Attachment_2_DD254_VGSA.pdf

Supplement to Defense Department (DD) Form 254 "Contract* Security Classification Specification"

ITEM 13 SECURITY GUIDANCE:

I. The fo llowing items apply to this contract.

GENERAL GUIDANCE:

The Contractor must:

• Maintain accountability for a ll intell igence, intelligence-related. or SCI material released to his or her custody.

• Not reproduce intelligence, inte lligence-related, or SCI materials w ithout the written permission o f the re leasing agency. If permission is granted, each copy will be controll ed in the same manner as the original.

• Not destroy any inte lligence, inte lligence-related, or SCI materia l without advance approval of the releasing agency.

• Restrict access to only those individuals who possess the requ ired security clearance and who are actually providing services under the contract. Further dissemination to other contractors. subcontractors, other governm ent agencies, and private individuals or an organization is prohibited unless authorized in writing by the re leasing agency.

• Not release intelligence material to foreign nationals or immigrant a liens whether or not they are consultants. US contractors, or employees of the contractor, and regardless of the level of their security clearance. except with advance written permission from the originator.

• Ensure that each employee having access to the intelligence, inte lligence-re lated, or SCI material is fu lly aware of the special security requirements for thi s material and mainta ins records in a manner that permits the contractor to furnish on demand the name of individuals who have access to the material in their custody.

• Annually furn ish the Qua lity Assurance Personnel (QAP) inte lligence, intell igence related or SCI material re leased to or generated by the contractor. The listing must be sent to the QAP no later than I February.

• Upon completion or termination of the classi fied contract, or sooner, when the purpose of the release has been served, the contractor must return to the QAP all intell igence.

inrelligence-related, or SCI material (furn ished or generated).

• The contractor must obtain written approval from the SSO Patrick/SC or the National Security Agency (NSA) to use facs imile equ ipment to transmit information re lated to any contract. This applies whether government or government derived, classified or unclassified, inside or outside the contractor's SCJF. The written approval may contain restrictions contractually binding on the contractor.

• For Computer Security direction. the contractor shall comply with the Joint DODIIS/Crypto logic SCI Information Systems Security Standards in its entirety or obtain waivers in writing from SSO Patrick/SC for specific relief.

• The Secretary of Energy and the Chairman of the Nuclear Regulatory Commiss ion retain authority over access to information that is under their respective cognizance as directed by the Atomic Energy Act of 1954. The Secretary of the information may inspect and monitor contractor programs or faci lities that involve access to such infom1ation or may enter written agreement with the DoD to inspect and monitor these programs or faci I ities.

A specia l briefing is req uired for access to CNWDI, and a finial security clearance is required for access to CNWDI, and RD information. Access to Restricted Data is only at Bldg. 989. Only contractors approved by the AFT AC, RD Manager may classify RD. and PRO documents.

ITEM 10:

Ref item 10.b.c.d The Secretary of Energy and the Chairman of the Nuclear Regulatory Commission retain authority over access to information that is under their respective cognizance as directed by the Atomic Energy Act of 1954. The Secretary of the information may inspect and monitor contractor programs or facilities that involve access to such infomrntion or may enter written agreement with the DoD to inspect and monitor these programs or faci lities. A special briefing is required for access to CNWDI, and a finial security clearance is required for access to CNWDI, and RD information. Access to Restricted Data is on ly at Building I 0989.

Only contractors approved by the AFT AC, RD Manager may classify RD, and FRO documents.

Ref item 10.e. SCI work will be done in an appropriately accredited SCIF' faci lity (SCrF).

Ref item 10.e.(I). Contractor will require access to DCID 6/ 1, Security Pol icy for Sens itive Compartmented Information and Security Policy Manual and DCID 616. Security Controls on the Dissemination of Intelligence Information (S//NF). See Attachment I.

Ref item I 0 e.(2). E.O. 13526, Classified National Security In formation, contains new classification, declassification, and marking requirements that are not found in the current DoD 5220.22M, National Industrial Security Program Operating Manual (NISPOM). Refer to E.0 .1 3526 for guidance unti l the NlSPOM is revised. See Attachment 2.

Ref item 1 O.h. This includes any foreign government in formation except NA TO. Prior approval of the contracting activity is required for subcontracting. Access requires a final U. S.

Government clearance at the appropriate level.

