DD Form 254 Continuation.doc

DD Form 254 Continuation

Item 8 continued. The Contractor will perform at the following locations:

108 Colorado Avenue

Vandenberg AFB CA 93437-6300

Kaena Point Tracking Station

P.O. Box 977

Waianae, Oahu HI 96792

30 SFS/S5SI

108 Colorado Avenue

Vandenberg AFB CA 93437-6300

Wheeler Communications Center

General Delivery

U.S. Post Office

Wheeler Army Air Field, HI 96854-5000

30 SFS/S5SI

108 Colorado Avenue

Vandenberg AFB CA 93437-6300

Ewa HFF Transmitter Facility

91-1281 North Road

Ewa Beach, Oahu HI 96706 DSS Industrial Security Field Office

P.O. Box 50064

Honolulu, HI 96850-0001

Molokai HG Transmitter Facility

63-Puu Kapele

P O Box 148

Hoolehua, HI 97629 DSS Industrial Security Field Office

P.O. Box 50064

Honolulu, HI 96850-0001

Anderson Peak

Big Sur, CA DSS Industrial Security Field Office

4637 Chabot Drive, Ste 102

Plesant, CA 94588

Pillar Point AS

P.O. Box 609

El Granada, CA 94018-0609 DSS Industrial Security Field Office

4637 Chabot Drive, Ste 102

Pleasant, CA 94588

Item 10j continued: The Contractor is authorized to handle, store, mark, and dispose of FOR OFFICIAL USE ONLY (FOUO) information and material as outlined in Appendix 1 of this Specification.

Item 11j continued: The Contractor will accomplish the following minimum requirements in support of the 30 SW Operations Security (OPSEC) Program:

11j.1 Include OPSEC in its continuing security education and training program.

11j.2 Protect 30 SW items of critical information as identified in Appendix 3 of this specification, as these items apply to the Contractor’s scope of operations.

11j.3 Include company and 30 SW items of critical information as a part of the continuing security awareness program conducted in accordance with Chapter 3, section 1, of the National Industrial Security Program Operating Manual (NISPOM).

11j.4 Protect sensitive unclassified activities that could compromise classified information or operations, or degrade the planning and execution of military operations on Vandenberg AFB. Sensitive unclassified information is that information marked “FOR OFFICIAL USE ONLY (FOUO), PRIVACY ACT OF 1974, COMPANY PROPRIETARY” and information identified by the Air Force Program Office. See Appendix 1.

11j.5 Be responsive to 30 SW OPSEC Manager on a non-interference basis.

Item 13 Security Guidance continued:

13.3 The contractor may require unescorted entry to facilities and areas where special controls have been established to protect classified information or mission critical resources. Unescorted entry to these areas will require the Contractor’s employees to be the subject of at least a favorable National Agency Check (NAC). Requests for NACS will be submitted to the 30th Security Forces Squadron (30 SFS/S5SI). Unescorted entry to these areas will be according to 30 SW Installation Security Instruction 31-101.

13.4 The Contractor will participate in the base anti-terrorism program according to Appendix 2 of this specification.

13.5 The Contractor will require entry to military controlled and restricted areas identified in 30 SW Instructions. The Contractor will comply with AFI 31-101 and 30 SW ISI 31-101.

13.6 The contractor will be knowledgeable of, and comply with, the security, Intelligence, and counterintelligence support to acquisition program protection as defined in DoD 5200.39.

13.6.1 The contractor will be knowledgeable of the Information Protection Guide and System Protection Guide for Launch Programs.

APPENDIX 1

FOR OFFICIAL USE ONLY (FOUO)

Ref. to Item 10J of DD Form 254

Extracted from DoD 5200.1-R, January 1997, Appendix 3, and Interim Information Security Guidance, 16 Apr 2004

1. Description. “For Official Use Only (FOUO)” is a designation that is applied to unclassified information that may be exempt from mandatory release to the public under the Freedom of Information Act (FOIA). The FOIA specifies nine exemptions that may qualify certain information to be withheld from release to the public, if, by its disclosure, a foreseeable harm would occur. They are:

a. Information that is currently and properly classified.

b. Information that pertains solely to the internal rules and practices of the Agency. (This exemption has two profiles, "high" and "low." The "high" profile permits withholding of a document that, if released, would allow circumvention of an Agency rule, policy, or statute, thereby impeding the agency in the conduct of its mission. The "low" profile permits withholding if there is no public interest in the document, and it would be an administrative burden to process the request.)

