Attach_03_DD254.pdf

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort.)

1. CLEARANCE AND SAFEGUARDING

a. FACILITY CLEARANCE REQUIRED

b. LEVEL OF SAFEGUARDING REQUIRED

2. THIS SPECIFICATION IS FOR: (X and complete as applicable)

a. PRIME CONTRACT NUMBER

b. SUBCONTRACT NUMBER

c. SOLICITATION OR OTHER NUMBER DUE DATE (YYYYMMDD)

3. THIS SPECIFICATION IS: (X and complete as applicable)

a. ORIGINAL (Complete date in all cases)

REVISION NO.

c. FINAL (Complete Item 5 in all cases)

DATE (YYYYMMDD)

b. REVISED (Supersedes all previous specs)

DATE (YYYYMMDD)

DATE (YYYYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT? YES NO. If Yes, complete the following:

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? YES NO. If Yes, complete the following:

In response to the contractor's request dated , retention of the classified material is authorized for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

8. ACTUAL PERFORMANCE

a. LOCATION b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

10. CONTRACTOR WILL REQUIRE ACCESS TO: 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL:YES NO YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION

b. RESTRICTED DATA

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION

d. FORMERLY RESTRICTED DATA

e. INTELLIGENCE INFORMATION

(1) Sensitive Compartmented Information (SCI)

(2) Non-SCI

f. SPECIAL ACCESS INFORMATION

g. NATO INFORMATION

h. FOREIGN GOVERNMENT INFORMATION

i. LIMITED DISSEMINATION INFORMATION

j. FOR OFFICIAL USE ONLY INFORMATION

k. OTHER (Specify)

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER

CONTRACTOR'S FACILITY OR A GOVERNMENT ACTIVITY

b. RECEIVE CLASSIFIED DOCUMENTS ONLY

c. RECEIVE AND GENERATE CLASSIFIED MATERIAL

d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. PERFORM SERVICES ONLY

f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES

g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL INFORMATION

CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER

h. REQUIRE A COMSEC ACCOUNT

i. HAVE TEMPEST REQUIREMENTS

j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

l. OTHER (Specify)

DD FORM 254, DEC 1999 PREVIOUS EDITION IS OBSOLETE. Adobe Professional 7.0

TOP SECRET

TOP SECRET

FD202013-72062 20140113

20131210

FA8217-11-D-0001

Raytheon Company 7887 Bryan Dairy Rd PO Box 10037 Largo, FL 33777-1455

00724 Melbourne Field Office Defense Security Service (IOFSM) 6767 N. Wickham Road, Suite 208 Melbourne, FL 32940

N/A N/A N/A

TBD N/A TBD

Command and Control Switching System (CCSS) Follow-on site Depot-Level Support

NC2 Category E required at AFPCA; Ramstein AB, Germany; Offutt AFB, NE; and WHCA

Automated Information System (AIS) The AFFARS clause 5352.204-9000 applies.

DD Form 254 Continuation sheet

Solicitation PR FD202013-72062

Block 13

Ref. 10.a.: COMSEC safeguarding requirements apply. See the NISPOM chapter 9, section 4 for details. For on-base performance, COMSEC is incumbent on the government. Access on a government installation is granted by the user agency. Access to COMSEC information is restricted to U.S. Citizens holding a final U.S. government clearance. Personnel must receive the required COMSEC briefing. Prior approval is required from the Government Contracting Activity prior to granting access to COMSEC information to a subcontractor. Contractor will comply with Air Force COMSEC guidance.

Ref Blk 10.e.(1): Contractor requires access to SCI materials; SCI security requirements apply, see SCI addendum for details.

Ref. 10.e.(2): Contractor will require to and must comply with the Director of Intelligence, AFI 14-303, Release of Intelligence to U.S. Contractors, and AFI 14-303, AFMC Sup 1.

Ref Blks 10.e.(1) and 10.e.(2): Contractor will require access to intelligence information and must comply with AFI 14-303/AFMC Supplement 1. The Program Manager has determined that disclosure does not create an unfair competitive advantage for the contractor or a conflict of interest with the contractor's obligation to protect the information and will submit the AFMC Form 210 to the Air Force Life Cycle Management Center/Intelligence Division Utah (AFLCMC/INL) for approval prior to granting access.

