13-1 _Amendment_0001 _Atch_4 _LOSC_DD254_Continuation_Page.pdf

FA4610-15-R-0002

DD 254 Continuation Page

DD Form 254 Continuation Sheet for 30 SW LOSC Contract

Item 10 J continued:

The contractor is authorized to handle, store, mark , and dispose of FOR OFFICIAL USE ONLY (FOUO) information and material as outlined in Exhibit A of this specification.

Item 11 J continued:

11j.1 Include OPSEC in its continuing security education and training program.

11j.2 Protect 30 SW items of critical information as identified in Appendix 3 of this specification, as these items apply to the Contractor’s scope of operations.

11j.3 Include Company and 30 SW items of critical information as part of the continuing security awareness program conducted in accordance with Chapter 3, section 1, of the National Industrial Security Program

Operating Manual (NISPOM).

11j.4 Protect sensitive unclassified activities that could compromise classified information or operations, or degrade the planning and execution of military operations on Vandenberg AFB. Sensitive unclassified information is that information marked “FOR OFFICIAL USE ONLY (FOUO), PRIVACY ACT OF 1974, COMPANY

PROPRIETARY” and information identified by the Air Force Program Office. See appendix 1.

11j.5 Be responsive to 30 SW OPSEC Manager on a non-interference basis.

Item 13 Continued:

13.2.1 The contractor will participate in base anti-terrorism program according to Exhibit B of this specification.

13.2.2 The contractor may require unescorted entry to facilities and areas where special controls have been established to protect classified information of mission critical resources.

13.2.3 Storage and Transmittal: Unless otherwise directed by the contracting officer, the contractor will not store or transmit SAR Program information, classified or unclassified. Any requirement to generate SAR documentation will be authorized by the contracting officer.

13.2.4 Procedures Inspection: The 30 SW/IPC will inspect procedures for administration of SAR Programs as outlined in this paragraph and any separate authorizations provided by the contracting officer.

13.3 The contractor will be knowledgeable of, and comply with, the security, Intelligence, and counterintelligence support to acquisition program protection as defined in DoD 5200.39

13.4 The contractor will be knowledgeable of the Information Protection Guide and System Protection Guide for Launch Programs.

Amendment 0001

EXHIBIT A

GUIDANCE FOR HANDLING

FOR OFFICIAL USE ONLY (FOUO)

INFORMATION

1. FOR OFFICI AL USE ONLY (FOUO) Explained. FOUO information is not classified according to Executive Order, but is exempt from disclosure to the public under exemptions 2 through 9 of the Freedom of Information Act (FOIA). Do not consider or mark any other records FOUO. FOUO is not authorized as a form of classification to protect national security interests.

2. Prior FOUO Application. A FOUO marking is not a conclusive bas is for withholding a record under the FOIA . When such a record is requested, evaluate the information in it to determine if FOIA exemptions apply and whether a discretionary release is appropriate.

3. Time to Mark Records. Marking records when they are created gives notice of FOUO content but does not eliminate the need to review a record requested under the FOIA.

Examine records with and without markings before release to identify information that needs continued protection and qualifies as exempt from public release.

4. Distribution Statement. Information in a technical document that requires a distribution statement according to AFI 61-204 must show that statement. The originator may also apply the FOUO marking, as appropriate.

5. How to Apply FOUO Markings:

a. Mark an unclassified document containing FOUO information "FOR

OFFICIAL USE ONLY" at the bottom, on the outside of the front cover (if any), on each page containing FOUO information, on the back page, and on the outside of the back cover

(if any).

b. In unclassified documents, note that the originator may also mark individual paragraphs that contain FOUO information to alert the users and assist in the review process.

c. Mark an individual paragraph in a classified document that contains FOUO information, but no classified information, by placing "FOUO" at the beginning of the paragraph.

d. Mark an individual page in a classified document that has both FOUO and classified information at the top and bottom with the highest security classification of information on that page.

e. Mark an individual page in a classified document that has FOUO information, but no classified information, "FOR OFFICIAL USE ONLY" at the bottom of the page.

f. If a classified document also contains FOUO information, or, if the classified material becomes FOUO when declassified, place the following statement on the bottom of the cover or the first page, under the classification marking. If declassified, review the document to make sure material is not FOUO and not exempt under FOIA before public release.

g. Mark other records, such as computer printouts, photographs, films, tape, or slides, "FOR OFFICIAL USE ONLY" or "FOUO" in a way that ensures the recipient or viewer knows the record contains FOUO information.

h. For FOUO material sent outside the DoD to authorized recipients, place an expanded marking to explain its meaning. Do this by typing or stamping the following statement on the document before transfer. This document contains information EXEMPT

FROM MANDATORY DISCLOSURE UNDER THE FOIA. Exemptions(s) applies (apply).

