ATTACHMENT_17_DD254.pdf

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort.)

1. CLEARANCE AND SAFEGUARDING

a. FACILITY CLEARANCE REQUIRED

b. LEVEL OF SAFEGUARDING REQUIRED

2. THIS SPECIFICATION IS FOR: (X and complete as applicable)

a. PRIME CONTRACT NUMBER

b. SUBCONTRACT NUMBER

c. SOLICITATION OR OTHER NUMBER DUE DATE (YYYYMMDD)

3. THIS SPECIFICATION IS: (X and complete as applicable)

a. ORIGINAL (Complete date in all cases)

REVISION NO.

c. FINAL (Complete Item 5 in all cases)

DATE (YYYYMMDD)

b. REVISED (Supersedes all previous specs)

DATE (YYYYMMDD)

DATE (YYYYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT? YES NO. If Yes, complete the following:

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? YES NO. If Yes, complete the following:

In response to the contractor's request dated , retention of the classified material is authorized for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

8. ACTUAL PERFORMANCE

a. LOCATION b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

10. CONTRACTOR WILL REQUIRE ACCESS TO: 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL:YES NO YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION

b. RESTRICTED DATA

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION

d. FORMERLY RESTRICTED DATA

e. INTELLIGENCE INFORMATION

(1) Sensitive Compartmented Information (SCI)

(2) Non-SCI

f. SPECIAL ACCESS INFORMATION

g. NATO INFORMATION

h. FOREIGN GOVERNMENT INFORMATION

i. LIMITED DISSEMINATION INFORMATION

j. FOR OFFICIAL USE ONLY INFORMATION

k. OTHER (Specify)

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER

CONTRACTOR'S FACILITY OR A GOVERNMENT ACTIVITY

b. RECEIVE CLASSIFIED DOCUMENTS ONLY

c. RECEIVE AND GENERATE CLASSIFIED MATERIAL

d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. PERFORM SERVICES ONLY

f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES

g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL INFORMATION

CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER

h. REQUIRE A COMSEC ACCOUNT

i. HAVE TEMPEST REQUIREMENTS

j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

l. OTHER (Specify)

DD FORM 254, DEC 1999 PREVIOUS EDITION IS OBSOLETE. Adobe Professional 7.0

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release

a. TYPED NAME OF CERTIFYING OFFICIAL

Direct Through (Specify)

d. ADDRESS (Include Zip Code)

Yes No to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract.

(If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

Yes No15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office.

(If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

b. TITLE c. TELEPHONE (Include Area Code)

e. SIGNATURE

17. REQUIRED DISTRIBUTION

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER

f. OTHERS AS NECESSARY

DD FORM 254 (BACK), DEC 1999

DD FORM 254 Attachment FA8214-14-R-0005 October 2013

DD FORM 254 ATTACHMENTS AND ADDENDUMS

ATTACHMENT ONE

ITEM 17F: COORDINATION

THIS DD FORM 254 HAS BEEN REVIEWED AND COORDINATED BY:

image4.emf image5.emf image1.emf image2.emf image3.emf

DD FORM 254 Attachment FA8214-14-R-0005 October 2013

DD FORM 254 ATTACHMENTS AND ADDENDUMS

ATTACHMENT TWO

ITEM 13

Ref: 10. Contractor Access

Ref. 10.a: COMSEC safeguarding requirements apply. See the NISPOM chapter 9, section 4 for details. For on-base performance, COMSEC is incumbent on the government. Access on a government installation is granted by the user agency. Access to COMSEC information is restricted to U.S. Citizens holding a final U.S. government clearance. Personnel must receive the required COMSEC briefing. Prior approval is required from the Government Contracting Activity prior to granting access to COMSEC information to a subcontractor. Contractor will comply with Air Force COMSEC guidance.

Ref. 10.b: The contractor is permitted access to RESTRICTED DATA (RD) in performance of this contract. Access to RD requires a final U.S. Government clearance at the appropriate level.