Ref 10.g.: The contractor is permitted access to classified North Atlantic Treaty Organization (NATO) information in performance of this contract. The government project manager is the designated representative that will ensure the contractor Facility Security Officer and concerned employees are NATO briefed prior to access being granted. Prior approval of the contracting office is required for subcontracting. See the NISPOM chapter 10, section 7 for additional security requirements. Access to NATO requires a final U.S. Government clearance at the appropriate level.

Ref. 10.h.: The contractor is permitted access to Foreign Government Information in performance of this contract. Access to Foreign Government Information requires a final U.S.

Government clearance at the appropriate level. Prior approval of the contracting activity is required for subcontracting. Refer to the NISPOM chapter 10, section 3 for additional security requirements.

Ref. 10.j.: FOUO information provided under this contract shall be safeguarded as specified in the attachment “Protecting For Official Use Only (FOUO) Information”.

Ref. 10.k.: NC2 Category E briefings will be conducted by: AFPCA – 844 CS/SCN, Ramstein – HQ USAFE/A3NM, Offutt – USSTRATCOM/J3N, WHCA – WHCA/J2.

Ref 11.c.: The contractor requires access to classified source data up to and including TOP SECRET in support of the work effort. Any extracts or use of such data requires the contractor to apply derivative classification markings consistent with the source documents and Executive Order (E.O.) 13526, as amended. Use of “Multiple Sources” on the “Derived From” line necessitates compliance with E.O. 13526, as amended, the NISPOM, and use of bibliography.

Defense RED Switch Network (DRSN) Security Classification Guide, DISAC 300-115-7, dated 3/26/12 is the SCG. The applicable SCG will be provided under a separate cover.

Ref. 11.d.: The contractor must provide adequate storage for classified hardware and materials to the level of Top Secret which exceeds 2 cubic feet and is of size and quantity that it cannot be safeguarded in a General Service Administration (GSA) approved security container. The contractor requires adequate space to support CCSS switch software installations and upgrades by allowing conversion of classified Red Switch databases from old to new formats, support integration of the current Channel Encryption Unit alternative – ECTOCRYPT product line, and support classified processing information systems. The systems will be located behind a LKM- 7000 X-09 lock inside of a controlled DoD closed area with no external network connections. Access to this room will be limited to cleared, authorized individuals. Classified material will be handled and controlled according to proper security procedures. Users will be assigned individual accounts on these systems with complex passwords. Use of these systems will be audited and the associated audit logs will be reviewed weekly by cleared, trained Information System Security Officers (ISSO) to mitigate the risk of improper or unauthorized use of the network. Incidence response procedures will be followed where necessary. A Diebold 5 drawer GSA approved container (approximately 2’W x 4’H x 3’D) with an X-09 Digital lock will provide secure storage of the classified (SECRET) removable hard drives when not in use.

Ref 11.f.: Overseas contract performance will be at: HQ PACAF/15CS, Hickam AFB HI; HQ USAFE, Ramstein AB Germany ; 51CS, Osan AB Korea; 5AF, Yokota AB Japan; USFK, Yongsan Korea ; USFK, CP Tango Korea; US Army, Camp Arifjan; 3CS, Elmendorf AFB, AK;

USPACOM, Camp H.M. Smith, HI; HQ USEUCOM, Patch Barracks Germany;

USNAVSOUTH, Naples Italy; USNAVCENT, Bahrain; COMPACFLT, Pearl Harbor HI; Ft Greely, AK ; Canadian Defence Forces, Ottawa; Canadian Defence Forces, Esquimalt; Canadian Defence Forces, Winnipeg; Canadian Defence Forces, Halifax; SHAPE, Belgium; GMD, SBX Platform; AFCENT, Al Udeid, Qatar; Heidelberg, Germany. A copy of the DD Form 254 must be provided to the AF SSA responsible for overseas inspections and security oversight at the performance location. The Director for Information Protection Headquarters United States Air Force in Europe (HQ USAFE/IP), Headquarters Pacific Air Force (HQ PACAF/IP) will be provided copies of the DD Form 254, as applicable. See the NISPOM, chapter 10 for additional security requirements involving foreign contractors.

