Appendix_F_-_Part_2_DD_254_Continuation_Sheet-14_Jul2017.pdf

Appendix F: DD254 Continuation Sheet

FA8106-16-R-0012

Ref Block 8 a, b, c: ACTUAL PERFORMANCE (cont’d)

Table 1 a.

NAME, ADDRESS AND

ZIP CODE

b.

CAGE

CODE

c.

COGNIZANT SECURITY OFFICE

LEVEL(S) OF

CLASSIFIED

PERFORMANCE AT

THIS LOCATION

OEM Gulfstream Aerospace Corp Appleton, WI

7V983 Defense Security Service (IOFNS) 303 Fountains Parkway, Ste 303 Fairview Heights, IL 62208 dss.dss-northern.dss-isfo.mbx.st-louis-field-office@mail.mil

Collateral Secret

OEM Gulfstream Aerospace Corp Savannah, GA

59734 Defense Security Service (IOFSA) 1899 Powers Ferry Road, Ste 300 Atlanta, GA 30339 dss.atlantafieldoffice@mail.mil

Collateral Secret

Joint Base Andrews NA 11 WG/IP (AFDW) 1190 Menoher Drive, Suite 30 Joint Base Andrews, MD 20762

Collateral Secret

MacDill AFL NA 6AMW/IP 7235 Bayshore Blvd MacDill AFB, FL 33621 6amw.ip@us.af.mil

Collateral Secret

Hickam AFB NA 15 WG/IP 800 Scott Circle JBPH- Hickam Field HI 96853 15wg.ipo@us.af.mil

Collateral Secret

MCAS Kaneohe Bay, HI NA HQBN/STAC6 Building 208 2nd Street Kaneohe Bay, HI 96863

Collateral Secret

Ramstein AB, DE NA 86 AW/IP Unit 3300

APO AE 09094

86aw.informationprotectionoffice@us.af.mil

Collateral Secret

NAS Sigonella, IT NA U.S. Navy ETD Sigonella C-20 C-37 Program Executive Transport Hangar # 426 SS 417 Catania - Gela 95040 Catania, Italy Bruce.lefferts@eu.navy.mil

Collateral Secret

Naval Base Ventura County (NBVC) PT Mugu, CA

NA VX-30, Commanding Officer Attn: VX30 Security Officer 575 "I" Avenue Suite 1, Hangar 372 Point Mugu, CA 93042-5049

Collateral Secret

* And other DoD cleared contractor depot facilities, and other worldwide locations as directed by the Procuring Contracting Officer (PCO).

mailto:6amw.ip@us.af.mil mailto:15wg.ipo@us.af.mil mailto:86aw.informationprotectionoffice@us.af.mil

Block 13: SECURITY GUIDANCE (Cont’d)

a. Ref Blk 10a/11h: COMSEC/Cryptographic safeguarding requirements apply. See AFMAN 17-1302, Communications Security (COMSEC) Operations for guidance. For contractor locations, See NSA/CSS Policy Manual 3-16, Control of COMSEC Material for guidance.

Release of COMSEC material and equipment to DoD contractors requires Air Force Cryptological Support Center approval. Contractor will forward requests for COMSEC information and material to the COMSEC officer through the program office. Contractor is governed by DOD 5200.22-M, National Industrial Security Program Operating Manual (NISPOM) and NSA/CSS Policy Manual 3-16, Control of COMSEC Material, for the accounting and safeguarding of COMSEC material/information. Personnel accessing classified COMSEC material shall be U.S. citizens possessing a final U.S. security clearance equal to or greater than the classification of the COMSEC material and will have received a Cryptographic Access Briefing. Access to un-keyed/unclassified Controlled Cryptographic Items (CCI) does not require a security clearance, but is restricted to U.S. citizens who have received a COMSEC briefing. Contractor is authorized to subcontract classified COMSEC work.

