DD_Form_254 _Including_Attachments.pdf

DD FM 254 ATTACHMENT 10J

FOR OFFICIAL USE ONLY (FOUO) INFORMATION

UNITED STATES AIR FORCES IN EUROPE

UNITED STATES AIR FORCES AFRICA

GOVERNMENT FACILITY

PRIME CONTRACT NUMBER:

FOLLOW ON CONTRACT NUMBER:

CONTRACT EXPIRATION DATE:

Block 13, CONTINUATION:

Ref. Block 10, Item J:

FOUO is not a classification. Originators mark records when they create them to call attention to FOUO content. An FOUO marking does not mean you must withhold a record under the FOIA.

You still need to review requested records. Examine records with and without markings to identify information that needs protection and is exempt from public release or to decide whether discretionary release is appropriate.

Information in a technical document that requires a distribution statement per AFI 61-204, Disseminating Scientific and Technical Information, must show that statement. The originator may also mark the information FOUO, if appropriate.

Marking. Mark an unclassified document containing FOUO information “For Official Use Only” at the bottom, on the outside of the front cover (if any), on each page containing FOUO information, on the back page, and on the outside of the back cover (if any). In unclassified documents, the originator may also mark individual paragraphs that contain FOUO information to alert users and assist in review.

In a classified document, mark an individual paragraph that contains FOUO, but not classified information, by placing “(FOUO)” at the beginning of the paragraph. Mark the top and bottom of each page that has both FOUO and classified information, with the highest security classification of information on that page.

If a classified document also contains FOUO information, or if the classified material becomes FOUO when declassified, place the following statement on the bottom of the cover, or the first page, under the classification marking: “NOTE: If declassified, review the document to make sure material is not FOUO and not exempt under DoDR 5400.7, AF Supplement before public release.”

Mark other records, such as computer printouts, photographs, films, tapes, or slides, “For Official Use Only” or “FOUO” so the receiver or viewer knows the record contains FOUO information.

Transmission: DoD components, officials of DoD components, and authorized DoD contractor’s consultants, and grantees send FOUO information to each other to conduct official DoD business.

Tell recipients the status of such information, and send the material in a way that prevents unauthorized public disclosure. Electronic transmission of such information (e.g., voice, data, or facsimile) shall be by approved secure communications systems or systems utilizing protective measures such as PKI. Make sure documents that transmit FOUO material call attention to any FOUO attachments. To prevent unauthorized disclosure, consider attaching special cover sheets (i.e. AF Form 3227, Privacy Act Cover Sheet, for Privacy Act Information and ensure authorized personnel are available to receive FOUO information as soon as it is transmitted. FOUO information may be passed to officials in other departments and agencies of the executive and judicial branches to fulfill a government function. Mark the records “For Official Use Only,” and tell the recipient the information is exempt from public disclosure under the FOIA and whether it needs special handling.

Records containing FOUO information shall be transported in a manner that prevents disclosure of the contents. When not commingled with classified information, FOUO information may be sent via first-class mail or parcel post. Bulky shipments, such as distributions of FOUO Directives to testing materials, that otherwise qualify under postal regulations may be sent by fourth-class mail.

Mark each part of a message that contains FOUO information in accordance with References b and c. Unclassified messages containing FOUO information must show the abbreviation “FOUO” before the text begins.

Safeguarding. During normal working hours, records determined to be FOUO shall be placed in an out-of-sight location if the work area is accessible to non-government personnel. At the close of business, FOUO records shall be stored so as to prevent unauthorized access. Filing such material with other unclassified records in unlocked files or desks, etc., is adequate when normal U.S. Government or Government-contractor internal building security is provided during non-duty hours. When such internal security control is not exercised, locked buildings or rooms normally provide adequate after-hours protection. If such protection is not considered adequate, FOUO material shall be stored in locked receptacles such as file cabinets, desks, or bookcases.

