Section_J_Attachment_10_PSSC_DD254.pdf

DD FORM 254 Attachment 1 April 2013

FA8214-13-R-0003

PROPULSION SUBSYSTEM SUPPORT CONTRACT DD FORM 254 ATTACHMENTS AND ADDENDUMS

ATTACHMENT 1

ITEM 17F: COORDINATION

THIS DD FORM 254 HAS BEEN REVIEWED AND COORDINATED BY:

5/13/2013

X Enrique Zamora Enrique Zamora

AFNWC/NWIOS

Signed by: ZAMORA.ENRIQUE.1152994466

5/23/2013

X Richard Norstebon

75 ABW/IPD

5/13/2013

X Lori Prendergast

75 ABW/SCXS

Signed by: PRENDERGAST.LORI.AMELIA.1205258341

DD FORM 254 Attachment 2 April 2013

PROPULSION SUBSYSTEM SUPPORT CONTRACT DD FORM 254 ATTACHMENTS AND ADDENDUMS

ATTACHMENT 2

ITEM 13

Ref: 10. Contractor Access

Ref. 10.a: COMSEC safeguarding requirements apply. See the NISPOM chapter 9, section 4 for details.

For on-base performance, COMSEC is incumbent on the government. Access on a government installation is granted by the user agency. Access to COMSEC information is restricted to U.S. Citizens holding a final U.S. government clearance. Personnel must receive the required COMSEC briefing. Prior approval is required from the Government Contracting Activity prior to granting access to COMSEC information to a subcontractor.

Ref. 10.j: FOUO information provided under this contract shall be safeguarded as specified in the attachment “Protecting For Official Use Only (FOUO) Information.”

Ref. 10.k: Access to SIPRNET is required

DD FORM 254 Attachment 2 April 2013

Ref: 11. Contractor Performance

Ref. 11.c: The contractor requires access to classified source data up to and including SECRET in support of the work effort. Any extracts or use of such data requires the contractor to apply derivative classification markings consistent with the source documents and Executive Order (E.O.) 13526, as amended. Use of “Multiple Sources” on the “Derived From” line necessitates compliance with E.O.

13526, as amended, the NISPOM, and use of bibliography. (ICBM Security Classification Guide (SCG) 23 Oct 08). The applicable SCG will be provided under a separate cover.

Ref. 11.d: The contractor must provide adequate storage for classified hardware and materials to the level of Secret which exceeds 2 cubic feet and is of size and quantity that it cannot be safeguarded in a General Service Administration (GSA) approved security container.

Ref. 11.g: The contractor is authorized to use the services of the Defense Technical Information Center (DTIC). The contractor must prepare and process a DD Form 1540, Registration for Scientific and Technical Information Services, and a DD Form 2345, Military Critical Technical Data Agreement, for requests to utilize DTIC. Reference the NISPOM chapter 11, section 2 for preparation and processing of this form. The contracting activity must be involved in certifying need-to-know for contractors to utilize

DTIC.

Ref. 11.h: A COMSEC account will be established and COMSEC will be protected per the NISPOM chapter 9, section 4.

Ref. 11.j: The contractor must comply with the U.S. Government, DoD, Air Force, AFMC, Hill AFB, and AFNWC/NI Operation Security (OPSEC) Programs. The contractor must comply with any additional OPSEC requirements referenced.

Ref. 11.l: Any transfer or processing of classified or sensitive information via electronic methods on Hill AFB (e.g., facsimile, telemetry, voice, and computer) must be protected by implementing an appropriate combination of countermeasures such as encryption devices and sound practices and procedures. The specific countermeasures used must be coordinated and approved through the 75th Communication Squadron Base Information Assurance Office (75 ABW/SCBN). For performance on another government installation, coordination by the program manager with the appropriate communications activity is required.

Ref. 11.l: The contractor will provide the SSA, 75 ABW/IPD, with all the information required by the Air Force Federal Acquisition Regulation Supplement (AFFARS) 5352.204-9000, Notification of Government Security Activity and Visitor Group Security Agreements clause at least 30 days prior to beginning operations on Hill AFB.

