24.b_RAFB_Prime_Contractor_VGSA_SDMS-(AFRC)_DRAFT.docx

CONTRACT #

78th AIR BASE WING

INFORMATION PROTECTION OFFICE

ROBINS AFB, GEORGIA

VISITOR GROUP SECURITY AGREEMENT

(VGSA)

COMMERCIAL NAME OF COMPANY:

COMPANY ADDRESS:

CONTRACT NUMBER:

CONTRACT EXPIRATION DATE:

GOVT PROGRAM MANAGER:

GOVT CONTRACTING OFFICER:

CONTRACTOR POINT OF CONTACT:

First Name/Last Name:

Company Name:

Commercial Telephone Number:

SUBCONTRACTOR POINT OF CONTACT:

First Name/Last Name:

Company Name:

Commercial Telephone Number:

1. Contractual Agreement: This agreement, promulgated by DoD 5220.22-R, Industrial Security Regulation and DoD 5220.22-M, National Industrial Security Program Operating Manual (NISPOM), Chapter 1, Section 2, Paragraph 1-200, is entered into by the Installation Commander or Designee, 78th Air Base Wing Information Protection Office, Robins Air Force Base (AFB), and XXXXXXX (hereafter referred to as visitor group), prescribes the specific actions to be taken by the visitor group’s employees and the Department of the Air Force (DAF), to properly protect classified information involved in the on-base contract performance at the visitor group’s on-base operating location at HQ AFRC/A6-SCXP, Bldg 210. Responsibilities are delineated as follows: NOTE: As used in this agreement, the terminology visitor group, contractor, company, and Home Office Facility (HOF) are synonymous. Furthermore, the verbiage Air Force (AF) activity, unit, contracting officer, program/project manager, Servicing Security Activity (SSA), etc., refers to entities or representatives of the USAF in their appropriate and respective capacity.

a. Visitor Group Security Supervision. Under the terms of this agreement, the visitor group will operate per DoDM 5200.01, Volumes 1 through 4, DoD Information Security Program, Air Force Instruction (AFI) 16-1404, Air Force Information Security Program, AFI 31-601, Industrial Security Program Management and supplements thereto, and the AF activity’s unit security program operating instructions (OIs), plans and /or procedures. The installation Servicing Security Activity (SSA), HQ AFRC/IP, 255 Richard Ray Blvd, Suite 121, Robins AFB, Georgia 31098-1637, Telephone (478) 327-2194, is responsible for providing security program oversight and the AF activity, HQ AFRC/A6-SCXP, is responsible for implementing and managing the activity’s security program per DoDM 5200.01-V1 through 4 and AFI 16-1404.

(1) The visitor group’s HOF will identify (in writing) to the SSA and AF activity an on-base employee to interface with and serve as the visitor group’s focal point for security related matters. Under the terms of this agreement, the identified employee per this paragraph will provide appropriate security program management assistance to the AF activity’s unit security manager.

(2) The visitor group’s HOF will provide the SSA and AF activity unit security manager the name of the HOF’s Facility Security Officer (FSO) and the SSA will likewise provide the visitor group’s FSO with the names of the SSA Information Security Specialist and the activity’s unit security manager.

(3) All parties, the AF activity, contracting office (sponsor), visitor group, and SSA will perform duties specified by this agreement in a timely manner.

b. Standard Practice Procedures (SPP): Compliance with this agreement eliminates SPP publication requirement. The visitor group will use and comply with the AF activity’s unit security program OIs, procedures and/or requirements, per this agreement and other applicable DoD or AF directives. This provision of the agreement is not intended nor does it interfere with the visitor group’s internal management policies, procedures, or requirements unless stated otherwise.

c. Access to and Accountability of Classified Material:

(1) All access to and/or possession of classified material by on-base visitor group personnel, including oral and/or visual at ROBINS AIR FORCE BASE, will be under the AF activity’s supervision. The AF activity maintains accountability, control, and ownership of all classified information involved under the terms of this contract at all times per DoDM 5200.01-V3 and AFI 16-1404. The visitor group’s access to classified information will be controlled by the AF activity and limited to “contract-specific, need to know” information only.