Ref item 10.j. FOUO information provided under this contract shall be safeguarded as specified in the attachment " Protecting For Official Use Only (FOUO) In formation.'·

ITEM 11:

Ref item 11.c. The contractor is expected to receive and generate classified information (documents and/or hardware) at add work locations to include unit and address. Further detailed security classification guidance will be included within the Statement of Work or attached security gu idance.

Ref item 11.d. Contractor must provide adequate storage for classified hardware to the level of Top Secret which exceeds two cubit feet but not more than cubic feet.

Ref item 11.g. The conrractor is authorized to use the services of the DTIC and is required to prepare and process a DD Fm 1540 and DD Form 1541.

Ref item 11.i. See Contract Clause No. ___ ___ for additional EM SEC requirements.

Refitemll.j. SeeAFI 10-1101,31MayOl.andAFIWC10-1101-1 foradditionalOPSEC requirements.

ITEM 13:

Ref item 13. The contractor will follow all applicable security guidance related to the protection of classified infonnation. Baseline gu idance includes the National Industrial Security Program Operating Manual (NISPOM), N1SPOM Supplement (N ISPOMSUP), DOD Overprint to the NISPOMSUP, Director of Central Intelligence Directive (DCID) 6/3, applicable Program Security Directives (PSDs) and Security Classification Guides (SCGs) and Standard Operating Procedures. Task specific security classification guidance will be provided with the individual task orders. As a minimum, the AFTAC General Subjects Security Classification Gu ide (GSSCG) dated 12 December 20 14 wi II be used to include all revisions and changes thereto for this contract.

Attachment #1

RELEASE OF SENSITIVE COMPARTMENTED INFORMATION

(SCI) INTELLIGENCE INFORMATION

TO

DoD Contractors DD FORM 254 ATTACHMENT

AlTACHMENT TO DD FORM 254 FOR CONTRACT NUM BER _ ___ __ _

NUMBER OF SCI BILLETS AUTHORIZED: 20

CONTRACT EXPfRA T ION DA TE: 3 I January 2020

I. Requ irements for access to SCI:

AFR 3/-602 1 February 1997

a. Al l SCI wi ll be handled in accordance with special security requirements which will be f1.1rnished by the designated responsible special security office (SSO).

b. SCI will not be released to Contractor employees without specific release approval of the originator of the material as outlined in governing directives; based on prior approval and certification of ·'need-to-know .. by the designated Contractor.

c. Names of Contractor personnel requiring access to SCI will be submitted to the QAP for approval. (The QAP is identified on the reverse s ide of the DD Form 254.)

Upon receipt of written approval from the QAP, rhe company security officer will submit request(s) for special background investigations in accordance with the N ISPOM.

to the Inte lligence Suppon Office. The entire personnel security questionnaire package should not be forwarded to the Intelligence Support Office. The Contractor Special Security Officer (CSSO) must fo llow the instructions provided by the Inte lligence Support Office to the CSSO.

d. Inquiries pertaining to classification guidance on SCI w ill be directed through the CSSO to the responsible QAP as indicated on the DD Form 254.

e. SCI furnished in support of this contract remains the property of the Department of Defense (DoD) department, agency. or command originator. Upon completion or cancellation of the contract. SCl furnished will be returned to the direct custody of the supporting SSO, or destroyed IA W instructions outlined by the QAP.

f. SCI will be stored and maintained only in properly accredited fac ilities at the Contractor location.

2. The QAP wi ll:

a. Review the SCI product for contract applicability and determ ine that the product is required by the Contractor to complete Contractual obl igations. After the QAP has reviewed the SCI product(s) for contract applicability and de te rm ined that the product is required by the Contractor to complete obligations, the QAP must request release from the originator through the lnce lligence Division. Originator release authority is required on the product types below:

( I) Documents bearing the control markings of ORCON, PROPIN.

(2) GAMMA controlled documents.

(3) Any NSA/SPECIAL marked product.