Ref 11.h.: A COMSEC account will be established and COMSEC will be protected per the NISPOM chapter 9, section 4.

Ref 11.j.: The contractor must comply with the U.S. Government, DOD, Air Force, AFMC, Hill AFB, and AFLCMC/AQW Operation Security (OPSEC) Programs. The contractor must comply with any additional OPSEC requirements referenced.

Ref 11.k.: This contract requires the use of the Defense Courier Service (DCS). The government contracting activity will request written approval for DCS services from the Commander, Defense Courier Service, ATTN: Operations Divisions, Fort George G. Meade, MD 20755-5370. Prior approval is required from the contracting activity, prior to authorizing a subcontractor to utilized DCS services.

Ref 11.l.: Any transfer or processing of classified or sensitive information via electronic methods on Hill AFB (e.g., facsimile, telemetry, voice, and computer) must be protected by implementing an appropriate combination of countermeasures such as encryption devices and sound practices and procedures. The specific countermeasures used must be coordinated and approved through the 75th Communication Squadron Base Information Assurance Office (75 ABW/SCBN). For performance on another government installation, coordination by the program manager with the appropriate communications activity is required. The contractor will provide the SSA, see attachment 3, with all the information required by the Air Force Federal Acquisition Regulation Supplement (AFFARS) 5352.204-9000, Notification of Government Security Activity and Visitor Group Security Agreements clause at least 30 days prior to beginning operations on (see attachment 1). See attachment 2 for the clause.

Contract Monitor: Mr. Jack Hall; (801) 586-3733, AFLCMC/HBZBH, 6039 Wardleigh Rd., Hill

AFB UT 84056-5838

SM: (801) 586-6447, OO-ALC/GHOO, 6062 Fir Ave, Hill AFB UT 84056-5816

Program Official: Mr. Paul Hairfield, (801) 775-2775, AFLCMC/HBZB, 6039 Wardleigh Rd., Hill AFB, UT 84056-5838

Block 14

For performance on a government installation the contractor will provide the information requested by the Notification of Government Security Activity and Visitor Group Security Agreements Clause, Air Force Federal Acquisition Regulation Supplement 5352.204-9000, to the Servicing Security Activity address, listed in attachment 3, at least 30 days prior to beginning operations. Refer to the contract document for this clause.

10.e.(1): Special requirements exist for WHCA, Washington DC; Anacostia; Camp David MD;

and other locations to be assigned by WHCA as follows: TOP SECRET/SCI/SPECIAL PRESIDENTIAL SUPPORT DUTY. The responsible Contracting Officer is Mr. Kenneth Tilby, 801-586-3465, AFLCMC/PZZKB, 6039 Wardleigh Rd, Bldg 1206, Hill AFB, UT 84056. The Designated SSO is Mr. Scott Logerquist, 801-777-0484, AFLCMC/INL, 6137 Wardleigh Rd, Bldg 1515, Rm 172, Hill AFB, UT 84056. See attachment for SCI and non-SCI Release of Intelligence Information for added security requirements. SCI security requirements apply, see SCI addendum for details. The contractor will require 40 SCI billets. CORs are listed below.

Allen Baird AFLCMC/HBZBH 801-586-8667 Jody Facey AFLCMC/HBZBH 801-586-7181 Jack Hall AFLCMC/HBZBH 801-586-3733 Michael Horr AFLCMC/HBZBH 801-586-2221 Trampas Kilpatric AFLCMC/HBZBH 801-586-2191 Michael Shapiro AFLCMC/HBZBH 801-586-2192 Bret Wells AFLCMC/HBZBH 801-586-0784

Ref 10.e.(2): See attached non-SCI Release of Intelligence Information for additional security requirements. Prior approval of the contracting activity is required for subcontracting. Access to intelligence information requires special briefings and a final U.S. Government clearance at the appropriate level.