(2) The visitor group receives, releases, and disseminates classified material through the AF activity and in concert with the USAF program manager HQ AFRC/A6 Robins AFB, GA in accordance with DoDM 5200.01-V3, DoD Information Security Program, AFPD 31-4, Information Security and AFI 16-1404, Air Force Information Security Program.

(3) If contractor personnel during contract performance discover unattended classified material or unlocked/unattended security container, they will immediately secure the classified materials and notify the unit security manager or alternate. During non-duty hours visitor group personnel will exhaust every avenue to notify the AF activity’s branch chief, program manager, security manager or alternate when they discover unattended classified material. Visitor group personnel will maintain a list of emergency telephone numbers or other means to contact program officials and AF unit security managers in this case. As a last resort, visitor group personnel will contact the78th Base Defense Operations Center (BDOC), at Commercial Phone 478-926-2187, DSN: 468-2187 release the found classified material to security force personnel and ensure the incident is reported to the activity’s security manager the next duty day.

d. Storage of Classified Material:

(1) The visitor group is authorized to store and handle classified information in accordance with DoDM 5200.01-V3, AFI 16-1404 and the AF activity’s unit operating instructions (OIs). All classified information shared with the visitor group must be stored in an approved government owned and controlled security container. The contractor is prohibited from establishing and/or maintaining a separate classified information system. All classified material will be returned and secured in the designated government security container at the end of the day.

(2) Under the terms of this agreement, the AF activity will have access to and control all security containers. The responsibility for setting the storage container combination rests with the AF activity. Each container will have a government safe custodian appointed. The Standard Form (SF) 700, Security Container Information, will be used to identify persons having knowledge of the combination(s). This form will be posted inside the locking drawer of each security container. Contractor personnel may have access to a security container but may not be the sole custodian of the container. Information accessed by the contractor must be limited to “need-to-know” as prescribed by their contract.

e. Transmission of Classified Material:

(1) The on-base visitor group is NOT authorized direct receipt or dispatch of classified material at Robins Air Force Base, GA through U.S. postal channels or commercial carrier.

(2) Classified material is to be transmitted via U.S. postal channels directly from AF activity HQ AFRC/A6-SCXP Robins AFB, GA and must be prepared in accordance with DoDM 5200.01-V3, AFI 16-1404, and processed through the unit and the Robins Air Force Base, GA classified information control systems.

f. Disposition of Classified Materials. If authorized IAW the DD Form 254 to possess classified material, the visitor group will return all classified information jointly shared and/or involved, under the terms of this agreement, to the AF activity at the end of the contract performance or when no longer required, unless authorized to do otherwise by the contracting officer.

g. Reproduction of Classified Material. Only AF approved and controlled reproduction equipment will be used by the visitor group, when so authorized, per DoDM 5200.01-V3 and AFI 16-1404. The visitor group cannot reproduce classified material without the permission of the AF activity.

h. Security Education. The visitor group’s focal point shall:

(1) Ensure employees who require access to classified information receive initial and recurring security education training (at least annually) regarding their individual responsibility for safeguarding classified information. These briefings will be tailored to those responsibilities associated with the individual’s assigned duties, the provisions of this agreement, any associated DD Form 254, and the results of the most recent self-inspections or security reviews (as applicable).

(2) Ensure employees attend and participate in the Security Education and Awareness Training Program (conducted by the AF activity) per DoDM 5200.01-V3 and AFI 16-1404.