(4) All categories as listed in AFMAN 14-304.

b. Prepare or review Contractor billet/access requests to insure satisfactory justification (need-to-know) and completeness of required information .

c. Approve and coordinate vis its by Contractor employees when such vis its are conducted as part of the contract effort.

d. Maintain records of a ll SCI materia l provided to the Contractor in support of the contract effort. By 15 January (annually), provide the Contractor, for inventory purposes, with a complete list of all documents transferred by contract number. organizational control number, copy number, and document title.

e. Determine dissemination of SCI studies or mate rials originated or developed by the Contractor.

f. Within 30 days after completion of the contract, provide written disposition instructions for al l SCI material furnished to, or generated by, the Contractor with an information copy to the supporting SSO.

g. Review and forward a ll Contractor requests to process SCI electronically to the accrediting SSO for coordination through appropriate SCI channels.

h. Request for re lease of intelligence material to a Contractor must be prepared by the QAP and submitted to the Intelligence Support Office. This shou ld be accomplis hed as soon as possible after the contract has been awarded. The request will be prepared and accompanied with a letter explain.ing the requ irement and copies of the DD Form 254 and Statement o f Work.

Attachment #2

RELEASE OF NON-SENSITIVE COMPARTMENTED INFORMATION

(NON-SCI) INTELLIGENCE INFORMATION

TO

US/DoD Contractors DD FORM 254 ATTACHMENT

ATTACHMENT TO DD FORM 254 FOR CONTRACT NUMBER ADD CONTRACT #

CONTRACT EXPfRA T ION DA TE: 15 January 2023

I. Requirements for access to non-SCI:

a. A ll inte lligence materia l released to the Contractor remains the property of the US Government and may be withdrawn at any time. Contractors must maintain accountabi lity for all class ified intelligence released into their custody.

b. The Contractor must not reproduce intelligence material without the written perm1ss1on of the originating agency through the Jntelligence Support Office. If permission is granted. each copy shall be controlled in the same manner as the original.

c. The Contractor must not destroy any intelligence materia l without advance approval or as specified by the QAP. (EXCEPTION: Classi fied waste shall be destroyed as soon as practicable in accordance with the provisions of the Industrial Security Program).

d. The Contractor must restrict access to only those individuals who possess the necessary security clearance and who are actua lly providing services under the contract with a va lid need to know. Further dissemination to other Contractors, sub-Contractors, other government agencies, private individuals or organizations is prohibited unless authorized in writing by the originating agency through the QAP.

e. The Contractor must ensure each employee having access to inte lligence material is fu lly aware of the special security requirements fo r th is material and shall maintain records in a manner that will permit the Contractor to fu rnish. on demand, the names of individua ls who have had access to this material m their custody.

f. Intelligence materia l must not be re leased to foreign nationals or immigrant a li ens whether they are consultants, US Contractors, or employees o f the Contractor and regardless of the level of their security clearance. except with advance wrinen perm1ss1on from the originator. Requests for release to fo reign nationa ls sha ll be initi a lly forwarded to the QAP and shall include:

( I) A copy of the proposed di sclosure.

(2) Fu ll j ustification re flecting the benefits to US interests.

(3) Name, nationality, particulars of clearance, and current access authorization of each proposed fore ign national recipient.

g. Upon completion or tem1ination of the classified contract, or sooner when the purpose of the release has been served, the Contractor wi ll return al l classified intelligence (furnished or generated) to the source from which received unless retention or other disposition instructions (see Air Force Records Disposition Schedule (RDS) located at https://afrirns.amc.af.rn il) are authorized in writing by the QAP.

h. The Contractor must designate an individual who is working on the contract as custodian. The designated custodian shall be responsible for receipting and accounting for a ll c lassified intelligence material received under this contract. This does not mean that the custod ian must personally s ign for a ll classified material. The inner wrapper of a ll classified material dispatched should be marked for the attention of a designated custodian and must not be opened by anyone not working directly on the contract.

i. Within 30 days after the final product is received and accepted by the procuring agency, c lassified inte lligence materials re leased to or generated by the Contractor. must be returned to the originating agency through the QAP unless written instructions authorizing destruction or retention are issued. Requests to retain material shall be directed to the QAP fo r this contract in writing and must clearly indicate the justification for retention and identity of the specific document to be retained.

j. Classification, regrading, or declassification markings of documentation produced by the Contractor shall be consistent with that applied to the in fonnation or documentation from which the new document was prepared. If a compilation of in formation or a complete analysis of a subject appears to require a security c lassification other than that of the source documentation. the Contractor shall assign the tentative security c lassification and request instructions from the QAP. Pending final determination, the materia l shall be safeguarded as required for its assigned or proposed classification, whichever is higher, until the classification is changed or otherwise verified.

