Attachment_5--DD_Form_254.pdf

CLASSIFICATION (When filled in): UNCLASSIFIED//FOUO

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. See instructions. Provide details in Blocks 13 or 14 as set forth in the instructions.)

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER X h. REQUIRE A COMSEC ACCOUNT

CONTRACTOR'S FACILITY OR A GOVERNMENT ACTIVITY {Applicable only

i. HAVE A TEMPEST REQUIREMENT if there is no access or storage required at contractor facility. See instructions.)

b. RECEIVE AND STORE CLASSIFIED DOCUMENTS ONLY X j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

X C. RECEIVE, STORE, AND GENERATE CLASSIFIED INFORMATION OR X k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE (DCS)

MATERIAL

X d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE I. RECEIVE, STORE, OR GENERATE CONTROLLED UNCLASSIFIED

INFORMATION (CUI).

e. PERFORM SERVICES ONLY (DoD Components: refer to DoDM 5200.01, Volume 4 only for specific CUI

f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., protection requirements. Non-DoD Components: see instructions.)

PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES m. OTHER {Specify) (See instructions)

g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL

INFORMATION CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION

CENTER

u. 'Ut:ILlli • Any 1morma11on ic1ass111ea or unc,assmeaJ pena1mng to trns contract sr an not oe re1easea ror puonc a1ssemma11on except as prov1aea oy me "'"1ona1 1nausma1 Security Program Operating Manual (NISPOM) or unless� has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified here with at least office and phone contact information and if available, an e-mail address.

DIRECT X THROUGH {Specify) PUBLIC RELEASE AUTHORITY:

t::1See instruc y nsJ

I Public release of SCI and SAP information is not authorized RefBlk IOe(l): Public release of Sensitive Compartmented Information SEE SAP CONTINUATION SHEET (SCI) is NOT authorized.

13. SECURITY GUIDANCE. The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes;

to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Click button to add additional pages as needed to provide complete guidance.)

RefBlk la: Contractor must be granted a Top Secret Facility Security Clearance prior to being granted access to Top Secret information.

Ref Item 8a andl 1 C : Work to be performed in Clearwater FL, with support for Unclassified Testing to be performed in Honeywell Puerto Rico. Any classified information generated in the performance of this contract shall require the contractor to apply derivative classification and markings consistent with the source material or be governed by the current version of the AF Space Command NAVSTAR Global Positioning System, System Protection Guide, current version dated 30 SEP 2008. OPR HQ Space and Missile Systems Center/CZE, Los Angeles AFB, CA. SCDG will be provided under separa Ref Blk 1 Oa/1 lh: COMSEC is required.

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

ONo CR] Yes (If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the CSO. Use Item 13 or click button if additional space is needed.)

RefBlk IOf: See Blk 13. RefBlk IOk: Program Protection Plans (PPP) will be provided by the Government activity. RefBlk l lj: OPSEC requirements apply. See Performance Work Statement (PWS) for requirements. SEE SAP CONTINUATION SHEET. RefBlk lOe(l): SCI security requirements apply, see SCI addendum for details.

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the CSO.

LJ No

(If Yes, explain and identify specific areas and government activity responsible for inspections. Click button or use Item 13 if additional space is needed.)

�Yes

RefBlk IOf: Defense Security Service (DSS) is carved out of all inspection responsibility for SAR performance under this contract. AFOSI PJ retains security cognizance for all SAR performance. RefBlks lOa/1 lh: COMSEC oversight TBD. RefBlk lOe(l): SCI security requirements apply, see SCI addendum for details.

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

a. GCA NAME b. ACTIVITY ADDRESS CODE (AAC) OF THE c. ADDRESS (Include ZIP Code.)

AFLCMC/WNKC CONTRACTING OFFICE (See instructions.) 380 Richard Ray Blvd., Suite 104

FD2060

Robins, AFB 31098

d. POC NAME (See instructions.) e. POC TELEPHONE (Include Area Code.) f. EMAIL ADDRESS (See instructions.)

JOSEPH M. MYERS, CAPT, USAF 478-327-9942 joseph.myers.23@us.af.mil

17. CERTIFICATION AND SIGNATURES. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL b. TITLE c. ADDRESS (Include ZIP Code.)

(Last, First, Middle Initial) (See instructions.)

