Atch_5_-_ATS_RFP_DD_Form_254.pdf

DEPARTMENT OF DEFENSE 1. CLEARANCE AND SAFEGUARDING

CONTRACT SECURITY CLASSIFICATION SPECIFICATION a. FACILITY CLEARANCE REQUIRED

TOP SECRET

( T h e r e q u i r ements of the Do D I n d u s t r i a l S e c u r i t y M a n u a l a p p l y t o a l l s e c u r i t y a s p e c t s o f t h i s e f f o r t . )

b. LEVEL OF SAFEGUARDING REQUIRED

NONE

2. THIS SPECIFICATION IS FOR: (X and complete as applicable) 3. THIS SPECIFICATION IS: (X and complete as applicable)

a. PRIME CONTRACT NUMBER

a. ORIGINAL (Complete date in all cases)

Date (YYYYMMDD)

b. SUBCONTRACT NUMBER

b. REVISED

(Supersedes all previous specs) Revision No.

c. SOLICITATION OR OTHER NUMBER

FA7046-16-R-0003

c. FINAL (Complete Item 5 in all cases)

4. IS THIS A FOLLOW-ON

CONTRACT?

YES NO. If YES, Complete the following:

Classified material received or generated under (Preceding Contract No.) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM

254? YES NO. If YES, Complete the following:

In response to the contractor’s request dated , retention of the classified material is authorized for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) code)

a. NAME, ADDRESS, AND ZIP CODE

TBD

b. CAGE CODE

TBD

c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

TBD

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE

b. CAGE CODE

c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

8. ACTUAL PERFORMANCE

a. LOCATION HQ AFOTEC, Kirtland AFB, NM Det 2 AFOTEC, Eglin AFB, FL Det 4 AFOTEC, Peterson AFB, CO Det 5 AFOTEC, Edwards AFB, CA AFOTEC Active Designated Operation Locations Designated Test Ranges

b. CAGE CODE

TBD

c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code) Appropriate DSS office, and/or military installation as required http://www.dss.mil/isp/dss_oper_loc.html

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

In Support of AFOTEC Test Services (ATS)

10. CONTRACTOR WILL REQUIRE ACCESS TO: YES NO 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER CONTRACTOR'S

FACILITY OR A GOVERNMENT ACTIVITY

b. RESTRICTED DATA b. RECEIVE CLASSIFIED DOCUMENTS ONLY

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION c. RECEIVE AND GENERATE CLASSIFIED MATERIAL

d. FORMERLY RESTRICTED DATA d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. INTELLIGENCE INFORMATION: e. PERFORM SERVICES ONLY

(1) Sensitive Compartmented Information (SCI) f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES

(2) Non-SCI g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL INFORMATION

CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER

f. SPECIAL ACCESS INFORMATION h. REQUIRE A COMSEC ACCOUNT

g. NATO INFORMATION i. HAVE TEMPEST REQUIREMENTS

h. FOREIGN GOVERNMENT INFORMATION j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

i. LIMITED DISSEMINATION INFORMATION k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

j. FOR OFFICIAL USE ONLY INFORMATION

l. OTHER (Specify) May require the use of secure communications equipment and accredited computer systems to process classified information. Also see Item #13.

k. OTHER (Specify) .

SIPRnet access is required for contract performance

DD FORM 254, DEC 1999 PREVIOUS EDITION IS OBSOLETE 805/340

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release Direct Through (Specify):

Information requiring AF or DoD-level review will be forwarded by the entry-level Public Affairs (PA) office through AFOTEC's PA office to the Secretary of the AF, Office of PA, Security & Review Division (SAF/PAX), 1690 Air Force Pentagon, Washington DC 20330-1690. Release of SAP information will be made through HQ AFOTEC/CVI-SAP Security and only approved by/through SAF/AAZ. All other requests will be made through: AFOTEC/PA 1251 Wyoming Blvd SE, Kirtland AFB, NM 87117-5558. Requests should be submitted 60 days prior to expected date of release.

to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

A Visit Request (VR) will be submitted via JPAS to SMO code HQAFOTEC, not to exceed one year, for all contractor personnel requiring access to AFOTEC facilities. In addition to the VR, the FSO must submit a Visitor Access Letter (VAL) to CVI and its Detachments or Operating Locations, that includes all personnel from the VR and a column indicating whether or not each person requires a permanent badge (permanent badges can only be issued if a contractor visits AFOTEC a minimum of three times per week). If personnel changes should arise, an updated VR and VAL must be submitted to CVI and its Detachments or Operating Locations within five days. VALs must identify additions, deletions, and badge requirement. For access to AFOTEC Special Access Program Facilities (SAPFs), the VAL must also be sent to AFOTEC/CVI SAP Security. Contractors who are issued a permanent badge must outprocess through CVI and/or CVI SAP Security upon contract and/or employment termination. Contractors will complete all AFOTEC directed training.