(3) Ensure employees complete the Standard Form (SF) 312, Classified Information Nondisclosure Agreement, and are indoctrinated in the Joint Personnel Adjudication System (JPAS). The AF activity’s security manager will use JPAS to verify that visitor group employees have completed an SF 312 and are indoctrinated. If a visitor group employee has not completed an SF 312 nor been indoctrinated, the AF activity’s security manager will notify the visitor group focal point that both must be accomplished and updated in JPAS prior to the visitor group employee being given access to classified information. Visitor group employees will be debriefed in accordance with DoD 5200.2-R and the debriefing will be recorded on the AF Form 2587, Security Termination Statement. The AF Form 2587 will be maintained by the AF activity’s security manager and destroyed in accordance with Air Force Records Information Management System, available at https://webrims.amc.af.mil.

i. Personnel Security Clearances. JPAS shall be used to verify the personnel security clearance level for contractors requiring access to classified information. Visit authorization letters (VALs) are no longer required for contractor personnel whose access level and affiliation are accurately reflected in JPAS. All contractors who participate in the National Industrial Security Program (NISP) are authorized to use JPAS in lieu of sending VALs for classified visits. Paragraphs 6-101 and 6-103 of the National Industrial Security Program Operating Manual (NISPOM) that require advance notification and VALs for classified visits within DoD are hereby waived. The host AF activity serves as sponsor for the visit.

j. Reports. The visitor group must immediately submit to the SSA, in writing, reports under any of the situations outlined in DoDM 5200.01-V3 and AFI 16-1404. The SSA coordinates and/or reports security violations committed by visitor group employees to the appropriate Defense Security Service (DSS) Cognizant Security Agency (CSA), base contracting office, and the visitor group’s HOF, if and when appropriate.

(1) The AF activity’s unit commander appoints inquiry or investigation officials.

Inquiry or investigation officials coordinate findings and reports with the appointing official and SSA.

(2) The visitor group’s HOF will advise the SSA of any changes in management, location, address, or contractual performance requirements.

k. Contractor Restricted Area Badges. When required for contract performance, the AF Form 1199 Series (Green, Pink, Yellow, or Blue), USAF Restricted Area Badge, will be issued to visitor group personnel for entry into USAF Restricted Areas on Robins AFB. Entry credentials are issued at the request of the AF activity. Request for badge issuance must be supported by a current visit request in the JPAS system.

l. Contractor Local Area Badges. IAW the Joint Ethics Regulation, all visitor group personnel will be clearly identifiable as representatives of the company they are employed with. These employees will also be issued HQ AFRC access control badges IAW HQ AFRC OI 31-101, HQ AFRC Access Control Procedures. All visitor group personnel will comply with the requirements of HQ AFRC OI 31-101. Issued badges must be displayed while working in AFRC facilities; they must be removed upon exiting AFRC facilities; they must be turned in to HQ AFRC/IP upon completion of the contract or when terminated. The COR and/or Program Manager is the focal point for all requests for badges; the unit security manager will process government requests for visitor group access to sensitive areas within HQ AFRC.

1. End of Day Security Checks. Visitor group personnel will be scheduled to perform end-of-day security checks within their assigned work areas by the AF activity per DoDM 5200.01-V3, AFI 16-1404 and AF activity’s security program operating instruction (OI). These checks will ensure security precautions are taken to protect classified material. The SF 701, Activity Security Checklist, and SF 702, Security Container Check Sheet, will be used to record these checks.

n. Emergency Protection. If visitor group personnel come in contact with classified material during natural disaster, major accident, civil disturbance, or other emergency, visitor group personnel will make every effort to secure classified material in an approved storage container per DoDM 5200.01-V3, AFI 16-1404 and AF unit’s security operating program OIs. If the area is evacuated and/or the container(s) abandoned, visitor group personnel will, upon termination of the emergency condition, assist the AF activity program manager in examining those classified holdings to ensure there has been no compromise or loss of exposed information. In the event of missing or possible compromise, the visitor group employees will, in concert with the AF activity program manager, immediately notify the AF activity’s unit security manager.

o. Protection of Government Resources. The visitor group will comply with AFI 31-101, Integrated Defense (FOUO), and other security and safety OIs of the AF activity. File systems containing classified records will be maintained in accordance with AFMAN 33-363, Management of Records.

p. Clarification of Security Requirements. The visitor group will address inquiries or questions pertaining to the provisions of DoDM 5200.01-V1 through 4 and AFI 16-1404 to the AF activity’s unit security manager.

