VGSA.pdf

78th SECURITY FORCES SQUADRON

ROBINS AFB, GEORGIA

VISITOR GROUP SECURITY AGREEMENT

(VGSA)

COMMERCIAL NAME OF COMPANY: XXXXXXXXXXXXXXXXXXXX

COMPANY ADDRESS: XXXXXXXXXXXXXXXXXXXXXXXX

CONTRACT NUMBER: XXXXXXXXXXX

USAF INSTALLATION: Robins Air Force Base GA

GOVT PROGRAM MANAGER (NAME/OFFICE SYMBOL/TELEPHONE NUMBER):

JUNE SIMS / 782 CBSG / 575 CBSS / (478) 327-2877

GOVT CONTRACTING OFFICER (NAME/OFFICE SYMBOL/TELEPHONE NUMBER):

John Middlebrooks / 782 CBSG / GBKAA / (478) 327-4341

1. Contractual Agreement: This agreement, promulgated by DoD 5220.22-R, Industrial Security Regulation and DoD 5220.22-M, National Industrial Security Program Operating Manual (NISPOM), Chapter 1, Section 2, Paragraph 1-200, is entered into by the Installation Commander or Designee, Chief, 78th Security Forces Squadron, Robins Air Force Base (AFB), and XXXXXXX Company Name XXXXXXX, (hereafter referred to as visitor group), prescribes the specific actions to be taken by the visitor group’s employees and the Department of the Air Force (DAF), to properly protect classified information involved in the on-base contract performance at the visitor group’s on-base operating location at 782 CBSG/575 CBSS Robins AFB GA.

Responsibilities are delineated as follows: NOTE: As used in this agreement, the terminology visitor group, contractor, company, and Home Office Facility (HOF) are synonymous. Furthermore, the verbiage Air Force (AF) activity, unit, contracting officer, program/project manager, Servicing Security Activity (SSA), etc., refers to entities or representatives of the USAF in their appropriate and respective capacity.

a. Visitor Group Security Supervision. Under the terms of this agreement, the visitor group will operate per DoD 5200.1-R, Information Security Program Regulation, Air Force Instruction (AFI) 31-401, Information Security Program Management, and supplements thereto, and the AF activity’s unit security program operating instructions (OIs), plans and /or procedures. The installation Servicing Security Activity (SSA), 78th Security Forces Squadron (SFS/S5I), 250 Peacekeeper Way, Robins AFB, GA 31098-1808, Telephone (478) 926-2973, CONTRACT # XXXXXXXXX

Fax (478) 926-6483, is responsible for providing security program oversight and the AF activity, 782 CBSG / 575 CBSS , is responsible for implementing and managing the activity’s security program per DoD 5200.1-R and AFI 31-401.

(1) The visitor group’s HOF will identify (in writing) to the SSA and AF activity an on-base employee to interface with and serve as the visitor group’s focal point for security related matters. Under the terms of this agreement, the identified employee per this paragraph will provide appropriate security program management assistance to the AF activity’s unit security manager.

(2) The visitor group’s HOF will provide the SSA and AF activity unit security manager the name of the HOF’s Facility Security Officer (FSO) and the SSA will likewise provide the visitor group’s FSO with the names of the SSA Information Security Specialist and the activity’s unit security manager.

(3) All parties, the AF activity, contracting office (sponsor), visitor group, and SSA will perform duties specified by this agreement in a timely manner.

b. Standard Practice Procedures (SPP): Compliance with this agreement eliminates SPP publication requirement. The visitor group will use and comply with the AF activity’s unit security program OIs, procedures and/or requirements, per this agreement and other applicable DoD or AF directives. This provision of the agreement is not intended nor does it interfere with the visitor group’s internal management policies, procedures, or requirements unless stated otherwise.

c. Access to and Accountability of Classified Material:

(1) All access to and/or possession of classified material by on-base visitor group personnel, including oral and/or visual at ROBINS AIR FORCE BASE, will be under the AF activity’s supervision. The AF activity maintains accountability, control, and ownership of all classified information involved under the terms of this contract at all times per DoD 5200.1-R and AFI 31-401. The visitor group’s access to classified information will be controlled by the AF activity and limited to “contract-specific, need to know” information only.