Lead Avionics Contracting Officer

AFLCMC/WNKCB

/Harrison, Oya 380 Richard Ray Blvd., Suite 104

d. AAC OF THE CONTRACTING OFFICE e. CAGE CODE OF THE PRIME Robins, AFB 31098 (See instructions.) CONTRACTOR (See instructions.)

06481

f. TELEPHONE (Include Area Code.)

I

g. EMAIL ADDRESS (See instructions.)

I

h. DATE h. SIGNATURE

(478) 926-7000 oya.harrison@us.af.mil

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICIAL

- [RJ f. OTHERS AS NECESSARY (If more room is needed, continue in Item 13 oron additional page if necessary.) X a. CONTRACTOR

b. SUBCONTRACTOR

- AFLCMC/INGS

X c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR 235 Byron Street, Ste 19A

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION Robins AFB, GA 31098

- Attn: Michael Long

X e. ADMINISTRATIVE CONTRACTING OFFICER See Block 13

DD FORM 254 (BACK), NOV 2017 CLASSIFICATION (When filled in): UNCLASSIFIED//FOUO

29 JAN 2018

CRONE.SEAN.D

AVID.1265845467

Digitally signed by

CRONE.SEAN.DAVID.1265845467

Date: 2018.01.09 19:13:34 -05'00'

UNCLASSIFIED//FOR OFFICIAL USE ONLY

Honeywell Contract #: FD2060-16-91123

UNCLASSIFIED//FOR OFFICIAL USE ONLY

INTELLIGENCE SECURITY ADDENDUM (SCI)

Ref Block 10e(1)/(2):

1. Contractor will require access to Special Compartmented Information (SCI). The following provide the necessary guidance for physical, personnel, industrial, information and information system security measures and is part of the Sensitive Compartmented Information (SCI) security specification for the contract: AFPD 14-3, AFMAN 14-304, DCID, DoDM 5105.21 V1-3, DoD 5220.22-M, ICDs 503, 701, 704, 705, JDCSISSS, and DIAM 50-4. Ref Item 2 Release of Intelligence Information to US Contractors for additional security requirements.

2. The contractor must have SCI indoctrinated personnel available to work the contract, and the designated government Contracting Officer Representative (COR) must also be indoctrinated for SCI access. Names of contractor personnel requiring access to SCI and justification for SCI positions will be submitted for coordination and action to SSO Robins - AFLCMC/INGS after the COR approval/concurrence. The Contractor Special Security Officer (CSSO), COR, or Facility Security Officer (FSO) may submit the necessary forms to Defense Security Service (DSS) for a Single Scope Background Investigation (SSBI) for those personnel nominated for SCI access in accordance with the National Industrial Security Program Operating Manual (NISPOM).

3. A SCI Facility (SCIF) meeting the physical security requirements outlined in DCID 6/9 or ICD 705 must be used for contract work or established and maintained at the contractor location. All SCI used for this contract shall be stored, handled, and maintained in a SCIF, be it the local contractor SCIF or similarly SCI-accredited facilities used by the contractor. Unescorted access to SCIFs and local transmission/handling (courier) authorizations will be approved at the discretion of the local SSO/SIO. The SCIFs used for contract execution are listed in a separate memorandum and/or database maintained by the FSO/CSSO and will be furnished to the SSO upon request.

4. For contract work within a contractor established SCIF, information systems (computers), electronic connectivity, and similar electronic methods of storing and communicating within and outside the SCIF must be in compliance with ICD 703, DIAM 50-4, the JDCSISSS, and any additional instructions issued by DIA/DAC-2A, HQ AFMC/A2S and

AFLCMC/INGS.

5. The SSO/CSSO can grant access to only those who possess the necessary security clearance and who are actually providing services under the contract. Further dissemination to other contractors, sub-contractors, other government agencies, private individuals or organizations is prohibited unless authorized in writing by the releasing agency.

6. SCI materials furnished in support of this contract remains the property of the DoD department or command that released it. Upon completion or cancellation of the contract, all SCI materials furnished will be returned to the direct custody of the originator of the materials.

7. Classified foreign intelligence materials must not be released to foreign nationals or immigrant aliens whether or not they are also consultants, U.S. contractors, or employees of the contractor regardless of the level of their security clearance, except with advance written permission from the originator.

8. Contractor personnel must maintain accountability for all intelligence (to include foreign intelligence) materials released to their custody.

