RFP_Attachment_8_MPSCIV_DD254.pdf

CLASSIFICATION (When filled in): CUI

PREVIOUS EDITION IS OBSOLETE. Page 1 of 6DD FORM 254, APR 2018

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the National Industrial Security Program (NISP) apply to all security aspects of this effort involving classified information.)

OMB No. 0704-0567 OMB approval expires:

May 31, 2022

The public reporting burden for this collection of information, 0704-0567, is estimated to average 70 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, at whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

RETURN COMPLETED FORM AS DIRECTED IN THE INSTRUCTIONS.

1. CLEARANCE AND SAFEGUARDING

a. LEVEL OF FACILITY SECURITY CLEARANCE (FCL) REQUIRED

(See Instructions)

Top Secret

b. LEVEL OF SAFEGUARDING FOR CLASSIFIED INFORMATION/

MATERIAL REQUIRED AT CONTRACTOR FACILITY

None (See instructions)

2. THIS SPECIFICATION IS FOR: (X and complete as applicable.)

a. PRIME CONTRACT NUMBER (See instructions.)

b. SUBCONTRACT NUMBER

c. SOLICITATION OR OTHER NUMBER

FA8217-22-R-0001

DUE DATE (YYYYMMDD)

TBD

3. THIS SPECIFICATION IS: (X and complete as applicable.)

a. ORIGINAL (Complete date in all cases.)

DATE (YYYYMMDD)

20220412

b. REVISED (Supersedes all previous specifications.)

REVISION NO. DATE (YYYYMMDD)

c. FINAL (Complete Item 5 in all cases.) DATE (YYYYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT? No Yes If yes, complete the following:

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? No Yes If yes, complete the following:

In response to the contractor's request dated , retention of the classified material is authorized for the period of:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE

TBD

b. CAGE CODE c. COGNIZANT SECURITY OFFICE(S) (CSO) (Name, Address, ZIP Code, Telephone required; Email Address optional)

7. SUBCONTRACTOR(S) (Click button if you choose to add or list the subcontractors -- but will still require a separate DD Form 254 issued by a prime contractor to each subcontractor) Add Row Remove Last Row Delete All Rows

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE(S) (CSO) (Name, Address, ZIP Code, Telephone required; Email Address optional)

8. ACTUAL PERFORMANCE (Click button to add more locations.) Add Row Remove Last Row Delete All Rows

a. LOCATION(S) (For actual performance, see instructions.)

See "DD254 Attachment"

b. CAGE CODE

(If applicable, see Instructions.)

c. COGNIZANT SECURITY OFFICE(S) (CSO) (Name, Address, ZIP Code, Telephone required; Email Address optional) See Item 15, Ref 8.a

9. GENERAL UNCLASSIFIED DESCRIPTION OF THIS PROCUREMENT

Mission Planning Support Contact IV provides sustainment services including specialized information technology, systems administration, mission support, configuration management, fielding , training and associated services for Air Force Mission Planing Systems including the Joint Mission Planing Systems (JMPS) and JMPS Open Mission Systems (JOMS) Services are provided for U.S. Air Force, U.S. Marine Corps, and Foreign Military Sales (FMS) customers including ACC (including PACAF and USAFE), AMC, AFMC, AETC, AFRC, AFOSC, AND, Global Hawk, CAOC and their associate aircraft weapons systems support world wide.

PREVIOUS EDITION IS OBSOLETE. Page 2 of 6DD FORM 254, APR 2018

10. CONTRACTOR WILL REQUIRE ACCESS TO: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION f. SPECIAL ACCESS PROGRAM (SAP) INFORMATION

b. RESTRICTED DATA g. NORTH ATLANTIC TREATY ORGANIZATION

(NATO) INFORMATION

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION (CNWDI) (If CNWDI applies, RESTRICTED DATA must also be marked.) h. FOREIGN GOVERMENT INFORMATION

d. FORMERLY RESTRICTED DATA i. ALTERNATIVE COMPENSATORY CONTROL MEASURES

(ACCM) INFORMATION

e. NATIONAL INTELLIGENCE INFORMATION:

(1) Sensitive Compartmented Information (SCI)

(2) Non-SCI

j. CONTROLLED UNCLASSIFIED INFORMATION (CUI) (See instructions.)

k. OTHER (Specify) (See instructions.)

SIPRNET/JWICS/NC2-ESL (See block 13)

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. See instructions. Provide details in Blocks 13 or 14 as set forth in the instructions.)

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT

ANOTHER CONTRACTOR'S FACILITY OR A GOVERNMENT

ACTIVITY

(Applicable only if there is no access or storage required at contractor facility.

See instructions.)

b. RECEIVE AND STORE CLASSIFIED DOCUMENTS ONLY

c. RECEIVE, STORE, AND GENERATE CLASSIFIED

INFORMATION OR MATERIAL

d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. PERFORM SERVICES ONLY

f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE

THE U.S.,PUERTO RICO, U.S. POSSESSIONS AND TRUST

TERRITORIES

g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE

TECHNICAL INFORMATION CENTER (DTIC) OR OTHER

SECONDARY DISTRIBUTION CENTER

h. REQUIRE A COMSEC ACCOUNT

i. HAVE A TEMPEST REQUIREMENT

j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

k. BE AUTHORIZED TO USE DEFENSE COURIER SERVICE

l. RECEIVE, STORE, OR GENERATE CONTROLLED UNCLASSIFIED

INFORMATION (CUI).

(DoD Components: refer to DoDI 5200.48, only for specific CUI protection requirements. Non-DoD Components: see instructions.)

m. OTHER (Specify) (See instructions.)

The AFFARS clause 5352.204-9000 applies

12. PUBLIC RELEASE

Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the National Industrial Security Program Operating Manual (NISPOM) or unless it has been approved for public release by appropriate U.S. Government authority.

Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified here with at least office and phone contact information and if available, an e-mail address. (See instructions)

DIRECT THROUGH (Specify below)

Public Release of Sensitive Compartmented Information (SCI) or special Access Programs (SAP) is NOT authorized

Public Release Authority:

13. SECURITY GUIDANCE Add Signature Remove Last Signature Delete All Signatures

The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract;

and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended.

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. The field will expand as text is added. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. Also allows for up to 6 internal reviewers to digitally sign. See instructions for additional guidance or use of the fillable PDF.)