(2) The visitor group receives, releases, and disseminates classified material through the AF activity and in concert with the USAF program manager 782 CBSG / 575 CBSS in accordance with (IAW) DoD 5200.1-R, Information Security Program, AFPD 31-4, Information Security and AFI 31-401, Information Security Program Management.

(3) If contractor personnel during contract performance discover unattended classified material or an insecure/unattended security container, they will immediately secure the classified materials and notify the unit security manager or alternate. During non-duty hours visitor group personnel will exhaust every avenue to notify the AF activity’s branch chief, program manager, security manager or alternate when they discover unattended classified material. Visitor group personnel will maintain a list of emergency telephone numbers or other means to contact program officials and AF unit security managers in this case. As a last resort, visitor group personnel will contact the 78th Security Forces Law Enforcement Desk, at 926-2187, release the found classified material to security force personnel and ensure the incident is reported to the activity’s security manager the next duty day.

d. Storage of Classified Material:

(1) The visitor group is authorized to store and handle classified information IAW DoD 5200.1-R, AFI 31-401, and the AF activity’s unit operating instructions (OIs). All classified information shared with the visitor group must be stored in an approved government owned and controlled security container. The contractor is prohibited from establishing and/or maintaining a separate classified information system. All classified material will be returned and secured in the designated government security container at the end of the day.

(2) Under the terms of this agreement, the AF activity will have access to and control all security containers. The responsibility for setting the storage container combination rests with the AF activity. Each container will have a government safe custodian appointed. The Standard Form (SF) 700, Security Container Information, will be used to identify persons having knowledge of the combination(s). This form will be posted inside the locking drawer of each security container. Contractor personnel may have access to a security container but may not be the sole custodian of the container. Information accessed by the contractor must be limited to “need-to-know” as prescribed by their contract.

e. Transmission of Classified Material:

(1) The on-base visitor group is not authorized direct receipt or dispatch of classified material at Robins Air Force Base, GA through U.S. postal channels or commercial carrier.

(2) Classified material is to be transmitted via U.S. postal channels directly from AF activity 782 CBSG and must be prepared IAW DoD 5200.1-R, AFI 31-401, and processed through the unit and the Robins AFB, GA classified information control systems.

(3) Classified material may be hand-carried onto or off Robins AFB, GA by an appropriately briefed visitor group courier, provided the employee is so designated in writing by the contractor as a designated courier, and by the AF activity’s commander or designee per DoD 5200.1-R and AFI 31-401.

f. Disposition of Classified Materials. The visitor group will return all classified information jointly shared and/or involved, under the terms of this agreement, to the AF activity at the end of the contract performance or when no longer required, unless authorized to do otherwise by the contracting officer.

g. Reproduction of Classified Material. Only AF approved and controlled reproduction equipment will be used by the visitor group, when so authorized, per DoD 5200.1-R and AFI 31-

401. The visitor group cannot reproduce classified material without the permission of the AF activity.

h. Security Education. The visitor group’s focal point shall:

(1) Ensure employees who require access to classified information receive initial and recurring security education training (at least annually) regarding their individual responsibility for safeguarding classified information. These briefings will be tailored to those responsibilities associated with the individual’s assigned duties, the provisions of this agreement, any associated DD Form 254, and the results of the most recent self-inspections or security reviews (as applicable).

(2) Ensure employees attend and participate in the Security Education and Awareness Training Program (conducted by the AF activity) per DoD 5200.1-R and AFI 31-401.

(3) Ensure employees are briefed and complete the Standard Form (SF) 312, Classified Information Nondisclosure Agreement. Once completed, the SF 312 will be retained on file at the visitor group’s HOF. Certification of accomplishment of part 1 of the SF 312 will be annotated in Joint Personnel Adjudication System (JPAS). Visitor group employees will be debriefed IAW with DoD 5200.1-R and the debriefing will be recorded on AF Form 2587, Security Termination Statement and annotated in JPAS. The AF Form 2587 will be maintained by the AF activity’s security manager and destroyed in IAW with Air Force Records Information Management System, available at https://webrims.amc.af.mil.

