO information. Access to classified NATO information requires a final U.S. Government clearance at the appropriate level.
K. Ref Item 10j. FOR OFFICIAL USE ONLY INFORMATION.
1. The For Official Use Only (FOUO) marking is assigned to information at the time of its creation in a DOD agency. It is not authorized as a substitute for a security classification marking, but it is used on official government information that may be withheld from the public under exemptions 2 through 9 of the Freedom of Information Act (FOIA).
2. Use of the FOUO markings does not mean that the information cannot be released to the public, only that it must be reviewed by the government prior to its release to determine whether a significant and legitimate government purpose is served by withholding the information or portions of it.
3. An unclassified document containing FOUO information will be marked “For Official Use Only” at the bottom of: the front cover (if any); the first page; each page containing FOUO information; the back page; and the outside of the back cover (if any). Each paragraph containing FOUO information shall be marked as such.
4. Material other than paper documents (for example, slides, computer media, films, etc.) shall bear markings which alert the holder or viewer that the material contains FOUO information.
5. Mark each part of a message that contains FOUO information. Unclassified messages containing FOUO information must show the abbreviation “FOUO” before the text begins.
6. Make sure that documents that transmit FOUO materials call attention to any FOUO attachments.
7. Within a classified document, an individual page that contains both FOUO and classified information will be marked at the top and bottom with the highest classification of information appearing on that page. If an individual paragraph contains FOUO information, but no classified information, the paragraph will be marked FOUO.
8. Any FOUO information released to a contractor will be marked with the following statement:
“This document contains information EXEMPT FROM MANDATORY DISCLOSURE under the FOIA. Exemptions: apply. (Appropriate exemption number from Chapter 3, section 2, DOD Regulation 5400.7 will be cited).”
9. Removal of the FOUO marking can only be accomplished by the originator or other competent authority. When the FOUO status is terminated, all known holders will be notified to the extent practical.
10. Contractors may disseminate FOUO information to their employees and subcontractors who have a need for the information in connection with a classified contract.
11. During working hours, FOUO information shall be placed in an out-of-sight location if the work is accessible to persons who do not have a need for the information. During non-working hours, the information shall be stored to preclude unauthorized access. Filing such material with other unclassified records in unlocked files or desks is adequate when internal building security is provided during non-working hours. When such internal security is not exercised, locked buildings or rooms
Continuation Sheet for DD Form 254 (Page 8 of 11) will provide adequate after-hours protection or the material can be stored in locked receptacles, such as file cabinets, desks, or bookcases.
12. FOUO information may be sent via first-class mail or parcel post. Bulky shipments may be sent by fourth-class mail.
13. FOUO material shall be transmitted by the same methods as other UNCLASSIFIED material.
Discussion of FOUO material on the telephone is authorized if necessary for performance of the contract. FOUO information may be transmitted over telephone lines in digital form, by telecopy, or by other DSN lines without encryption.
14. When no longer needed, FOUO information may be disposed of by tearing each copy into pieces to preclude reconstructing, and placing it in a regular trash container or as directed by the releasing agency.
15. Unauthorized disclosure of FOUO information does not constitute a security violation, but the releasing agency should be informed of any unauthorized disclosure. The unauthorized disclosure of FOUO information protected by the Privacy Act may result in criminal sanctions.
L. Ref Item 10k. OTHER. NC2 INFORMATION.
1. This contract requires access to NC2-ESI. NC2-ESI material remains under U.S. Government control at all times. Access to NC2-ESI by contractor personnel will be limited to U.S.
Government facilities.
2. In order to be considered for access to NC2-ESI, applicant and spouse, if applicable, must be United States Citizens. No waivers will be considered. In addition, applicant must have a Top Secret clearance based on a favorable Single Scope Background Investigation (SSBI) completed within the past five years. No waivers will be considered.
3. Contractor will nominate personnel to USSTRATCOM/J050. Contractor will nominate only technically qualified personnel who meet citizenship and clearance requirements stated above.