Ref. 10.c: The contractor is permitted access to Critical Nuclear Weapon Design Information (CNWDI) in performance of this contract. Access to CNWDI requires a special briefing and debriefing. The government program manager or designated representative will ensure contractor employees are briefed for CNWDI. Prior to granting subcontractors access to CNWDI approval must be obtained from the Government Contracting Activity.

Ref. 10.d: The contractor is permitted access to FORMERLY RESTRICTED DATA (FRD) in performance of this contract. Access to FRD requires a final U.S. Government clearance at the appropriate level.

Ref. Blk 10.e(1): Contractor requires access to SCI materials; SCI security requirements apply, see SCI addendum for details.

Ref. 10.e.(2). Contractor will require to and must comply with the Director of Intelligence Directives (DCID) 6/6, AFI 14-303, Release of Intelligence to U.S. Contractors, and AFI 14-303, AFMC Sup 1.

Ref. Blks 10e(1) and 10e(2): Contractor will require access to intelligence information and must comply with AFI 14-303/AFMC Supplement 1. The Program Manager has determined that disclosure does not create an unfair competitive advantage for the contractor or a conflict of interest with the contractor's obligation to protect the information and will submit the AFMC Form 210 to the Ogden ALC SIO (OO-ALC/XP2) for approval prior to granting access.

Access to SIPRNET is required

Ref. 10.j: FOUO information provided under this contract shall be safeguarded as specified in the attachment “Protecting For Official Use Only (FOUO) Information.

Ref. 10.k: Security Classification Guide: “ICBM Security Classification/Declassification Guide (SCG)”

11. Contractor Performance

Ref. 11.c: The contractor requires access to classified source data up to and including TOP SECRET in support of the work effort. Any extracts or use of such data requires the contractor to apply derivative classification markings consistent with the source documents and Executive Order (E.O.) 13526, as amended. Use of “Multiple Sources” on the “Derived From” line necessitates compliance with E.O. 13526, as amended, the NISPOM, and use of bibliography. (Security Classification Guide 23 Oct 08). The applicable SCG will be provided under a separate cover.

Ref. 11.g: The contractor is authorized to use the services of the Defense Technical Information Center (DTIC). The contractor must prepare and process a DD Form 1540, Registration for Scientific and Technical Information Services, and a DD Form 2345, Military Critical Technical Data Agreement, for requests to utilize DTIC. Reference the NISPOM chapter 11, section 2 for preparation and processing of this form. The contracting activity must be involved in certifying need-to-know for contractors to utilize DTIC.

Ref. 11.h: A COMSEC account will be established and COMSEC will be protected per the NISPOM chapter 9, section 4.

Ref 11.i. See attached Emission Security (EMSEC) addendum to the DD Form 254 for requirements and guidance.

Ref. 11.j: The contractor must comply with the U.S. Government, DOD, Air Force, AFMC, Hill AFB, and AFNWC/NWI Operation Security (OPSEC) Programs. The contractor must comply with any additional OPSEC requirements referenced.

Ref. 11.k: This contract requires the use of the Defense Courier Service (DCS). The government contracting activity will request written approval for DCS services from the Commander, Defense Courier Service, ATTN: Operations Divisions, Fort George G. Meade, MD 20755-5370. Prior approval is required from the contracting activity is required prior to authorizing a subcontractor to utilized DCS services.

Ref. 11.l: Any transfer or processing of classified or sensitive information via electronic methods on Hill AFB (e.g., facsimile, telemetry, voice, and computer) must be protected by implementing an appropriate combination of countermeasures such as encryption devices and sound practices and procedures. The specific countermeasures used must be coordinated and approved through the 75th Communication Squadron Base Information Assurance Office (75 ABW/SCBN). For performance on another government installation, coordination by the program manager with the appropriate communications activity is required.