c. Information specifically exempted by a statute establishing particular criteria for withholding. The language of the statute must clearly state that the information will not be disclosed.

d. Information such as trade secrets and commercial or financial information obtained from a company on a privileged or confidential basis that, if released, would result in competitive harm to the company, impair the Government's ability to obtain like information in the future, or protect the Government's interest in compliance with program effectiveness.

e. Inter-Agency memoranda that are deliberative in nature; this exemption is appropriate for internal documents that are part of the decision making process and contain subjective evaluations, opinions and recommendations.

f. Information, the release of which could reasonably be expected to constitute a clearly unwarranted invasion of the personal privacy of individuals.

g. Records or information compiled for law enforcement purposes that:

(1) Could reasonably be expected to interfere with law enforcement proceedings;

(2) Would deprive a person of a right to a fair trial or impartial adjudication;

(3) Could reasonably be expected to constitute an unwarranted invasion of the personal privacy of others;

(4) Disclose the identity of a confidential source;

(5) Disclose investigative techniques and procedures; or

(6) Could reasonably be expected to endanger the life or physical safety of any individual.

h. Certain records of agencies responsible for supervision of financial institutions.

i. Geological and geophysical information concerning wells.

2. General.

a. Information that is currently and properly classified shall be withheld from mandatory release under the first exemption of the Freedom of Information Act FOIA. “FOR OFFICIAL USE ONLY” (FOUO) is applied to information that may be exempt under one or more of the other eight exemptions. So, by definition, information shall be unclassified in order to be designated FOUO. If an item of classified information is declassified, it may be designated FOUO if it qualifies under one of the other exemptions of the FOIA. This means that:

(1) Information cannot be classified and FOUO at the same time. Therefore, classified documents containing FOUO information cannot bear an overall document marking of FOUO. However, portions or pages of a classified document, that contain only FOUO information will be marked as FOUO.

(2) Information that is declassified may be designated FOUO, only if it is believed to fit into one or more of the last eight exemptions (exemptions 2 through 9).

b. The FOIA provides that, for information to be exempt from mandatory release, it must fit into one of the qualifying categories and there must be a legitimate Government purpose served by withholding it. Simply because information is marked FOUO does not mean it automatically qualifies for exemption. If a request for a record is received, the information must be reviewed to see if it meets this dual test. On the other hand, the absence of the FOUO marking does not automatically meant the information must be released. Some types of records (for example, personnel records) are not normally marked FOUO, but may still qualify for withholding under FOIA.

3. Marking.

a. Marking information FOUO does not automatically qualify it for exemption. If a request for a record is received, the information shall be reviewed to determine if it actually qualifies for exemption. Similarly, the absence of the FOUO marking does not automatically mean the information shall be released. Some types of records (for example, personnel records) are not normally marked FOUO, but may still be withheld under the FOIA. All DoD unclassified information must be reviewed before it is released to the public or to foreign governments and international organizations.

b. Information that has been determined to qualify for FOUO status should be indicated by markings when included in documents and similar material. Markings should be applied at the time documents are drafted, whenever possible, to promote proper protection of the information.

(1) Unclassified documents and material containing FOUO information shall be marked as follows:

a Documents will be marked "FOR OFFICIAL USE ONLY" at the bottom of the front cover (if there is one), the title page (if there is one), the first page, and the outside of the back cover (if there is one).

b Pages of the document that contain FOUO information shall be marked "FOR OFFICIAL USE ONLY" at the bottom.

c Portion Marking FOUO Information. Subjects, titles and each section, part, paragraph, and similar portion of an FOUO document shall be marked to show that they contain information requiring protection. Use the parenthetical notation “(FOUO)” to identify information as For Official Use Only for this purpose. Place this notation immediately before the text.

d Material other than paper documents (for example, slides, computer media, films, etc.) shall bear markings that alert the holder or viewer that the material contains FOUO information.

e FOUO documents and material transmitted outside the Department of Defense must bear an expanded marking on the face of the document so that non-DoD holders understand the status of the information. A statement similar to this one should be used:

"This document contains information exempt from mandatory disclosure under the F0IA. Exemption(s) ______ apply."

