Attch 2 - DD254 Contract Security Clasification Specification.pdf

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort.)

1. CLEARANCE AND SAFEGUARDING

a. FACILITY CLEARANCE REQUIRED

b. LEVEL OF SAFEGUARDING REQUIRED

2. THIS SPECIFICATION IS FOR: (X and complete as applicable)

a. PRIME CONTRACT NUMBER

b. SUBCONTRACT NUMBER

c. SOLICITATION OR OTHER NUMBER DUE DATE (YYYYMMDD)

3. THIS SPECIFICATION IS: (X and complete as applicable)

a. ORIGINAL (Complete date in all cases)

REVISION NO.

c. FINAL (Complete Item 5 in all cases)

DATE (YYYYMMDD)

b. REVISED (Supersedes all previous specs)

DATE (YYYYMMDD)

DATE (YYYYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT? YES NO. If Yes, complete the following:

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? YES NO. If Yes, complete the following:

In response to the contractor's request dated , retention of the classified material is authorized for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

8. ACTUAL PERFORMANCE

a. LOCATION b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

10. CONTRACTOR WILL REQUIRE ACCESS TO: 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL:YES NO YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION

b. RESTRICTED DATA

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION

d. FORMERLY RESTRICTED DATA

e. INTELLIGENCE INFORMATION

(1) Sensitive Compartmented Information (SCI)

(2) Non-SCI

f. SPECIAL ACCESS INFORMATION

g. NATO INFORMATION

h. FOREIGN GOVERNMENT INFORMATION

i. LIMITED DISSEMINATION INFORMATION

j. FOR OFFICIAL USE ONLY INFORMATION

k. OTHER (Specify)

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER

CONTRACTOR'S FACILITY OR A GOVERNMENT ACTIVITY

b. RECEIVE CLASSIFIED DOCUMENTS ONLY

c. RECEIVE AND GENERATE CLASSIFIED MATERIAL

d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. PERFORM SERVICES ONLY

f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES

g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL INFORMATION

CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER

h. REQUIRE A COMSEC ACCOUNT

i. HAVE TEMPEST REQUIREMENTS

j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

l. OTHER (Specify)

DD FORM 254, DEC 1999 PREVIOUS EDITION IS OBSOLETE. Adobe Professional 7.0

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release

a. TYPED NAME OF CERTIFYING OFFICIAL

Direct Through (Specify)

d. ADDRESS (Include Zip Code)

Yes No to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract.

(If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

Yes No15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office.

(If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

b. TITLE c. TELEPHONE (Include Area Code)

e. SIGNATURE

17. REQUIRED DISTRIBUTION

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER

f. OTHERS AS NECESSARY

DD FORM 254 (BACK), DEC 1999

FA4610-08-R-0016

Attachment 2

ATTACHMENT 2

DD 254 CONTRACT SECURITY

CLASSIFICATION SPECIFICATION

FOR

LAUNCH OPERATIONS SUPPORT CONTRACT

(LOSC)

30TH SPACE WING - VANDENBERG AFB

DATED: 16 JUL 08

THIS ATTACHMENT INCLUDING THE

TITLE PAGE CONSISTS OF 15 PAGES

FA4610-08-R-0016

Attachment 2

DEPARTMENT OF DEFENSE

1. CLEARANCE AND SAFEGUARDING

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

a. FACILITY CLEARANCE REQUIRED

SECRET

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort)

b. LEVEL OF SAFEGUARDING REQUIRED

NONE

2. THIS SPECIFICATION IS FOR: (x and complete as applicable)

3. THIS SPECIFICATION IS: (x and complete as applicable)

a. PRIME CONTRACT NUMBER

X

a. ORIGINAL (Complete date in all cases)

Date (YYMMDD)

20040819

b. SUBCONTRACT NUMBER

b. REVISED (Supersedes all previous specs)

Revision No.

Date (YYMMDD)

X

b. SOLICITATION OR OTHER NUMBER

F04684-08-R-0016

c. FINAL (Complete Item 5 in all cases)

Date (YYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT?

X

YES

NO. If Yes, complete the following:

Classified material received or generated under FA4610-04-C-0004 (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254?