9. Contractor personnel must not reproduce classified foreign intelligence without advance approval of the releasing agency. If permission is granted, each copy will be controlled in the same manner as the original. The CSSO must not destroy any classified foreign intelligence without advance approval of the releasing agency

10. Visits. The contractor will submit the written request for SCI visit certifications through the COR for approval of the visit. The certification must arrive at their servicing (SSO name) at least three working days prior to the visit.

UNCLASSIFIED//FOR OFFICIAL USE ONLY

11. Information assurance and electronic processing; information security (computer) and network connectivity require accreditation of the equipment connectivity.

Ref Block 10k: SCI positions requested under this contract will be processed upon SSO Robins receipt of the signed DD Form 254 and submittal of the initial personnel access request letters.

Ref Block 12: Public release of intelligence information is not authorized.

Ref Block 13: Contract Officer Representative (COR) POC Information:

1. Authority: SSO Robins - AFLCMC/INGS is the Senior Intelligence Officer (SIO) designated representative for all contracts issued by Robins AFB, GA, requiring access to intelligence information.

2. Release of Intelligence Information to US Contractors: Specific procedures for release of intelligence information are outlined in AFMAN 14-304 (as supplemented by AFMC). The SSO, or originator of the material, is authorized to approve the release of intelligence information to US contractors. No Government official shall authorize contractor use of intelligence materials or release to subcontractors without expressed authority from the SSO or the originator. Intelligence information will not be released to contractor employees without the specific release approval by the SSO or originator of the material as outlined in the governing directives and based on prior approval and certification of “need-to-know” by the COR. All intelligence released must be under the US Government representative’s control and supervision. The US Government representative must access each document prior to contractor review to confirm the classification of each document. All information, to include access of Electronic Intelligence Databases/Networks, released to the contractor must be used, solely, to fulfill or be in accordance with contractual obligations and DD Form 254 requirements.

3. Training: At locations where the contractor is deemed a “long term” or “integrated” visitor group, the contractor shall participate in that location’s security awareness and education program as administered by the Servicing Security Activity (SSA) and/or location’s Special Security Office (SSO) IAW AFI 16-1404, and AFI 16-1406. At all other locations, the CSSO/FSO will administer and document completion of this training. Documentation must include the date of training, subjects covered, and names of attendees and non-attendees. This documentation must be furnished to the SSO upon request. IAW AFMAN 14-304, para 12.3., SCI Security Awareness training must be accomplished on a quarterly basis.

4. Sub-Contracts: All DD Form 254s prepared for subcontracts involving access to SCI under this contract must be forwarded to the COR for approval and then to SSO Robins for review and concurrence prior to award of the subcontract. Inquiries pertaining to classification guidance on SCI will be directed to the COR listed above. SCI security management issues shall be directed to SSO ROBINS – AFLCMC/INGS, 235 Byron St., Suite 19A, Robins AFB, GA 31098-1670; robins.sso@us.af.mil, (478) 222-4514, (478) 926-1364/1394

Ref Block 14:

1. SSO Robins has exclusive security responsibility for all SCI material released to or developed under this contract and held within the contractor's SCIF. DSS is relieved of security inspection responsibility for all such material but retains responsibility for all non-SCI classified material released to or developed under this contract and held within the contractor's SCIF. If the contractor has established a SCIF, DIA and its designees are responsible for all inspections of the contractor SCIF and SCI security management program for ensuring compliance with all SCI security regulations and policies. If a new SCIF must be established in accordance with this contracting effort, permission to build/accredit a

Name Capt Joseph Myers

Org/Office Symbol AFLCMC/WNKC

Address 380 Richard Ray Blvd, Suite 104

Robins AFB 31098

Comm/DSN Phone # (478) 327-9942/DSN 497-9942

E-mail address Joseph.myers.23@us.af.mil

UNCLASSIFIED//FOR OFFICIAL USE ONLY

SCIF must be requested through the COR and forwarded to the SSO. Special Security Officers reserve the right to conduct program reviews of AF SCI materials and SCI program management to ensure the protection of AF equities.

2. The accrediting activity, or their representatives, shall be responsible for reviewing all of the contractor's SCIF documentation to ensure compliance with SCI directives or regulations. In addition, if the contractor has established a SCIF, the accrediting activity and its designees are responsible for all inspections of the contractor SCIF and SCI security management program for ensuring compliance with all SCI security regulations and policies.