DD FM 254 Review Due: August 2023.

Ref. 10.a: COMSEC safeguarding requirements apply. For on-base performance, COMSEC is incumbent on the government. Access on a government installation is granted by the user agency. Access to COMSEC information is restricted to U.S. Citizens holding a final U.S.

Government clearance at the appropriate level. Personnel must receive the required COMSEC briefing. Prior approval is required from the Government Contracting Activity prior to granting access to COMSEC information to a subcontractor. Contractor will comply with Air Force COMSEC guidance.

Ref. 10.b: *The contractor is permitted to access RESTRICTED DATA (RD) in performance of this contract. Access to RD requires a final U.S. Government clearance at the appropriate level. *Minot and Whiteman Location Only.

Ref. 10.c: *The contractor is permitted access to Critical Nuclear Weapon Design Information (CNWDI) in performance of this contract.

Access to CNWDI requires a special briefing and debriefing. The government program manager or designated representative will ensure

PREVIOUS EDITION IS OBSOLETE. Page 3 of 6DD FORM 254, APR 2018 contractor employees are briefed for CNWDI. Prior to granting subcontractor’s access to CNWDI, approval must be obtained from the Government Contracting Activity. *Minot and Whiteman Location ONLY.

Ref. 10.d: The contractor is permitted access to FORMERLY RESTRICTED DATA (FRD) in the performance of this contract. Access to FRD requires a final U.S. Government clearance at the appropriate level.

Ref 10.g.: The contractor is permitted access to classified North Atlantic Treaty Organization (NATO) information in performance of this contract. The government project manager is the designated representative that will ensure the contractor Facility Security Officer and concerned employees are NATO briefed prior to access being granted. Prior approval of the contracting office is required for subcontracting. Access to NATO requires a final U.S. Government clearance at the appropriate level.

Ref. 10.h.: The contractor is permitted access to Foreign Government Information in performance of this contract. Access to Foreign Government Information requires a valid need- to-know and final U.S. Government clearance at the appropriate level. Prior approval of the contracting activity is required for subcontracting.

Ref. 10.i.: Contractor is directed to participate in ACCM; ACCM plan and guidance will be provided by the GCA under separate cover.

Ref. 10.j.: CUI information provided under this contract shall be safeguarded as specified in DoD Instruction 5200.48, DoD Information Security Program: Controlled Unclassified Information (CUI).

Ref 10.k.: The contractor is permitted access to the Secret Internet Protocol Router Network (SIPRNet). Actual knowledge, generation, or production of NATO information is not required for performance on this contract; however, a NATO awareness briefing will be completed prior to granting access to the SIPRNet.

Ref 10.k.: The contractor is permitted access to the Joint Worldwide Intelligence Communications System (JWICS).

Ref. 10.k.: The contractor is permitted access to Nuclear Command and Control – Extremely Sensitive Information (NC2-ESI) in performance of this contract. Access to NC2-ESI Information requires a final U.S. Government clearance at the appropriate level. The servicing NC2-ESI Program Manager will ensure the contractor Facility Security Officer and concerned employees are briefed prior to access being granted. Prior approval of the contracting office is required for subcontracting. Refer to AFI 13-502, Safeguarding Nuclear Command and Control Extremely Sensitive Information (NC2-ESI), for additional security requirements.

Ref. 11.a.: Contract performance is restricted to locations identified in Items 8.a. Contractor will abide by the applicable SAP security classification guidance. Security classification guidance has been provided and is available at these locations for performance on the contract.

Ref. 11.e: Contract is for software services on equipment which processes classified information. Actual generation or production of classified information is not required for performance of this contract. Cleared personnel are required to perform this service because visual or aural access to classified information cannot be precluded by escorting personnel. Any classification guidance will be provided by the using activity.

Ref. 11.f: Overseas contract performance will be at various locations identified within the Item 13 attachment to DD Form 254. A copy of the DD Form 254 must be provided to the AF SSA responsible for overseas inspections and security oversight at the performance location.

The Director for Information Protection for Headquarters U.S. Air Force in Europe (HQ USAFE/IP), Headquarters Pacific Air Force (HQ PACAF/IP) for Asia-Pacific Regions, and Headquarters Air Combat Command (HQ ACC/IP) for South America Regions) will be provided copies of the DD Form 254, as applicable. See the NISPOM, chapter 10 for additional security requirements involving foreign contracts.

Ref 11.m. The contractor is designated as a Integrated visitor Group and will adhere to the Hill AFB Visitor Group Security Addendum attached in Item 13 while performing on Hill AFB, and will request installation specific security policies from the Servicing Security Activities listed in Item 15 “Ref: 8.a”, at least 30 days prior to beginning operations.

List of Attachments (All Files Must be attached Prior to Signing, i.e., for any digital signature on the form) Hide Attachment Bar

NAME & TITLE OF REVIEWING OFFICIAL

CHRISTIANNA MCELHENY, CIV,

AFLCMC/HBZBC AF COR/PM Mission Planning

SIGNATURE

NAME & TITLE OF REVIEWING OFFICIAL

JESSICA JONES, Civ, AFLCMC/HBZ Unit Security/OPSEC Manager

SIGNATURE

PREVIOUS EDITION IS OBSOLETE. Page 4 of 6DD FORM 254, APR 2018

NAME & TITLE OF REVIEWING OFFICIAL

DAVID W. JOHNS, CIV, AFLCMC/

WFNH Foreign Disclosure Officer

SIGNATURE

NAME & TITLE OF REVIEWING OFFICIAL

JASON R. BLAKE, CIV, AFLCMC/INLS

Special Security Officer (SSO) HAFB

SIGNATURE

NAME & TITLE OF REVIEWING OFFICIAL

BENJAMIN PUGMIRE, AFOSI PJ/DET 1

OL-A

SIGNATURE

NAME & TITLE OF REVIEWING OFFICIAL

JAMES C. HAGEMIER, 75 ABW/IPD

SIGNATURE

14. ADDITIONAL SECURITY REQUIREMENTS

Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

No Yes If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the CSO. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted.

(See instructions for additional guidance or use of the fillable PDF.)

Ref Blk 10.e.(1): Contractor requires access to SCI materials; SCI security requirements apply, see attached SCI Clauses in attachment within Item 13 for details.

Ref. 10.e.(2). The contractor will require access to, and receipt of, classified intelligence documents in the performance of this contract.