(4) Ensure employees attend and participate in the AF activity’s Security Education and Awareness Training Program (conducted by the AF activity), per DoD 5200.1-R and AFI-401.

i. Personnel Security Clearances. JPAS shall be used to verify the personnel security clearance level for contractors requiring access to classified information. Visit authorization letters (VALs) are no longer required for contractor personnel whose access level and affiliation are accurately reflected in JPAS. All contractors who participate in the National Industrial Security Program (NISP) are authorized to use JPAS in lieu of sending VALs for classified visits. Paragraphs 6-101 and 6-103 of the National Industrial Security Program Operating Manual (NISPOM) that require advance notification and VALs for classified visits within DoD are hereby waived. The host AF activity serves as sponsor for the visit.

j. Reports. The visitor group must immediately submit to the SSA, in writing, reports under any of the situations outlined in DoD 5200.1-R and AFI 31-401. The SSA coordinates and/or reports security violations committed by visitor group employees to the appropriate Defense Security Service (DSS) Cognizant Security Agency (CSA), base contracting office, and the visitor group’s HOF, if and when appropriate.

(1) The AF activity’s unit commander appoints inquiry or investigation officials.

Inquiry or investigation officials coordinate findings and reports with the appointing official and

SSA.

(2) The visitor group’s HOF will advise the SSA of any changes in management, location, address, or contractual performance requirements.

k. Contractor Restricted Area Badges. When required for contract performance, the AF Form 1199 Series (Green, Pink, Yellow, or Blue), USAF Restricted Area Badge, will be issued to visitor group personnel for entry into USAF Restricted Areas on Robins AFB. Entry credentials are issued at the request of the AF activity. Request for badge issuance must be supported by a current VAL.

l. Contractor Local Area Badges. When required for contract performance, locally developed installation badges will be issued to visitor group personnel for entry into designated areas. Entry credentials are issued at the request of the AF activity.

m. Security Checks. As a general rule, it is preferable to have only government employees perform end-of-day security checks; however, situations may arise when contractor personnel may end up accomplishing this activity. Contractor personnel may not be delegated the responsibility for end-of-day security checks unless their contract specifically provides for such delegation. Before placing an end-of-day requirement in the contract, consult the applicable contracting officer. If authorized, the following statement (or derivative thereof) applies: “Visitor group personnel may be scheduled to perform end-of-day security checks within their assigned work areas by the AF activity per DoD 5200.1-R, AFI 31-401, and AF activity’s security program operating instruction (OI). These checks will ensure security precautions are taken to protect classified material. The SF 701, Activity Security Checklist, and SF 702, Security Container Check Sheet, will be used to record these checks.”

n. Emergency Protection. The visitor group will make every effort to secure all classified material in an approved storage container in the event of a natural disaster, major accident, or civil disturbance per DoD 5200.1-R, AFI 31-401, and AF unit’s security operating program OIs.

If the area is evacuated and/or the container(s) abandoned, the visitor group employees will, upon termination of the emergency condition, examine classified holdings in concert with the AF activity program manager to ensure there has been no compromise or loss of exposed information. In the event of missing or possible compromise, the visitor group employees will, in concert with the AF activity program manager, immediately notify the AF activity’s unit security manager.

o. Protection of Government Resources. The visitor group will comply with AFI 31-101, The Air Force Installation Security Program, and other security and safety OIs of the AF activity. File systems containing classified records will be maintained IAW with AFM 37-123, Management of Records.

p. Clarification of Security Requirements. The visitor group will address inquiries or questions pertaining to the provisions of DoD 5200.1-R and AFI 31-401 to the AF activity’s unit security manager.

q. Contract and Associated DD Form 254. The visitor group’s on-base management will maintain on file a copy of all contracting documents, any associated DD Form 254, DoD Contract Security Classification Specification, and this VGSA. The responsible AF activity will review the DD Form 254 at least every five years and issue revisions as necessary.

r. Foreign Involvement: Under the terms of this agreement, the visitor group is required to notify the AF activity and contracting office, prior to any foreign involvement, regardless of access requirements or the sensitivity of information to be disclosed (classified or unclassified).

s. Intelligence Information: The visitor group will comply with the access request, release, reporting and training requirements stipulated in the Intelligence Security Addendum of the DD Form 254 regarding non-SCI and SCI intelligence information.