Ref. 11.l: The contractor will provide the SSA, 75 ABW/IPD, with all the information required by the Air Force Federal Acquisition Regulation Supplement (AFFARS) 5352.204-9000, Notification of Government Security Activity and Visitor Group Security Agreements clause at least 30 days prior to beginning operations on Hill AFB.

Item 13: Security Guidance

Item 13 – Ref 10.a COMSEC material/information may not be released to DoD contractors without Air Force Cryptological Support Center (FCSC) approval. Contractor must forward requests for COMSEC material/information to the COMSEC officer through the program office. The contractor is governed by the DoD 5220.22-S COMSEC Supplement to the NISPOM in the control and protection of COMSEC material/information. Access to COMSEC material by personnel is restricted to U.S. citizens holding final U.S. Government SECRET/TOP SECRET clearance. Such information is not releasable to personnel holding only reciprocal clearances.

Item 13 – Ref 10.j. See FOUO Attachment.

Item 14 - Additional Security Guidance

Item 14 - Ref 10.e. (1) Contract Monitor: see block 16a-d of DD Form 254

Item 14 – Ref 10.e (2) See attached non-SCI Release of Intelligence Information for additional security requirements. Prior Approval of the contracting activity is required for subcontracting. Access to intelligence information requires special briefings and a final U.S. Government clearance at the appropriate level.

Item 14 – Ref 11.c For performance on a government installation the contractor will provide the information requested by the Notification of Government Security Activity and Visitor Group Security Agreements Clause, Air Force Federal Acquisition Regulation Supplement 5352.204-9000, to the Servicing Security Activity address listed in block 8.c, at least 30 days prior to beginning operations. Refer to the contract document for this clause.

Item 14 – Ref 11.j. OPSEC requirements are referenced in the applicable OPSEC DD Form 254 addendum

FOR OFFICIAL USE ONLY (FOUO) ADDENDUM

(DOD 5400.7-R, AF Supplement)

FOUO is not a classification. Originators mark records when they create them to call attention to FOUO content. An FOUO marking does not mean you must withhold a record under the FOIA. You still need to review requested records. Examine records with and without markings to identify information that needs protection and is exempt from public release or to decide whether discretionary release is appropriate.

Information in a technical document that requires a distribution statement per AFI 61-204, Disseminating Scientific and Technical Information, must show that statement. The originator may also mark the information FOUO, if appropriate.

Mark an unclassified document containing FOUO information “For Official Use Only” at the bottom, on the outside of the front cover (if any), on each page containing FOUO information, on the back page, and on the outside of the back cover (if any).

In unclassified documents, the originator may also mark individual paragraphs that contain FOUO information to alert users and assist in review.

In a classified document, mark: An individual paragraph that contains FOUO, but not classified information, by placing “(FOUO)” at the beginning of the paragraph.

Mark the top and bottom of each page that has both FOUO and classified information, with the highest security classification of information on that page.

Mark “FOUO” at the bottom of each page that has FOUO but not classified information.

If a classified document also contains FOUO information or if the classified material becomes FOUO when declassified, place the following statement on the bottom of the cover or the first page, under the classification marking: NOTE: If declassified, review the document to make sure material is not FOUO and not exempt under DOD 5400.7, AF Supplement before public release.

Mark other records, such as computer printouts, photographs, films, tapes, or slides, “For Official Use Only” or “FOUO” so the receiver or viewer knows the record contains FOUO information.

Mark FOUO material sent to authorized persons outside the DOD with an explanation typed or stamped on the document.