Contractor shall restrict access to those individuals with a valid need-to-know who are actually providing services under the contract. Further dissemination to other contractors, subcontractors, or other government agencies and private individuals or organizations is prohibited unless authorized in writing by the COR with prior approval of SSO HILL. See Non-Sensitive Compartmented Information (SCI) Clauses in attachment within Item 13 for details.

Ref. 10.f: A SECRET, National Agency Check with Local Agencies Check and Credit (NACLC), current within 5 years, will be required for personnel who have SAP access. Personnel security clearances will be processed through the contractor and will be re-investigated at intervals not to exceed 5 years. The contractor shall not reveal the specific nature of work being performed under this contract, or any details thereof, except when authorized in writing by the Government Program Manager (GPM). The Contractor is prohibited from subcontracting to other contractors, organizations, private individuals or government agencies without the express written consent of the GPM.

All Program Access Requests (PARs) for personnel at Hill AFB will be made through the 309 SWEG, Advanced Programs Office (APO) at Hill AFB via the SAP Personnel Security Officer (SPO). The SPO can be reached at 309 SWEG/APO, Bldg. 1515, Rm 276, 6137 Wardleigh Rd., Hill AFB, UT 84056 or (801) 777-6860/ DSN: 777-6860. PARs for MPSC-IV personnel not at Hill AFB will be submitted through their local APO.

Personnel Security Files (PSFs) for cleared contractors will be maintained and kept by the 309 SWEG SPO at the location mentioned above.

Continued contractor access to SAPs requires initial and recurring (annual) SAP security education training. The local GSSO will conduct the training where the contractor is located and transmit the training records to the 309 SWEG SPO.

Ref 10.f.: Special Access Program (SAP) security requirements apply, see SAP Information Addendum attachment within Item 13 for details.

Ref 11.f.: Disclosure of information related to this contract to citizens, or representatives, of multiple countries shall be in accordance with DoDD 5230.11 and the most current version of the applicable Delegation of Disclosure Letter.

The training where the contractor is located and transmit the training records to the 309 SWEG SPO.

Ref 11.f.: Disclosure of information related to this contract to citizens, or representatives, of multiple countries shall be in accordance with DoDD 5230.11 and the most current version of the applicable Delegation of Disclosure Letter.

Ref 11.i: EMSEC requirements apply to the SCIF execution location. See Defense Federal Acquisition Regulation Supplement (DFARS) Clause 252.239-7000, Protection Against Compromising Emanations, dated 25 June 2004, revised 10 January 2008; Intelligence Community (IC Tech Spec‐for ICD/ICS 705, Technical Specifications for Construction and Management of Sensitive Compartmented Information Facilities, version 1.4, dated 28 September 2017; Committee on National Security Systems Advisory Memorandum (CNSSAM ) TEMPEST/01-13, Red/Black Installation Guidance, dated 17 January 2014.

PREVIOUS EDITION IS OBSOLETE. Page 5 of 6DD FORM 254, APR 2018

Ref 11.j. The contractor must comply with the U.S. Government, DOD, Air Force, AFMC, Hill AFB, and AFLCMC/HBZ Operation Security (OPSEC) Programs. The contractor must comply with any additional OPSEC requirements referenced in attachment within Item 13.

Ref. 14: Baseline guidance includes the National Industrial Security Program Operating Manual (NISPOM), Joint Air Force, Army, Navy Manuals (JAFAN 6/0, 6/3, and 6/9), Air Force Special Access Program Nomination Process (AF SAPNP), Physical Security Standards for Special Access Program Facilities, applicable Program Security Directives (PSDs), Security Classification Guides (SCGs), directives and local Standard Operating Procedures. The PSM will provide a copy of applicable guidance to the contractor. For performance on a government installation, the contractor will provide the information requested by the Notification of Government Security Activity & Visitor Group Security Agreement Clause, AFFAR Supplement 5352.204-9000, to the appropriate SSA/Industrial Security Program Manager at the installations (See “Actual Performance” Items 8.a – 8.c pages 1-4).

See DD FRM 254 Attachment for Security Guidance Continued.

NOTE: CNWDI and NC2-ESI is at only 2 locations: Minot AFB, ND and Whiteman, MO. See DD FRM 254 Attachment.

15. INSPECTIONS

Elements of this contract are outside the inspection responsibility of the CSO.

No Yes If Yes, explain and identify specific areas and government activity responsible for inspections. The field will expand as text is added or you can also use item

13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted.

(See instructions for additional guidance or use of the fillable PDF.)

Ref 8.c. Defense Security Service to Defense Counterintelligence and Security Agency (DSCA) is relieved of all industrial security review responsibilities for contractor performance on government installations identified in Items 8.a. The SSAs identified in the attachment located within Item 13, Ref 18.f, have exclusive oversight responsibilities while operating on the installations.

Ref. 10.e(1). DCSA is relieved of security inspection responsibility for all SCI material related to this contract. The SSO maintains inspection responsibility for all SCI material related to this contract.

Ref 10.f.: The Defense Counterintelligence and Security Agency (DCSA) has been relieved of inspection oversight responsibilities for SAP programs associated with this contract. The Air Force is identified as the Cognizant Security Authority (CSA) with the AFOSI PJ fulfilling the execution role for all contractor inspections under the purview of SAF/AAZ.

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

a. GCA NAME

Air Force Material Command, USAF

b. ACTIVITY ADDRESS CODE (AAC) OF THE CONTRACTING OFFICE (See Instructions)

FA8217

c. ADDRESS (Include ZIP Code) 6006 Wardleigh Rd Room 29 Hill AFB, UT 84056

d. POC NAME

Christianna McElheny

e. POC TELEPHONE (Include Area Code)

+1 (801) 777-2805

f. EMAIL ADDRESS (See Instructions) christianna.mcelheny@us.af.mil

17. CERTIFICATION AND SIGNATURES

Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. Upon digitally signing Item 17h, no changes can be made as the form will be locked.

a. TYPED NAME OF CERTIFYING OFFICIAL (Last, First, Middle Initial) (See Instructions)

Hodson, Casey, J.

b. TITLE

Contracting Office

c. ADDRESS (Include ZIP Code)

AFLCMC/HBZKB

6039 Wardleigh Road, Bldg 1206 Hill AFB UT 84056-5819

d. AAC OF THE CONTRACTING OFFICE (See Instructions)

FA8217

e. CAGE CODE OF THE PRIME CONTRACTOR

(See Instructions.)

f. TELEPHONE (Include Area Code)

+1 (801) 586-2144

g. EMAIL ADDRESS (See Instructions) casey.hodson@us.af.mil

h. SIGNATURE

i. DATE SIGNED (See Instructions)

PREVIOUS EDITION IS OBSOLETE. Page 6 of 6DD FORM 254, APR 2018

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICIAL

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND

SUBCONTRACTOR

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY

ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER

f. OTHER AS NECESSARY (If more room is needed, continue in Item 13 or on additional page if necessary.)