(2) Classified documents and material containing FOUO information shall be marked as required by Chapter 4 of the NISPOM (or DoD 5200.1-R, Chapter 5, as applicable), with FOUO information identified as follows:

a Overall markings on the document shall follow the rules in NSPOM Chapter 4 (or DoD 5200.1-R, Chapter 5). No special markings are required on the face of the document because it contains FOUO information.

b Portions of the document shall be marked with their classification as required by NISPOM Chapter 4 (or DoD 5200.1-R, Chapter 5). If there are unclassified portions that contain FOUO information, they shall be marked with "FOUO" in parentheses at the beginning of the portion. Since FOUO information is, by definition, unclassified, the "FOUO" is an acceptable substitute for the normal "U."

c Pages of the document that contain classified information shall be marked as required by NISPOM Chapter 4 (or DoD 5200.1-R, Chapter 5). Pages that contain FOUO information but no classified information will be marked "FOR OFFICIAL USE ONLY" at the top and bottom.

(3) Transmittal documents that have no classified material attached, but do have FOUO attachments shall be marked with a statement similar to this one:

"FOR OFFICIAL USE ONLY ATTACHMENT."

(4) Each part of electrically transmitted messages containing FOUO information shall be marked appropriately. Unclassified messages containing FOUO information shall contain the abbreviation "FOUO" before the beginning of the text.

4. Access to FOUO Information.

a. No person may have access to information designated as FOUO unless that person has been determined to have a valid need for such access in connection with the accomplishment of a lawful and authorized Government purpose.

b. The final responsibility for determining whether an individual has a valid need for access to information designated as FOUO rests with the individual who has authorized possession, knowledge or control of the information and not on the prospective recipient.

c. Information designated as FOUO may be disseminated within the DoD Components and between officials of DoD Components and DoD contractors, consultants, and grantees to conduct official business for the Department of Defense, provided that dissemination is not further controlled by a Distribution Statement.

d. DoD holders of information designated as FOUO are authorized to convey such information to officials in other Departments and Agencies of the Executive and Judicial Branches to fulfill a government function. If the information is covered by the Privacy Act, disclosure is only authorized if the requirements of DoD 5400.11-R are satisfied.

e. Release of FOUO information to Congress is governed by DoD Directive 5400.4. If the information is covered by the Privacy Act, disclosure is authorized if the requirements of DoD 5400.11-R are also satisfied.

f. DoD Directive 7650.1 governs release of FOUO information to the General Accounting Office (GAO). If the information is covered by the Privacy Act, disclosure is authorized if the requirements of DoD 5400.11-R are also satisfied.

5. Protection of FOUO Information

a. During working hours, reasonable steps shall be taken to minimize risk of access by unauthorized personnel. After working hours, store FOUO information in unlocked containers, desks or cabinets if Government or Government-contract building security is provided. If such building security is not provided, store the information in locked desks, file cabinets, bookcases, locked rooms, etc.

b. FOUO information and material may be transmitted via first class mail, parcel post or, for bulk shipments, via fourth class mail. Electronic transmission of FOUO information, e.g., voice, data or facsimile, e-mail, shall be by approved secure communications systems or systems utilizing other protective measures such as Public Key Infrastructure (PKI), whenever practical.

c. FOUO information may only be posted to DoD Web sites consistent with security and access requirements specified in Deputy Secretary of Defense Memorandum dated December 1998, Subject: “Web Site Administration”.

d. Record copies of FOUO documents shall be disposed of according to the Federal Records Act and the DoD Component records management directives. Non-record FOUO documents may be destroyed by any of the means approved for the destruction of classified information, or by any other means that would make it difficult to recognize or reconstruct the information.

6. Unauthorized Disclosure. The unauthorized disclosure of FOUO does not constitute an unauthorized disclosure of DoD information classified for security purposes. However, appropriate administrative action shall be taken to fix responsibility for unauthorized disclosure of FOUO whenever feasible, and appropriate disciplinary action shall be taken against those responsible. Unauthorized disclosure of FOUO information that is protected by the Privacy Act may also result in civil and criminal sanctions against responsible persons. The Military Department or other DoD Component that originated the FOUO information shall be informed of its unauthorized disclosure.