YES

X

NO. If Yes, complete the following:

In response to the contractor's request dated ____________________, retention of the identified classified material is authorized for a period of ____________________

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE

b. CAGE CODE

c. COGNIZANT SECURITY OFFICE: (Name, Address, and Zip Code)

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE

b. CAGE CODE

c. COGNIZANT SECURITY OFFICE: (Name, Address, and Zip Code)

8. ACTUAL PERFORMANCE

a. LOCATION

See DD Form 254, Continuation Item 8

b. CAGE CODE

c. COGNIZANT SECURITY OFFICE: (Name, Address, and Zip Code)

30 SFS/S5SI, 108 Colorado Ave, Vandenberg AFB CA 93437-6300

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

To provide mission essential technical expertise of non-personal nature to support ground systems and facilities associated with range and launch operations at the 30th Space Wing. The general scope is to provide management and support, maintenance & repair, operations, Other Services, and minor facility alteration. The contractor shall apply services to the Western Range launch, operation, and test facilities, Pillar Point, Anderson Peak, Hawaiian sites, Vandenberg Air Force Base (VAFB), and VAFB surrounding areas.

10. THIS CONTRACT WILL REQUIRE ACCESS TO:

YES

NO

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL:

YES

NO

a.

COMMUNICATIONS SECURITY (COMSEC) INFORMATION

X a.

HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER CONTRACTOR'S

FACILITY OR A GOVERNMENT ACTIVITY

X b.

RESTRICTED DATA

X b.

RECEIVE CLASSIFIED DOCUMENTS ONLY

X c.

CRITICAL NUCLEAR WEAPON DESIGN INFORMATION

X c.

RECEIVE AND GENERATE CLASSIFIED MATERIAL

X d.

FORMERLY RESTRICTED DATA

X d.

FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

X e.

INTELLIGENCE INFORMATION

e.

PERFORM SERVICES ONLY

X

(1) Sensitive Compartmented Information (SCI)

X f.

HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S. PUERTO

RICO, U.S. POSSESSIONS AND TRUST TERRITORIES

X

(2) Non-SCI

X g.

BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL INFORMATION

CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER

X f.

SPECIAL ACCESS INFORMATION

X h.

REQUIRE A COMSEC ACCOUNT

X g.

NATO INFORMATION

X i.

HAVE TEMPEST REQUIREMENTS

X h.

FOREIGN GOVERNMENT INFORMATION

X j.

HAVE OPERATIONAL SECURITY (OPSEC) REQUIREMENTS

X i.

LIMITED DISSEMINATION INFORMATION

X k.

BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

X j.

FOR OFFICIAL USE ONLY INFORMATION

X l.OTHER (Specify) k.

OTHER (Specify)

NO CLASSIFIED STORAGE AUTHORIZED AT VANDENBERG AFB CA.

DD Form 254, DEC 99 (REVERSE) (EF-V1) (MS Word for Windows) rfp254.doc

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security

Manual or unless it has been approved for public release by appropriate Government authority. Proposed public releases shall be submitted for approval prior to release

Direct

X

Through (Specify):

There will be no voluntary public release of information concerning this contract. Answer to inquiries may be made only with the express approval of 30 SW/PA. No other dissemination of information is authorized. This prohibition extends to all publications of an informal nature, both internal and external, and to all conversations except those in the conduct of contract business. 30th Space Wing Public Affairs Office, 747 Nebraska Ave, Suite 7, Vandenberg AFB CA 93437-6267. Phone: (805) 606-3595 to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs) for review.

In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance need for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guidelines/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

13.1 Security classification guidance required in performance of this contract and will be provided by the Air Force Program Office, 30 RMS/RMO.

13.2 The Contractor shall accomplish the following minimum requirements in support of the user agency (30 SW) operations security (OPSEC) program.

13.2.1 Be knowledgeable of the 30 SW Items of Critical information as defined in Appendix 3 of this specification. When requested by the wing OPSEC manager, assist in identifying indicators associated with these items of critical information and the development of appropriate counter measures.