2. [ntelligence material carries special markings. The fo llowing is a list of the authorized contro l markings of intelligence material:

a. '·Dissemination and Extraction of In fo rmation Controlled by Originator (ORCON)."

This marking is used, with a security c lassification, to enable a continu ing knowledge and supervision by the originator of the use made of the information involved. This marking may be used on inte lligence which clearly identifies, or would reasonably permit ready identification of an intelligence source or method which is particularl y susceptible to countermeasures that would nullify or measurably reduce its effectiveness. This marking may not be used when an item or in formation wi ll reasonably be protected by use of other markings specified herein, or by the application of the ·'need-to-know'" principle and the safeguarding procedures of the security class ification system.

b. "Authorized for Release to (Name of Country(ies)/lnternational Organization.'' The above is abbrev iated ·'REL ." This marking must be used when it is necessary to identify classified intelligence material the US government originator has predetermined to be re leasable or has been released through established foreign disclosure channels to the indicated country(ies) or organization.

3. The followi ng procedures govern the use of control markings.

a. Any recipient desiring to use intelligence in a manner contrary to restrictions established by the control marking set forth above shall obtain the advance permission of the originating agency through the QAP. Such permission applies only to the specific purposes agreed to by the originator and does not automatically apply to a l I recipients.

Originators shal l ensure that prompt cons ideration is g iven to recipients' requests in these regards, with particular attention to reviewing and ed iting, if necessary, sanitized or paraphrased versions to derive a text suitable for release subject to lesser or no control markings.

b. The contro l marking authorized above shall be shown on the title page, front cover, and other applicable pages of documents, incorporated in the text of electrical communications, shown on graphics. and associated (in full or abbreviated form) with data stored or processed in automatic data processing systems. The control marking also shall be indicated by parenthetical use of the marking abbreviations at the beginning or end of the appropriate portions. If the control marking applies to several or all portions, the document must be marked with a sta tement to this effect rather than marking each portion individually.

c. The control markings shall be individually assigned at the time of preparation of intell igence products and used in conjunction with security class ifications and other marking specified by E.O. 13526 and its implementing security directives. The marking shall be carried forward to any new format in which the same information is incorporated including oral and visual presentations.

Attachment# 3 Extract from DoD 5400. 7

PROTECTING FOR OFFICIAL USE ONLY lNFORMATON

I. FOR OFFICIAL USE ONLY INFORMATION

a. The "For Official Use Only" (FOUO) marking is assigned to infonnation at the time of its creation by a DoD User Agency. It is not authorized as a substitute for a security classification marking but is used on official government information that may be withheld from the public under exemptions 2 through 9 of the Freedom of Informat ion Act (FOIA).

b. Use of the above markings does not mean that the information cannot be released to the publ ic, on ly that it must be reviewed by the Government prior to its release to determine whether a s ignificant and legitimate government purpose is served by withholding the information or portions of it.

2. IDENTIFICATION MARKINGS:

a. An unclassified document containing FOUO information will be marked " For Official Use Only" at the bottom of the front cover (if any), on the first page, on each page containing FOUO information, on the back page, and on the outside of the back cover (if any). Each paragraph containing FOUO information wi ll be marked as such.

b. Within a classified document, an individual page that contains FOUO and classified in formation will be marked at the top and bottom with the highest security c lassification of information appearing on the page. If an individual portion contains FOUO information but no classified information, the portion will be marked "FOUO ...

c. Within a c lassified document, an individual page that contains FOUO information but no classified information will be marked ··For Official Use Only .. at the top and bottom of the page, as well as each paragraph that contains FOUO information.

d. Any FOUO information released to a contractor by a DoD User Agency is required to be marked with the following statement prior to transfer:

This document contains information EXEMPT FROM MANDATORY DISCLOSURE under the FOIA. Exemption(s) ____ applies/apply.

e. Removal of the FOUO marking can only be accomplished by the originator or other competent authority. When the FOUO status is terminated, all known holders wil l be notified to the extent practical.

3. DISSEMINATION: Contractors may disseminate FOUO information to their employees and subcontractors who have a need for the information in connection with a classified contract. Recipients shall be made aware of the status of such information, and transmission wi ll be by means that preclude unauthorized public disclosure. Transmittal documents will ca ll attention to the presence of FOUO attachments.