OEM Gulfstream cleared contractor facilities shall maintain COMSEC accounts for shipping, receiving and storing COMSEC equipment and material up to and including SECRET. CLS sites shall maintain or have access to a local COMSEC account for the shipping, receiving and storing of un-keyed/unclassified Controlled Cryptographic Items (CCI) equipment and material. Classified COMSEC equipment and material at the CLS sites must be shipped, received and stored by the host unit COMSEC account.

Table 2

Facility OEM COMSEC Manager

Telephone EMAIL Address COMSEC Account Number

Savannah, GA Brian Williams 912-675-2600 brian.williams@gulfstream.com 872425 Appleton, WI Eric Semrow 920-636-0059 eric.semrow@gulfstream.com 874531

b. Ref Block 10j - For Official Use Only (FOUO) information provided under this contract shall be maintained and safeguarded IAW DOD 5200.01-V4, DoD Information Security Program:

Controlled Unclassified Information (CUI).

c. Ref Block 10k:

1. Contractor shall apply “PL 3” level security protection IAW AFI 31-101 for C-20 and C- 37 aircraft while at the contractor’s cleared facilities.

2. Permanently assigned contractor personnel at the MOBs working directly on the aircraft shall have a SECRET clearance (interim or final). Contractor personnel performing recurring maintenance on the aircraft at the contractor facilities shall, at a minimum, have received a favorable background check. Individuals requiring infrequent access to the aircraft at the MOBs or contractor facilities shall be escorted in a ratio not exceeding 4 escorted persons to 1 escort by personnel who are authorized for unescorted access.

3. Contractor shall establish means to ensure only authorized contractor personnel are allowed unescorted access onto or near C-20 or C-37 aircraft. Exemptions are U.S.

Military, Civilian and DCMA personnel with a SECRET security clearance who have an official requirement in conjunction with the maintenance of the aircraft.

4. As required, the Government will provide the Contractor with a copy of the Cybersecurity Strategy plan.

5. Partial work performance may occur at undisclosed installations. Upon determination, the contractor shall provide to the on-base servicing Security Forces office all information required by the Notification of Government Security Activity Clause and any other additional information required by that office.

6. Policy guidance regarding Foreign Ownership, Control or Influence (FOCI) DoD 5220.22-M Chapter 2, Section 3, National Industrial Security Program (NISP), and DTM 09-019, Policy Guidance for FOCI, shall apply to this contract.

d. Ref Blocks 11b, d and e – The Contractor’s cleared contractor facilities shall IAW NISPOM receive and provide on-site accountability and safeguarding for classified material and equipment arriving with C-20 and C-37 aircraft. Contractor will provide adequate storage for classified hardware which exceeds two cubic feet, but not more than 18 cubic feet of storage area. Contractor will provide CLS services for C-20/C-37 aircraft and safeguard materials and equipment IAW applicable security classification markings and Security Classification Guides

(SCG).

e. Ref Block 11f – Contractor is authorized to access classified material and equipment up to and including SECRET aboard military installations and deployed locations outside the U.S. in support of the work effort.

f. Ref Block 11g –Contractor will maintain a current DD2345 Military Critical Technical Data Agreement (MCTDA) authorization and obtain need-to-know concurrence from the PCO when requesting unclassified documents or manuals that are not publicly available (i.e. FOUO) , but are required for contract performance.

g. Ref Block 11j – Contractor shall develop and implement an Operations Security (OPSEC) plan for the protection of Critical Program Information (CPI) identified in the C-20 and C-37 Program Protection Plans and other CPI as identified by the PCO.

h. Ref Block 11k – Contractor is authorized the use of Defense Courier Service (DCS) for the shipping and receiving of classified COMSEC equipment and keying material. Go to http://www.transcom.mil/cmd/associated/dcd/ for Defense Courier Service points of contact and guidance http://www.transcom.mil/cmd/associated/dcd/

i. Ref Block 11l:

1. Contractor personnel accessing classified COMSEC material shall have a final SECRET clearance and a Cryptographic Access Briefing.

2. Provide the information requested by the Notification of Government Security Activity and Visitor Group Security Agreements clause, Air Force Federal Acquisition Regulation Supplement (AFFARS 5352.024-9000, to the security activities listed in Block 8a.