Due to the number and multiple classifications of test programs; Security Classification Guides (SCGs) required for the performance of this contract will be provided by the Contracting Officer Representative, Test Director, and/or a cleared Government Representative.

KAREN TROGLIN GERALDINE ARCHULETA GRANT BRESSETT RYAN HATABURDA JOSEPH DORROH

Chief, Personnel/ Government SAP Security Senior Intelligence Officer Program Security Officer COMSEC Manager Industrial Security Officer AFOSI/PJ Det 8 OL-A

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract. (If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.) Yes No

See DD Form 254, Block 13 Security Guidance Continuation Pages. A Visitor Group Security Agreement (VGSA) is required for work conducted at any military installation or if deemed warranted by the applicable CSO for that performance location.

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. (if Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.) Yes No

The Defense Security Service (DSS) is relieved of inspection responsibility for those elements of the contract that are performed in AFOTEC, USAF, or other government facilities. AFOSI/PJ has inspection responsibility for SAP Security. AFOTEC/CVI has inspection responsibility for collateral security.

AFOTEC/A-2/A-9N has inspection responsibility for Sensitive Compartmented Information (SCI) Security.

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL

b. TITLE

CONTRACTING OFFICER

c. TELEPHONE (Include Area Code) 505-846-8423

d. ADDRESS (Include Zip Code)

AFOTEC/A7K

1251 Wyoming Blvs SE Kirtland AFB, NM 87117-5558

17. REQUIRED DISTRIBUTION

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

d. U.S ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY

ADMINISTRATION

e. ADMINISTRATIVE CONTRACTION OFFICER

f. OTHERS AS NECESSARY

e. SIGNATURE

DD FORM 254 (BACK), DEC 1999

DD Form 254 Continuation Sheet for FA7046-16-R-0003

As of 20160719 1

Section 13, Security Guidance, cont’d:

Contracting. Before awarding a contract or subcontract to a foreign contractor, or awarding a subcontract to a U.S. contractor that involves access to a foreign government, a contractor must notify the program manager (PM), Contracting Officer (CO), and Contracting Officer Representative (COR). A company is considered to be operating under Foreign Ownership, Control or Influence (FOCI) whenever a foreign interest has the power, direct or indirect, whether or not exercised, and whether or not exercisable through the ownership of the U.S. Company’s securities, by contractual arrangements or othermeans, to direct or decide matters affecting the management or operations of that company in a manner which may result in unauthorized access to classified or proscribed information (TOP SECRET, COMSEC, SCI, SAP and RD or that which may adversely affect the performance of classified contracts and require a National Interest Determination (NID). A NID is required when a U.S. company is owned or controlled by a foreign commercial firm or company cleared by the Defense Security Service (DSS) under a Special Security Agreement (SSA) and access to proscribed information is required by a U.S. government contract.

Proscribed information is defined by the National Industrial Security Program Operating Manual (NISPOM), paragraph 2.303 (Reference C). The requirement for a NID applies to new contracts, including pre-contract activities in which access to proscribed information is required, and to existing contracts, when contractors are acquired by foreign interests and an SSA is the proposed FOCI mitigation method. Contracts or subcontracts involving foreign government information shall not be awarded to a contractor without the express written consent of the U.S. government.

Block 10a. A contractor who requires access to Communications Security (COMSEC) material/information must submit a request to the appropriate Air Force or National Agency (NSA) central office of record through the contracting office or program office. COMSEC material/information may not be released to DoD contractors without Air Force Cryptological Support Center (AFCSC) approval.

Contractor must forward requests for COMSEC material/information to the COMSEC officer through the program office. The contractor is governed by the National Security Agency (NSA) Industrial COMSEC Manual, NSA MAN 90-1, DoD 5220.22-S COMSEC Supplement to Industrial Security Manual for Safeguarding Classified Information and AFI 33-210, Vol II, III, and IX for the control and protection of COMSEC material/information. Access to COMSEC material by personnel is restricted to U.S. citizens holding final U.S. Government clearances. Such information is not releasable to personnel holding only reciprocal clearances. A COMSEC account will be established and COMSEC will be protected per National Security Agency (NSA) Industrial COMSEC Manuel. Contractor personnel supporting the locations identified in Block 8a require access to COMSEC material due to the handling of COMSEC material to support telephone usage.