See Attachment within Item 13, "Ref 18.f", for SSA locations.

1. HQ USAFE/IP, Unit 3050 Box 135, APO AE 09094-135

2. HQ PACAF/IF, 25 E. Street, Suite H304C, Hickam AFB, HI 96835-5439

3. HQ ACC/IP, 114 Thompson Ave, JB Langley-Eustis, VA 23665-0218 for South America Regions.

4. Jessica Jones HAFB SSA

Department of Defense Contract Security Classification Specification (DD254) Contract:

FA821722R0001

Items 8.a-8.c ACTUAL PERFORMANCE (Continued)

PERFORMANCE LOCATIONS SUPPORTED

UNIT(S)SUPPORTED INSTALLATION ST CO

ACC / AFGSC ‐ 379 AEW, BLOS/ AMC‐379 AEW / 379 ECS/ CAOC Al Udeid AB QAT

AMC ‐ 386 EOW Ali Al Salem AB KWT

AMC ‐ 97 AMW Altus AFB OK USA

AFGSC ‐ 36 WG Andersen AFB GU USA

AFRC ‐ 459 AW / AMC ‐ 89 AW / ACC ‐ 113 WG / AFGSC‐AFDW / ANG‐113 WG Andrews AFB MD USA

ANG ‐ 177 FW Atlantic City IAP NJ USA

USAFE ‐ 31 FW Aviano AB ITA

ACC / AMC ‐ 455 EOSS Bagram AB AFG

ANG ‐ 101 ARW Bangor ANGB ME USA

AFGSC ‐ 2 BW / 307 BW / 442 FW / AFRC ‐ 917 WG (47 FS, 93 BS) Barksdale AFB LA USA

ANG ‐ 104 FW Barnes ANGB MA USA

ANG ‐ 110 WG AOC Battle Creek ANGB MI USA

AFRC ‐ 940 WG / 9 RW / ANG A2‐234 IS Beale AFB CA USA

ANG A2 ‐ 118 RPA Berry Field ANGB TN USA

ANG ‐ 103 AW Bradley ANGB CT USA

ANG ‐ 140 Wing Buckley AFB CO USA

ANG ‐ 158 FW Burlington IAP VT USA

ANG ‐ 146 AW Channel Islands CA USA

AMC ‐ 437 AW / AFRC‐315 AW Charleston AFB SC USA

ANG ‐ 130 AW Charleston (McLaughlin) WV USA

ANG ‐ 145 AW Charlotte NC USA

ANG ‐ 153 AW Cheyenne WY USA

AETC ‐ 14 FTW Columbus AFB MS USA

ACC ‐ 432 WG/ 53 WG Creech AFB NV USA

ACC ‐ 355 FW/ ACC 563 RQG/ AFRC‐ 943 RQG / 920 RQW Davis‐Monthan AFB AZ USA

ANG A2 ‐ 132 Intel Des Moines IA USA

AFRC ‐ 94 AW Dobbins ARB GA USA

AMC ‐ 436 AW / AFRC‐512 AW Dover AFB DE USA

ANG ‐ 148 FW Duluth MN USA

AFGSC ‐ 7 BW, BLOS / AMC‐317 AG / AFRC‐ Dyess AFB TX USA

ACC ‐ 46 TW / ACC‐53 WG / ACC ‐ AFLCMC/HBM‐OL1 / AFRC ‐ 919 SOW Eglin AFB FL USA

PACAF ‐ 354 FW/ FLAG EX / ANG ‐ 168 ARW Eielson AFB AK USA

ANG A2 ‐ 147 RPA Ellington JRB TX USA

AFGSC ‐ 28 BW, BLOS Ellsworth AFB SD USA

AMC ‐ 92 ARW / AETC‐ 336 TG / ANG ‐ 141 ARW Fairchild AFB WA USA

ANG A2 ‐ 119 RPA Fargo ND USA

AFGSC ‐ 90 OG FE Warren AFB WY USA

ANG ‐ 190 ARW Forbes Field KS USA

ANG A2 ‐ 174 ATKW Fort Drum NY USA

ANG A2 ‐ 162 WG Fort Huachuca AZ USA

AETC – 23 FTS Fort Rucker AL USA

ANG A2 ‐ 188 WG RPA/DGS Fort Smith AR USA

ANG ‐ 122 FW Fort Wayne IAP IN USA

ANG ‐ 114 FW Joe Foss Field SD USA

ANG ‐ 144 FW Fresno ANGB CA USA

ANG ‐ 128 ARW General Mitchell ANGB WI USA

ANG ‐ 124 FW / ANG A2‐132 WG Intel Gowen Field ID USA

ACC ‐ 9 RW / 69 RG / 348 RS / ANG A2‐119 WG Grand Forks AFB ND USA

ANG ‐ 120 AW Great Falls IAP MT USA

AFRC‐ 434 ARW Grissom AFB IN USA

ANG ‐ 106 RQW F.S. Gabreski Airport NY USA

ANG ‐ 174 AOG AOC / ANG A2 174 ATKW RPA Hancock Field NY USA

ANG ‐ 193 SOW Harrisburg IAP PA USA

AFMC ‐ OO‐ALC / FMS / ACC / AMC / AFRC / ANG / AETC / FLAG EX / AFRC ‐ Hill AFB UT USA

ACC ‐ AETC / 56 FW / 49 FG

Holloman AFB NM USA

AFRC ‐ 482 FW Homestead ARB FL USA

ANG A2 ‐ 111 ATKW Horsham AGS PA USA

AMC ‐ 447 AEG Incirlik AB TUR

ANG ‐ 125 FW Jacksonville ANGB FL USA

ANG ‐ 157 AOG AOC Jefferson Barracks MO USA

PACAF ‐ 3 WG/ AMC‐517 AS/ FLAG EX / ANG ‐ 176 Wing Joint Base Elmendorf‐ Richardson (JBER)

