OPSEC Atch.pdf

DD Form 254 Addendum

OPSEC

General:

All personnel (contractors, subcontractors, their employees, associates and consultants) who have access to Hill Air Force Base Air Force Base, Government information or facilities will participate in the appropriate OPSEC programs.

OPSEC is a systematic means of identifying and protecting bits and pieces of information which an adversary could use to their advantage or our disadvantage.

Critical information is generally unclassified but sensitive information which has been identified by the OPSEC program as requiring protection.

OPSEC measures (formerly countermeasures) are control standards with which all personnel will comply in order to protect critical information. For example, personnel may be prohibited from discussing certain subjects outside of the work environment. Another example is some information may be prohibited from transmission via unencrypted telephone, fax, or email.

Responsibilities:

All personnel must participate in the appropriate OPSEC programs. The 309 MMXG OPSEC coordinator must provide training curriculum to the contractor. The contractor must ensure all personnel working on the contract or having access to critical information attend initial and recurring (annual) training. The contractor must track OPSEC training statistics to include the personnel working on the contract, when each individual received the required OPSEC training, and when refresher training is due. Training statistics must be forwarded to the 309 MMXG

OPSEC coordinator at the end of each fiscal year quarter and upon request. Training must provide listings of critical information that must be protected by all personnel, listings of OPSEC measures which must be used by all personnel to protect critical information, and foreign intelligence and industrial espionage threats. All personnel must comply with OPSEC standards and practices as trained. Training must be provided before personnel are allowed access to critical information. Training must be conducted annually thereafter, or as individual programs require. Additional training may be required based on updates to critical information, OPSEC measures, intelligence threat, or other fundamental changes to the OPSEC program. Prior to seeking approval through Public Affairs, information to be released outside of official U.S.

Government channels must be approved via an OPSEC review through the 309 MMXG OPSEC coordinator. All personnel must report OPSEC related incidents, issues, and concerns to the 309

MMXG OPSEC coordinator.

Contract # FA8224-12-R-0037

Installation OPSEC Program Manager