Ref 11.f.: Disclosure of information related to this contract to citizens of or representatives of multiple countries shall be in accordance with the most current version of the applicable Delegation of Disclosure Letter.

Ref 11.i.: See attached Emission Security (EMSEC) addendum to the DD Form 254 for requirements and guidance.

Ref 11.j.: OPSEC requirements are referenced in the applicable OPSEC DD Form 254 addendum.

Requirements for SCI and Non-SCI, COMSEC, EMSEC and OPSEC are referenced in applicable continuation sheets.

Block 15

Industrial Security Reviews, while operating on an Air Force Installation, will be conducted by the SSA.

Ref. 10.e.(1): DSS is relieved of security inspection responsibility for all SCI material but retains responsibility for all non-SCI classified material released to or developed under the contract. The SSO maintains inspection responsibility for all SCI and non-SCI material related to this contract. SCI security requirements apply, see SCI addendum (para 13) for details.

The Defense Security Services (DSS) is relieved of all industrial security review responsibilities for contractor performance on (see attachment 1). The SSA, (see attachment 3) has exclusive oversight responsibilities while operating on an Air Force Installation.

AFLCMC/INL has exclusive security responsibilities for all SCI classified materials released or developed under this contract.

The Defense Security Service (DSS) retains security oversight responsibility for all SCI materials released or developed under this contract for performance not on a government installation.

DD FORM 254

(DoD CONTRACT SECURITY CLASSIFICATION SPECIFICATION)

Solicitation PR FD202013-72062

5352.204-9000 Notification of Government security activity and visitor group security agreements.

As prescribed in 5304.404-90, insert the following clause in solicitations and contracts:

NOTIFICATION OF GOVERNMENT SECURITY ACTIVITY AND VISITOR GROUP

SECURITY AGREEMENTS (APR 2003)

This contract contains a DD Form 254, DOD Contract Security Classification Specification, and requires performance at a government location in the U.S. or overseas. Prior to beginning operations involving classified information on an installation identified on the DD Form 254, the contractor shall take the following actions:

(a) At least thirty days prior to beginning operations, notify the security police activity shown in the distribution block of the DD Form 254 as to:

(1) The name, address, and telephone number of this contract company’s representative and designated alternate in the U.S. or overseas area, as appropriate;

(2) The contract number and military contracting command;

(3) The highest classification category of defense information to which contractor employees will have access;

(4) The Air Force installations in the U.S. (in overseas areas, identify only the APO number(s)) where the contract work will be performed;

(5) The date contractor operations will begin on base in the U.S. or in the overseas area;

(6) The estimated completion date of operations on base in the U.S. or in the overseas area; and,

(7) Any changes to information previously provided under this clause.

This requirement is in addition to visit request procedures contained in DOD 5220.22-M, National Industrial Security Program Operating Manual.

(b) Prior to beginning operations involving classified information on an installation identified on the DD Form 254 where the contractor is not required to have a facility security clearance, the contractor shall enter into a Visitor Group Security Agreement (or understanding) with the installation commander to ensure that the contractor’s security procedures are properly integrated with those of the installation. As a minimum, the agreement shall identify the security actions that will be performed:

(1) By the installation for the contractor, such as providing storage and classified reproduction facilities, guard services, security forms, security inspections under DOD 5220.22-M, classified mail services, security badges, visitor control, and investigating security incidents; and

(2) Jointly by the contractor and the installation, such as packaging and addressing classified transmittals, security checks, internal security controls, and implementing emergency procedures to protect classified material.