4. STORAGE: During work ing hours, FOUO in fo rmation shall be placed in an out-of-s ight location if the work area is accessible to persons who do not have a need fo r the information.

During non-working hours. the information shall be stored to preclude unauthorized access.

Filing such material with other unclassified records in unlocked files or desks is adequate when internal building security is prov ided during non-working hours. When such internal security control is not exercised, locked bui ldings or rooms will provide adequate after-hours protection or the material ; can be stored in locked receptacles such as file cabinets, desks, or bookcases.

5. TRANSPORTATION: FOUO in formation may be sent via first-class mail or parcel post.

Bulky shipments may be sent by fourth class mai l.

6. DISPOSITION & DISCLOSURE: When no longer needed, record copies of FOUO in formation may be disposed of by shredding. Unauthorized disclosure of FOUO in formation does not constitute a securi ty violation, but the re leasing agency must be in fanned of any unauthorized disclosure. Appropriate administrative action will be taken to fix responsibility for unauthorized disclosure whenever feasible, and appropriate disciplinary action w ill be taken against those respons ible. The unauthorized disclosure of FOUO information protected by the Privacy Act may a lso result in c ivil and criminal sanctions.

a. The ·'Official Use Only .. (FOUO)_ marking is assigned to information at the time o f its c reation by a DoD User Agency. lt is not authorized as a substitute for a security c lassification marking but is used on official government information that may be withheld from the public under exemptions 2 through 9 of the Freedom of Information Act (FOIA).

b. Use of the above markings does not mean that the information cannot be released to the public, only that it must be reviewed by the Government prior to its release to determine whether a significant and legitimate purpose is served by withho ld ing the information or portions of it.

VISITOR GROUP SECURITY AGREEMENT (VGSA)

(CLASSfF IED ACCESS & POSSESSION)

I. This agreement. entered into between the Commander, Air Force Technical Applications Center (AFTAC) Patrick AFB. Florida and , is 10 be performed at AFT AC under set provisions of DoD 5220.22-M, National Industrial Security Program, Section I. Part I .

. hereafter referred to as ""visitor group,"' shall be performing on a classified contract. DD Fonn 254, DoD Classified Contract Security Specification. at AFT AC. This Visitor Group Security Agreement (VGSA) prescribes specific actions to be taken by the visitor group and Mrs. Donna Miller (P) and Mr. James D. Mollison (A). (hereafter referred to as program manager); to properly protect classified defense information involved in this on-base contract. Under the terms of this agreement, AFTAC/SO, (herea~er referred to as Servicing Security Activity (SSA), is responsible for providing security program oversight, control, and supervision.

a. All parties, i.e. the commanders concerned, program manager. contracting officer, staff agencies, Air Force sponsor. visitor group, and their subcontractor group (if applicable). and the SSA shall comply with the provisions of this agreement without exception or deviation.

2. Visitor Group Security Supervision:

a. The designated officials exercising securi ty supervision over contract _ ________ and on my behalf are :

AFT AC/SO

I 0989 South Patrick Dri ve Patrick AF B. FL 32925-3002

(32 1) 494-3427/DSN 854-3427

b. The curren1 AFT AC program manager for this contract is:

Mrs. Donna Miller

AFTAC/TTX

I 0989 South Patrick Drive Patrick AFB, FL 32925-3002

(32 1) 494-0546/DSN 854-0546

c. The visitor group's Home Office Facility (HOF) shall provide the SSA and program manager with fomrnl wrinen notice the names of current listing of key on-base management officials or representatives, who will be responsible for visitor group security administration while the activity is located in Building 10989.

3. Standard Practice Procedures (SPP). Compl iance with this agreement normally e liminates the need for an addendum/supplement to the HOF SPP to outl ine security responsibilities at the visitor group's activity operating location. Should the visitor group's personnel determine a need to develop an addendum/supplement to the HOF SPP, a copy shall be provided to the SSA. A copy of the HOF SPP shall be maintained al the visitor group's activity operat ing location.

4. Access to and Accountability of Classified lnfom1ation:

Page I of6

a. All access to and/or possession of classified material by visitor group personnel, including oral and visual access, at the visitor group's activity operating location shall be under AFT AC supervision.

