dd254_attachment_1.PDF

Attachment 1 DD FORM 254, NOV 2017, Item 13. CONTINUATION

PRIME CONTRACT NUMBER:

Item 13.: All classified visit requests by Visitor Groups shall be forwarded to the COR for approval and need-to-know certification before being sent to the facility to be visited. The COR must be notified and approve the receipt and/or generation of classified information under this contract. All classified information received and/or generated under this contract is the property of the U.S.

Government regardless of proprietary claims. Upon completion or termination of this contract, the U.S. Government will be contacted for destruction or disposition instructions.

Item 13.: In addition to the reporting requirements directed by the NISPOM, the Visitor Group will provide a concurrent report of loss or compromise of classified information to the AF/A4/7Security Manager. Visit requests to activities other than those not listed in the statement of work on this DD 254 shall have "Need to Know" certified by the AF/A4/7Security Manager. All requests shall contain the information required by the NISPOM and shall not exceed a 12 month period.

Item 13.: All classified material received, generated, fabricated, or modified by this contract will be returned within 30 days after completion of contract or destroyed with destruction report being submitted to AF/A4/7Security Manager. Prior to any destruction of classified information a full listing of documents will be provided to the AF/A4/7Security Manager for review and approval. If additional contracting requirements exist where retention of classified information by the Visitor Group facility is required, a written request to retain material for a period but not to exceed 2 years is required.

Item 13.: Provide the information requested by the Notification of Government Security Activity Clause, AFFARS 5352.204-9000, and Visitor Group Security Agreements Clause, AFFARS5352.204.9001, to the Servicing Security Activity (SSA) address in block 17.f. of this form.

Refer to the contract document for these clauses.

Item 13.: Non-Disclosure Agreement: The Visitor Group may be required to have access to highly sensitive and confidential plans and data for the performance of this delivery order. The Visitor Group will not divulge any information about activities or functions, or other knowledge gained, to anyone who is not authorized to have access to such information. It will be the Visitor Group’s responsibility to ensure that persons have the proper authority and “need to know” prior to any discussions. The Visitor Group will observe and comply with any security provisions.

Ref 10a: Classified COMSEC material is not releasable to Visitor Group employees who have not received a FINAL clearance at the appropriate security level. COMSEC access shall be IAW DoD 5220.22-M. When access is required at Government facilities, Visitor Group personnel will adhere to COMSEC rules and regulations as mandated by Command policy and procedures. Prior written approval from the CO is required in order for a prime Visitor Group to grant COMSEC access to a subcontracting Visitor Group. See “COMSEC ACCESS AND/OR ACCOUNT ADDENDUM”, attachment 2.

Ref. 10.b.: Restricted Data Information is not releasable to Visitor Group employees who have not received a FINAL clearance at the appropriate security level. Written concurrence of the CO is required prior to subcontracting. Access to RESTRICTED DATA requires a FINAL U. S. Government

Attachment 1 DD FORM 254, NOV 2017, Item 13. CONTINUATION

PRIME CONTRACT NUMBER:

clearance at the appropriate level. RESTRICTED DATA will be handled and controlled as indicated in the NISPOM. See “RESTRICTED DATA INFORMATION ADDENDUM”, Attachment 3.

Ref 10. j.: The GCA is responsible for providing the Visitor Group with the classification guidance necessary for the protection of the information. For Official Use Only (FOUO) information provided under this contract shall be safeguarded as specified in DoD 5400.7-R, DoD Freedom of Information Act Program, Chapter 4, dated Sep 1998. The Visitor Group is responsible for incorporating safeguards in the contract. See “FOR OFFICIAL USE ONLY (FOUO) ADDENDUM” attachment 4.

Ref. 10.k.: Privacy Act: Work on this project may require that personnel have access to Privacy Act Information. Personnel shall adhere to the Privacy Act, Title 5 of the US Code, Section 552a and applicable agency rules and regulations.

Ref. 10.k.: Contract will require access to sensitive unclassified government automated information systems (AIS) at different levels. Visitor Group must comply with AF/A4/7AIS policies and procedures.

Ref 11.a.: Contract performance is restricted to those locations specified in Item 8a or other approved locations as directed by the COTR. Using activity will provide security classification guidance for performance of this contract.