Emission Security (EMSEC) Requirements (Solicitation PR FD202013-72062)

EMISSIONS SECURITY ASSESSMENT REQUEST (ESAR)

FOR ALL CLASSIFIED SYSTEMS

1. The contractor shall ensure that compromising emanations (EMSEC) conditions related to this contract are minimized.

2. The contractor shall provide countermeasures assessment data to the Contracting Officer (CO), in the form of an ESAR. The ESAR shall provide only specific responses to the date required in paragraph c, below. The contractor’s standard security plan shall NOT be used as a “stand-alone” ESAR response. The contractor shall NOT submit a detailed facility analysis/assessment. The ESAR information will be used to complete an EMSEC Countermeasures Assessment Review of the contractor’s facility to be performed by the government EMSEC authority using current Air Force EMSEC directives. EMSEC is applied on a case-by-case basis and further information may be required to complete the review. Should this be the case, the contractor shall provide this information to the contracting officer when requested. After the evaluation of the ESAR by the government EMSEC authority, additional EMSEC requirements may be established.

3. ESAR contents shall include, as a minimum, the following information (NISPOM, paragraph 11- 101c) (Note: A copy of your Automated Information System Security Plan(s) (AISSP) will suffice.

a. The specific classification and special categories of material to be processed or handled by electronic means.

b. The percentage of information to be processed. Identify the approximate percentage for each level of information processed including unclassified.

c. The specific location where classified processing will be performed.

d. The name, address, title and telephone number of a point-of-contact at the facility where processing will occur.

NOTE: Once the above information has been provided to the CO, no further reporting is required for equipment reconfigurations. However, if the facility is physically relocated to another geographical location, the information requested in paragraph c above MUST be furnished to the CO.

4. The prime contractor shall ensure that all subcontractors and/or vendors comply with EMSEC requirements when performing classified processing related to this contract. They will provide the above documentation through their prime to the contracting officer to complete the ESAR.

PROTECTING FOR OFFICIAL USE ONLY (FOUO) INFORMATION

(DOD 5400.7-R, AF Supplement) Solicitation PR FD202013-72062

FOUO is not a classification. Originators mark records when they create them to call attention to FOUO content. An FOUO marking does not mean you must withhold a record under the FOIA.

You still need to review requested records. Examine records with and without markings to identify information that needs protection and is exempt from public release or to decide whether discretionary release is appropriate.

Information in a technical document that requires a distribution statement per AFI 61-204, Disseminating Scientific and Technical Information, must show that statement. The originator may also mark the information FOUO, if appropriate.

Mark an unclassified document containing FOUO information “For Official Use Only” at the bottom, on the outside of the front cover (if any), on each page containing FOUO information, on the back page, and on the outside of the back cover (if any).

In unclassified documents, the originator may also mark individual paragraphs that contain FOUO information to alert users and assist in review.

In a classified document, mark: An individual paragraph that contains FOUO, but not classified information, by placing “(FOUO)” at the beginning of the paragraph.

Mark the top and bottom of each page that has both FOUO and classified information, with the highest security classification of information on that page.

Mark “FOUO” at the bottom of each page that has FOUO but not classified information.

If a classified document also contains FOUO information or if the classified material becomes FOUO when declassified, place the following statement on the bottom of the cover or the first page, under the classification marking: NOTE: If declassified, review the document to make sure material is not FOUO and not exempt under DOD 5400.7, AF Supplement before public release.

Mark other records, such as computer printouts, photographs, films, tapes, or slides, “For Official Use Only” or “FOUO” so the receiver or viewer knows the record contains FOUO information.

Mark FOUO material sent to authorized persons outside the DOD with an explanation typed or stamped on the document.

Transmitting FOUO:

DOD components, officials of DOD components, and authorized DOD contractor consultants, and grantees send FOUO information to each other to conduct official DOD business. Tell recipients the status of such information, and send the material in a way that prevents unauthorized public disclosure. Make sure documents that transmit FOUO material call attention to any FOUO attachments. Normally, you may send FOUO records over facsimile equipment. When deciding whether to send FOUO records over facsimile equipment, balance the sensitivity of the records against the risk of disclosure. To prevent unauthorized disclosure, consider attaching special cover sheets (i.e. AF Form 3227, Privacy Act Cover Sheet, for Privacy Act Information), the location of sending and receiving machines, and ensure authorized personnel are available to receive FOUO information as soon as it is transmitted. FOUO information may be passed to officials in other departments and agencies of the executive and judicial branches to fulfill a government function. Mark the records “For Official Use Only” and tell the recipient the information is exempt from public disclosure under the FOIA and if it needs special handling.