AFT AC maintains accountability. control. and ownership of all classified infonnation involved under the terms of this contract at all times per DoD 5200.1-R. AF! 31-40 I. and A FT AC Center Supplement 3 1- 40 I. The visitor group's access to classified information shall be controlled by AFT AC and limited to "contract specific, need-to-know" infonnation only.

b. The visitor group receives, releases. and disseminates classi fi ed material at AFT AC, Patrick AFB in accordance with DoD 5200. 1-R, Information Security Program. AFPD 31-4, Information Security, and 31-401. Information Security Program Management.

c. Should visitor group personnel, during contract performance discover unancnded classified materia l or an unsecured/unat1ended classified container, they shall immediately secure the classified material and notify the SSA, program manager (or designated official), and security manager. Material shall be released to the SSA; program manager or security manger, for safeguarding if the designated primary or alternate classified safe custodian cannot be contacted. During non-duty hours the visitor group personnel shall notify the Watch Officer at 494-4333. The classified material shall be turned over to the Watch Officer when the designated AFTAC safe custodian cannot be contacted.

5. Storage of Classified Material.

a. The visitor group is not authorized to store classified material independently. The visitor group is authorized to store and handle classified material in accordance with DoD 5200.1-R, AF I 31-40 I and AFT AC Center Instructions. All classified information shared with the visitor group must be stored in GSA approved security storage containers, per DoD 5220.22-M. Chapter 5, Section 3. Storage containers will be provided by the program manager's organization; providing the contract calls for Government Furnished Equipment (GFE). All classified material will be returned and secured in the designated government security container at the end of the duty day.

b. Government furnished storage containers will remain under the control of the program manager·s organization. The responsibility for setting storage container combination(s) rests with AFTAC. Each container will have a government safe custodian appointed. SF 700, Security Container Information, will be used to identify persons having knowledge of the combination(s), and may include military or civilian personnel designated by the program manager who have a need-to-know for the classi tied material in the container(s). This form will be posted inside the locking drawer of each storage container for emergency notification purposes.

c. Automated Information System (AIS). If the contractor must process classified information on an AIS, the AFTAC Government Program Manager (GPM) has the responsibility of getting the system approved for classified processing and outlining conditions for use. security managers and physical safeguarding procedures. Contractors performing Information Assurance (IA) functions, described in DOD 8570.01-M, must meet certification requirements mandated by DOD prior to performing work. The contractor shall use only government AIS systems inside any facilities with Government oversight. The contractor must complete all AIS awareness training and be briefed on access authorizations prior to receiving an account. The AFT AC GPM must authorize specific use for the system and all other access is denied. The contractor must comply with all Air Force, DoD and local guidance. The contractor shall have the access and the need to know. Jn addition, the GPM will insure contractors are properly trained prior to using the equipment. The AFTAC Government Program Manager shall prepare the designated approving authority (DAA) package in accordance with procedures in place at SSO Patrick/AFTAC Facilities. NOTE: AIS is any equipment used to capture. create, store, process or distribute information, including, but not limited to. stand alone computers (including network computers used in the stand alone

Page 2 of6 mode), word processors, laptop computers, Palm Pilots, Data Diaries, micro-computers, memory typewriters and memory calculators.

6. Transmission of Classified Material.

a. The visitor group is not authorized for direct receipt or dispatch of classified material at Patrick AFB through U.S. postal channels or commercial carriers.

b. Classified material is to be transmitted via U.S. Postal channels directly from AFT AC and shall be prepared in accordance with DoD 5200.1-R, AFl 31-401, and processed through the classified control system of Patrick AFB. SCI material will be sent from SSO Patrick using the Defense Courier Service.

c. Classified material may be handcarried onto or off Patrick AFB by an appropriately cleared and briefed visitor group courier, provided the employee is so designated in writing from the Program Manager and has a DD Form 250 I signed by AFT AC/SO, contractor will s ign and acknowledge their responsibility IAW DoD 5200.1-R and AFI 31-401. The Special Security Officer must authorize SCI material to be couried.

7. Disposition of Classified Material. The v1s1tor group shall return to the program manager or designated government classified custodian all classified material furnished by the government; to include, surrendering all classified material developed by the visitor group in connection with the contract at the end of contract performance or when no longer required, unless retention is granted by the contracting officer. Other methods of disposition shall be coordinated with the program manager and approved by the contracting officer prior to alternate disposition. Any missing classified material will be reported to the AFT AC/SO or Defense Security Service and a security incident conducted.