13.2.2 Include company and 30 SW items of critical information as a part of the continuing security awareness program conducted according to Chapter I, Section I, of the National Industrial Security Program Operating Manual (NISPOM).

13.2.3 Be responsive to 30 SW OPSEC manager on a non-interference basis.

13.2.4 Protect sensitive unclassified activities that could compromise classified information or operations, or degrade the planning and execution of military operations performed by the Contractor in support of the 30 SW mission. Sensitive unclassified information is that information marked “FOR OFFICIAL USE ONLY (FOUO)”, PRIVACY ACT OF 1974, company proprietary, and information identified by the Air Force Program Office, 30 SW/XPRO. Contractor shall comply with the provisions of DoD 5200.1_R, Appendix 1 as it pertains to the protection of “For Official Use Only” information.

13.3 The contractor may require unescorted entry to facilities and areas where special controls have been established to protect classified information or mission critical resources. Unescorted entry to these areas will require the Contractor’s employees to be the subject of at least a favorable National Agency Check (NAC). Requests for NACS will be submitted to the 30th Security Forces Squadron (30 SFS/S5SI). Unescorted entry to these areas will be according to 30 SW Installation Security Instruction 31-101.

13.4 The Contractor will participate in the base anti-terrorism program according to Appendix 2 of this specification.

13.5 The Contractor will require entry to military controlled and restricted areas identified in 30 SW Instructions. The Contractor will comply with AFI 31-101 and 30 SW ISI 31-101.

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract. (If Yes, identify

X

Yes

No the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed)

See DD 254 Continuation Sheet.

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. (If Yes, identify

Yes

X

No areas or elements carved out and the activity responsible for inspection. Use Item 13 if additional space is needed)

THE CONTRACTOR’S OPERATION ON VANDENBERG AFB WILL BE INSPECTED BY THE 30 SFS/S5SI.

COORDINATED BY: 30 SFS/SFAI Date ____________

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL

FREDRIC M. RAYBURN

b. TITLE

CONTRACTING OFFICER

(805)-606-6635

d. ADDRESS (Include Zip Code)

17. REQUIRED INFORMATION

30 CONS/LGCZG

X a.

CONTRACTOR

1515 ICELAND

b.

SUBCONTRACTOR

VANDENBERG AFB CA 93437

X c.

COGNIZANT SECURITY OFFICE FOR PRIME & SUBCONTRACTOR

e. SIGNATURE d.

U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

Original Signature in file

X e.

ADMINISTRATION CONTRACTING OFFICER

X f.

OTHERS AS NECESSARY

DD Form 254, DEC 99 (REVERSE) (EF-V1) (MS Word for Windows) rfp254.doc

DD Form 254 Continuation

Item 8 continued. The Contractor will perform at the following locations:

Location

Cognizant Security Office

Vandenberg AFB CA

30 SFS/S5SI

108 Colorado Avenue

Vandenberg AFB CA 93437-6300

Kaena Point Tracking Station

P.O. Box 977

Waianae, Oahu HI 96792

30 SFS/S5SI

Wheeler Communications Center

General Delivery

U.S. Post Office

Wheeler Army Air Field, HI 96854-5000

30 SFS/S5SI

Ewa HFF Transmitter Facility

91-1281 North Road

Ewa Beach, Oahu HI 96706

DSS Industrial Security Field Office

P.O. Box 50064

Honolulu, HI 96850-0001

Molokai HG Transmitter Facility

63-Puu Kapele

P O Box 148

Hoolehua, HI 97629

DSS Industrial Security Field Office

P.O. Box 50064

Honolulu, HI 96850-0001

Anderson Peak

Big Sur, CA

DSS Industrial Security Field Office

4637 Chabot Drive, Ste 102

Plesant, CA 94588

Pillar Point AS

P.O. Box 609

El Granada, CA 94018-0609

DSS Industrial Security Field Office

4637 Chabot Drive, Ste 102

Pleasant, CA 94588

Item 10j continued: The Contractor is authorized to handle, store, mark, and dispose of FOR OFFICIAL USE ONLY (FOUO) information and material as outlined in Appendix 1 of this Specification.