Electronically and Facsimile Transmitted Messages. Each part of electronically and facsimile transmitted messages containing FOUO information shall be marked appropriately. Unclassified messages containing FOUO information shall contain the abbreviation “FOUO” before the beginning of the text. Such messages and facsimiles shall be transmitted in accordance with communications security procedures whenever practicable.*

Transporting FOUO:

Records containing FOUO information shall be transported in a manner that prevents disclosure of the contents. When not commingled with classified information, FOUO information may be sent via first-class mail or parcel post. Bulky shipments, such as distributions of FOUO Directives to testing materials, that otherwise qualify under postal regulations may be sent by fourth-class mail.

Mark each part of a message that contains FOUO information. Unclassified messages containing FOUO information must show the abbreviation “FOUO” before the text begins.

Safeguarding FOUO Information:

During normal duty hours: During normal working hours, records determined to be FOUO shall be placed in an out-of-sight location if the work area is accessible to non-government personnel.

During Non-duty Hours: At the close of business, FOUO records shall be stored to prevent unauthorized access. Filing such material with other unclassified records in unlocked files or desks, etc., is adequate when normal U.S. Government or Government-contractor internal building security is provided during non-duty hours. When such internal security control is not exercised, locked buildings or rooms normally provide adequate after-hours protection. If such protection is not considered adequate, FOUO material shall be stored in locked receptacles such as file cabinets, desks, or bookcases. FOUO records that are subject to the provisions of the National Security Act of 1959 (reference (aa)) shall meet the safeguards outlined for that group of records.

Termination, Disposal and Unauthorized Disclosures:

Termination: The originator or other competent authority; e.g., initial denial and appellate authorities, shall terminate “For Official Use Only” markings or status when circumstances indicate that the information no longer requires protection from public disclosure. When FOUO status is terminated, all known holders shall be notified, to the extent practical. Upon notification, holders shall efface or remove the “For Official Use only” markings, but records in file or storage need not be retrieved solely for that purpose.

Disposal: Non-record copies of FOUO materials may be destroyed by tearing each copy into pieces to prevent reconstructing, and placing them in regular trash containers. When local circumstances or experience indicates that this destruction method is not sufficiently protective of FOUO information, local authorities may direct other methods but must give due consideration to the additional expense balanced against the degree of sensitivity of the type of FOUO information contained in the records.

Record copies of FOUO documents shall be disposed of in accordance with the disposal standards established under 44 U.S.C. 3301-3314 (reference (ab)), as implemented by DOD Component instructions concerning records disposal.

Unauthorized disclosure: The unauthorized disclosure of FOUO records does not constitute an unauthorized disclosure of DOD information classified for security purposes. Appropriate administrative action shall be taken, however, to fix responsibility for unauthorized disclosure whenever feasible, and appropriate disciplinary action shall be taken against those responsible.

Unauthorized disclosure of FOUO information that is protected by the Privacy Act (reference (d) may also result in civil and criminal sanctions against responsible persons. The DOD Component that originated the FOUO information shall be informed of its unauthorized disclosure.

*NOTE: For clarification of electronic dissemination, FOUO will not be sent electronically unless it remains behind the Hill AFB/SIINET Firewall.

Reference DD Form 254 Item 10e (2)

NON-SENSITIVE COMPARTMENTED INFORMATION (SCI)

Solicitation PR FD202013-72062

1. Special Requirements of Intelligence Information: The contractor will require access to, and receipt of, classified intelligence documents in the performance of this contract. In addition to the requirements and controls for classified material in DoD 5220.22-M, National Industrial Security Program Operating Manual (NISPOM), the contractor shall adhere to the following requirements and controls of intelligence, per AFI 14-303 and applicable supplements.

2. Contact AFLCMC/INL 6137 Wardleigh Rd., Hill AFB UT 84056-5843, the Unit IN for permission to make extra copies of intelligence data required by the contractor if approval has not previously been stipulated above or been stipulated in the release letter. The Contract Monitor (CM) then maintains accountability of copies and ensures all information is returned to the Air Force upon contract termination/expiration.

