DD254 Attachment 1.docx

DD FORM 254, APRIL 2018 Attachment 1

DD FORM 254, April 2018, Attachment 1

Ref. 10.a.: Classified COMSEC material is not releasable to Visitor Group employees who have not received a FINAL clearance at the appropriate security level. COMSEC access shall be IAW DoD 5220.22-M. When access is required at Government facilities, Visitor Group personnel will adhere to COMSEC rules and regulations as mandated by Command policy and procedures. Prior written approval from the CO is required in order for a prime Visitor Group to grant COMSEC access to a subcontracting Visitor Group. See “COMSEC ACCESS AND/OR ACCOUNT ADDENDUM”, attachment 2.

Ref. 10.b.: Restricted Data Information is not releasable to Visitor Group employees who have not received a FINAL clearance at the appropriate security level. Written concurrence of the CO is required prior to subcontracting. Access to RESTRICTED DATA requires a FINAL U. S. Government clearance at the appropriate level. RESTRICTED DATA will be handled and controlled as indicated in the NISPOM. See “RESTRICTED DATA INFORMATION ADDENDUM”, Attachment 3.

Ref. 11.c.: The Visitor Group requires access to classified source data up to and including the classification levels identified in item 1a of this DD 254 in support of this work effort at their facility. The Visitor Group will be required to have safeguarding capability at its facility at the level identified in item 1b. Contractor personnel performing on this contract that require access to classified information/material, must have a final U.S. Government clearance at the appropriate level. Contractor personnel will contact SAF/MG for any and all reference material needed to comply with the security requirements.

Ref. 11.c.: Trained Derivative Classifiers will certify all classified documentation and attach an appropriate derivative classifier declaration to all finished documents in accordance with Executive Order 13526. Classifiers shall be trained and recertified every two years. Documentation generated as a result of this contract will be classified in accordance with source material provided by the user and will carry the most restrictive downgrading and/or declassification instructions, warning notices and control markings applicable. A listing of source material is to be included as a part of the document prepared by the Visitor Group. Any extracts or use of such data requires the Visitor Group to apply derivative classifications and markings consistent with the source documents. Use of “Multiple Sources” on the “Derived From” line necessitates compliance with the NISPOM, paragraph 4-208a, and the use of a bibliography.

Ref. 11.e.: The purpose of this work statement is to obtain Contractor support to provide a full range of Advisory and Assistance Services (A&AS) to support the Secretary of the Air Force Office of Business Transformation (SAF/MG) and Deputy Chief Management Officer (DCMO) in managing and improving business operations across the Air Force. Services and deliverables shall include three (3) A&AS categories: Management and professional services; Studies, analyses, and evaluations; and Engineering and technical expertise. SAF/MG and DCMO services shall not include inherently governmental functions as discussed in FAR Subpart 7.5, “Inherently Governmental Functions”.

Item 12.: Contractor is to submit requests through the C.O. for OPSEC Program Managers review and public release authorization. The Contracting Officer will provide contractor with written approval/disapproval. Information requiring AF or DoD–level review will be reviewed by the unit’s OPSEC Program Manager or Coordinator who will in-turn forward to the entry-level public affairs office through the AFIMSC Public Affairs Office to the Secretary of the Air Force, Office of Public Affairs, Security and Review Division (SAF/PAX), 1690 Air Force Pentagon, Washington DC 20330-1690.” MAJCOM/DRUs will send information requiring AF or DoD-level review directly to SAF/PAX.

Item 13.: All classified visit requests by Visitor Groups shall be forwarded to the COR for approval and need-to-know certification before being sent to the facility to be visited. The COR must be notified and approve the receipt and/or generation of classified information under this contract. All classified information received and/or generated under this contract is the property of the U.S. Government regardless of proprietary claims. Upon completion or termination of this contract, the U.S. Government will be contacted for destruction or disposition instructions.

Item 13.: In addition to the reporting requirements directed by the NISPOM, the Visitor Group will provide a concurrent report of loss or compromise of classified information to the SAF/MG Security Manager. Visit requests to activities other than those not listed in the statement of work on this DD 254 shall have "Need to Know" certified by the SAF/MG Security Manager. All requests shall contain the information required by the NISPOM and shall not exceed a 12 month period.

Item 13.: All classified material received, generated, fabricated, or modified by this contract will be returned within 30 days after completion of contract or destroyed with destruction report being submitted to SAF/MG Security Manager. Prior to any destruction of classified information a full listing of documents will be provided to the SAF/MG Security Manager for review and approval. If additional contracting requirements exist where retention of classified information by the Visitor Group facility is required, a written request to retain material for a period but not to exceed 2 years is required.

Item 13.: Provide the information requested by the Notification of Government Security Activity Clause, AFFARS 5352.204-9000, and Visitor Group Security Agreements Clause, AFFARS5352.204.9001, to the Servicing Security Activity (SSA) address in block 17.f. of this form. Refer to the contract document for these clauses.

Item 13.: Non-Disclosure Agreement: The Visitor Group may be required to have access to highly sensitive and confidential plans and data for the performance of this delivery order. The Visitor Group will not divulge any information about activities or functions, or other knowledge gained, to anyone who is not authorized to have access to such information. It will be the Visitor Group’s responsibility to ensure that persons have the proper authority and “need to know” prior to any discussions. The Visitor Group will observe and comply with any security provisions.

Item 18.f.: REQUIRED DISTRIBUTION

1. 11 WG/IP, 1330 AF Pentagon, Washington DC 20330

2. SAF/MG,1790 Air Force Pentagon, Washington DC, 20330-1790