Block 10b. The contractor is permitted access to RESTRICTED DATA (RD) in the performance of this contract if stated in the task order. Access to RD requires a final U.S. Government clearance at the appropriate level. The Contracting Officer Representative (COR) will be the designated representative to determine if the contractor Facility Security Officer (FSO) and all concerned employees should be briefed prior to the access being granted. The contractor is responsible for granting the access.

Block 10c. The contractor is permitted access to CRITICAL NUCLEAR WEAPONS DESIGN INFORMATION (CNWDI) in the performance of this contract if stated in the task order. Access to CNWDI requires a final U.S. Government clearance at the appropriate level. The COR will be the designated representative to determine if the contractor Facility Security Officer (FSO) and all concerned employees are briefed prior to the access being granted. The contractor is responsible for granting the access.

Block 10d. The contractor is permitted access to FORMERLY RESTRICTED DATA (FRD) in the performance of this contract if stated in the task order. Access to FRD requires a final U.S. Government clearance at the appropriate level. The COR will be the designated representative to determine if the contractor Facility Security Officer (FSO) and all concerned employees are briefed prior to the access being granted. The contractor is responsible for granting the access.

As of 20160719 2

Block 10e. (1): Access to Sensitive Compartment Information (SCI) by the contractor will be restricted to U.S. Government Sensitive Compartment Information Facilities (SCIFs) only. SCI material may be used and stored only in accredited Government SCIFs.

The individual having full authority over all matters pertaining to the SCI portion of the contract is the AFOTEC Special Security Officer (SSO).

The FSO or designated representative will notify AFOTEC SSO office of any changes in ownership of the company within five working days of the change. If ownership change involves foreign ownership or interest, the FSO or designated representative will provide all necessary documentation/information to draft a ‘National Interest Determination’ to the AFOTEC SSO office within that five working day period.

All inquiries pertaining to SCI classification issues, safeguarding, access eligibility, etc., will be directed to the AFOTEC SSO. Any SCI or SCI-derived information generated under this contract will be reviewed by the AFOTEC SSO for classification determination prior to publication and/or distribution.

The contractor will submit a listing of all employees requiring SCI access to the AFOTEC SSO, through the COR. Only those employees specifically approved by the AFOTEC SSO will be allowed access to SCI pertaining to the contract.

All contractor personnel who require access to SCI while performing on this contract must possess a current TOP SECRET personnel security clearance and meet SCI eligibility standards. The contractor will inform the AFOTEC SSO of any information concerning an employee that may have an impact on his/her SCI eligibility. Any questions of what constitutes reportable information will be directed to the AFOTEC

SSO.

The AFOTEC SSO will maintain a current SCI access listing, reflecting each employee’s name, clearance level, and date of initial access. The AFOTEC SSO will be advised immediately of the reassignment, resignation, or termination of any employee who is performing on the SCI portion of this contract. All employees indoctrinated into SCI under this contract are required to out process through the AFOTEC SSO prior to departure, termination of employment, or termination of contract.

The contractor will not subcontract any part of the SCI portion of this contract without obtaining written authorization from the AFOTEC SSO.

The contractor will not reproduce or destroy any SCI material without the express written permission of the AFOTEC SSO.

Block 10e. (2): The contractor will maintain accountability records for all intelligence material in its custody. Such material will be conspicuously marked “Property of AFOTEC/A-2N” for instant identification purposes. The release authority (RA) for intelligence material, regardless of the medium, is the AFOTEC Senior Intelligence Officer (SIO).

The contractor will not reproduce intelligence material unless approved by the RA. However, the contractor is authorized to extract information from intelligence material without RA approval, unless such extraction is prohibited by caveats or warning notices on the material. Any extraction of intelligence material and reproduction notice (eg, “Reproduction requires approval of originator or higher authority”) requires RA authorization. Extractions will comply with applicable directives regarding marking, disposition, and distribution.

Upon completion of the contract, or when directed by the RA, the contractor will return to the RA, or destroy, all intelligence material received or generated under the contract. Destruction of intelligence

As of 20160719 3 material requires the RA’s authorization. If destruction is authorized, the appropriate documentation concerning the destruction of the material will be provided to the RA.