3. Maintain a record of all intelligence materials released to the contractor, and ensures all data is returned to the CM within 2 years after final delivery of goods and services or after completion or termination of the classified contract, whichever comes first. If retention is required beyond the 2 year period the contractor must request and receive written authority from the CM.

4. Contractor shall maintain accountability for all intelligence released in his/her custody.

Contractors must agree that all intelligence data released to them, all reproductions, and other material generated (including authorized reproductions) is the property of the US Government and will be returned upon request of the sponsoring agency or expiration date of the contract, whichever comes first.

5. Contractor shall not reproduce intelligence without permission from the Unit IN (AFLCMC/INL) through the CM. If approved, must control each copy in the same manner as the original.

6. Contractor shall not reproduce intelligence without advance approval from the CM, except for working papers and derivative material produced in the publication process. Working papers and derivative material produced in the publication process do not need destruction approval.

7. Contractor shall restrict access to those individuals with a valid need-to-know who are actually providing services under the contract. Further dissemination to other contractors, subcontractors, or other government agencies and private individuals or organizations is prohibited unless authorized in writing by the CM with prior approval of the Unit IN (AFLCMC/INL)/contracting activity.

8. Contractor shall not release intelligence data to foreign nationals or immigrant aliens regardless of their security clearance or contract status without advanced written permission from the CM, Unit IN (AFLCMC/INL), Foreign Disclosure Policy Office, and HQ AFMC/A2S.

9. Contractor shall ensure the each employee having access to intelligence material is fully aware of the special security requirements for this material and maintains records in a manner that permits the contractor to furnish on demand the names of individuals who have access to the material in their custody.

10. Releasing authority of intelligence documents is HQ AFMC/A2S. Any request for intelligence documents will be sent through the CM to the Unit IN (AFMC/INL) designee for HQ AFMC/A2S for approval.

Operations Security (OPSEC)

DD Form 254 Addendum

OPSEC

All contractors, subcontractors, their employees, associates, and consultants who have access to critical information must comply with the Air Force-sponsored Operations Security (OPSEC) program.

OPSEC is a systematic means of identifying and protecting information which an adversary could use to their advantage or to our disadvantage. Critical Information (CI) is generally unclassified but sensitive information which has been identified by the OPSEC program as requiring protection. OPSEC Measures (OM) is control standards with which all personnel must comply in order to protect critical information.

Responsibilities:

The Air Force Life Cycle Logistics Center (AFLCMC) OPSEC Program Manager must provide/approve OPSEC training curriculum for use by the contractor. Training must provide listings of critical information that must be protected by all personnel, listings of OPSEC measures, which must be used by all personnel to protect critical information, and current foreign intelligence and industrial espionage threats. The contractor must ensure all personnel working on the contract or having access to critical information attend initial and annually recurring refresher training and that the approved curriculum is presented. Training must be provided before personnel are allowed access to critical information. All personnel must comply with OPSEC standards and practices as trained. Additional training may be required based on updates to critical information, OPSEC measures, intelligence threat, or other fundamental changes to the OPSEC program.

The contractor must track OPSEC training statistics to include the personnel working on the contract, when each individual received the required OPSEC training, and when refresher training is due. Training statistics must be forwarded to Air Force Life Cycle Logistics Center (AFLCMC) OPSEC Program Manager at the end of each calendar quarter and upon request.

Prior to seeking approval through Hill AFB Public Affairs, any information to be released outside of official U.S. Government channels, via any media, must be approved through an OPSEC review by OPSEC Program Manager. All personnel must promptly report OPSEC related incidents, issues, and concerns to Air Force Life Cycle Logistics Center (AFLCMC) OPSEC Program Manager at (801) 586-6447.

