IFIDIS,_DD254_-_2015-05-05.pdf

Item 14 Cont

Ref 11.l. The contractor will provide the SSA, 75 ABW/IPD, with all the information required by the Air Force Federal Acquisition Regulation Supplement (AFFARS) 5352.204-9000, Notification of Government Security Activity and Visitor Group Security Agreements clause at least 30 days prior to beginning operations on Hill AFB. Contractors will not begin operations on

Hill AFB until a Visitor Group Security Agreement has been signed. Refer to AFFARS

5352.204-9000 attachment for this clause.

Item 17.f Cont

Ref 17.f: A signed copy of the DD FM 254 must be distributed to 75 ABW/IPD, 7981 Georgia

Street (Bldg 1102) Hill AFB, UT 84056 (steven.nutt.2@comcast.net)

AFFARS 5352.204-9000, NOTIFICATION OF GOVERNMENT SECURITY ACTIVITY AND

VISITOR GROUP SECURITY AGREEMENTS (APR 2003) ADDENDUM

PR-F2DCBK7095A0001

1. This contract contains a DD Form 254, DOD Contract Security Classification Specification, and requires performance at a government location in the U.S. or overseas. Prior to beginning operations involving classified information on an installation identified on the DD Form 254, the contractor shall take the following actions:

a. At least 30 days prior to beginning operations, notify the Cognizant Security Office/s (IP Office/s) shown in block 8.c and Program Manager shown in block 13 of the DD Form 254 as to:

(1) The name, address, and telephone number of this contract company’s representative and designated alternate in the U.S. or overseas area, as appropriate;

(2) The contract number;

(3) The highest classification category of defense information to which contractor employees will have access;

(4) The Air Force installations in the U.S. (in overseas areas, identify only the APO number(s)) where the contract work will be performed;

(5) The date contractor operations will begin on base in the U.S. or in the overseas area;

(6) The estimated completion date of operations on base in the U.S. or in the overseas area; and,

(7) Any changes to information previously provided under this clause.

This requirement is in addition to visit request procedures contained in DOD 5220.22-M, National

Industrial Security Program Operating Manual.

b. Prior to beginning operations involving classified information on an installation identified on the

DD Form 254 where the contractor is not required to have a cleared facility, the contractor shall enter into a Visitor Group Security Agreement (or understanding) with the installation commander to ensure that the contractor’s security procedures are properly integrated with those of the installation. As a minimum, the agreement shall identify the security actions that will be performed:

(1) By the installation for the contractor, such as providing storage and classified reproduction facilities, guard services, security forms, security inspections under DOD 5220.22-M, classified mail services, security badges, visitor control, and investigating security incidents; and

(2) Jointly by the contractor and the installation, such as packaging and addressing classified transmittals, security checks, internal security controls, and implementing emergency procedures to protect classified material.

https://org.eis.afmc.af.mil/sites/75ABW/IP/IndustrialSecurity/default.aspx

Operations Security (OPSEC)

DD Form 254 Addendum

OPSEC

All contractors, subcontractors their employees, associates, and consultants who have access to critical information must comply with the Air Force-sponsored Operations Security (OPSEC) Program.

OPSEC is a systematic means of identifying and protecting information which an adversary could use to their advantage or to use disadvantage. Critical Information (CI) is generally unclassified but sensitive information which has been identified by the OPSEC Program as requiring protection. OPSEC Measures

(OM) are control standards with which all personnel must comply in order to protect critical information.

Responsibilities:

The 309th Electronics Maintenance Group (309 EMXG) must provide / approve OPSEC training curriculum for use by the contractor. Training must provide listings of critical information that must be protected by all personnel, listings of OPSEC measures which must be used by all personnel to protect critical information, and current foreign intelligence and industrial espionage threats. The contract must ensure all personnel working on the contract or having access to critical information attend initial and annually recurring refresher training and that the approved curriculum is presented. Training must be provided before personnel are allowed access to critical information. All personnel must comply with

OPSEC standards and practices as trained. Additional training may be required based on updates to critical information, OPSEC measures, intelligence threat, or other fundamental changes to the OPSEC program.

The contractor must track OPSEC training statistics to include the personnel working on the contract, when each individual received the required OPSEC training, and when refresher training is due. Training statistics must be forwarded to 309 EMXG’s OPSEC’s Program Manager / Coordinator at the end of each calendar quarter and upon request.

Prior to seeking approval through Hill AFB Public Affairs, any information to be released outside of official US Government channels, via any media must be approved through an OPSEC review by 309

EMXG’s OPSEC Program Manager / Coordinator. All personnel must promptly report OPSEC related incidents, issues and concerns to 309 EMXG’s OPSEC Program Manager / Coordinator, Michelle

Broderick at 801-586.4480

Prime Contract or Solicitation #: FA8224-17-R-0057; PR-F2DCBK7095A001