q. Contract and Associated DD Form 254. The visitor group’s on-base management will maintain on file a copy of all contracting documents, any associated DD Form 254, DoD Contract Security Classification Specification, and this VGSA. The responsible AF activity will review the DD Form 254 at least every five years and issue revisions as necessary.

r. Foreign Involvement: Under the terms of this agreement, the visitor group is required to notify the AF activity and contracting office, prior to any foreign involvement, regardless of access requirements or the sensitivity of information to be disclosed (classified or unclassified).

s. Intelligence Information: The visitor group will comply with the access request, release, reporting and training requirements stipulated in AFI 14-303, Release of Intelligence to US Contractors, and the Intelligence Security Addendum of the DD Form 254 regarding non-SCI and SCI intelligence information (if blocks 10e(1) and (2) of the DD Form 254 are annotated).

t. Training. The visitor group personnel will participate in the AFRC/IP security manager’s program. Visitor group personnel will also complete derivative classifier training IAW with the AFRC’s IP program requirements. This training will be completed within 90 days of appointment.

u. Installation Perimeter and Facility Access Control. The visitor group will comply with the requirements of AFI 31-113, Installation Perimeter Access Control, regarding escorting and sponsorship of guests onto the installation and HQ AFRC OI 31-101 regarding escorting and sponsoring guests into AFRC facilities. Visitor Group employees are prohibited from escorting guests onto Robins AFB or within AFRC facilities. This responsibility rests exclusively with the COR or the Government Program Manager.

v. Weapons Prohibitions. Firearms and other devices capable of firing projectiles are prohibited on Robins AFB. These devices will not be introduced onto the installation or stored in privately owned/leased or contractor owned/leased vehicles driven onto or parked on the installation.

w. Antiterrorism/Force Protection. All visitor group personnel will participate in and comply with the requirements of AFI 10-245, Antiterrorism.

x. Visit Request Notifications. Transmit all visit request notifications (initial, modification and cancellations) through the Joint Personnel Adjudication System (JPAS) to HQ AFRC/IP SMO Code RX0MFCMF, and AFRC/A6L6 no later than eight (8) days prior to a visit group employee’s start date. Each visit request notification will be annotated as follows. Enter separate visit requests for “Integrated Visitors” and “Intermittent Visitors.”

(1) Reason for Visit: Enter “Other”

(2) Visit Access: Enter this highest level required for the classified visit. If the visit is does not require classified access, send a Visit Authorization Letter (VAL) instead of a JPAS Visit Request.

(3) First Day of Visit / Last Day of Visit: Enter the inclusive performance dates of the contract for all visitor group employees who are maintaining an integrated, full-time office at HQ AFRC or the limited, specific dates for those employees who are visiting intermittently.

(4) POC: Enter the rank/grade, first and last name of the on-base government program manager along with the contract number (as it appears in block 2a or 2b of the DD Form 254).

(5) POC Phone: Enter the commercial telephone number of the on-base government program manager.

y. Access to Information Technologies. If access to information technologies (unclassified or classified) is required in the performance of the contract, visitor group personnel will complete Part I of the DD Form 2875, System Authorization Access Request, and for it for the Contracting Officers Representative or Govt Program Manager for endorsement in Part II of the form. The AF activity unit security manager will complete Part III of the form.

z. On-Base Key Management Officials Letter. Forward, on company letterhead, the key on-base management officials letter (at Attachment 1) to HQ AFRC/IPD within 2 weeks of starting performance on Robins AFB. Update the letter annually upon issuance of any option year modifications to the contract.

2. Security Reviews.

a. Government Visits. Staff Assistance Visits (SAVs), Information Security Program Reviews (PRs), Information Protection Management Evaluations (IPMEs), or self-inspections will not be conducted by the SSA of the visitor group, independent of the AF activity.

b. The SSA conducts visit, if applicable, in the following manner:

(1) The SSA will notify and schedule all visits through the AF activity’s security manager, except when conducting an unannounced security review. Program reviews will be conducted per DoDM 5200.01-V1, AFI 16-1404, supplements thereto, and this agreement. A copy of the PR report will be provided to the visitor group by the AF activity. The visitor group is not required to acknowledge receipt, nor respond unless directed to do so in the report.