Estimated Contract Completion/Expiration: __28 Sep 2028_______: Upon completion, expiration, or cancellation of the contract, the individuals briefed for SCI on this contract will be debriefed or transferred by the SSO/CSSO and the SCI contract positions will be disestablished. Any contract modifications extending the completion/expiration date will be submitted to the SSO, to ensure continuation of SCI access positions.

MICHAEL LONG (ASSO)

SSO Robins – AFLCMC/INGS (IN-WR) 235 Byron St., Ste 19A Robins AFB, GA 31098-1670

478-222-4509/DSN 472-4509

Special Access Program Security Addendum to DD Form 254 Solicitation #: FD2060-16-91123

Honeywell Defense & Space Electronics Systems Defense

DD FORM 254 CONTINUATION SHEET

BLOCK 8a:

(U//FOUO) Specific performance locations will be identified via separate restricted documentation.

Contact the Cognizant Security Authority for further assistance.

BLOCK 10a:

(U//FOUO) The contractor is governed by NSA/CSS Policy Manual 3-16, dated 23 January 2015, in the control and protection of COMSEC Material/Information. Access to COMSEC material by personnel is restricted to U.S. citizens holding final U.S. Government clearances. Such information is not releasable to personnel holding only reciprocal clearances.

BLOCK 10f:

(U//FOUO) AFOSI PJ Detachment 3 OL-A, Marietta, GA, is the Cognizant Security Authority for all SAP related contracts issued by Robins AFB.

BLOCK 11c:

(U//FOUO) SAP classified information received or generated in performance of this contract shall be derivatively classified and marked consistent with the source material.

(Reference DoD Manual 5205.07, Vol 4 dated 10 Oct 2013, Special Access Program (SAP) Security Manual: Marking)

BLOCK 11h:

(U//FOUO) The contractor is governed by NSA/CSS Policy Manual 3-16, dated 23 January 2015, in the control and protection of COMSEC Material/Information. Access to COMSEC material by personnel is restricted to U.S. citizens holding final U.S. Government clearances. Such information is not releasable to personnel holding only reciprocal clearances.

BLOCK 11j:

(U//FOUO) To protect SAP Critical Program Information (CPI), the OPSEC process will be applied to all program activities, regardless of performance location. To ensure the dedicated application of the OPSEC process, detailed in the NISPOM and Security Classification Guides, is properly implemented, the contractor must obtain Cognizant Security Authority approval prior to any work being performed (classified or unclassified) by assigned contractors, subcontractors, vendors, and /or suppliers.

Furthermore, program activities which are to occur outside of Special Access Program Facilities (SAPFs), must be approved by the Cognizant Security Authority and coordinated with Government Program Manager prior to commencement. The OPSEC process will be applied to them through the use of an Outside Work Request (OWR).

(U//FOUO) Contractor must submit for OWR approval no less than 30 days prior to the proposed activity. An OWR must be submitted even if the work is considered unclassified or collateral SECRET.

At a minimum, the OWR request must contain the following:

1. Subcontractor/Supplier/Vendor Information (SAP Form 13)

2. Task summary stating the objective of the effort

3. OPSEC strategy/enhanced OPSEC approach to be utilized, if required

4. Justification for the non-SAP activity

5. State how the subcontract will be established to prevent contractor associations

6. Contract Number and/or Government relationship

7. Identity of all SAP-briefed personnel (at the vendor) involved in the request activity

8. Attachment of any information to be provided to the Vendor/Supplier and the form in which it will be provided, i.e., hardcopy drawing(s), CD(s), etc.

BLOCK 12:

(U//FOUO) Release of SAP information, material, or data outside of approved program channels or to persons not appropriately accessed to the program(s) is strictly prohibited. The designation UNCLASSIFIED does not permit automatic public release. A request to release unclassified information must be submitted to the government Program Manager and Cognizant Security Authority for review and approval a minimum of 60 days prior to the desired release date.

BLOCK 13:

(U//FOUO) Contractor will provide or be provided applicable security classification guides under separate cover, as required.

(U) The following references, and any subsequent revisions, apply to this contract and will be adhered to by the contractor at all times. Questions or concerns regarding these references or requests for clarification shall be addressed with the Cognizant Security Authority.

1. (U) DoD 5220.22-M, National Industrial Security Program Operating Manual (NISPOM), dated February 2006, Incorporating Change 2, dated 18 May 2016.