4. Nomination will contain full identifying data on the nominee, statement that he/she and spouse met the above citizenship requirements, Description of the applicant’s duties under the contract which will require access to NC2-ESI, applicant’s current clearance and the basis for the clearance.
5. If the applicant meets the clearance and investigative criteria, nomination must be received by
USSTYRATCOM/J050 and must be received 60 days prior to anticipated date NC2 access is required.
6. NC2 access will require briefings and debriefings to be accomplished by USSTRATCOM/J050.
Contractor will cooperate with USSTRATCOM/J050 in making personnel available with sufficient lead-time to permit USSTRATCOM to arrange for required briefings and debriefings.
7. Contractors will advise USSTRATCOM/J050 of any adverse information or change in status of an employee who has been granted access to NC2-ESI, i.e., marriage, divorce or remarriage.
M. Ref Item 11c. Contractor is expected to RECEIVE AND GENERATE CLASSIFIED MATERIAL.
The following security classification guide applies for performance of this contract. Strategic Target Planning Security Classification Guide, USSTRATCOM/J5, dated 01 Jun 92. Classified information generated in the performance of this contract shall require the contractor to either apply derivative classification markings consistent with the source material or be governed by the Strategic Target Planning Security Classification Guide, USSTRATCOM/J5, dated 01 Jun 92.
N. Ref Item 11d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE. This refers to the use of non-removable hard drives on Automated Information Systems (AIS) used for processing in the approved contractor’s facility.
Continuation Sheet for DD Form 254 (Page 9 of 11)
O. Ref Item 11e. PERFORM SERVICES ONLY. The actual knowledge of, generation, or production of classified information is not required for performance of the contract. An appropriate level of clearance by personnel providing contract performance is necessary to ensure protection of classified information
P. Ref Item 11h. Required to support Command and Control Switching System. COMSEC safeguarding requirements are incumbent on the government. Access to COMSEC material by personnel is restricted to U.S. citizens holding final U.S. Government clearances.
Q. Ref Item 11i. TEMPEST requirements are specified for the SCI portion of this contract.
R. Ref 11j. OPSEC requirements apply.
BLK 14: ADDITIONAL SECURITY REQUIREMENTS:
A. Classified Automated Information System (AIS) processing may take place in the USSTRATCOM
Complex (LeMay Building) or at the contractor facility. Contractor access to these systems shall be IAW the appropriate DOD Security Plan. A copy of the plan(s) will be provided. See Item 13 for additional security requirements for NC2-ESI. See continuation sheets for specific additional security requirements levied due to access programs and information.
B. All communications/data transmission with DOD is subject to Telecommunications Monitoring and Assessment Program (TMAP) review, in accordance with AFI 33-219. Contractor personnel will be aware that telecommunications networks are continually subject to intercept by unfriendly intelligence organizations. The DOD has authorized the military department to conduct TMAP monitoring and recording of telephone calls originating from, or terminating at DOD organizations. Therefore, civilian contractor personnel are advised that at any time they place a call to, or receive a call from any organization, they are subject to TMAP procedures. The contractor will assume the responsibility for ensuring wide and frequent dissemination of the active information to all employees dealing with official DOD information.
C. Contractor Generated Material(s) – Any material(s) generated by the contractor (including but not limited to correspondence, drawings, model, mockups, photographic, schematics, status, progress, special and inspection reports, engineering notes and computations, and training aids) will be classified according to its own content. Guidance for classification of material(s) will be taken from other elements of these security requirements, applicable classification guides, Government regulations, directives, and instructions, or special instructions issued by the Contracting Officer.
D. Classification markings on the material to be furnished will provide the classification guidance necessary for the performance of this contract. All classified data generated under this contract will be marked and shall comply with Executive Order #13526.
E. The contractor must restrict access to only those individuals who possess the necessary security clearance and who are actually providing services under the contract. Further dissemination to other contractors, subcontractor(s), other Government agencies, private individuals, or organizations is prohibited unless authorized in writing by the releasing agency.