Item 11j continued: The Contractor will accomplish the following minimum requirements in support of the 30 SW Operations Security (OPSEC) Program:

11j.1 Include OPSEC in its continuing security education and training program.

11j.2 Protect 30 SW items of critical information as identified in Appendix 3 of this specification, as these items apply to the Contractor’s scope of operations.

11j.3 Include company and 30 SW items of critical information as a part of the continuing security awareness program conducted in accordance with Chapter 3, section 1, of the National Industrial Security Program Operating Manual (NISPOM).

11j.4 Protect sensitive unclassified activities that could compromise classified information or operations, or degrade the planning and execution of military operations on Vandenberg AFB. Sensitive unclassified information is that information marked “FOR OFFICIAL USE ONLY (FOUO), PRIVACY ACT OF 1974, COMPANY PROPRIETARY” and information identified by the Air Force Program Office. See Appendix 1.

11j.5 Be responsive to 30 SW OPSEC Manager on a non-interference basis.

13.6 The contractor will be knowledgeable of, and comply with, the security, Intelligence, and counterintelligence support to acquisition program protection as defined in DoD 5200.39.

13.6.1 The contractor will be knowledgeable of the Information Protection Guide and System Protection Guide for Launch Programs.

APPENDIX 1

FOR OFFICIAL USE ONLY (FOUO)

Ref. to Item 10J of DD Form 254

Extracted from DoD 5200.1-R, January 1997, Appendix 3, and Interim Information Security Guidance, 16 Apr 2004

1. Description. “For Official Use Only (FOUO)” is a designation that is applied to unclassified information that may be exempt from mandatory release to the public under the Freedom of Information Act (FOIA). The FOIA specifies nine exemptions that may qualify certain information to be withheld from release to the public, if, by its disclosure, a foreseeable harm would occur. They are:

a. Information that is currently and properly classified.

b. Information that pertains solely to the internal rules and practices of the Agency. (This exemption has two profiles, "high" and "low." The "high" profile permits withholding of a document that, if released, would allow circumvention of an Agency rule, policy, or statute, thereby impeding the agency in the conduct of its mission. The "low" profile permits withholding if there is no public interest in the document, and it would be an administrative burden to process the request.)

c. Information specifically exempted by a statute establishing particular criteria for withholding. The language of the statute must clearly state that the information will not be disclosed.

d. Information such as trade secrets and commercial or financial information obtained from a company on a privileged or confidential basis that, if released, would result in competitive harm to the company, impair the Government's ability to obtain like information in the future, or protect the Government's interest in compliance with program effectiveness.

e. Inter-Agency memoranda that are deliberative in nature; this exemption is appropriate for internal documents that are part of the decision making process and contain subjective evaluations, opinions and recommendations.

f. Information, the release of which could reasonably be expected to constitute a clearly unwarranted invasion of the personal privacy of individuals.

g. Records or information compiled for law enforcement purposes that:

(1) Could reasonably be expected to interfere with law enforcement proceedings;

(2) Would deprive a person of a right to a fair trial or impartial adjudication;

(3) Could reasonably be expected to constitute an unwarranted invasion of the personal privacy of others;

(4) Disclose the identity of a confidential source;

(5) Disclose investigative techniques and procedures; or

(6) Could reasonably be expected to endanger the life or physical safety of any individual.

h. Certain records of agencies responsible for supervision of financial institutions.

i. Geological and geophysical information concerning wells.

2. General.

a. Information that is currently and properly classified shall be withheld from mandatory release under the first exemption of the Freedom of Information Act FOIA. “FOR OFFICIAL USE ONLY” (FOUO) is applied to information that may be exempt under one or more of the other eight exemptions. So, by definition, information shall be unclassified in order to be designated FOUO. If an item of classified information is declassified, it may be designated FOUO if it qualifies under one of the other exemptions of the FOIA. This means that:

(1) Information cannot be classified and FOUO at the same time. Therefore, classified documents containing FOUO information cannot bear an overall document marking of FOUO. However, portions or pages of a classified document, that contain only FOUO information will be marked as FOUO.