2. (U) DoDM 5205.07 v1, DoD Special Access Program Security Manual: General Procedures, dated 18 June 2015.

3. (U) DoDM 5205.07 v2, DoD Special Access Program Security Manual: Personnel Security, dated 24 November 2015.

4. (U) DoDM 5205.07 v3, DoD Special Access Program Security Manual: Physical Security, dated 23 April 2015, Incorporating Change 1, dated 21 September 2015 and supplemented by AFMAN 16-703 v3, DoD Special Access Program Security Manual: Physical Security, dated 31 December 2015.

5. (U) DoDM 5205.07 v4, DoD Special Access Program Security Manual: Marking, dated 10 October 2013.

6. (U) Air Force Instruction 16-701, Management, Administration and Oversight of Special Access Programs, dated 18 February 2014.

(U//FOUO) In accordance with DoD SAPCO Memorandum, Transition to the Risk Management Framework, dated 8 December 2013, certification and authorization of any Information Systems after, 1 January 2014, must be accomplished utilizing the Risk Management Framework (RMF) and the Joint Special Access Program Implementation Guide (JSIG). All approved revisions and/or updates to the RMF and JSIG will apply to this contract.

Contact the host Information System Security Manager (ISSM)/Information System Security Officer (ISSO) to obtain a copy of the JSIG and related documentation/templates, as well as the Media Control and Assured File Transfer plan within applicable SAPFs.

(U//FOUO) The Contractor shall keep a current inventory showing the location of all security containers, secure rooms and/or buildings that contain SAP information related to this contract. This inventory shall also include all subcontractors (services and supplies) that require DD Form 254s. Both inventories shall be provided to the AFLCMC/WNE-IP Security office and the Cognizant Security Authority.

(U//FOUO) The Contractor shall submit all Program Access Requests (PAR) to the AFLCMC/WNE-IP Security office via secure means. Contact the specialist prior to attempting PAR submittal. All PARs and subsequent personnel folders developed under this contract will be kept on file in the AFLCMC/WNE-IP Security office. AFLCMC/WNE-IP Security office will perform duties as the “Servicing” security office for all assigned contract personnel.

(U//FOUO) The Contractor shall notify the AFLCMC/WNE-IP Security office and/or the Cognizant Security Authority of a SAP access indoctrination/debriefing within 24 hours of event.

(U//FOUO) On a semiannual basis, the Contractor shall provide the AFLCMC/WNE-IP Security office a personnel access roster containing the following information: full legal name, social security number, billet number (if applicable), level of access, security clearance information, and contract performance location for each individual.

(U//FOUO) All SAP related work (discussions, processing, and storage) shall be conducted within accredited SAP facilities (SAPF), as designated by the Cognizant Security Authority.

(U//FOUO) The Contractor shall receive initial and re-fresher (annual) SAP security training. Training will be conducted at the performance location where the contractor’s program access records are kept.

(U//FOUO) SAP classified information furnished or generated in support of this contract remains the property of the U.S. Government and shall be returned to the servicing government program office upon completion of this contract.

Solicitation #: FD2060-16-91123

Honeywell Defense & Space Electronics Systems Defense

DD FORM 254 CONTINUATION SHEET

UNCLASSIFIED//FOR OFFICIAL USE ONLY

(U//FOUO) The AFLCMC/WNE-IP Security office shall perform duties on behalf of the Cognizant Security Authority, as they relate to the performance of this contract, unless delegated in writing to another servicing activity.

(U//FOUO) Personnel security clearance requirement for SAP access on this contract is TOP SECRET eligibility, based on a final T5 investigation within the last six (6) years.

BLOCK 14:

(U//FOUO) Additional guidance that applies to this contract.

Miscellaneous Documents/Memos

• SAF/AA Memorandum, “Special Access Programs Notification Process”, dated 30 September 2013

• USD (I) Memorandum, “Special Access Programs Nomination Process”, dated May 2013

• DoD SAPCO Memorandum, “Transition to the Risk Management Framework”, dated December 18, 2013

• DoD, Chief Information Officer Memorandum, dated 12 July 2013, and “Insider Threat Mitigation” with attachments

Information System Authorization

• DoD 8510.01, “Risk Management Framework (RMF) for DoD Information Technology (IT)”, dated 12 Mar 2014

• JSIG, Joint Special Access Program Implementation Guide, Rev 4, dated 11 Apr 2016 (or any approved revision and/or update) o Provides policy and guidance of the transition to and application of the RMF