(Further distribution is prohibited without the approval of (enter OPR)).

2. Procedures for Releasing Disseminating and Transmitting FOUO Material. FOUO information may be sent within DoD components and between officials of DoD components and authorized DoD contractors, consultant, and grantees to conduct official business for the DoD. Inform recipients of the status of such information, and send the material in a way that prevents unauthorized public disclosure. Make sure documents that transmit FOUO material call attention to any FOUO attachments. Normally, FOUO records may be sent over Facsimile equipment. To preclude unauthorized disclosure, consider such factors as attaching special cover sheets, location of sending and receiving machines, and availability of authorized personnel to receive the FOUO information. FOUO information may be passed to officials in other departments and agencies of the executive and judicial branches to fulfill a government function. Mark the records "FOR OFFICIAL USE ONLY," and tell the recipient the information is exempt from public disclosure under the FOIA and if special handling instructions apply.

2. Sending FOUO Information by United States Postal Service. Send records containing FOUO information in a way that will not disclose their contents. When not mixed with classified information, individuals may send FOUO information by First Class

Mail or Parcel Post. Bulky shipments, such as distribution of FOUO directives or testing materials, that otherwise qualify under postal regulations, may be sent by Fourth-Class

Mail.

3. Electrically Transmitted Messages. Mark each part of an electrically transmitted message that contains FOUO information. Unclassified messages containing FOUO information must show the abbreviation "FOUO" before the beginning of the text.

4. Safeguarding FOUO Information.

i. During Duty Hours. During normal duty hours, place FOUO records in an out-of-sight location, if the work area is open to non-government people.

i. During Non-Duty Hours. At the close of business, store FOUO records to prevent unauthorized access. File such material with other unclassified records in unlocked files or desks, etc., when the Government or a Government contractor provides normal internal building security during non-duty hours. When there is no such internal security, locked buildings or rooms usually provide adequate after hours protection. If you desire additional protection , store FOUO material in unlocked containers, such a file cabinets, desks, or bookcases.

2. The Termination, Disposal, and Unauthorized Disclosure of FOUO :

a. Terminating FOUO Material. The originator or other component authority should remove FOUO markings or indicate on the document the markings no longer apply when circumstances show that the information no longer needs protection from public disclosure. When a record is no longer FOUO, tell all known holders, to the extent practical. Do not retrieve records in files or storage only for that purpose.

b. Disposing of FOUO Material. Destroy FOUO materials by shredding, in any type shredder, to preclude reconstruction.

c. Unauthorized Disclosure. The unauthorized disclosure FOUO records is not an unauthorized of classified information. However, Air Force and DoD contractor personnel have a duty to take reasonable actions to protect FOUO records under their control from unauthorized disclosure. Appropriate administrative actions should be taken to fix responsibility for such disclosures and disciplinary action taken where appropriate.

Unauthorized disclosure of FOUO information protected by the Privacy Act (PA) may also result in civil or criminal sanctions against individuals or against the Air Force. Tell the originating organization about an unauthorized disclosure of its records.

1 1. Unclassified Controlled Nuclear Information (UCNI). UCNI is sensitive unclassified information subject to special handling as outlines in DoD Directive

5210.83. The likelihood of your company coming in contact with UCNI is remote.

However, if the situation does arise, employees will protect the information in the same manner as FOUO information, contact the company Security Office who, in tum, will obtain guidance from its Cognizant Security Officer (30 SW/IPC).

EXHIBIT B

IMPLEMENTING

PROCEDURES FOR THE

BASE ANTI-TERRORISM PROGRAM

1. Policy and Scope. Terrorism is criminal activity that can occur at anytime, anywhere, and involve any person or organization. Air Force policy is to protect, to the best of its ability, U.S. Air Force personnel, their dependents, facilities, and equipment from terrorist acts.

a. At Vandenberg, this includes non-Air Force and contractor organizations and their personnel working on the installation at the time of a terrorist action, planned or actual.

b. Based upon terrorist threat assessment guidelines, the existence, capability, and intentions of a terrorist organization committing an act of aggression on Vandenberg AFB is almost negligible. Nonetheless, there are no guarantees. We must be prepared. There is no better protection than prevention through training. Accordingly, the base anti terrorism program will be periodically exercised (tested). Air Force and non-Air Force organizations will be expected to participate in these occasional exercises (tests). Contractor organizations will also participate, to the extent such participation does not interfere with accomplishment of its contractual obligations or, participation has been expressly denied by a contracting officer.