Block 15 Cont’d:

b. Ref Blk 11l: Primary work performance will occur at military installations in the U.S. and worldwide. DSS is relieved of inspection responsibility for contractor performance aboard military installations. Local installation security offices will maintain security oversight at military installations.

FOUO DD FORM 254 ATTACHMENT

Contract Number:

PROTECTING "FOR OFFICIAL USE ONLY" (FOUO) INFORMATION

1. GENERAL:

a. The "For Official Use Only" (FOUO) marking is assigned to information at the time of its creation in a DoD User Agency. It is not authorized as a substitute for a security classification marking but is used on official government information that may be withheld from the public under exemptions 2 through 9 of the Freedom of Information Act (FOIA).

b. Other non-security markings, such as "Limited Official Use" and "Official Use Only" are used by non-DoD User Agencies for the same type of information and should be safeguarded and handled in accordance with instruction received from such agencies.

c. Use of the above markings does not mean that the information cannot be released to the public under FOIA, only that the Government must review the information prior to its release to determine whether a significant and legitimate government purpose is served by withholding the information or portions thereof.

2. MARKINGS:

a. An unclassified document containing FOUO information will be marked "For Official Use Only" at the bottom of the front cover (if any), on the first page, on each page containing FOUO information, on the back page, and on the outside of the back cover (if any).

b. Within a classified document, an individual page that contains both FOUO and classified information will be marked at the top and bottom with the highest security classification of information appearing on the page. If an individual portion contains FOUO information but no classified information, the portion will be marked, "FOUO."

c. Any "'For Official Use Only" information released to a contractor by a DoD User Agency is required to be marked with the following statement prior to transfer.

“This document contains information EXEMPT FROM MANDATORY DISCLOSURE UNDER THE FOIA. Exemptions apply.”

d. Removal of the "For Official Use Only" marking can only be accomplished by the originator or other competent authority. When the "For Official Use Only" status is terminated, all known holders will be notified to the extent practical.

3. DISSEMINATION: Contractors may disseminate "For Official Use Only" information to their employees and subcontractors who have a need for the information in connection with a classified contract. Contractors must ensure employees and subcontractors are aware of the special handling instructions detailed below.

4. STORAGE: During working hours, "For Official Use Only" information shall be placed in an out-of-sight location if the work area is accessible to persons who do not have a need for the information. During nonworking hours, the information shall be stored to preclude unauthorized access. Filing such material with other unclassified records in unlocked files or desks, is adequate when internal building security is provided during nonworking hours. When such internal security control is not exercised, locked buildings or rooms will provide adequate after-hours protection or the material can be stored in locked receptacles such as file cabinets, desks, or bookcases.

5. TRANSMISSION: "For Official Use Only" information may be sent via first-class mail or parcel post. Bulky shipments may be sent by fourth-class mail. DoD components, officials of DoD components, and authorized DoD contractors, consultants, and grantees send FOUO information to each other to conduct official DoD business. Tell recipients the status of such information, and send the material in a way that prevents unauthorized public disclosure. Make sure documents that transmit FOUO material call attention to any FOUO attachments. Normally, you may send FOUO records over facsimile equipment. To prevent unauthorized disclosure, consider attaching special cover sheets, the location of sending and receiving machines, and whether authorized personnel are around to receive FOUO information. FOUO information may be passed to officials in other departments and agencies of the executive and judicial branches to fulfill a government function. Mark the records "For Official Use Only" and tell the recipient the information is exempt from public disclosure under the FOIA and requires special handling.

6. DISPOSITION: When no longer needed, FOUO information must be shredded.

7. UNAUTHORIZED DISCLOSURE: Unauthorized disclosure of "For Official Use Only" information does not constitute a security violation but the releasing agency should be informed of any unauthorized disclosure. The unauthorized disclosure of FOUO information protected by the Privacy Act may result in criminal sanctions and disciplinary action may be taken against those responsible.