• CNSSI 1253 Rev 3, Security Categorization and Control Selection for National Security Systems, 27 Mar 14 o Instructions for applying RMF to National Security Systems

• NIST Special Publication (SP) Joint Task Force (JTF) Initiative o NIST SP 800-53, Rev3, Recommended Security Controls for Federal Information Systems and Organizations, dated April 2013 o NIST SP 800-53A, Guide for Assessing the Security Controls in Federal Information Systems and Organizations, Building Effective Security Assessment Plans, dated June 2010 o NIST SP 800-37, Guide for Applying the Risk Management Framework to Federal Information Systems, dated February 2010 o NIST SP 800-39, Managing Information Security Risk: Organizations, Mission, and Information System View, March 2011 o NIST SP 800-30, Guide for Conducting Risk Assessments, September 2012

BLOCK 15:

(U//FOUO) The Defense Security Service (DSS) has been “carved out” from SAP security cognizance related to this contract, to include program inspections, reporting and administrative requirements. AFOSI PJ Detachment 3 OL-A, Marietta, GA, as the Cognizant Security Authority, or designated representative, will conduct security reviews of all SAPFs, SAP material and operation related to this contract.

(U//FOUO) AFLCMC/WNE-IP Security office has exclusive security responsibility for all SAP material released to or developed under this contract and held within the SAPF.

(U//FOUO) Compliance inspections and annual self-inspections shall be conducted in accordance with DoDM 5205.07 v1, DoD Special Access Program Security Manual: General Procedures, dated 18 June 2015. Self-inspection reports shall be submitted to the AFLCMC/WNE-IP Security office and/or Cognizant Security Authority within 30 days following completion of the inspection. The AFLCMC/WNE-IP Security office and/or Cognizant Security Authority shall be notified immediately if the self-inspection discloses the loss, compromise, or suspected compromise of SAP classified information. Inspection reports shall be retained for a minimum of two (2) years.

(U//FOUO) Release of SAP Information to U.S. Government Contractors: The Cognizant Security Authority, or originator of the material, are the only authorized personnel that can approve the release of SAP information to U.S. government contractors based on certification of “need-to-know” by the Contracting Officer’s Representative (COR). A listing of all CORs is listed in a separate memorandum and/or database maintained at by the FSC/CSSO or Program Office and will be furnished to the Cognizant Security Authority upon request. All SAP information released must be under the U.S.

Government representative’s control and supervision. The U.S. Government representative must access each document prior to the Contractor review to confirm the classification of each document. All information released to the Contractor must be used, solely, to fulfill or be in accordance with contractual obligations and the DD Form 254.

(U//FOUO) Upon completion, expiration, or cancellation of this contract, all contractor personnel currently accessed to SAP on this contract will be debriefed and the SAP related contract positions will be disestablished. All contract modifications that affect the completion/expiration date of this contract shall be submitted to the AFLCMC/WNE-IP Security office and/or the Cognizant Security Authority prior to execution, to ensure continuation of SAP related activities.

(U//FOUO) Training: At locations where the Contractor is deemed a “long term” or “integrated” visitor group, the Contractor shall participate in the location’s security awareness and education program as administered by the Government SAP Security Officer (GSSO). At all other locations, the CPSO/FSO will administer and document completion of this training. Documentation must be accomplished via a SAP Form 17, include subjects covered and the date of training, and shall be furnished to the Cognizant

Security Authority upon request. SAP Security Awareness Refresher training must be accomplished on an annual basis.

BLOCK 17f:

AFLCMC/WNE-IP Security office Name: Wendy Myers Org/Office Symbol: AFLCMC/WNE-IP Address: 235 Byron Street, Suite 19A Robins AFB, GA 31098 Comm/DSN Phone: 478-926-5105 / 468-5105 Email Address: wendy.myers.1@us.af.mil

Contract Monitor (CM)/Contracting Officer Representative (COR):

Name: Joseph M. Myers, Capt., USAF Org/Office Symbol: AFLCMC/WNY Address: 380 Richard Ray Blvd., Suite 104 Robins AFB, GA 31098 Comm/DSN Phone #: (478) 327-9942 / 497-9942 Email Address: joseph.myers.23@us.af.mil

Cognizant Security Authority:

FRANK V. JOLLY

Program Security Officer AFOSI PJ Det 3 OL-A Marietta, Georgia