F. The contractor must ensure that access to classified information pertaining to this contract is maintained on a strict “need-to-know” basis and will only be granted when necessary for contract performance.
G. This contract will require access to Classified-Secret “SIPRNET” (Requires a final U.S. SECRET clearance for personnel access) and Non-Classified “NIPRNET” (Requires NAC for personnel access) Automated Information System (AIS). AIS processing shall take place on IDHS systems at a government or designated contractor location. Contractor access to these systems shall be in accordance with AFI 33-202, AFSSI 50-27 (FOUO) and USSTRATCOM Administrative Instruction
(SAI) 301-6.
Continuation Sheet for DD Form 254 (Page 10 of 11)
H. The contractor will establish a comprehensive user-training program for STU-III/STE secure phone utilization. For guidance consult: National Telecommunication & Information Systems Security Instruction (NTISSI) 3013 Operation Security Doctrine for the Secure Telephone Unit STU-III Type 1 terminal. For additional guidance on the standards for handling, controlling and its operational and seed KEK’s consult AFI 33-209. The OPR for security STU-III Type 1 phone utilization in USSTRATCOM is USSTRATCOM/J050.
I. The contractor may be required to obtain and maintain a certified facility security clearance, in accordance with AFFARS 5352.215-9000, for the highest level of classified associated with this effort (Top Secret). This certification shall be obtained from the DSS and DIA (SCI) agencies; moreover, the contractor must appoint a Facility Security Officer (FSO) and also must be certified and possess the highest security level of the classified information that is associated with the contract (TOP SECRET).
The FSO will be the “primary” interface between the contractor and government for all matters associated with the handling of classified materials, operational security, communications security, and industrial security issues. Consult NISPOM (DOD 5220.22M), Chapter 2 Sections 1-3, for guidance and instructions. Concerning OPSEC, the FSO will ensure all appropriate contractor personnel are briefed in accordance with AFI 10-1101. All OPSEC briefings must be documented and coordinated with USSTRATCOM/J050. The contractor shall request security clearances for personnel requiring access to classified information within 15 days after receiving a facility clearance or, if the contractor is already cleared, within 15 days after contract award. The contractor shall notify USSTRATCOM/J050, 30 days before on base performance of the contract. The notification shall include: (1) names, addresses and telephone numbers of company representatives; (2) the contract number and contracting agency; (3) the highest level of classified information which contractor employees require access to; (4) location(s) of contract performance and future performance, if known;
(5) the date contract performance begins; and (6) any change to information previously provided under this paragraph.
Continuation Sheet for DD Form 254 (Page 11 of 11)
BLK 17: REQUIRED DISTRIBUTION
Contracting Officer Contracting Officer Representative (COR)
TBD TBD
55 CONS/LGCZ 901 SAC BLVD, Suite XXX 101 Washington Square Offutt AFB, NE 68113 Offutt AFB, NE 68113-2107
J63
901 SAC BLVD
Offutt AFB, NE 68113
J05
901 SAC BLVD
J050
Offutt AFB, NE 68113
J83
Attachment 1 DD Form 254 Addendum
SPECIAL ACCESS PROGRAM REQUIREMENTS AND PROCEDURES
(GOVERNMENT FACILITY)
ATTACHMENT TO DD FORM 254 FOR CONTRACT NO: FA4600-14-R-0017
CONTRACT EXPIRATION DATE: Month Day, Year (example 1 January 2000)
Item 8c: The USSTRATCOM Special Access Program Security Manager (SAPSM) is the cognizant security office for all SAPs related to this contract. HQ USSTRATCOM/SAPSM is located at 901 SAC Blvd. STE M121, Offutt AFB NE 68123. The USSTRATCOM SAPSM is located in Bldg. #501, Room M121, telephone number is commercial 402-294-3055 and/or DSN 271-3055.