(2) Information that is declassified may be designated FOUO, only if it is believed to fit into one or more of the last eight exemptions (exemptions 2 through 9).

b. The FOIA provides that, for information to be exempt from mandatory release, it must fit into one of the qualifying categories and there must be a legitimate Government purpose served by withholding it. Simply because information is marked FOUO does not mean it automatically qualifies for exemption. If a request for a record is received, the information must be reviewed to see if it meets this dual test. On the other hand, the absence of the FOUO marking does not automatically meant the information must be released. Some types of records (for example, personnel records) are not normally marked FOUO, but may still qualify for withholding under FOIA.

3. Marking.

a. Marking information FOUO does not automatically qualify it for exemption. If a request for a record is received, the information shall be reviewed to determine if it actually qualifies for exemption. Similarly, the absence of the FOUO marking does not automatically mean the information shall be released. Some types of records (for example, personnel records) are not normally marked FOUO, but may still be withheld under the FOIA. All DoD unclassified information must be reviewed before it is released to the public or to foreign governments and international organizations.

b. Information that has been determined to qualify for FOUO status should be indicated by markings when included in documents and similar material. Markings should be applied at the time documents are drafted, whenever possible, to promote proper protection of the information.

(1) Unclassified documents and material containing FOUO information shall be marked as follows:

a Documents will be marked "FOR OFFICIAL USE ONLY" at the bottom of the front cover (if there is one), the title page (if there is one), the first page, and the outside of the back cover (if there is one).

b Pages of the document that contain FOUO information shall be marked "FOR OFFICIAL USE ONLY" at the bottom.

c Portion Marking FOUO Information. Subjects, titles and each section, part, paragraph, and similar portion of an FOUO document shall be marked to show that they contain information requiring protection. Use the parenthetical notation “(FOUO)” to identify information as For Official Use Only for this purpose. Place this notation immediately before the text.

d Material other than paper documents (for example, slides, computer media, films, etc.) shall bear markings that alert the holder or viewer that the material contains FOUO information.

e FOUO documents and material transmitted outside the Department of Defense must bear an expanded marking on the face of the document so that non-DoD holders understand the status of the information. A statement similar to this one should be used:

"This document contains information exempt from mandatory disclosure under the F0IA. Exemption(s) ______ apply."

(2) Classified documents and material containing FOUO information shall be marked as required by Chapter 4 of the NISPOM (or DoD 5200.1-R, Chapter 5, as applicable), with FOUO information identified as follows:

a Overall markings on the document shall follow the rules in NSPOM Chapter 4 (or DoD 5200.1-R, Chapter 5). No special markings are required on the face of the document because it contains FOUO information.

b Portions of the document shall be marked with their classification as required by NISPOM Chapter 4 (or DoD 5200.1-R, Chapter 5). If there are unclassified portions that contain FOUO information, they shall be marked with "FOUO" in parentheses at the beginning of the portion. Since FOUO information is, by definition, unclassified, the "FOUO" is an acceptable substitute for the normal "U."

c Pages of the document that contain classified information shall be marked as required by NISPOM Chapter 4 (or DoD 5200.1-R, Chapter 5). Pages that contain FOUO information but no classified information will be marked "FOR OFFICIAL USE ONLY" at the top and bottom.

(3) Transmittal documents that have no classified material attached, but do have FOUO attachments shall be marked with a statement similar to this one:

"FOR OFFICIAL USE ONLY ATTACHMENT."

(4) Each part of electrically transmitted messages containing FOUO information shall be marked appropriately. Unclassified messages containing FOUO information shall contain the abbreviation "FOUO" before the beginning of the text.

4. Access to FOUO Information.

a. No person may have access to information designated as FOUO unless that person has been determined to have a valid need for such access in connection with the accomplishment of a lawful and authorized Government purpose.

b. The final responsibility for determining whether an individual has a valid need for access to information designated as FOUO rests with the individual who has authorized possession, knowledge or control of the information and not on the prospective recipient.

c. Information designated as FOUO may be disseminated within the DoD Components and between officials of DoD Components and DoD contractors, consultants, and grantees to conduct official business for the Department of Defense, provided that dissemination is not further controlled by a Distribution Statement.

d. DoD holders of information designated as FOUO are authorized to convey such information to officials in other Departments and Agencies of the Executive and Judicial Branches to fulfill a government function. If the information is covered by the Privacy Act, disclosure is only authorized if the requirements of DoD 5400.11-R are satisfied.

e. Release of FOUO information to Congress is governed by DoD Directive 5400.4. If the information is covered by the Privacy Act, disclosure is authorized if the requirements of DoD 5400.11-R are also satisfied.

f. DoD Directive 7650.1 governs release of FOUO information to the General Accounting Office (GAO). If the information is covered by the Privacy Act, disclosure is authorized if the requirements of DoD 5400.11-R are also satisfied.