AK USA

ACC ‐ INOSC East / ANG A2 ‐ 192 FW Joint Base Langley‐Eustis

(JBLE )

VA USA

AMC‐15 AW/ PACAF‐HQ PACAF / ANG‐154 WG / ANG A2 ‐ 201 IS

Joint Base Pearl Harbor

Hickam (JBPHH)

HI USA

AFRC ‐ 446 AW / AMC‐62 AW JBLM McChord Field WA USA

AMC‐AMWC / 305 AMW / TES‐TEO / 33 FTS / AFRC‐514 AMW / ANG‐108 ARW Joint Base McGuire ‐Dix ‐ Lakehurst (JBMDL)

NJ USA

AFRC ‐ 433 AW / ANG ‐ 149 FW JBSA‐Lackland TX USA

PACAF / AMC ‐ 18 WG Kadena AB JPN

ACC / AMC ‐ 451 EOSS Kandahar AFG

AFRC ‐ 403 WG Keesler AFB MS USA

ANG ‐ 186 ARW Key Field MS USA

ANG ‐ 173 FW Kingsley Field OR USA

ACC ‐ 512 RQS Kirtland AFB NM USA

PACAF ‐ 8 FW Kunsan AB KOR

AETC ‐ 47 FTW / AFRC ‐ 433 WG Laughlin AFB TX USA

ANG ‐ 155 ARW Lincoln ANGB NE USA

AMC ‐ 19 AW / AMC‐314 AW / AMC‐29 WPS / AFRC ‐ 913 AG / ANG ‐ 189 AW Little Rock AFB AR USA

ANG ‐ 156 ARW Muniz ANGB PR USA

ANG ‐ 123 AW Louisville KY USA

ACC ‐ AETC ‐ 56 FW Luke AFB AZ USA

AMC ‐ 6 AMW / AFRC ‐ 927 ARW MacDill AFB FL USA

AFGSC ‐ 341 OG Malmstrom AFB MT USA

Department of Defense Contract Security Classification Specification (DD254) Contract: F