APPENDIX 2

IMPLEMENTING PROCEDURES

FOR THE

BASE ANTI-TERRORISM PROGRAM

1.0 Policy and Scope. Terrorism is criminal activity which can occur at anytime, anywhere, and involve any person or organization. Air Force policy is to protect, to the best of its ability, U.S. Air Force personnel, their dependents, facilities, and equipment from terrorist acts.

1.1 Concerned Individuals. This includes non-Air Force and contractor organizations and their personnel working on the installation at the time of a terrorist action, planned or actual.

1.2 Exercises. Based upon terrorist threat assessment guidelines, the existence, capability, and intentions of a terrorist organization committing an act of aggression on Vandenberg AFB is almost negligible. Nonetheless, there are no guarantees. We must be prepared. There is no better protection than prevention through training. Accordingly, the base anti terrorism program will be periodically exercised (tested). Air Force and non-Air Force organizations will be expected to participate in these occasional exercises (tests). Contractor organizations will also participate, to the extent such participation does not interfere with accomplishment of its contractual obligations or, participation has been expressly denied by a contracting officer.

2.0 Sources of Authority.

2.1 AFI 31-210, The Air Force Anti terrorism (AT) Program, as supplemented by HQ AFSPC.

2.2 30 SW OPlan 31-101, Vandenberg AFB Installation Security Plan.

3.0 General Information. The AF Anti terrorism Program is an established DoD policy to protect DoD personnel, dependents, facilities and equipment from terrorist acts. At Vandenberg AFB this also includes non-Air Force and contractor organizations and their personnel working on the installation. It further seeks to deter or prohibit the success of terrorist acts against the USAF community through the collection and dissemination of timely threat information, informative awareness programs and implementation of sound defensive measures. These defensive measures are defined in four levels of force protection conditions (FPCONs). The four levels of FPCONs are ALPHA, BRAVO, CHARLIE and DELTA.

3.1 FPCON Definitions.

3.1.1 ALPHA. A general threat of possible terrorist activity against personnel and facilities exists, the nature and extent of which are unpredictable. Circumstances do not justify fully implementation of FPCON BRAVO measures, but certain measures from higher FPCONs may be necessary based on intelligence reports, or as a deterrent. Installation commanders must be able to maintain this FPCON indefinitely.

3.1.2 BRAVO. An increased and more predictable threat of terrorist activity exists. Installation commanders must be able to maintain these FPCON measures for weeks without causing undue hardship, affecting operational capability, and aggravating relations with local authorities.

3.1.3 CHARLIE. An incident occurs, or intelligence is received that indicates imminent terrorist acts against personnel and facilities. These measures are intended to be short term; maintaining them for a long time will probably create hardship and affect the peacetime activities of the unit and its personnel.

3.1.4 DELTA. A terrorist attack occurred or intelligence indicates that terrorist action against a specific location or person is likely. Normally, this FPCON is a local condition.

3.2 FPCON Defense Measures. The terrorism FPCONs listed below describe progressive levels of terrorist threat to Vandenberg AFB and its assigned and attached personnel. Implementation of defensive security measures is a responsibility of the 30 SW/CC. Directors or Program Managers of contractor organization will implement the defense measures on a “best effort” basis. In other words, provide uninterrupted operations support. FPCON actions will be accomplished as a secondary initiative to mission accomplishment.

3.2.1 ALPHA

(a) Brief all building occupants

(b) Post 30 SW VA 207-3, FPCON warning (ALPHA)

(c) Secure unused buildings, rooms, and storage areas

(d) Make periodic checks of parking areas for unknown or suspicious vehicles

(e) Identify all unknown or suspicious persons in facilities and work areas

(f) Check all work areas at the beginning and end of each work day

3.2.2 BRAVO.

(a) Continue all actions required by FPCON ALPHA

(b) Post 30 SW VA 207-4, FPCON warning (BRAVO)

(c) Move vehicles and objects such as crates, trash containers at least 25 meters (82 feet) from buildings and critical resources, especially those of a sensitive nature.

(d) Remind drivers to lock parked vehicles, POV and GOV, and check vehicles prior to operation.

(e) Where feasible, check at least 50% of all handcarried items by visitors (briefcases, boxes, etc.) brought into buildings or critical resources.