(2) The AF activity’s program review or self-inspection will include the visitor group. The visitor group will also be included in the AF activity’s semiannual security self-inspection program. The AF activity will use the VGSA and the unit’s self-inspection criteria to monitor the visitor group’s performance and compliance. Document and maintain the inspection report as required by DoDM 5200.01-V1 and AFI 16-1404.

3. Expenditure of Funds for Security. This agreement is not an authorization for commitment of funds. Nothing in this agreement shall be construed to impose any liability on the part of the U.S. government for injury to the agents, employees of the visitor group, its subcontractors, assignees, or other individuals acting for or on behalf of the visitor group, to the property of the same, nor shall anything in this agreement be construed to modify the provisions of existing contracts.

4. Review of this Agreement. All parties must review this agreement at least annually for accuracy. The AF activity is responsible for keeping this agreement current. In addition, the AF activity will keep on file a copy of the last evaluation, self-inspection or equivalent review. Copies of reports may be made available to the visitor group for their files.

5. Other:

a. Forms. The AF activity furnishes all government forms and applicable AFIs, OIs and/or unit security plans required in support of this agreement.

b. Subcontracts. A VGSA shall be initiated whenever the HOF or on-base visitor groups enters into a subcontract arrangement with another contractor for classified performance on Robins Air Force Base GA. This VGSA must address the subcontractor operation separately. The AF activity, visitor group or its HOF, as applicable, and all subcontractors must sign the agreement. A separate DD Form 254 is completed for each subcontractor requiring access to classified information. The visitor group or its HOF, as applicable, is responsible for preparing the DD Form 254 for any subcontracts and must provide a copy to the SSA for review. The AF activity ensures that all questions pertaining to the DD Form 254 are resolved. The visitor group’s HOF signs item 16 of the DD Form 254 for subcontracts and makes required distribution.

c. Notification. The AF activity (contracting officer) will notify the SSA 30 days prior to contract completion or shutdown on Robins Air Force Base GA to ensure contractor operations are reviewed for proper disposition of classified materials per DoDM 5200.01-V3, AFI 16-1404, and this security agreement.

d. Government Liability. Nothing in this agreement shall be construed to impose any liability on the part of the U.S. government for injury to the agents, employees of the contractor, its subcontractors, assignees, or other individuals acting for or on behalf of the contractor, to the property of the same, nor shall anything in this agreement be construed to modify the provisions of existing contract.

(NOTE FOR THOSE SIGNING: If you cannot sign your name legibly, please print or type your name underneath your signature.)

_____________________________ Date: _____________ Government Staff Agency Chief

________________________________ Date: ________________ Government Program Manager

________________________________ Date: ________________ Government Contracting Officer

________________________________ Date: ________________ Government Unit Security Manager

Prime Contractor Visitor Group Exe Agent Date: ________________

Subcontractor Visitor Group Exe Agent Date: ________________

SERVICING SECURITY ACTIVITY COORD:

________________________________ Date: ________________

AUSTIN R. TOSI, GS-13, DAFC

HQ AFRC/IPD, Robins AFB GA

(478) 327-2194

________________________________ Date: ________________

MELVESE M. HARRIS, NH-03, DAF, ISOC

78 ABW/IPD, Robins AFB GA

(478) 926-2973

________________________________ Date: ________________

GEROLD A GOUDY, NH-03, DAF

Chief, Information Protection 78 ABW/IP, Robins AFB GA

(478) 926-2266

Upon completion of required signatures, copies of the fully executed VGSA will be provided to all parties concerned including the primary security manager of the organization where contract performance will occur. If the work will be performed in more than one organization, the program manager will ensure the requirements of the agreement are coordinated with the applicable unit security manager.

LAST PAGE OF DOCUMENT

image1.wmf oleObject1.bin image2.jpeg