5. Protection of FOUO Information

a. During working hours, reasonable steps shall be taken to minimize risk of access by unauthorized personnel. After working hours, store FOUO information in unlocked containers, desks or cabinets if Government or Government-contract building security is provided. If such building security is not provided, store the information in locked desks, file cabinets, bookcases, locked rooms, etc.

b. FOUO information and material may be transmitted via first class mail, parcel post or, for bulk shipments, via fourth class mail. Electronic transmission of FOUO information, e.g., voice, data or facsimile, e-mail, shall be by approved secure communications systems or systems utilizing other protective measures such as Public Key Infrastructure (PKI), whenever practical.

c. FOUO information may only be posted to DoD Web sites consistent with security and access requirements specified in Deputy Secretary of Defense Memorandum dated December 1998, Subject: “Web Site Administration”.

d. Record copies of FOUO documents shall be disposed of according to the Federal Records Act and the DoD Component records management directives. Non-record FOUO documents may be destroyed by any of the means approved for the destruction of classified information, or by any other means that would make it difficult to recognize or reconstruct the information.

6. Unauthorized Disclosure. The unauthorized disclosure of FOUO does not constitute an unauthorized disclosure of DoD information classified for security purposes. However, appropriate administrative action shall be taken to fix responsibility for unauthorized disclosure of FOUO whenever feasible, and appropriate disciplinary action shall be taken against those responsible. Unauthorized disclosure of FOUO information that is protected by the Privacy Act may also result in civil and criminal sanctions against responsible persons. The Military Department or other DoD Component that originated the FOUO information shall be informed of its unauthorized disclosure.

APPENDIX 2

IMPLEMENTING PROCEDURES

FOR THE

BASE ANTI-TERRORISM PROGRAM

1.0 Policy and Scope. Terrorism is criminal activity which can occur at anytime, anywhere, and involve any person or organization. Air Force policy is to protect, to the best of its ability, U.S. Air Force personnel, their dependents, facilities, and equipment from terrorist acts.

1.1 Concerned Individuals. This includes non-Air Force and contractor organizations and their personnel working on the installation at the time of a terrorist action, planned or actual.

1.2 Exercises. Based upon terrorist threat assessment guidelines, the existence, capability, and intentions of a terrorist organization committing an act of aggression on Vandenberg AFB is almost negligible. Nonetheless, there are no guarantees. We must be prepared. There is no better protection than prevention through training. Accordingly, the base anti terrorism program will be periodically exercised (tested). Air Force and non-Air Force organizations will be expected to participate in these occasional exercises (tests). Contractor organizations will also participate, to the extent such participation does not interfere with accomplishment of its contractual obligations or, participation has been expressly denied by a contracting officer.

2.0 Sources of Authority.

2.1 AFI 31-210, The Air Force Anti terrorism (AT) Program, as supplemented by HQ AFSPC.

2.2 30 SW OPlan 31-101, Vandenberg AFB Installation Security Plan.

3.0 General Information. The AF Anti terrorism Program is an established DoD policy to protect DoD personnel, dependents, facilities and equipment from terrorist acts. At Vandenberg AFB this also includes non-Air Force and contractor organizations and their personnel working on the installation. It further seeks to deter or prohibit the success of terrorist acts against the USAF community through the collection and dissemination of timely threat information, informative awareness programs and implementation of sound defensive measures. These defensive measures are defined in four levels of force protection conditions (FPCONs). The four levels of FPCONs are ALPHA, BRAVO, CHARLIE and DELTA.