DD FORM 254 Attachment 2 April 2013

Item 13: Security Guidance

Item 13 – Ref 10.a. COMSEC material/information may not be released to DoD contractors without Air Force Cryptological Support Center (FCSC) approval. Contractor must forward requests for COMSEC material/information to the COMSEC officer through the program office. The contractor is governed by the DoD 5220.22-S COMSEC Supplement to the NISPOM in the control and protection of COMSEC material/information. Access to COMSEC material by personnel is restricted to U.S. citizens holding final U.S. Government SECRET/TOP SECRET clearance. Such information is not releasable to personnel holding only reciprocal clearances.

Item 13 – Ref 10.j. See FOUO Attachment.

DD FORM 254 Attachment 2 April 2013

FOR OFFICIAL USE ONLY (FOUO) ADDENDUM

(DOD 5400.7-R, AF Supplement)

FOUO is not a classification. Originators mark records when they create them to call attention to FOUO content. An FOUO marking does not mean you must withhold a record under the FOIA. You still need to review requested records. Examine records with and without markings to identify information that needs protection and is exempt from public release or to decide whether discretionary release is appropriate.

Information in a technical document that requires a distribution statement per AFI 61-204, Disseminating Scientific and Technical Information, must show that statement. The originator may also mark the information FOUO, if appropriate.

Mark an unclassified document containing FOUO information “For Official Use Only” at the bottom, on the outside of the front cover (if any), on each page containing FOUO information, on the back page, and on the outside of the back cover (if any).

In unclassified documents, the originator may also mark individual paragraphs that contain FOUO information to alert users and assist in review.

In a classified document, mark: An individual paragraph that contains FOUO, but not classified information, by placing “(FOUO)” at the beginning of the paragraph.

Mark the top and bottom of each page that has both FOUO and classified information, with the highest security classification of information on that page.

Mark “FOUO” at the bottom of each page that has FOUO but not classified information.

If a classified document also contains FOUO information or if the classified material becomes FOUO when declassified, place the following statement on the bottom of the cover or the first page, under the classification marking: NOTE: If declassified, review the document to make sure material is not FOUO and not exempt under DOD 5400.7, AF Supplement before public release.

Mark other records, such as computer printouts, photographs, films, tapes, or slides, “For Official Use Only” or “FOUO” so the receiver or viewer knows the record contains FOUO information.

Mark FOUO material sent to authorized persons outside the DoD with an explanation typed or stamped on the document.

Transmitting FOUO:

DoD components, officials of DoD components, and authorized DoD contractor consultants, and grantees send FOUO information to each other to conduct official DoD business. Tell recipients the status of such information, and send the material in a way that prevents unauthorized public disclosure.

Make sure documents that transmit FOUO material call attention to any FOUO attachments. Normally, you may send FOUO records over facsimile equipment. When deciding whether to send FOUO records

DD FORM 254 Attachment 2 April 2013 over facsimile equipment, balance the sensitivity of the records against the risk of disclosure. To prevent unauthorized disclosure, consider attaching special cover sheets (i.e. AF Form 3227, Privacy Act Cover Sheet, for Privacy Act Information), the location of sending and receiving machines, and ensure authorized personnel are available to receive FOUO information as soon as it is transmitted. FOUO information may be passed to officials in other departments and agencies of the executive and judicial branches to fulfill a government function. Mark the records “For Official Use Only” and tell the recipient the information is exempt from public disclosure under the FOIA and if it needs special handling.

Electronically and Facsimile Transmitted Messages. Each part of electronically and facsimile transmitted messages containing FOUO information shall be marked appropriately. Unclassified messages containing FOUO information shall contain the abbreviation “FOUO” before the beginning of the text.

Such messages and facsimiles shall be transmitted in accordance with communications security procedures whenever practicable.*

Transporting FOUO:

Records containing FOUO information shall be transported in a manner that prevents disclosure of the contents. When not commingled with classified information, FOUO information may be sent via first-class mail or parcel post. Bulky shipments, such as distributions of FOUO Directives to testing materials, that otherwise qualify under postal regulations may be sent by fourth-class mail.

Mark each part of a message that contains FOUO information. Unclassified messages containing FOUO information must show the abbreviation “FOUO” before the text begins.

Safeguarding FOUO Information:

During normal duty hours: During normal working hours, records determined to be FOUO shall be placed in an out-of-sight location if the work area is accessible to non-government personnel.