Item 10f: This contract may be permitted access to classified information/material up to and including TOP SECRET and TOP SECRET/SAP in performance of this contract. It has been determined that the contractor may require access to SAP programs and data to develop analytical methodologies, support services, modeling applications, or intelligence support to enhance integrated effects. Contractor's identified as having a requirement for this level of access must have a need to know and provide a reoccurring material contribution to the success of the program/operation. All elements of this contract for SAP information or material are under the cognizance of the HQ USSTRATCOM SAPCO.
Item 11j: The contractor will participate in the host unit OPSEC program. They will ensure they are familiar with the unit OPSEC plan and follow the local PSMs guidance regarding OPSEC.
Item 12: No public release of classified or sensitive SAP information pertaining to this contract is authorized. All requests to release such information must be routed through the HQ USSTRATCOM SAPSM program office to appropriate program office for consideration and review.
Item 13:
1. All SAP work will be performed within approved SAP facilities (SAPF) designated by the HQ
USSTRATCOM SAPSM.
2. Requests for SAP accesses will be made through the HQ USSTRATCOM SAPCO/SAPSM. Those requests will be sent to the JS SAPCO for processing and coordination.
3. Continued contractor access to SAPs requires initial and recurring (annual) SAP security education training. The SAPSM will conduct the training at the location where the contractor’s program access records are kept.
4. Inquiries regarding SAP classification guidance will be directed to the USSTRATCOM SAPSM. Any SAP-derived material generated under this contract will be reviewed by the USSTRATCOM/SAPSM for proper classification prior to final publication, distribution, or transmission.
5. SAP information furnished or generated in support of this contract remains the property of the government and will be returned to the servicing program office upon completion of this contract.
6. All procedures, equipment, and devices used for data processing or data transfer of SAP information must be accredited (approved) by the USSTRATCOM SAPSM before any processing is permitted. Any subsequent configuration or procedural changes must also be approved prior to use.
7. The contractor will produce classified material and have access to classified data/areas listed in Item 8a only. The USSTRATCOM SAPSM will provide daily security oversight of this contract unless delegated in writing by the PSO to another activity.
8. The security clearance requirements for this contract is a final (circle appropriate clearance) Secret/Top Secret clearance based on a (circle appropriate clearance) NACLC/SSBI investigation within the last five years.
9. The Government will provide adequate classified storage capability. Only properly accessed (program briefed) personnel will have access to security containers and classified media containing SAP information.
Item 14: The contractor will follow all applicable security guidance related to the protection of SAP information. Baseline guidance includes the National Industrial Security Program Operating Manual (NISPOM), NISPOM Supplement (NISPOMSUP), DOD Overprint to the NISPOMSUP, Chairman Joint Chiefs of Staff (CJCS) Instruction 5250.01, Joint Air Force, Army, and Navy Manual (JAFAN) 6/0, 6/3, 6/4, 6/9, applicable Program Security Directives (PSDs) and Security Classification Guides (SCGs), and local Standard Operating Procedures. The PSM will provide a copy of applicable guidance to the contractor.
Item 15: Appropriate USSTRATCOM SAPSM, National Security Agency (NSA), Joint Staff (JS) and Office of Secretary of Defense (OSD) SAPCO, or designated representatives will conduct security reviews of all SAP facilities, material, and operations related to this contract. DSS or local SF oversight over SAP portions of this contract is carved-out.
| BLK. 13: SECURITY GUIDANCE |
| A. National Industrial Security Program Operating Manual (NISPOM), 28 Feb 2006 |
| DOD Overprint to the NISPOM SUP, 01 Apr 2004 |
| DOD 5105.21-M-1, Sensitive Compartmented Information Administrative Security Manual, 19 Oct 2012 |
| Signal Intelligence Security Regulation (SISR), 26 May 1999 |
| Imagery Policy Series (IPS) May 2003 |
| Intelligence Community Classification and Control Markings Implementation Manual, 31 May 2011 |
File details come from the government source that posted it. Updated .