Ref 10e and 10f: Certain employees of the contractor will require access to TOP SECRET, Sensitive Compartment Information (SCI), and/or TOP SECRET or SECRET Special Access Program (SAP) material. These personnel must possess a current TOP SECRET security clearance or meet the investigative criteria required for the level of access. All employees requiring access to SCI will be processed and indoctrinated through the AFOTEC SSO. All employees requiring access to Special Access Program (SAP) information will be authorized with the approval from AFOTEC Program Security Officer (PSO) and indoctrinated by the Special Access Program Security Manager and/or briefed personnel. HQ AFOTEC will be the final approval authority for all TOP SECRET SCI and/or TOP SECRET or SECRET SAPs. Any access to TOP SECRET/SCI and/or SAP material will be performed at AFOTEC approved facilities or other approved U.S. Government facilities. All inquiries pertaining to SAP classification issues, safeguarding, access eligibility, reporting, etc., will be directed to AFOTEC/CVI-SAP Security, Detachment (Det) or Operating Locations (OLs) appointed Government SAP Security Officers/Managers, or Government Program Security Officer (PSO).

The FSO or designated representative will notify AFOTEC CVI-SAP Security of any changes in ownership of the company within five working days of the change. If ownership change involves foreign ownership or interest, the FSO or designated representative will provide all necessary documentation/information to draft a ‘National Interest Determination’ to the AFOTEC SSO office within that five working day period.

The contractor will not subcontract any part of the SAP portion of this contract without obtaining written authorization from the AFOTEC PSO.

Block 10g. The contractor is permitted access to NORTH ATLANTIC TREATY ORGANIZATION (NATO) information in the performance of this contract if stated in the task order. Access to NATO requires a final U.S. Government clearance at the appropriate level. The COR will be the designated representative to determine if the contractor FacilitySecurity Officer (FSO) and all concerned employees are briefed prior to the access being granted. The contractor is responsible for granting the access.

Block 10j. FOR OFFICIAL USE ONLY (FOUO) information released to the contractor will be handled and protected in a manner which precludes disclosure of the information to persons not performing on the contract. FOUO information will be stored out of sight during non-working hours and, when no longer needed, will be destroyed by shredding or manually tearing into pieces small enough to preclude reconstruction of the document. Any information generated by the contractor containing FOUO information will be marked accordingly and handled in accordance with current DoD and AF directives/instructions/manuals.

Block 10k. The contractor may require SIPRnet access at the locations identified in Block 8a. Each individual requiring SIPRnet access requires NATO access and must receive a NATO Indoctrination briefing from the contract FSO or other designated personnel appointed by the contract company, due to NATO information residing on the SIPRNet. This does not mean the individual has obtained or needs to obtain access to NATO information. AFOTEC A-6 will be the approval authority for SIPRNet access.

Block 11c. The contractor may be required to receive, generate, and store classified information up to and including SECRET (non SAP or SCI) at the facility identified in Block 8a. Classified information will be handled, marked, protected, reproduced, destroyed, and transmitted in accordance with the requirements stipulated in the National Industrial Security Program Manual (NISPOM), DoD, and Air Force Instructions/Regulations. The contractor will be required to receive, generate, train, brief, and

As of 20160719 4 store information classified up to and including TOP SECRET/SAR/SCI at the facilities identified in Block 8a. Classified information will be handled, marked, protected, reproduced, destroyed, and transmitted IAW the Executive Orders, Air Force and Department of Defense Instructions/Regulations/Manuals, and/or Supplements, , and AFOTEC Standard Operating Procedures, and Master System Security Plans and Supplements.

Block 11g. The contractor is authorized to use the services of National Defense Technical Information Center (DTIC) and is required to prepare and process a DD Form 1540, Registration for Scientific and Technical Information Services, and DD Form 1542, Facility Clearance Register in accordance with the NISPOM. The contracting activity must be involved in certifying need-to-know DTIC. Classified information will not be sent to DTIC or the U.S. Department of Energy Office of Scientific and Technical Information.

Block 11h.

Block 11i. Any transfer or processing of classified or sensitive information via electronic methods (e.g., facsimile, telemetry, voice, computer) must be protected by implementing an appropriate combination of countermeasures such as encryption devices and sound practices and procedures. The specific countermeasures used, must be coordinated by completing a TEMPEST Requirement Questionnaires (TRQ). The local Government PSO, with guidance from a Certified TEMPEST Technical Authority (CTTAs), shall determine if countermeasures are required based upon the completed TRQ.