AFRC ‐ 452 AMW / ANG A2 ‐ 163 RW March ARB CA USA

AFRC ‐ 908 AW, 357 AS/DOXT Maxwell AFB AL USA

AFRC ‐ 931 ARG / AMC ‐ 22 ARW McConnell AFB KS USA

ANG ‐ 169 FW McEntire Joint NGB SC USA

ANG ‐ 134 ARW McGhee Tyson ANGB TN USA

ANG ‐ 164 AW Memphis TN USA

AFRC ‐ 934 AW / ANG ‐ 133 AW Minneapolis/St.Paul MN USA

AFGSC ‐ 5 BW Minot AFB ND USA

PACAF ‐ 35 FW Misawa AB JPN

ANG ‐ 129 RQW Moffett Field CA USA

ANG ‐ 187 FW Montgome ry Reg. Airport AL USA

ACC ‐ 23 WG Moody AFB GA USA

ACC ‐ 366 WG, FLAG EX Mountain Home AFB ID USA

AFRC ‐ 301 FW / ANG ‐ 149 FW NAS JRB Ft Worth TX USA

ANG ‐ 159 FW NAS JRB, New Orleans LA USA

AETC ‐ 479 FTG NAS Pensacola FL USA

ACC ‐ 57 WG / ACC ‐ 53 WG / ACC ‐ 23 WG / ACC ‐ 563 RQG‐OLA Nellis AFB NV USA

ANG ‐ 166 AW New Castle County Airport DE USA

AFRC ‐ 914 AW / ANG A2 ‐ 107 ATKW Niagara Falls ARS NY USA

ANG ‐ 143 AW North Kingstown RI USA

ACC ‐ 55 WG Offutt AFB NE USA

PACAF ‐ 51 FW Osan AB KOR

AFRC ‐ 920 RQW Patrick AFB FL USA

ANG ‐ 157 ARW Pease ANGB NH USA

ANG ‐ 182 AW Peoria ANGB IL USA

ACC ‐ INOSC West / AFRC ‐ 302 AW Peterson AFB CO USA

ANG ‐ 161 ARW Phoenix ANGB AZ USA

AFRC ‐ 911 AW / ANG ‐ 171 ARW Pittsburgh IAP PA USA

AMC ‐ 43 AW / AFRC ‐ 440 AW Pope AFB NC USA

ANG ‐ 142 FW Portland ANGB OR USA

ACC 178 ARW Prince Sultan AB KSA

USMC – MARCORSYSCOM Quantico VA USA

USAFE ‐ 48 FW RAF Lakenheath GBR

AMC ‐ 100 ARW RAF Mildenhall GBR

AMC ‐ 86 AW Ramstein AB DEU

AETC ‐ 12 FTW Randolph AFB TX USA

ANG‐121 ARW Rickenbacker IAP OH USA

ANG ‐ 116 ACW / 461 ACW / AFRC ‐ HQ AFRC A3 / 413 FLTG Robins AFB GA USA

AMC ‐ 139 AW / AATTC / ANG ‐ 139 AW Rosecrans/St Joseph MO USA

ANG ‐ 151 ARW Rowland R. Wright ANGB UT USA

ANG ‐ 165 AW Savannah‐Hilton Head IAP GA USA

AMC ‐ HQ AMC, AMC IG, A3DT, 375 AMW, 458 AW, 618 TACC / ANG 126 ARW Scott AFB IL USA

ANG – 127 WG Selfridge ANGB MI USA

ACC ‐ 4 FW / AFRC ‐ 916 ARW Seymour Johnson AFB NC USA

ACC ‐ 20 FW Shaw AFB SC USA

ANG ‐ 167 AW Shepherd Field WV USA

AETC ‐ 82 TRW Sheppard AFB TX USA

ANG ‐ 185 ARW Sioux Gateway Airport IA USA

USAFE ‐ 52 FW Spangdahlem AB DEU

ANG ‐ 183 Wing Springfield IL USA

ANG A2 ‐ 178 RPA Springfield OH USA

ANG ‐ 112 AOS AOC State College PA USA

ANG ‐ 105 AW Stewart ANGB NY USA

ANG ‐ 109 AW Stratton ANGB NY USA

ANG ‐ 180 FW Swanton OH USA

ANG A2 ‐ 181 IS DGS Terre Haute IN USA

ANG ‐ 172 AW Thompson Field MS USA

ACC ‐ 552 ACW / AFRC ‐ 507 ARW Tinker AFB OK USA

AMC ‐ 60 AMW / AFRC‐349 AMW Travis AFB CA USA

ANG ‐ 115 FW Truax Field WI USA

ANG ‐ 162 Wing / AATC / ANG A2‐162 RPA Tucson IAP AZ USA

ANG ‐ 138 FW Tulsa ANGB OK USA

ANG ‐ 101 AOG Tyndall AFB FL USA

AETC ‐ 71 FTW Vance AFB OK USA

ANG ‐ 175 WG Warfield ANGB MD USA

AFRC ‐ 439 AW Westover ARB MA USA

AFGSC ‐ 509 BW / AFRC ‐ 442 FW Whiteman AFB MO USA

ANG ‐ 137 ARW Will Rogers ANGB OK USA

AFRC ‐ 445 AW Wright‐Patterson AFB OH USA

AMC ‐ 374 AW Yokota AB JPN

AFRC ‐ 910 AW Youngstown AFB OH USA

Ref. 11.j. OPSEC requirements are as follows:

Reference: National Security Decision Directive (NSDD) 298, DOD 5205.02, DODD 5205.02E, AFI10- 701AFGM_2018-01

All contractors, subcontractors, their employees, associates, and consultants who have access to critical information must comply with the DOD and Air Force-sponsored Operations Security (OPSEC) program. The OPSEC Program is directed by NSDD298, DOD Publications, and applicable Air Force guidance.

OPSEC is a systematic means of identifying and protecting information which an adversary could use to their advantage or to our disadvantage. Critical information (CI) is generally unclassified but can become classified through compilation. This sensitive information has been identified by the organization’s OPSEC program as requiring protection. OPSEC measures (OM) are control standards with which all personnel must comply in order to protect CI against adversaries.

RESPONSIBILITIES:

The AFLCMC/HBZBC OPSEC Program Coordinator Todd Call, will provide program / approve OPSEC training curriculum for use by the contractor. Critical Information and Indicator Listing (CIIILs) must be protected by all contract personnel. Approved organizational OPSEC measures must be used by all contract personnel to protect critical information in their possession and protect against current foreign intelligence and industrial espionage threats. The

OPSEC PM/Coordinator and the Lead contractor must ensure all personnel working on the contract or having access to critical information attend initial and annually recurring refresher training and the approved curriculum is presented.

Training must be provided before contract personnel are allowed access to or handling of critical information. All contract personnel will comply with the organization’s OPSEC standards and practices as trained. Additional training may be required based on updates to critical information, OPSEC measures, intelligence threat/vulnerability, or other fundamental changes to the OPSEC program. The OPSEC Coordinator is responsible for contacting the OPSEC

Program Manager if OPSEC isn’t written into the contract. The OPSEC PM/Coordinator for the organization will track

OPSEC training statistics for all personnel working on the contract, when each individual has received the required

OPSEC training, and when refresher training is due. Training statistics must be forwarded to the installation OPSEC

PM at the end of each calendar quarter and/or upon request.

Contractors with OPSEC requirements within a contract must ensure employees receive OPSEC training as specified within the contract. Accomplishment of training must not exceed 90 days from initial assignment to a contract with OPSEC requirements. Annual training will be accomplished NLT 30 September of each year. The contractor personnel will not be given access to an organization’s CIIL until after training has been completed and documented by the organization OPSEC Coordinator.

Prior to seeking approval through Hill Air Force Base Public Affairs, any information to be released outside of official U.S. Government channels, via any media, must be approved through an OPSEC review by the Government OPSEC Program Manager AFLCMC/HBZ, Ms Jessica Jones. All personnel must promptly report OPSEC related incidents, issues, and concerns to the AFLCMC/HBZ Government OPSEC Program Manager, Ms. Jessica Jones, who will then report it to the installation PM, 801-586-8008.

Solicitation: FA8217-22-R-0001.

DD Form 254 ADDENDUM

Ref:(Item 10.e. (1): Sensitive Compartmented Information (SCI) CLAUSES (Expiration Date: August 2023)

1. This contract requires access to Sensitive Compartmented Information (SCI). Per the National Security Act of 1947, as amended; Executive Order (EO) 12333, as amended; EO 13526; EO 13549; EO 12829; EO 12968, as amended; 32 CFR Part 2001; 32 CFR Part 2003, 32 CFR Part 2004; and other applicable provisions of law; DNI Memorandum ES 2017-00356; DoD Manual 5105.21, Volumes 1-3; AFMAN 14-304; AFMAN 14-401; Joint DoDISS Cryptologic SCI Information Systems standards (JDSCSISSS); 5220.22-M (NISPOM and Supplement);

ICD 701, ICD 702, ICD 703, DCID 6-03 w/ICPM 2006-700-9, ICD 704/ICPGs 704.1. ICPG704.2, ICPG704.3, ICPG704.4, ICD 710, DCID 6-06, as amended; ICD 705, ICS 705-1; ICD 501 and related NIST/CNSSI guidance for Risk Management Framework, and the ICD 503 Practitioner Manual, (This defines the RMF, Reciprocity, Roles & Responsibilities and each of the 6 steps of RMF), and AFMC SCI Management Guidance provides the necessary guidance for physical, personnel, information, and information systems security measures and is part of the SCI security specifications for the contract.

2. This contract will require 74 SCI positions in order to fulfill contractual obligations. SCI access is subject to U.S.

Government review and approval as outlined in the aforementioned SCI security guidance. Justification must be identified in the contract Statement of Work (SOW)/Performance Work Statement (PWS). Upon completion or cancellation of the contract, the SSO/CSSO will debrief all personnel not required for contract closeout and those positions will be disestablished.

3. Name, organization, Telephone number and address of the contract Officer Representative (COR) for the SCI portion of this contract is:

Contracting Officer Representative Office Symbol Phone Number Kenneth L. Kash AFLCMC/HBMB DSN -845-9224

4. All DD Forms 254 prepared for subcontracts involving access to SCI under this contract must be forwarded to the COR for approval and then to SSO HILL for review and concurrence prior to award of the subcontract.

