Atch_1_General Guidance_FA5209-24-Q-0068_Solicitation.docx

UNCLASSIFIED//FOR OFFICIAL USE ONLY

CONTINUATION OF DD FORM 254

CONTRACTOR: TBD

SOLICITATION NUMBER: FA5209-24-Q-0068

ATTACHMENT # 1

Supplement to Defense Department (DD) Form 254 “Contract Security Classification Specification”

BLOCK 13 - SECURITY GUIDANCE

The following items apply to this solicitation #: FA5209-24-Q-0068.

GENERAL GUIDANCE:

The Contractor must:

· Maintain safeguarding for all classified material released to their custody and under their control. Individuals are responsible for safeguarding classified information entrusted to them.

· Reproduce classified material(s) to the minimum consistent with contractual and operational requirements. Each copy will be controlled in the same manner as the original.

· Destroy all classified information IAW 32 CFR Part 117.

· Restrict access to only those individuals who possess the required security clearance and who are actually providing services under the contract. Further dissemination to other contractors, subcontracts, other government agencies, and private individuals or an organization is prohibited unless authorized in writing by the releasing agency.

· Not release classified material to foreign nationals or immigrant aliens whether or not they are consultants, US contractors, or employees of the contractor, and regardless of the level of their security clearance, except with advance written permission from the originator.

· Ensure each employee having access to the classified material is fully aware of the special security requirements for this material and maintains records in a manner that permits the contractor to furnish on demand the name of individuals who have access to the material.

· Upon completion or termination of the classified contract, or sooner, when the purpose of the release has been served, the contractor must return to the COR all classified material (furnished or generated), unless retention or destruction is authorized in writing by the originator of the classified, the Senior Intelligence Officer (SIO), or the releasing command.

· Not disclose classified information received or generated under a contract from one agency to any other Federal agency unless specifically authorized by the agency that has classification jurisdiction over the information.

· Not disclose classified information to foreign persons unless release of the information is authorized in writing by the Government Agency having classification jurisdiction over the information involved, e.g. the DOE for RD and FRD, the NSA for COMSEC, the DNI for SCI. The disclosure must also be consistent with applicable U.S. laws and regulations.

· Establish an information management system to protect and control the classified information in their possession. Contractors shall ensure that classified information in their custody is used or retained only for a lawful and authorized use.

· All security guidance contained in the DD Form 254, and attachments, must be flowed down by the prime contractor to any sub-contractors on this effort.

· If work under the terms of this contract requires access to NSA systems, the contractor may be required to take a Counterintelligence (CI) polygraph test.

Block 10:

Ref Blk 10a: COMSEC material/information may not be released to DoD contractors without CCSD approval. Contractor must forward requests for COMSEC material/information to the COMSEC officer through the program office. The contractor is governed by 32 CFR Part 117 National Industrial Security Program Operating Manual or as amended in the control and protection of COMSEC material/information. Access to COMSEC material by personnel is restricted to U.S. citizens holding final U.S. Government clearances. Such information is not releasable to personnel holding only reciprocal clearances.

Ref Blk 10g: NATO. All appropriate contractor personnel will be administered a NATO briefing. This can be coordinated with host Unit Security Manager.

Ref Blks 10j/11l: The contractor shall comply with DoDI 5200.48_DAFI16-1403, Controlled Unclassified Information, DoDM 5200.01, Vol 1_AFMAN16-1404, Vol 1, Air Force Information Security Program, and DoDM 5400.07_AFMAN33-302 Air Force Manual, DoD Freedom of Information Act (FOIA) Program. The contractor shall monitor CUI aggregation and compilation based on the potential to generate classified information pursuant to security classification guidance addressing the accumulation of unclassified data or information.

Ref Blk 10k: Access to SIPRNet is authorized. Users must review a NATO awareness briefing and document receipt on a NATO Awareness Security Briefings Acknowledgment form. Briefing is for awareness purposes only and does not authorize access to NATO information. Contractor requires Common Access Card (CAC).

Block 11:

Ref Blk 11c: Any classified information generated in the performance of this contract shall require the contractor to apply derivative classification and markings consistent with the source material.

Ref Blk 11j: Operations Security (OPSEC) requirements apply for this contract. The contractor personnel will apply OPSEC to enhance protection for classified and unclassified critical information. While the documents identified in references below provide details on the development of OPSEC program and implementation of OPSEC analyses, the requirements below provide the required minimum standards for OPSEC application directed on this contact.

· The contractor OPSEC Program Manager OPM) or a delegated OPSEC Coordinator will be familiar with OPSEC as described in National Security Presidential Memorandum 28 (NSPM-28), DoD Directive 5205.02E, DoD Manual 5202.02 and AFI 10-701.

· Contractor personnel will comply with OPSEC measures/countermeasures and program requirements established at the government site. (Contract performance will occur within a 374 AW facility where a Unit OPSEC Coordinator is designated by the government).

· Contractor personnel will ensure any documents, briefs, or presentations created (in support of this contract) for dissemination shall have an OPSEC Review completed by host Unit OPSEC Coordinator or 374 AW OPSEC Signature Manager located in the 374 AW/IP office (Bldg. 316, Rm 229), prior to release.

· Contractor personnel supporting this contract will properly protect information detailed on the Critical Information and Indicators List (CIIL) provided by the government Unit OPSEC Coordinator or 374 AW OPSEC Signature Manager.

· Contractor personnel will ensure any e-mails drafted on NIPRNET which contain critical information (including PII) to be properly marked CUI and other required markings are annotated prior to transmission.

· All contractor personnel supporting the contract will receive initial and recurring (at least annually) mandatory OPSEC Awareness training that identifies relevant threat information including techniques used by adversaries to obtain classified and unclassified critical information, directed OPSEC measures/countermeasures, OPSEC Coordinator contact information, and applicable reporting requirements. The 374 AW OPSEC Signature Manager or host Unit OPSEC Coordinator will maintain training records reviewed during internal assessments and MAJCOM compliance inspections. Refer to 32 CFR Part 117 for more information.

· On-base contractor employees will comply with AFI 10-701, Operations Security, available on the Air Force's e-publishing website (http://www.e-ublishing.af.mil/). They will also participate in the assigned host unit's OPSEC program, complete the Cyber Awareness Challenge (ZZ133098) computer-based training (CBT) module located on the Air Force MyLearning website (https://lms-jets.cce.af.mil/website) upon initial assignment and annually thereafter.

Ref Blk 12: Contractor is to submit requests through the Contracting Officer for coordination of OPSEC Review (Wing OPSEC Signature Manager) and public release (Wing Public Affairs) authorization. The Contracting Officer will provide contractor with written approval/disapproval. Information requiring AF or DoD-level review will be reviewed by the unit's OPSEC Program Manager or Coordinator, who will in turn forward to the entry-level public affairs office through the AFIMSC Public Affairs Office to the Secretary of the Air Force, Office of Public Affairs, Security and Review Division (SAF/PAX), 1690 Air Force Pentagon, Washington DC 20330-1690.