Transmitting FOUO:

DOD components, officials of DOD components, and authorized DOD contractor consultants, and grantees send FOUO information to each other to conduct official DOD business. Tell recipients the status of such information, and send the material in a way that prevents unauthorized public disclosure. Make sure documents that transmit FOUO material call attention to any FOUO attachments. Normally, you may send FOUO records over facsimile equipment. When deciding whether to send FOUO records over facsimile equipment, balance the sensitivity of the records against the risk of disclosure. To prevent unauthorized disclosure, consider attaching special cover sheets (i.e. AF Form 3227, Privacy Act Cover Sheet, for Privacy Act Information), the location of sending and receiving machines, and ensure authorized personnel are available to receive FOUO information as soon as it is transmitted. FOUO information may be passed to officials in other departments and agencies of the executive and judicial branches to fulfill a government function. Mark the records “For Official Use Only” and tell the recipient the information is exempt from public disclosure under the FOIA and if it needs special handling.

Electronically and Facsimile Transmitted Messages. Each part of electronically and facsimile transmitted messages containing FOUO information shall be marked appropriately. Unclassified messages containing FOUO information shall contain the abbreviation “FOUO” before the beginning of the text. Such messages and facsimiles shall be transmitted in accordance with communications security procedures whenever practicable.*

Transporting FOUO:

Records containing FOUO information shall be transported in a manner that prevents disclosure of the contents. When not commingled with classified information, FOUO information may be sent via first-class mail or parcel post. Bulky shipments, such as distributions of FOUO Directives to testing materials, that otherwise qualify under postal regulations may be sent by fourth-class mail.

Mark each part of a message that contains FOUO information. Unclassified messages containing FOUO information must show the abbreviation “FOUO” before the text begins.

Safeguarding FOUO Information:

During normal duty hours: During normal working hours, records determined to be FOUO shall be placed in an out-of-sight location if the work area is accessible to non-government personnel.

During Non-duty Hours: At the close of business, FOUO records shall be stored to prevent unauthorized access. Filing such material with other unclassified records in unlocked files or desks, etc., is adequate when normal U.S. Government or Government-contractor internal building security is provided during non-duty hours. When such internal security control is not exercised, locked buildings or rooms normally provide adequate after-hours protection. If such protection is not considered adequate, FOUO material shall be stored in locked receptacles such as file cabinets, desks, or bookcases. FOUO records that are subject to the provisions of the National Security Act of 1959 (reference (aa)) shall meet the safeguards outlined for that group of records.

Termination, Disposal and Unauthorized Disclosures:

Termination: The originator or other competent authority; e.g., initial denial and appellate authorities, shall terminate “For Official Use Only” markings or status when circumstances indicate that the information no longer requires protection from public disclosure. When FOUO status is terminated, all known holders shall be notified, to the extent practical. Upon notification, holders shall efface or remove the “For Official Use only” markings, but records in file or storage need not be retrieved solely for that purpose.

Disposal: Non-record copies of FOUO materials may be destroyed by tearing each copy into pieces to prevent reconstructing, and placing them in regular trash containers. When local circumstances or experience indicates that this destruction method is not sufficiently protective of FOUO information, local authorities may direct other methods but must give due consideration to the additional expense balanced against the degree of sensitivity of the type of FOUO information contained in the records.

Record copies of FOUO documents shall be disposed of in accordance with the disposal standards established under 44 U.S.C. 3301-3314 (reference (ab)), as implemented by DOD Component instructions concerning records disposal.

Unauthorized disclosure: The unauthorized disclosure of FOUO records does not constitute an unauthorized disclosure of DOD information classified for security purposes. Appropriate administrative action shall be taken, however, to fix responsibility for unauthorized disclosure whenever feasible, and appropriate disciplinary action shall be taken against those responsible. Unauthorized disclosure of FOUO information that is protected by the Privacy Act (reference (d) may also result in civil and criminal sanctions against responsible persons. The DOD Component that originated the FOUO information shall be informed of its unauthorized disclosure.

*NOTE: For clarification of electronic dissemination, FOUO will not be sent electronically unless it remains behind the Hill AFB/SIINET Firewall.