Inquiries pertaining to classification guidance on SCI will be directed to the COR listed in para. 3 above. SCI security management issues shall be directed to:

SMO: SSO HILL – AFLCMC/INLS Address: 6137 WARDLEIGH ROAD DSN: 777-0484/Comm: 801-777-0484 HILL AFB, UT 84056-5843

5. SCI Access: SCI will not be provided to contractor employees without the specific release approval by the originator of the material as outlined in the governing directives and based on prior approval and certification of “need-to-know” by the Contracting Officer’s Representative (COR). The COR requirements and responsibilities are as follows: 1) COR be Military Member or Government Civilian. 2) Must be SCI indoctrinated. 3) Will establish Billet Position Document (instructions and worksheet template provided by SSO HILL). 4) Will validate each candidate’s need-to-know via the “Nomination Letter” process (instructions and template provided by SSO HILL). 5) If work will be performed in a contractor operated SCIF, the COR will coordinate with SSO HILL to identify a Contractor Special Security Officer (CSSO). 6) If work will be performed in a US Government owned SCI Facility (SCIF), the COR will coordinate with SSO HILL to identify a Contractor Special Security representative (CSSR).

a. Names of contractor personnel requiring access to SCI and justification for SCI access will be submitted for coordination and action to SSO HILL after the COR’s approval/concurrence. Upon receipt of written approval from the COR, the Facility Security Officer (FSO) and/or Contractor Special Security Officer (CSSO) may submit the necessary forms to the Defense Security Service (DSS) for a Single Scope Background Investigation (SSBI) for those personnel nominated for SCI in accordance with the National Industrial Security Program

Operating Manual (NISPOM).

b. The COR and SSO/CSSO must restrict access to only those individuals who possess the necessary security clearance and who are actually providing services under the contract. Further dissemination to other contractors, sub-contractors, other government agencies, private individuals or organizations is prohibited unless authorized in writing by the releasing agency.

6. SCI materials: SCI materials furnished in support of this contract remains the property of the DoD department or command that released it. Upon completion or cancellation of the contract, all SCI materials furnished will be returned to the direct custody of the originator of the materials or the COR.

a. Classified foreign intelligence materials must not be released to foreign nationals or immigrant aliens whether or not they are also consultants, U.S. contractors, or employees of the contractor; regardless of the level of their security clearance, except with advanced written permission from the originator.

b. Contractor personnel must maintain accountability for all intelligence (to include foreign intelligence) materials released to their custody.

c. Contractor personnel must not reproduce classified foreign intelligence without advance approval of the releasing agency. If permission is granted, each copy will be controlled in the same manner as the original. The CSSO must not destroy any classified foreign intelligence without advance approval of the releasing agency.

7. SCIF Guidance : A SCIF meeting the physical security requirements in DCID 6/9 or ICD 705 is required this contracting effort. All SCI used for this contract shall be stored, handled, and maintained in an accredited SCIF.

8. Visits: The contractor will submit the written request for SCI visit certifications through the COR for approval of the visit. The certification must arrive at SSO HILL at least 3 working days prior to the visit.

9. Electronic Processing: Information assurance and electronic processing; information security (computer) and network connectivity require accreditation of the equipment connectivity.

a. Other networks processing corporate unclassified, SIPRNET, or other collateral information will follow the cognizant authority policy requirements. Prior authorization by a cognizant authority must be obtained before operation. Non-AF SCI systems must be accredited by the designated authority and may require a Co-Use Agreement (CUA) for operation in DIA facilities.

b. Joint Worldwide Intelligence Communication System (JWICS) accounts require NATO – Secret indoctrination reflected in Joint Personnel Adjudication System (JPAS). JWICS access must be coordinated through the AFLCMC/INL Information Systems Security Manager (ISSM) at DSN 777-6833, Comm. 801-777-6833.

c. For contract work within an approved contractor facility, all SCI information systems will be accredited and authorized following the Risk Management Framework(RMF), IAW ICD 503 and the ICD 503 Practitioners

Manual. All SCI systems will be accredited through the XACTA system and HQ AFMC and the Authorizing

Official (AO), the 25th AF/A6S (AF Intelligence Community). Other applicable policy as directed by DIA, ODNI, or HQ AFMC shall apply. This includes all electronic connectivity and electronic methods for storing and communicating within and outside the SCIF.

Ref:(Block 10e (2) Non-Sensitive Compartmented Information (SCI) Intelligence

Information Clauses (Expiration Date August 2023):

1. Special Requirements of Intelligence Information: The contractor will require access to, and receipt of, classified intelligence documents in the performance of this contract. In addition to the requirements and controls for classified material in DoD 5220.22-M, National Industrial Security Program Operating

Manual (NISPOM), the contractor shall adhere to the National Security Act of 1947, as amended;

Executive Order (EO) 12333, as amended; EO 13526; EO 13549; EO 12829; EO 12968, as amended; 32

CFR Part 2001; 32 CFR Part 2003, 32 CFR Part 2004; and other applicable provisions of law; ICD 501;

ICD 703; ICD 710; DCID 6/6 and AFMAN 14- 304.

2. Name, organization, Telephone number and address of the contract Officer Representative (COR):

Contracting Officer Representative Office Symbol Phone Number

Kenneth L. Kash AFLCMC/HBMB DSN -845-9224

3. Intelligence Information Access:

a. Contractor shall restrict access to those individuals with a valid need-to-know who are actually providing services under the contract. Further dissemination to other contractors, subcontractors, or other government agencies and private individuals or organizations is prohibited unless authorized in writing by the COR with prior approval of SSO HILL.

b. Contractor shall not release intelligence data to foreign nationals or immigrant aliens regardless of their security clearance or contract status without advanced written permission from the COR, SSO HILL, Foreign Disclosure Policy Office, and HQ AFMC/A2S.

c. Contractor shall ensure the each employee having access to intelligence material is fully aware of the special security requirements for this material and maintains records in a manner that permits the contractor to furnish on demand the names of individuals who have access to the material in their custody.

d. Contractor shall restrict access to those individuals with a valid need-to-know who are actually providing services under the contract. Further dissemination to other contractors, subcontractors, or other government agencies and private individuals or organizations is prohibited unless authorized in writing by the COR with prior approval of SSO HILL.

4. Intelligence Information Materials:

a. Contact SSO HILL for permission to make extra copies of intelligence data required by the contractor if approval has not previously been stipulated above, or been stipulated in the release letter. The COR then maintains accountability of copies and ensures all information is returned to the Air Force upon contract termination/expiration.