2. Sources of Authority .

a. AFI 10-245, The Air Force Anti Terrorism (AT) Program, as supplemented by HQ

AFSPC.

b. 30 SW IDP 31-10 I , Vandenberg AFB Installation Security Plan.

3. General Information. The AF Anti Terrorism Program is an established DoD policy to protect DoD personnel, dependents, facilities and equipment from terrorist acts. At

Vandenberg AFB this also includes non-Air Force and contractor organizations and their personnel working on the installation. It further seeks to deter or prohibit the success of terrorist acts against the USAF community through the collection and dissemination of timely threat information, informative awareness programs and implementation of sound defensive measures. These defensive measures are defined in four levels of force protection conditions (FPCONs). The four levels of FPCONs are ALPHA, BRA VO CHARLIE and

DELTA.

a. FPCON ALPHA. A general threat of possible terrorist activity against personnel and facilities exists, the nature and extent of which are unpredictable. Circumstances do not justify full implementation of FPCON BRAVO measures, but certain measures from higher

FPCONs may be necessary based on intelligence reports, or as a deterrent. Installation commanders must be able to maintain this FPCON indefinitely.

b. FPCON BRAVO. An increased and more predictable threat of terrorist activity exists. Installation commanders must be able to maintain these FPCON measures for weeks without causing undue hardship, affecting operational capability, and aggravating relations with local authorities .

c. FPCON CHARLIE . An incident occurs, or intelligence is received that indicates imminent terrorist acts against personnel and facilities. These measures are intended to be short term; maintaining them for a long time will probably create hardship and affect the peacetime activities of the unit and its personnel.

d. FPCON DELTA. A terrorist attack occurred or intelligence indicates that terrorist action against a specific location or person is likely. Normally, this FPCON is a local condition.

4. High Risk Targets. High risk targets on V AFB are USAF controlled and restricted areas, contractor closed areas, facilities that house command and control centers or equipment of indispensable value to accomplishment of the organization's mission , and other targets designated which may be attractive for terrorist attack.

5. Notification Process. Notification from the Wing Command Post down to the contractor's point of contact is directive in nature and cannot be changed.

a. The 30 SW Command Post notifies the Commander, 30th Logistics Group (30

LG/CC).

b. The 30 LG/CC notifies the Commander, 30th Contracting Squadron (30

CONS/CC).

c. The 30 CONS/CC notifies the Chief, Contract Administration Flight

(30 CONS/LGCA).

d. The 30 CONS/LGCA notifies the contractors predetermined point of contact. (30 RMS/Program Office)

6. FPCON Defense Measures. The terrorism FPCONs listed below describes progressive levels of terrorist threat to MDA or Vandenberg AFB and its assigned and attached personnel. Implementation of defensive security measures is a responsibility of the 30SW/CC. Directors or Program

Managers of contractor organization will implement the defense measures on a "best effort basis. In other words, provide uninterrupted operations support. FPCON actions will be accomplished as a secondary initiative to mission accomplishment.

a. FPCON ALPHA

( 1) Brief all building occupants

(2) Post 30 SW VA 31-4, FPCON warning (ALPHA)

(3) Secure unused buildings, rooms, and storage areas

(4) Make periodic checks of parking areas for unknown or suspicious vehicles

(5) Identify all unknown or suspicious persons in facilities and work areas

(6) Check all work areas at the beginning and end of each work day

b. FPCON BRAVO:

(1) Continue all actions required by FPCON ALPHA

(2) Post 30 SW VA 31-5, FPCON warning (BRAVO)

(3) Move vehicles and objects such as crates, trash containers at least 25 meters (82 feet from buildings and critical resources, especially those of a sensitive nature.

(4) Remind drivers to lock parked vehicles, POV and GOV, and check vehicles prior to operation.

(5) Where feasible, check at least 50% of all hand carried items by visitors

(briefcases, boxes, etc.) brought into buildings or critical resources.

c. FPCON CHARLIE:

( l) Continue all actions required by FPCONs ALPHA and BRAVO

(2) Post 30 SW VA 31-6 FPCON warning (CHARLIE)

(3) Limit entry points to buildings and facilities to the absolute minimum

(4) Search all hand carried items brought into facilities and buildings

(5) Deny entry of vehicles to parking lots in or around mission critical resources

d. FPCON DELTA:

( I ) Continue all actions required by the previous FPCONs

(2) Post 30 SW VA 207-6, FPCON warning (DELTA)

(3) Identify all vehicles with-in operational or mission critical support areas

(4) Make frequent checks of the exterior of buildings and parking area

(5) Minimize all administrative journeys and visit