3.1 FPCON Definitions.

3.1.1 ALPHA. A general threat of possible terrorist activity against personnel and facilities exists, the nature and extent of which are unpredictable. Circumstances do not justify fully implementation of FPCON BRAVO measures, but certain measures from higher FPCONs may be necessary based on intelligence reports, or as a deterrent. Installation commanders must be able to maintain this FPCON indefinitely.

3.1.2 BRAVO. An increased and more predictable threat of terrorist activity exists. Installation commanders must be able to maintain these FPCON measures for weeks without causing undue hardship, affecting operational capability, and aggravating relations with local authorities.

3.1.3 CHARLIE. An incident occurs, or intelligence is received that indicates imminent terrorist acts against personnel and facilities. These measures are intended to be short term; maintaining them for a long time will probably create hardship and affect the peacetime activities of the unit and its personnel.

3.1.4 DELTA. A terrorist attack occurred or intelligence indicates that terrorist action against a specific location or person is likely. Normally, this FPCON is a local condition.

3.2 FPCON Defense Measures. The terrorism FPCONs listed below describe progressive levels of terrorist threat to Vandenberg AFB and its assigned and attached personnel. Implementation of defensive security measures is a responsibility of the 30 SW/CC. Directors or Program Managers of contractor organization will implement the defense measures on a “best effort” basis. In other words, provide uninterrupted operations support. FPCON actions will be accomplished as a secondary initiative to mission accomplishment.

3.2.1 ALPHA

(a) Brief all building occupants

(b) Post 30 SW VA 207-3, FPCON warning (ALPHA)

(c) Secure unused buildings, rooms, and storage areas

(d) Make periodic checks of parking areas for unknown or suspicious vehicles

(e) Identify all unknown or suspicious persons in facilities and work areas

(f) Check all work areas at the beginning and end of each work day

3.2.2 BRAVO.

(a) Continue all actions required by FPCON ALPHA

(b) Post 30 SW VA 207-4, FPCON warning (BRAVO)

(c) Move vehicles and objects such as crates, trash containers at least 25 meters (82 feet) from buildings and critical resources, especially those of a sensitive nature.

(d) Remind drivers to lock parked vehicles, POV and GOV, and check vehicles prior to operation.

(e) Where feasible, check at least 50% of all handcarried items by visitors (briefcases, boxes, etc.) brought into buildings or critical resources.

3.2.3 CHARLIE.

(a) Continue all actions required by FPCONs ALPHA and BRAVO

(b) Post 30 SW VA 207-5 FPCON warning (CHARLIE)

(c) Limit entry points to buildings and facilities to the absolute minimum

(d) Search all handcarried items brought into facilities and buildings

(e) Deny entry of vehicles to parking lots in or around mission critical resources

3.2.4 DELTA.

(a) Continue all actions required by the previous FPCONs

(b) Post 30 SW VA 207-6, FPCON warning (DELTA)

(c) Identify all vehicles-within operational or mission critical support areas

(d) Make frequent checks of the exterior of buildings and parking area

(e) Minimize all administrative journeys and visits

4.0 High Risk Targets. High risk targets on VAFB are USAF controlled and restricted areas, contractor closed areas, facilities that house command and control centers or equipment of indispensable value to accomplishment of the organization's mission, and other targets designated which may be attractive for terrorist attack.

5.0 Notification Process. Notification from the Wing Command Post down to the contractors point of contact is directive in nature and cannot be changed. The contractor may, however, implement a notification process of its own choosing.

5.1 Command Post. Notifies the Commander, 30th Mission Support Group (30 MSG/CC).

5.2 30 MSG/CC. Notifies the Commander, 30th Contracting Squadron (30 CONS/CC).

5.3 30 CONS/CC. Notifies the Chief, Specialized Flight (30 CONS/LGCZ).

5.4 30 CONS/LGCZ. Notifies the contractors predetermined point of contact.

APPENDIX 3

30th Space Wing Items of

Critical Information

Definition: The term “undisclosed” means there is no evidence that information associated with a specific item has been previously approved for release to the public, i.e., PA has not reviewed nor sanctioned the release, and there is an absence of “open source” documentation which could otherwise be used to suggest that the same information can be found in the public domain.