ADDENDUM TO DD FORM 254 (Block 10e(1))

SENSITIVE COMPARTMENTED INFORMATION (SCI) CLAUSES

1. Reference block 14: DoDM 5105.21-Vol 1-3; AFMAN 14-304, Intelligence Community Directives (ICDs)/ICS, 701 (SCI Security Policies) 705 (Physical Security for SCIFS), ICD 704/ICPGS 704.1,704.2,704.3, 704.4, 704.5 (Personnel Security) 503(SCI Security Information Systems Management) and the Joint DoDISS/Cryptologic SCI Information Systems Security Standards (JDCSISSS); these directives provide the necessary guidance for physical, personnel, industrial, information, and information systems security measures and is part of the Sensitive Compartmented Information (SCI) security specifications for the contract.

2. SCI will not be released to contractor employees without the specific release approval by the originator of the material as outlined in the governing directives and based on prior approval and certification of “need-to-know” by the Contracting Officer’s Representative (COR):

Ryan Sandoval AFNWC/NIAD 801-525-3789

Jeremiah Stahr AFNWC/NIA 801-777-8519

3. Names of contractor personnel requiring access to SCI and justification for SCI billets will be submitted for coordination and action to SSO AFLCMC/INLS after the contract monitor approval/concurrence. Upon receipt of written approval from the COR, the Contractor Special Security Officer (CSSO) may submit the necessary forms to Defense Security Service (DSS) for a Single Scope Background Investigation (SSBI) for those personnel nominated for SCI access in accordance with the National Industrial Security Program Operating Manual (NISPOM).

4. This contract requires a total of five SCI contract billets in order to fulfill contractual obligations incurred. SCI access is subject to US Government review and approval as outlined in the aforementioned SCI security regulations. Upon completion or cancellation of the contract, the CSSO will debrief all personnel not required for contract closeout and those billets will be disestablished.

5. The CSSO must restrict access to only those individuals who possess the necessary security clearance and who are actually providing services under the contract. Further dissemination to other contractors, sub-contractors, other government agencies, private individuals or organizations is prohibited unless authorized in writing by the releasing agency.

6. SCI materials furnished in support of this contract remains the property of the DoD department or command that released it. Upon completion or cancellation of the contract, all SCI materials furnished will be returned to the direct custody of the originator of the materials.

7. Classified foreign intelligence materials must not be released to foreign nationals or immigrant aliens whether or not they are also consultants, US contractors, or employees of the contractor, regardless of the level of their security clearance, except with advanced written permission from the originator.

8. Inquiries pertaining to classification guidance on SCI will be directed to the COR listed in para 2 above. SCI security management issues shall be directed to SSO AFLCMC/INLS, phone (801) 777-0484, DSN prefix 777.

9. (FOUO) An SCI Facility (SCIF) meeting the physical security requirements outlined in ICD/ICS 705 must be either used for contract work or established and maintained at the contractor location. All SCI used for this contract shall be stored, handled, and maintained in a SCIF, be it the local contractor SCIF or similarly SCI-accredited facilities used by the contractor. Identify the Contractor SCIF information below where the execution of the contact will take place:

To Be Determined upon Contract Award

10. For contract work within a contractor established SCIF, information systems (computers), electronic connectivity, and similar electronic methods of storing and communicating within and outside the SCIF must be in compliance with ICD 503, and the JDCSISSS, and any additional instructions issued by DIA/DAC-2A, HQ AFMC/A2S, and SSO AFLCMC/INLS.

11. The CSSO must maintain accountability for all classified foreign intelligence materials released to their custody.

12. The CSSO must not reproduce classified foreign intelligence without advance approval of the releasing agency. If permission is granted, each copy will be controlled in the same manner as the original. The CSSO must not destroy any classified foreign intelligence without advance approval of the releasing agency.

13. Reference block 15: This contract requires access to SCI. If the contractor has established a SCIF, the Defense Intelligence Agency (DIA) and its designees are responsible for all inspections of the contractor SCIF and SCI security management program for ensuring compliance with all SCI security regulations and policies.