Prime Contract or Solicitation #: Solicitation PR FD202013-72062

ADDENDUM TO DD FORM 254 (Block 10e(1))

SENSITIVE COMPARTMENTED INFORMATION (SCI) CLAUSES

Solicitation PR FD202013-72062

1. Reference block 14: DoD 5105.21-M-1; AFMAN 14-304, Intelligence Community Directives (ICDs)/ICS, 701 (SCI Security Policies) 705 (Physical Security for SCIFS), ICD 704/ICPGS 704.1,704.2,704.3, 704.4, 704.5 (Personnel Security) 503(SCI Security Information Systems Management) and the Department of Defense Intelligence Information System (DoDIIS) Joint Security Implementation Guide (DJSIG); these directives provide the necessary guidance for physical, personnel, industrial, information, and information systems security measures and is part of the Sensitive Compartmented Information (SCI) security specifications for the contract.

2. SCI will not be released to contractor employees without the specific release approval by the originator of the material as outlined in the governing directives and based on prior approval and certification of “need-to-know” by the Contracting Officer’s Representative (COR):

Allen Baird AFLCMC/HBZBH 801-586-8667 Jody Facey AFLCMC/HBZBH 801-586-7181 Jack Hall AFLCMC/HBZBH 801-586-3733 Michael Horr AFLCMC/HBZBH 801-586-2221 Trampas Kilpatric AFLCMC/HBZBH 801-586-2191 Michael Shapiro AFLCMC/HBZBH 801-586-2192 Bret Wells AFLCMC/HBZBH 801-586-0784

3. Names of contractor personnel requiring access to SCI and justification for SCI billets will be submitted for coordination and action to SSO AFLCMC/INL after the contract monitor approval/concurrence. Upon receipt of written approval from the COR, the Contractor Special Security Officer (CSSO) may submit the necessary forms to Defense Security Service (DSS) for a Single Scope Background Investigation (SSBI) for those personnel nominated for SCI access in accordance with the National Industrial Security Program Operating Manual (NISPOM).

4. This contract requires a total of 40 SCI contract billets in order to fulfill contractual obligations incurred. SCI access is subject to US Government review and approval as outlined in the aforementioned SCI security regulations. Upon completion or cancellation of the contract, the CSSO will debrief all personnel not required for contract closeout and those billets will be disestablished.

5. The CSSO must restrict access to only those individuals who possess the necessary security clearance and who are actually providing services under the contract. Further dissemination to other contractors, sub-contractors, other government agencies, private individuals or organizations is prohibited unless authorized in writing by the releasing agency.

6. SCI materials furnished in support of this contract remains the property of the DoD department or command that released it. Upon completion or cancellation of the contract, all SCI materials furnished will be returned to the direct custody of the originator of the materials.

7. Classified foreign intelligence materials must not be released to foreign nationals or immigrant aliens whether or not they are also consultants, US contractors, or employees of the contractor, regardless of the level of their security clearance, except with advanced written permission from the originator.

8. Inquiries pertaining to classification guidance on SCI will be directed to the COR listed in para 2 above. SCI security management issues shall be directed to SSO AFLCMC/INL, phone

(801) 777-0484, DSN prefix 777.

9. (FOUO) An SCI Facility (SCIF) meeting the physical security requirements outlined in ICD/ICS 705 must be either used for contract work or established and maintained at the contractor location. All SCI used for this contract shall be stored, handled, and maintained in a SCIF, be it the local contractor SCIF or similarly SCI-accredited facilities used by the contractor.

See attachment 1.

10. For contract work within a contractor established SCIF, information systems (computers), electronic connectivity, and similar electronic methods of storing and communicating within and outside the SCIF must be in compliance with ICD 503, and the DJSIG, and any additional instructions issued by DIA/DAC-2A, HQ AFMC/A2S, and SSO AFLCMC/INL.

11. The CSSO must maintain accountability for all classified foreign intelligence materials released to their custody.

12. The CSSO must not reproduce classified foreign intelligence without advance approval of the releasing agency. If permission is granted, each copy will be controlled in the same manner as the original. The CSSO must not destroy any classified foreign intelligence without advance approval of the releasing agency.

13. Reference block 15: This contract requires access to SCI. If the contractor has established a SCIF, the Defense Intelligence Agency (DIA) and its designees are responsible for all inspections of the contractor SCIF and SCI security management program for ensuring compliance with all SCI security regulations and policies.