Termination: The originator or other competent authority; e.g., initial denial and appellate authorities, shall terminate “For Official Use Only” markings or status when circumstances indicate that the information no longer requires protection from public disclosure. When FOUO status is terminated, all known holders shall be notified, to the extent practical. Upon notification, holders shall efface or remove the “For Official Use only” markings, but records in file or storage need not be retrieved solely for that purpose.

Disposal: Non-record FOUO documents may be destroyed by any of the means approved for the destruction of classified information or by any other means that would make it difficult to recognize or reconstruct the information.

Record copies of FOUO documents shall be disposed of in accordance with the disposal standards established under 44 U.S.C. 3301-3314, as implemented by DoD Component instructions concerning records disposal.

Unauthorized disclosure: No formal security inquiry or investigation is required for unauthorized disclosure of FOUO information, however, appropriate management action shall be taken to fix responsibility for unauthorized disclosure of CUI whenever feasible or required by other guidance, and appropriate disciplinary action shall be taken against those responsible in accordance with Reference b. Unauthorized disclosure of some CUI (e.g., information protected by section 552a of The Privacy Act of 1974 as amended or export-controlled technical data) may also result in civil and criminal sanctions against responsible persons.

For additional assistance and information, contact your servicing base FOIA office or refer to References a-c.

References:

a. DoDR 5400.07, AFMAN 33-302, FREEDOM OF INFORMATION ACT

b. DoDM 5200.01 Vol 1-4, DoD Information Security Program

c. AFI 16-1404, Air Force Information Security Program

HQ USAFE-AFAFRICA/IP/480-5161/6 Aug 14

DD FORM 254 ATTACHMENT 11J

OPERATIONS SECURITY (OPSEC) INFORMATION

UNITED STATES AIR FORCES IN EUROPE

UNITED STATES AIR FORCES AFRICA

GOVERNMENT FACILITY

(Policy: AFI 10-701, Operations Security)

PRIME CONTRACT NUMBER:

FOLLOW-ON CONTRACT NUMBER: N/A

CONTRACT EXPIRATION DATE:

Block 13, CONTINUATION:

Ref: Block 11, Item j. OPSEC Requirements

GENERAL:

1. PURPOSE: This section outlines the requirements and procedures necessary to protect Critical Information for Operations Security (OPSEC).

2. MISSION: To maintain a continuing awareness of adversary interest in center actions and adversary intelligence collection capabilities. To understand the need to identify and protect classified and unclassified indicators, which occur, reveal sensitive information. To evaluate the effectiveness of OPSEC measures taken to preclude or reduce adversary acquisition and exploitation of sensitive information.

3. DEFINITION: OPSEC is the process of analyzing friendly actions attendant to military operations and other activities to:

a. Identify those actions that can be observed by adversary intelligence systems.

b. Determine indicators hostile intelligence systems might obtain that could be interpreted or pieced together to derive critical information in time to be useful to adversaries.

c. Select and execute measures that eliminate or reduce to an acceptable level the vulnerabilities of friendly actions to adversary exploitation.

4. OBJECTIVES:

a. To protect planned operational center activities by preventing the inadvertent disclosure of unclassified information relating to or revealing a possible classified operation.

b. To preserve secrecy concerning specific scenario events and a response to these events.

c. To identify OPSEC vulnerabilities and recommend protective measures which will serve to enhance the security of future operations.

5. TASKS: Task requirements are outlined in the Statement of Work for this effort.

DD FORM 254 ATTACHMENT 11J (Continued)

OPERATIONS SECURITY (OPSEC) INFORMATION

If OPSEC requirements are required, the government program manager and the contracting official must include such requirements in the contract. Imposing OPSEC requirements may add additional costs to the contract. A contractor shall not implement OPSEC requirements nor shall they impose any OPSEC requirements on a subcontractor without prior approval of the Air Force. If OPSEC requirements are imposed, mark Items 11.j. and 14 “YES” and enter the following statement in Item 14:

“Ref. 11.j: See Contract Clause No. FAR 52.204-2 and AFFARS 5352.204-9000 for additional OPSEC requirements.”

Contact your servicing USAF base OPSEC manager for additional assistance.

603 AOC/SRD/478-5053/8423/13 AUG 14