ADDENDUM TO DD FORM 254 (Block 10e(2))

NON-SENSITIVE COMPARTMENTED INFORMATION (SCI) CLAUSES

1. Special Requirements of Intelligence Information: The contractor will require access to, and receipt of, classified intelligence documents in the performance of this contract. In addition to the requirements and controls for classified material in DoD 5220.22-M, National Industrial Security Program Operating Manual (NISPOM), the contractor shall adhere to the following requirements and controls of intelligence, per AFI 14-303 and applicable supplements.

2. Contact OO-ALC/XP2 6137 Wardleigh Rd., Hill AFB UT 84056-5843, the Unit IN for permission to make extra copies of intelligence data required by the contractor if approval has not previously been stipulated above or been stipulated in the release letter. The Contract Monitor (CM) then maintains accountability of copies and ensures all information is returned to the Air Force upon contract termination/expiration.

3. Maintain a record of all intelligence materials released to the contractor, and ensures all data is returned to the CM within 2 years after final delivery of goods and services or after completion or termination of the classified contract, whichever comes first. If retention is required beyond the 2-year period the contractor must request and receive written authority from the CM.

4. Contractor shall maintain accountability for all intelligence released in his/her custody. Contractors must agree that all intelligence data released to them, all reproductions, and other material generated (including authorized reproductions) is the property of the US Government and will be returned upon request of the sponsoring agency or expiration date of the contract, whichever comes first.

5. Contractor shall not reproduce intelligence without permission from the Unit IN (OO-ALC/XP2) through the CM. If approved, must control each copy in the same manner as the original.

6. Contractor shall not reproduce intelligence without advance approval from the CM, except for working papers and derivative material produced in the publication process. Working papers and derivative material produced in the publication process do not need destruction approval.

7. Contractor shall restrict access to those individuals with a valid need-to-know who are actually providing services under the contract. Further dissemination to other contractors, subcontractors, or other government agencies and private individuals or organizations is prohibited unless authorized in writing by the CM with prior approval of the Unit IN (OO-ALC/XP2)/contracting activity.

8. Contractor shall not release intelligence data to foreign nationals or immigrant aliens regardless of their security clearance or contract status without advanced written permission from the CM, Unit IN (OO-ALC/XP2), Foreign Disclosure Policy Office, and HQ AFMC/A2S.

9. Contractor shall ensure the each employee having access to intelligence material is fully aware of the special security requirements for this material and maintains records in a manner that permits the contractor to furnish on demand the names of individuals who have access to the material in their custody.

10. Releasing authority of intelligence documents is HQ AFMC/A2S. Any request for intelligence documents will be sent through the CM to the Unit IN (OO-ALC/XP2) designee for HQ AFMC/A2 for approval.

DD Form 254 Addendum

EMSEC

Emission Security (EMSEC) Requirements (specify contract/solicitation number Addendum to DD Form 254, Block 11i)

EMISSIONS SECURITY ASSESSMENT REQUEST (ESAR)

FOR ALL CLASSIFIED SYSTEMS

1. The contractor shall ensure that compromising emanations (EMSEC) conditions related to this contract are minimized.

2. The contractor shall provide countermeasures assessment data to the Contracting Officer (CO), in the form of an ESAR. The ESAR shall provide only specific responses to the date required in paragraph c, below. The contractor’s standard security plan shall NOT be used as a “stand-alone” ESAR response. The contractor shall NOT submit a detailed facility analysis/assessment. The ESAR information will be used to complete an EMSEC Countermeasures Assessment Review of the contractor’s facility to be performed by the government EMSEC authority using current Air Force EMSEC directives. EMSEC is applied on a case-by-case basis and further information may be required to complete the review. Should this be the case, the contractor shall provide this information to the contracting officer when requested. After the evaluation of the ESAR by the government EMSEC authority, additional EMSEC requirements may be established.