During Non-duty Hours: At the close of business, FOUO records shall be stored to prevent unauthorized access. Filing such material with other unclassified records in unlocked files or desks, etc., is adequate when normal U.S. Government or Government-contractor internal building security is provided during non-duty hours. When such internal security control is not exercised, locked buildings or rooms normally provide adequate after-hours protection. If such protection is not considered adequate, FOUO material shall be stored in locked receptacles such as file cabinets, desks, or bookcases. FOUO records that are subject to the provisions of the National Security Act of 1959 (reference (aa)) shall meet the safeguards outlined for that group of records.

Termination, Disposal and Unauthorized Disclosures:

Termination: The originator or other competent authority; e.g., initial denial and appellate authorities, shall terminate “For Official Use Only” markings or status when circumstances indicate that the information no longer requires protection from public disclosure. When FOUO status is terminated, all known holders shall be notified, to the extent practical. Upon notification, holders shall efface or remove the “For Official Use only” markings, but records in file or storage need not be retrieved solely for that purpose.

DD FORM 254 Attachment 2 April 2013

Disposal: Non-record copies of FOUO materials may be destroyed by tearing each copy into pieces to prevent reconstructing, and placing them in regular trash containers. When local circumstances or experience indicates that this destruction method is not sufficiently protective of FOUO information, local authorities may direct other methods but must give due consideration to the additional expense balanced against the degree of sensitivity of the type of FOUO information contained in the records.

Record copies of FOUO documents shall be disposed of in accordance with the disposal standards established under 44 U.S.C. 3301-3314 (reference (ab)), as implemented by DoD Component instructions concerning records disposal.

Unauthorized disclosure: The unauthorized disclosure of FOUO records does not constitute an unauthorized disclosure of DoD information classified for security purposes. Appropriate administrative action shall be taken, however, to fix responsibility for unauthorized disclosure whenever feasible, and appropriate disciplinary action shall be taken against those responsible. Unauthorized disclosure of FOUO information that is protected by the Privacy Act (reference (d) may also result in civil and criminal sanctions against responsible persons. The DoD Component that originated the FOUO information shall be informed of its unauthorized disclosure.

*NOTE: For clarification of electronic dissemination, FOUO will not be sent electronically unless it remains behind the Hill AFB/SIINET Firewall.

DD FORM 254 Attachment 2 April 2013

DD Form 254 Addendum

OPSEC

All contractors, subcontractors, their employees, associates, and consultants who have access to critical information must comply with the Air Force-sponsored Operations Security (OPSEC) program.

OPSEC is a systematic means of identifying and protecting information which an adversary could use to their advantage or to our disadvantage. Critical Information (CI) is generally unclassified but sensitive information which has been identified by the OPSEC program as requiring protection. OPSEC Measures (OM) are control standards with which all personnel must comply in order to protect critical information.

Responsibilities:

The AFNWC/NIOS must provide/approve OPSEC training curriculum for use by the contractor. Training must provide listings of critical information that must be protected by all personnel, listings of OPSEC measures which must be used by all personnel to protect critical information, and current foreign intelligence and industrial espionage threats. The contractor must ensure all personnel working on the contract or having access to critical information attend initial and annually recurring refresher training and that the approved curriculum is presented. Training must be provided before personnel are allowed access to critical information. All personnel must comply with OPSEC standards and practices as trained.

Additional training may be required based on updates to critical information, OPSEC measures, intelligence threat, or other fundamental changes to the OPSEC program.

The contractor must track OPSEC training statistics to include the personnel working on the contract, when each individual received the required OPSEC training, and when refresher training is due. Training statistics must be forwarded to the AFNWC/NIOS OPSEC Coordinator at the end of each calendar quarter and upon request.

Prior to seeking approval through Hill AFB Public Affairs, any information to be released outside of official U.S. Government channels, via any media, must be approved through an OPSEC review by AFNWC/NIOS OPSEC Coordinator. All personnel must promptly report OPSEC related incidents, issues, and concerns to the AFNWC/NIOS OPSEC Coordinator, at phone #(801) 777-8772.

Prime Contract or Solicitation #: FA8214-13-R-0003