SMO: SSO HILL – AFLCMC/INLS Address: 6137 WARDLEIGH ROAD

DSN: 777-0484/Comm: 801-777-0484 HILL AFB, UT 84056-5843

b. Maintain a record of all intelligence materials released to the contractor, and ensures all data is returned to the COR within 2 years after final delivery of goods and services or after completion or termination of the classified contract, whichever comes first. If retention is required beyond the 2-year period the contractor must request and receive written authority from the COR in the form of a signed Final DD FM

254/Contract Security Classification Specification identifying the period of retention and disposition instructions for the intelligence materials, once the specified period of retention ends.

c. Contractor shall maintain accountability for all intelligence released in his/her custody. Contractors must agree that all intelligence data released to them, all reproductions, and other material generated (including authorized reproductions) is the property of the U.S. Government and will be returned upon request of the sponsoring agency or expiration date of the contract, whichever comes first.

d. Contractor shall not reproduce intelligence without permission from SSO HILL through the COR. If approved, must control each copy in the same manner as the original.

e. Contractor shall not reproduce intelligence without advance approval from the COR, except for working papers and derivative material produced in the publication process. Working papers and derivative material produced in the publication process do not need destruction approval.

5. Electronic Processing: Information assurance and electronic processing; information security

(computer) and network connectivity require accreditation of the equipment connectivity. Networks processing corporate unclassified and/or other collateral information will follow the cognizant authority policy requirements. Prior authorization by a cognizant authority must be obtained before operation.

Ref: 10.f. Special Access Program (SAP) Information Addendum Solicitation # FA8217-22-R-0001

General: All security aspects/procedures for this effort will be administered IAW applicable Security

Classification Guide(s) (SCGs), which will be transmitted under separate cover to an approved facility. The contractor is required to perform any Special Access Program(SAP) activity in a government approved facility, accredited by the Air Force Office of Special Investigations (AFOSI) Office of Special Projects (PJ) using AIS

(if applicable) approved by same. The government Program Office will resolve any conflicting security guidance. This DD Form 254 clarifies the Special Access portion of this contract. The Government does not believe there is additional cost associated with this security clarification. If the contractor believes there is cost associated with this DD Form 254, they must bring it to the attention of the Contracting Officer prior to implementation.

1. Prior to subcontracting any portion of this activity, the contractor is required to receive written approval from the Government contracting office. The Contracting Officer will coordinate any new subcontracting requirements with the AFOSI PJ Program Security Officer (PSO) through the AFLCMC/HBZBC (FA8217)

Government SAP Security Officer (GSSO) prior to authorizing the contractor to initiate any new subcontracts.

PSO approval of subcontracting must be received in writing by the contracting officer. All personnel requiring access to SAP information must be U.S. citizens, have been granted a final “SECRET” or “TOP SECRET” U.S.

Government security clearance (as determined by the AFOSI/PJ), have been approved as meeting established criteria by a Government cognizant authority, and have been indoctrinated for applicable SAP prior to being given access to such information generated or received under this contract. Immigrant aliens, interim cleared personnel, or personnel holding contractor granted CONFIDENTIAL clearances are not eligible for access to classified information generated or released under this contract without the expressed written permission of the

AFOSI PJ PSO.

2. Contractor or government furnished material may not be provided to the Defense Technical Information

Center (DTIC). Contractor generated reports will bear the statement: “Not releasable to the Defense Technical

Information Center per DoD Instruction 5230.24.”

3. Ref Block 12: Public release of SAP related data is NOT authorized without prior coordination through the AFOSI PJ Security Director and subsequent approval of the Original Classification Authority (OCA) and Air Force Special Access Program Central Office (AF SAPCO). Submit all proposed public disclosures related to

SAP data to the Government Program Manager (GPM) and the AFOSI PJ PSO.

4. Ref Block 13:

Guidance can be found: http://www.esd.whs.mil/DD/DoD-Issuances/ http://www.e-publishing.af.mil/ http://www.dss.mil/isp/specialprograms.html http://www.dtic.mil/whs/directives https://www.federalregister.gov/executive-orders https://www.archives.gov/federal-register/cfr https://www.dni.gov/index.php/what-we-do/ic-related-menus/ic-related-links/intelligence-community-directives https://fas.org/irp/offdocs/dcid.htm

Security Guidance References:

- DoDM 5200.01 Volumes 1-4 - Manual - DoD Information Security Program

- DoD 5220.22-M - The National Industrial Security Program Manual (NISPOM)

- DoDD 5205.07 - Directive - Special Access Program(SAP) Policy

- DoDI 5205.11 - Instruction - Management, Administration, and Oversight of DoD SAP

- DoDI 8510.01 - Instruction - Risk Management Framework (RMF) for DoD Information Technology

(IT) using Joint SAP Implementation Guide (JSIG) http://www.esd.whs.mil/DD/DoD-Issuances/ http://www.e-publishing.af.mil/ http://www.dss.mil/isp/specialprograms.html http://www.dtic.mil/whs/directives http://www.federalregister.gov/executive-orders http://www.archives.gov/federal-register/cfr http://www.dni.gov/index.php/what-we-do/ic-related-menus/ic-related-links/intelligence-community-directives

- DoDM 5205.07 Volumes 1 - Manual - DoD SAP Security: General Procedures

- DoDM 5205.07 Volumes 2 - Manual - DoD SAP Security: Personnel Security

- DoDM 5205.07 Volumes 3 - AFMAN 16-703 Volume 3 - Manual - SAP Security: Physical Security

- DoDM 5205.07 Volumes 4 - Manual - DoD SAP Security: Marking

- AFPD 16-7 - Directive - SAPs

- AFI 16-701 - Instruction - Management, Administration and Oversight of SAPs

- Air Force Security Marking Guide for SAPs

- RMF Using the Joint Special Access Program Implementation Guide (JSIG), dated 11 April

2016, or latest version

- DoD SAP Program Manager’s (PM) Handbook to the JSIG and the RMF

- SAF/AAZ Memorandum, Implementation of DoDM 5205.07, DoD SAP Security Manual, Volumes

1-4 dtd 4 April 2016

- NSA/CSSPolicy Manual 3-16, Control of COMSEC Material, latest version

- Communications Security (COMSEC) User…