1.

Communication frequencies used to support specific operations.

2.

Call sign rosters or other listings which identify personnel assignments or postings.

3.

Undisclosed system capabilities, limitations, and vulnerabilities.

4.

Communication equipment layouts/drawings which reveal location of lines and specialized equipment, including E-Mail/LAN configuration and critical junctions for fiber optic transmission terminal locations.

5.

Unique vulnerabilities associated with specific computer system(s), program(s), or network(s) which allows unauthorized penetration of files.

6.

Vulnerabilities regarding an organization’s ability to accomplish it’s mission, i.e., limiting factors such as lack of available munitions, critical personnel, and/or specialized equipment.

7.

Contingency, deployment, and base support plans.

8.

Diagrams/blueprints of mission critical facilities.

9.

Details of security systems used to protect resources.

10.

Resource protection surveys which identify deficiencies/vulnerabilities of mission critical facilities.

11.

Present and contingency fuel requirements for launch and base support operations.

12.

Schedules of operational movement of toxic propellants, satellite vehicles, and aircraft with respect to military operations, exercises, and missile operations.

13.

Information which associates schedule of events, transportation itinerary, and deployment messages.

14.

Undisclosed details of mobility/deployment support requirements, i.e., facts regarding types, numbers of weapons, medicine, etc.

15.

Undisclosed instrumentation capabilities, limitations, specifications, and operational guidelines.

16.

Details relating to capabilities and limitations of current or future weapon/space systems which reveals undisclosed technical or military critical information.

17.

Results of survey/tests and evaluations which identify vulnerabilities/weaknesses of mission critical or sensitive systems.

18.

Response tactics used by the Security Police, i.e., anti-terrorism, anti-robbery, anti-hijacking, and countermeasures used during threat conditions.

19.

Information compiled from either sole source or multiple sources which can enable an adversary to determine actual manning strength of the Wing and it’s ability to support missions, i.e., unit manpower documentation (UMD), Automated Security Clearance Approval System (ASCAS) roster, qualification/training reports, mobility lists, etc.

20.

Details relating to visits/itineraries of 14th AF/CC, 30th SW/CC, and VIPs.

21.

Status of war reserve materials, i.e., mobility gear, deployable arms, and munitions, etc.

22.

Contractor proprietary information or information which the contractor has identified as critical information to their company’s success.

23.

Contractor performance evaluations which describes or correlates to a limiting capability for the Wing to successfully complete a program, project, or mission.

24.

Undisclosed research, development or technical information clearly identified as not intended for dissemination to the public domain.

25.

Information describing purpose, target, or customer of intelligence information.

26.

Unclassified, but undisclosed information identifying sources, methods, capabilities of intelligence collection methods.

108 Colorado Ave Vandenberg AFB CA 93437-6300

13.2 The Contractor shall accomplish the following minimum requirements in support of the user agency (30 SW) operations security (OPSEC) program.

13.2.1 Be knowledgeable of the 30 SW Items of Critical information as defined in Appendix 3 of this specification. When requested by the wing OPSEC manager, assist in identifying indicators associated with these items of critical information and the development of appropriate counter measures.

13.2.2 Include company and 30 SW items of critical information as a part of the continuing security awareness program conducted according to Chapter I, Section I, of the National Industrial Security Program Operating Manual (NISPOM).

13.2.3 Be responsive to 30 SW OPSEC manager on a non-interference basis.

13.2.4 Protect sensitive unclassified activities that could compromise classified information or operations, or degrade the planning and execution of military operations performed by the Contractor in support of the 30 SW mission. Sensitive unclassified information is that information marked “FOR OFFICIAL USE ONLY (FOUO)”, PRIVACY ACT OF 1974, company proprietary, and information identified by the Air Force Program Office, 30 SW/XPRO. Contractor shall comply with the provisions of DoD 5200.1_R, Appendix 1 as it pertains to the protection of “For Official Use Only” information.

"See DD254 Continuation Page, Block 13 Security Guidance, for additional information"

COORDINATED BY: 30 SFS/SFAI __________________________________________________ Date ____________

1515 Iceland Avenue Vandenberg AFB CA 93437-5212