3.2.3 CHARLIE.

(a) Continue all actions required by FPCONs ALPHA and BRAVO

(b) Post 30 SW VA 207-5 FPCON warning (CHARLIE)

(c) Limit entry points to buildings and facilities to the absolute minimum

(d) Search all handcarried items brought into facilities and buildings

(e) Deny entry of vehicles to parking lots in or around mission critical resources

3.2.4 DELTA.

(a) Continue all actions required by the previous FPCONs

(b) Post 30 SW VA 207-6, FPCON warning (DELTA)

(c) Identify all vehicles-within operational or mission critical support areas

(d) Make frequent checks of the exterior of buildings and parking area

(e) Minimize all administrative journeys and visits

4.0 High Risk Targets. High risk targets on VAFB are USAF controlled and restricted areas, contractor closed areas, facilities that house command and control centers or equipment of indispensable value to accomplishment of the organization's mission, and other targets designated which may be attractive for terrorist attack.

5.0 Notification Process. Notification from the Wing Command Post down to the contractors point of contact is directive in nature and cannot be changed. The contractor may, however, implement a notification process of its own choosing.

5.1 Command Post. Notifies the Commander, 30th Mission Support Group (30 MSG/CC).

5.2 30 MSG/CC. Notifies the Commander, 30th Contracting Squadron (30 CONS/CC).

5.3 30 CONS/CC. Notifies the Chief, Specialized Flight (30 CONS/LGCZ).

5.4 30 CONS/LGCZ. Notifies the contractors predetermined point of contact.

APPENDIX 3

30th Space Wing Items of

Critical Information

Definition: The term “undisclosed” means there is no evidence that information associated with a specific item has been previously approved for release to the public, i.e., PA has not reviewed nor sanctioned the release, and there is an absence of “open source” documentation which could otherwise be used to suggest that the same information can be found in the public domain.

1. Communication frequencies used to support specific operations.

2. Call sign rosters or other listings which identify personnel assignments or postings.

3. Undisclosed system capabilities, limitations, and vulnerabilities.

4. Communication equipment layouts/drawings which reveal location of lines and specialized equipment, including E-Mail/LAN configuration and critical junctions for fiber optic transmission terminal locations.

5. Unique vulnerabilities associated with specific computer system(s), program(s), or network(s) which allows unauthorized penetration of files.

6. Vulnerabilities regarding an organization’s ability to accomplish it’s mission, i.e., limiting factors such as lack of available munitions, critical personnel, and/or specialized equipment.

7. Contingency, deployment, and base support plans.

8. Diagrams/blueprints of mission critical facilities.

9. Details of security systems used to protect resources.

10. Resource protection surveys which identify deficiencies/vulnerabilities of mission critical facilities.

11. Present and contingency fuel requirements for launch and base support operations.

12. Schedules of operational movement of toxic propellants, satellite vehicles, and aircraft with respect to military operations, exercises, and missile operations.

13. Information which associates schedule of events, transportation itinerary, and deployment messages.

14. Undisclosed details of mobility/deployment support requirements, i.e., facts regarding types, numbers of weapons, medicine, etc.

15. Undisclosed instrumentation capabilities, limitations, specifications, and operational guidelines.

16. Details relating to capabilities and limitations of current or future weapon/space systems which reveals undisclosed technical or military critical information.

17. Results of survey/tests and evaluations which identify vulnerabilities/weaknesses of mission critical or sensitive systems.

18. Response tactics used by the Security Police, i.e., anti-terrorism, anti-robbery, anti-hijacking, and countermeasures used during threat conditions.

19. Information compiled from either sole source or multiple sources which can enable an adversary to determine actual manning strength of the Wing and it’s ability to support missions, i.e., unit manpower documentation (UMD), Automated Security Clearance Approval System (ASCAS) roster, qualification/training reports, mobility lists, etc.

20. Details relating to visits/itineraries of 14th AF/CC, 30th SW/CC, and VIPs.

21. Status of war reserve materials, i.e., mobility gear, deployable arms, and munitions, etc.

22. Contractor proprietary information or information which the contractor has identified as critical information to their company’s success.

23. Contractor performance evaluations which describes or correlates to a limiting capability for the Wing to successfully complete a program, project, or mission.

24. Undisclosed research, development or technical information clearly identified as not intended for dissemination to the public domain.

25. Information describing purpose, target, or customer of intelligence information.

26. Unclassified, but undisclosed information identifying sources, methods, capabilities of intelligence collection methods.

FA4610-08-R-0016 Page 4 of 14 Attachment 2