Block 11j. Operation Security (OPSEC) requirements deemed appropriate for performance on this contract, will be furnished under a separate cover by AFOTEC/CVI, AFOTEC/CVI-SAP Security, AFOTEC/A-2N, or AFOTEC Detachment and Operating Locations Government SAP Security Officers/Managers.

Block 11l. This contract may require the contractor to use Automated Information Systems (AIS) to process and generate classified information up to and including SECRET material. Any (non SAP or non SCI) AIS used by the contractor at the facility identified in Block 6a, must be accredited by the DSS prior to classified usage. Any AIS used by the contractor at the facilities approved for SAPs, must be accredited by the cognizant government Program Security Officer prior to use. Classified information may not be transmitted in any manner via the unclassified AFOTEC local area network or wide area network.

Security Classification Guidance will be provided to the contractor personnel by AFOTEC in the form of classification source material and/or Security Classification Guides (SCGs). IAW Executive Order (EO) 13526, contractors upon appointment by the FSO, a director, delegated official or detachment commander, may have derivative classification authority, and are authorized to compile classified information from classified source material(s) and/or SCGs provided by AFOTEC, with the intent to create a new classified document. Upon formal appointment, contractors must receive specialized derivative classifier training and renew this training every two years or lose the authority to derivatively classify. In addition, the contractor will observe and respect original classification decisions and carry forward to any newly created document(s) the pertinent classification markings.

For information compiled and classified based on multiple sources, the contractor will carry forward the date or event for declassification that corresponds to the longest period of classification among the sources or the marking established pursuant to EO 13526, section 1.6(a)(4)(D). 1.6(a) (4) (D) requires the contractor compiling the classified document(s) to list all source materials that will be included in all compiled classified documents. A bibliography may be used to reference all source material used to compile information and will be included in all reports and other end products.

As of 20160719 5

Any questions on the classification level of any information pertaining to Special Access Programs will be immediately referred to AFOTEC/CVI-SAP Security or the cognizant government Program Security Officer. Any questions on the classification level of any information pertaining to Sensitive Compartmented Information will be immediately referred to the AFOTEC SSO or Senior Intelligence Officer (SIO)

Contractor employees designated to perform on this contract must be U.S. citizens and hold a minimum of a current National Agency Check with Local Agency and Credit Check (NACLC) or T3 or T3R current within 5-years for access to SECRET/SAPs. TOP SECRET/SAPs require a current Single Scope Background Investigation (SSBI). Clearance investigations must be current within 5 years. Certain employees will require a TOP SECRET personnel security clearance and maintain eligibility for SCI access.

Prior to subcontracting any portion of this contract, the prime contractor will be responsible for preparing a DD Form 254 for each subcontract awarded. When the subcontract requires access to sSAP or SCI information, the prime contractor will forward the request to the AFOTEC/CVI and the COR.

AFOTEC/CVI will forward the request to AFOTEC/CVI-SAP Security or AFOTEC SIO for coordination.

AFOTEC/CVI-SAP Security will forward the DD Form 254 to the AFOTEC Program Security Officer for approval. Upon approval, AFOTEC/CVI will forward copies to the prime contractor, COR, and AFOTEC/CVI-SAP Security. The prime contractor will not release classified information (including oral release) to any subcontractor until an approved subcontract is in place.

Contractor employees working full-time or part-time in AFOTEC facilities will comply with internal security procedures and requirements at all times. Failure to do so will result in expulsion from AFOTEC facilities. Contractor personnel are subject to random inspections of their briefcases, handbags, athletic bags, packages, boxes, etc., upon entering or departing AFOTEC facilities.

Contractors who work on Air Force installations must execute a Visitor Group Security Agreement (VGSA) between AFOTEC and the contractor IAW the host installation and AFI 16-1406, Industrial Security Management.

The POC for collateral classified information is Ms. Karen Troglin, AFOTECCVI, (505) 846-5205.

The POC for SCI classified information is Mr. Grant Bresett, AFOTEC/A-2N, (505) 846-2361.

The POC for SAP classified information is Ms. Geraldine Archuleta, AFOTEC/CVI-SAP Security, (505) 846-8540.

The POC for COMSEC is TSgt Joseph Dorroh, AFOTEC A-6, (505) 846-6452