3. ESAR contents shall include, as a minimum, the following information (NISPOM, paragraph 11-101c) (Note: A copy of your Automated Information System Security Plan(s) (AISSP) will suffice.

a. The specific classification and special categories of material to be processed or handled by electronic means.

b. The percentage of information to be processed. Identify the approximate percentage for each level of information processed including unclassified.

c. The specific location where classified processing will be performed.

d. The name, address, title and telephone number of a point-of-contact at the facility where processing will occur.

NOTE: Once the above information has been provided to the CO, no further reporting is required for equipment reconfigurations. However, if the facility is physically relocated to another geographical location, the information requested in paragraph c above MUST be furnished to the CO.

4. The prime contractor shall ensure that all subcontractors and/or vendors comply with EMSEC requirements when performing classified processing related to this contract. They will provide the above documentation through their prime to the contracting officer to complete the ESAR.

DD Form 254 Addendum

OPSEC

General:

All personnel (contractors, subcontractors, their employees, associates, and consultants) who have access to critical information must participate in the appropriate OPSEC programs.

OPSEC is a systematic means of identifying and protecting information, which an adversary could use to their advantage or our disadvantage.

Critical information is generally unclassified but sensitive information, which has been identified by the OPSEC program as requiring protection.

OPSEC measures are control standards with which all personnel must comply in order to protect critical information. For example, personnel may be prohibited from discussing certain subjects outside of the work environment. Another example is some information may be prohibited from transmission via unencrypted telephone, fax, or email.

Responsibilities:

All personnel must participate in the appropriate OPSEC programs. The AFNWC/NIOS must provide training curriculum to the contractor. The contractor must ensure all personnel working on the contract or having access to critical information attend initial and recurring (annual) training. The contractor must track OPSEC training statistics to include the personnel working on the contract, when each individual received the required OPSEC training, and when refresher training is due. Training statistics must be forwarded to the AFNWC/NIOS at the end of each fiscal year quarter and upon request. Training must provide listings of critical information that must be protected by all personnel, listings of OPSEC measures, which must be used by all personnel to protect critical information, and foreign intelligence and industrial espionage threats. All personnel must comply with OPSEC standards and practices as trained. Training must be provided before personnel are allowed access to critical information. Training must be conducted annually thereafter, or as individual programs require. Additional training may be required based on updates to critical information, OPSEC measures, intelligence threat, or other fundamental changes to the OPSEC program. Prior to seeking approval through Public Affairs, information to be released outside of official U.S. Government channels must be approved via an OPSEC review through the AFNWC/NIOS. All personnel must report OPSEC related incidents, issues, and concerns to the AFNWC/NIOS.

Secret Internet Protocol Router Network (SIPRNET)

7981 Georgia St Hill AFB UT 84056 guidance: SEE ATTACHMENTS Items 10, 11. See Attachment 2

Item 13.a. Scott Jones, Col, Senior Materiel Leader, ICBM Ground Systems Division _________________ Date: __________ AFNWC/NIA, 6011 Gum Lane, Bldg 1229 Hill AFB, UT 84056, 777-8387

Item 13.b. DD FM 254 Review 11 October 12

THIS DD FORM 254 HAS BEEN REVIEWED AND COORDINATED BY: See GSSC DD254 Attachment 1 for signatures and dates.

Enrique Zamora, AFNWC/NIOS, 775-3133 _See Attached______________ Date: __________ Ms. Lori Prendergast, 75 ABW/SCXS, 777-0362 _See Attached______________ Date: __________ Mr. David Page, AFLCMC/WFNFJ, 586-0347 _See Attached______________ Date: __________ Ms. Vickie Wehus, AFLCMC/INLS, 777-0484 _See Attached______________ Date: __________ MSgt Robert Hinshaw, 75 ABW/IPD, 777-6617 _See Attached______________ Date: __________

OO-ALC/XP, has exclusive security responsibilities for all SCI classified materials released or developed under this contract.

Bldg 1258 Hill AFB, UT 84056-5816