8. Reproduction of Classified Material. Only AF approved and controlled reproduction equipment shall be used by the visitor group, when so authorized, per DoD 5200.1-R and AFI 31-40 I. The visitor group is not authorized to reproduce classified material without the consent and/or approval of the program manager.

9. Security Education. Per Center Instruction 31-40 I, all contractors that have an AFT AC picture badge are required to attend AFT AC security refresher training once a year. Contractors who start after I Jan 2005 are required to attend the AFT AC Initial security training that lasts 16 hours. Contractor Facility Security Officers (FSO) can provide any additional training required by the NISPOM.

I 0. Personnel Security Clearances (PCLs). The visitor group's HOF shall submit visit requests annually either using Joint Personnel Automated System (JPAS), or using company letter head for visitor group's activity operating location personnel to appropriate Directorate securi ty manager and SSA in conformance with Chapter 6, NISPOM. A copy of the visit request will be retained at the visitor group's activity operating location. The program manager serves as sponsor for the visit. The HOF shall notify the security manager and SSA promptly of changes, additions and/or deletions of visitor group's activity operating location personnel requiring classified access. Expired or superseded visit requests shall be retained by the visitor group's activity operating location for one inspection cycle following their inspection.

11. Reports. The visitor group shall subm it immediately, in writing, to the SSA, reports required by the NISPOM. The vis itor group shall submit to the Defense Security Service Operating Center, Columbus Ohio, other reports required IA W para 1-302, NISPOM. The visitor group shall also keep

., the program manager, and SSA advised of any reports made in accordance

Page3of6 with para 1-304 requirements of the NISPOM and the contractor must meet requirements in CENI 31- 101.

a. The AFTAC Commander or designee appoints inquiry or investigation officials. Inquiry or investigation officials coordinate findings and reports with the appointing official and SSA.

b. The visitor group's HOF shall advise the SSA and the program manager of any changes in management, location, address or contractual perfonnance requirements.

12. USAF Controlled Area Badge: In accordance with AFT AC Center Instruction 3 1-10 I. visitor group employees shall use the automated entry control system badge to gain unescorted entry into USAF Controlled Area(s) within AFT AC. Controlled area badges will be issued only upon the request of the program manager or designated representative. A copy of the AF Form 2586, Unescorted Entry a ll personnel will receive controlled area training prior to issue of badge Authorization Certificate, will be filed and maintained by the requesting sponsor activity and controlled area training conducted yearly. A valid Visitor Authorization Letter (VAL) shall support request for badge issue. Once the need for unescorted access is no longer needed the AFT AC Badge must be turned into AFT AC/SO. The HOF shall establish out processing procedures to ensure badge turn-in and debriefings occurred.

13. Security Checks. The visitor group shall perform checks within work areas comprising the visitor groups activity operating location. These checks shall ensure at all times security precautions are taken to protect classified material in the possession of the visitor group. The visitor group shall designate an individual(s) to make room and area checks at shift changes and at the close of each working day to ensure:

a. All classi lied material has been properly scored.

b. Wastebaskets, routing baskets, typewriters, computers, desks, desk surface litter, and any other work surfaces are void of classified material.

c. Bags or boxes used to segregate classified waste are properly stored in an approved container.

d. Ensure all classified containers have been secured properly by the assigned government safe custodian. If found unsecured follow the steps in 4c of this agreement.

c. Checks of the area and security container(s) will be recorded on SF 701. Activity Security Checklist.

14. Emergency Protection. In the event of a natural disaster, major accident, or civil disturbance, the visitor group will comply with A FT A C's Emergency Action Plan. If unable to properly secure classi lied information, the visitor group shall maintain constant survei llance of the classified storage container(s) if possible. If the work area is evacuated and/or the container(s) are abandoned, the visitor group shall.

upon tennination of the emergency condition. examine classified holdings to verify no compromise or loss of material occurred. In the event of missing material or possible compromise, the discovering visitor group employee shall immediately notify the program manager, - - --- ------and the SSA.

15. Protection of Government Resources. The visitor group shall comply with AFT AC physical security and resource protection requirements, directives, and/or procedures. Contractor-maintained files will comply with governing Air Force records management rules (AF I 33-322, Records Management Program) and fall under the government file plan within the branch where the contractor is assigned.