2. Security Reviews.

a. Staff Assistance Visits (SAVs). Information Security Program Reviews (PRs), or self-inspections will not be conducted by the SSA of the visitor group, independent of the AF activity.

b. The SSA conducts PR, if applicable, in the following manner:

(1) The SSA will notify and schedule all PRs through the AF activity’s security manager, except when conducting an unannounced security review. Program reviews will be conducted per DoD 5200.1-R, AFI 31-401, supplements thereto, and this agreement. A copy of the PR report will be provided to the visitor group by the AF activity. The visitor group is not required to acknowledge receipt, nor respond unless directed to do so in the report.

(2) The AF activity’s program review or self-inspection will include the visitor group.

The visitor group will also be included in the AF activity’s semiannual security self-inspection program. The AF activity will use the VGSA and the unit’s self-inspection criteria to monitor the visitor group’s performance and compliance. Document and maintain the inspection report as required by DoD 5200.1-R and AFI 31-401.

3. Expenditure of Funds for Security. This agreement is not an authorization for commitment of funds. Nothing in this agreement shall be construed to impose any liability on the part of the U.S. government for injury to the agents, employees of the visitor group, its subcontractors, assignees, or other individuals acting for or on behalf of the visitor group, to the property of the same, nor shall anything in this agreement be construed to modify the provisions of existing contracts.

4. Review of this Agreement. All parties must review this agreement at least annually for accuracy. The AF activity is responsible for keeping this agreement current. In addition, the AF activity will keep on file a copy of the last evaluation, self-inspection or equivalent review.

Copies of reports may be made available to the visitor group for their files.

5. Other:

a. Forms. The AF activity furnishes all government forms and applicable AFIs, OIs and/or unit security plans required in support of this agreement.

b. Subcontracts. A VGSA shall be initiated whenever the HOF or on-base visitor groups enters into a subcontract arrangement with another contractor for classified performance on Robins Air Force Base GA. This VGSA must address the subcontractor operation separately.

The AF activity, visitor group or its HOF, as applicable, and all subcontractors must sign the agreement. A separate DD Form 254 is completed for each subcontractor requiring access to classified information. The visitor group or its HOF, as applicable, is responsible for preparing the DD Form 254 for any subcontracts and must provide a copy to the SSA for review. The AF activity ensures that all questions pertaining to the DD Form 254 are resolved. The visitor group’s HOF signs item 16 of the DD Form 254 for subcontracts and makes required distribution.

c. Notification. The AF activity (contracting officer) will notify the SSA 30 days prior to contract completion or shutdown on Robins AFB, GA to ensure contractor operations are reviewed for proper disposition of classified materials per DoD 5200.1-R, AFI 31-401, and this security agreement.

d. Government Liability. Nothing in this agreement shall be construed to impose any liability on the part of the U.S. government for injury to the agents, employees of the contractor, its subcontractors, assignees, or other individuals acting for or on behalf of the contractor, to the property of the same, nor shall anything in this agreement be construed to modify the provisions of existing contract.

______________________________________ Date: ________________ Michael Stallworth, YC-02, DAF Director, 575 CBSS

June Sims Program Manger

John Middlebrooks Contracting Officer

John Q. Doe XXXXXXXX, Program Manager

Kerry Pilcher Unit Security Manager

SERVICING SECURITY ACTIVITY COORD:

WENDY MYERS, YA-02, DAFC

Industrial Security Specialist

78 ABW/IPD

Robins AFB GA 31098

DSN 472-1977

(478) 472-1977

MICHAEL O. HARNAGE, YC-02, DAFC

Chief, Information Protection

(478) 926-2266

Upon completion of required signatures, copies of the fully executed VGSA will be provided to all parties concerned including the primary security manager of the organization where contract performance will occur. If the work will be performed in more than one organization, the program manager will ensure the requirements of the agreement are coordinated with the applicable unit security manager.

LAST PAGE OF DOCUMENT