Page 4 of6

Additionally, tile series containing classified records will be maintained in accordance AFMAN 37-123, Management of Records. The respective government program managers are responsible for providing the necessary training and procedures to ensure compliance.

16. Clarification of Security Requirements. When considered necessary, the visitor group shall request interpretations of security requirements as follows:

a. Visitor group will use the Center Form I 02, to request clarification of security classification guidance. Their contact program manager handles issues dealing with interpretation or security requirements.

b. Visitor group requests for clarification of security requirements of the NISPOM, shall be submitted through the SSA to the Defense Security Service Cognizant Security Office.

17. Contract and Associated DD Form 254. The visitor group shall maintain a copy of all contracting documents, any associated DD Form 254 and this (VGSA) at the visitor group's activity operating location.

18. Foreign Involvement. Under the terms of this agreement, the visitor group is required to notify the program manager. contracting office and the SSA, prior to any foreign involvement, regardless of access requirements or the sensitivity of infom1ation to be disclosed (classified or unclassified).

19. Inspections:

a. Staff Assistance Visits (SA Vs), Information Security Program Reviews (PRs). or self-inspections will not be conducted by the SSA of the visitor group, independent of AFT AC.

b. The SSA conducts PRs. if applicable, in the following manner:

( 1) The SSA will notify and schedule all PRs through the Directorate security managers. PRs will be conducted per DoD 5200.1-R. AFI 31-401, supplements thereto, and this agreement. A copy of the PR report will be provided to the visitor group by the Directorate security manager. The visitor group is not required to acknowledge receipt. or respond unless directed to do so in the report.

(2) The AFT AC PR or self-inspection will include the visitor group. The visitor group shall also be included in the AFTAC semiannual security self-inspection program. AFTAC will use the (VGSA) agreement and the unit's self-inspection criteria to monitor the visitor group's performance and compliance. Document and maintain the inspection report as required by DoD 5200. 1-R and AFI 31-401.

20. Expenditure of Funds for Security. This agreement is not an authorization for the commitment of funds. Nothing in this agreement shall be construed to impose any liability on the part of the U.S.

Government for injury to the agents, employees of the visitor group, its subcontractors (if applicable) assignees, or other individuals acting for or on the behalf of the visitor group, to the property of the same, nor shall anything in this agreement be construed to modify the provisions of existing contracts.

2 1. Review of this Agreement. All parties shall review this agreement at least annually for accuracy. The SSA is responsible for keeping this agreement current. In addition, the SSA will keep on file a copy of the last evaluation, self-inspection or equivalent review. Copies of reports may be made available to the visitor group for their files.

22. Other:

Page5of6

a. Forms. The program manager or designee will furnish all government forms and applicable A Fis. Ols. and/or unit securicy plans required in support of this contract.

b. Sub-Contracts. A (VGSA) agreement shall be initiated whenever the HOF or on-base visitor group enters into a subcontract arrangement with another contractor for classified performance at AFT AC or an AFT AC operating location. This (VGSA) agreement shall address the subcontractor operation separately. AFTAC, visitor group or it's HOF, as applicable, and all sub-contractors shall sign this agreement. A separate DD Form 254 is completed for each subcontractor requiring access to classified information. The visitor group or it's HOF. as applicable, is responsible for preparing the DD Form 254 for any sub-contractors and shall provide a copy to the SSA for review. The program manager ensures all questions pertaining to the DD Fonn 254 are resolved. The visitor group or its HOF signs item l 6 of the DD Form 254 for sub-contracts and makes required distribution.

c. Notification. Notify the SSA 30 days prior to contract completion or shutdown at AFTAC or AFT AC operating location in order to review contractor's operations to ensure proper disposition of classified materials per DoD 5200. l-R, AFI 31-40 I, and this agreement.

d. Govemment Liability. Nothing in this agreement shall be construed to impose any liability on the part of the US government for injury to the agents, employees of the contractor, its subcontractors, assignees, or other individuals acting for or on behalf of the contractor. to the property of the same.

nor shall anything in this agreement be construed to modify the provisions of existing contracts.

CHARLES A. ROLFES

Information Security Program Manager ( ISPM)

Visitor Group Representative Title/Position

DONNA L. MILLER

Program Manager

Date

Date

16Jun 15

Date

Page 6 of6