RASTER_RFP_DD254_FA9451-14-R-0243 _TO_0002_MAUI_V10.pdf

DEPARTMENT OF DEFENSE 1. CLEARANCE AND SAFEGUARDING

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

RASTER Contract – Maui Requirements

a. FACILITY CLEARANCE REQUIRED

TOP SECRET

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort)

b. LEVEL OF SAFEGUARDING REQUIRED

NONE

2. THIS SPECIFICATION IS FOR: (X and complete as applicable) 3. THIS SPECIFICATION IS FOR: (X and complete as applicable)

a. PRIME CONTRACT NUMBER

X

a. ORIGINAL (Complete date in all cases) Date (YYMMDD)

140305

b. SUBCONTRACT NUMBER

b. REVISED (Supersedes all previous specs) Revision No. Date (YYMMDD)

X c. SOLICITATION OR OTHER NUMBER

FA9451-13-R-0243 TO 0002

DUE Date (YYMMDD)

c. FINAL (Complete Item 5 in all cases) Date (YYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT? YES X

X X X

NO. If Yes, complete the following:

Classified material received or generated under is transferred to this follow-on contract

5. IS THIS FINAL DD Form 254? YES X NO. If Yes, complete the following:

In response to the contractor’s requested dated ____________, retention of the identified classified material is authorized for the period of _____________________

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, and ZIP CODE

TBD

b. CAGE CODE

TBD

c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

TBD

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE

b. CAGE CODE

8. ACTUAL PERFORMANCE

a. LOCATION

MSSS (Haleakala), RME (Kihei), MHPCC (Kihei) 805 Lipoa Pkwy Kihei, HI 96753 (Government Facility)

N/A

AFRL/RDMS (PRS Security Office) 3550 Aberdeen Ave SE Kirtland AFB, NM 87117

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

Research and development (R&D) for the Maui Space Surveillance System (MSSS) Enhanced Capabilities task order as a part of the

R&D for Advanced Space Superiority and Engineering Requirements (RASTER) contract. (This DD Form 254 covers Maui

Requirements ONLY – See DD 254 Form For SOR requirements)

10. THIS CONTRACT WILL REQUIRE ACCESS TO: YES No 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION X a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER

CONTRACTOR’S FACILITY OR A GOVERNMENT ACTIVITY X

b. RESTRICTED DATA X b. RECEIVE CLASSIFIED DOCUMENTS ONLY X

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION X c. RECEIVE AND GENERATE CLASSIFIED MATERIAL X

d. FORMERLY RESTRICTED DATA X d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE X

e. INTELLIGENCE INFORMATION e. PERFORM SERVICES ONLY X

(1) Sensitive Compartmented Information (SCI) X f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S.

PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES X

(2) Non-SCI X g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL

INFORMATION CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION

CENTER

X

f. SPECIAL ACCESS INFORMATION X h. REQUIRE A COMSEC ACCOUNT X

g. NATO INFORMATION X i. HAVE TEMPEST REQUIREMENTS X

h. FOREIGN GOVERNMENT INFORMATION X j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS X

i. LIMITED DISSEMINATION INFORMATION X k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE X

j. FOR OFFICIAL USE ONLY INFORMATION X l. OTHER (Specify)

AIS (Computer Security) X

k. OTHER (Specify)

X SEE CONTINUATION PAGE #2

DD Form 254, DEC 1999 Previous editions are obsolete

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate Government authority. Proposed public releases shall be submitted for approval prior to release Direct X Through (Specify):

All requests for release of information must have the approval of the Program Manager and the 377 ABW/PA Public Affairs Office, Kirtland AFB, NM 87117. Requests should be submitted 90 days prior to expected data of release. NO PUBLIC RELEASE IS

AUTHORIZED FOR SCI OR NON-SCI.

13. SECURITY GUIDANCE: The Security classification guidance need for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guidelines/extracts reference herein. Add additional pages as needed to provide complete guidance).

Contractor will follow security classification guidance on information, hardware and equipment provided in the following security classification guides: USSTRATCOM Directorate of Global Operations SCG for Space Surveillance Operations, 01 Jul 2007, and AFRL/RD Ground-Based Optics Research & Technology Development SCG, 15 Jul 2011. Revised or other Security Classification Guides will be provided under a separate cover as they become applicable to the assigned work and will not require updating or revising the DD Form 254. Documents classification marking will be in accordance with E.O. 13526, and DoDM 5200.01, Volume 2, Marking of Classified Information, 24 Feb 2012, and supplements thereto. The contractor must comply with special OPSEC requirements contained in the contract or addendum thereto. The requirements, restrictions and other safeguards prescribed by the National Industrial Security Program Operating Manual (NISPOM), DoD 5200.22-M, Feb 2006 and its supplements apply to all classified performance. (SEE CONTINUATION PAGE)

Government PM: TBD

THIS DD FORM 254 HAS BEEN COORDINATED AND REVIEWED BY: (COORDINATION IN TURN)

AFRL/RVKDP, 3550 Aberdeen SE, Kirtland, AFB, NM 87117: __________________ Date ________________ AFRL/RDMS, Industrial Security, 3550 Aberdeen SE, Kirtland AFB, NM 87117 __________________ Date: _______________ AFRL/RDMS, OPSEC, 3550 Aberdeen SE, Kirtland AFB, NM, 87117___________________________ Date: ______________ AFRL/RDSM, USM, 805 Lipoa Pkwy, Kihei, HI 96753_______________________________________ Date: _______________ AFRL/XZ2, SIO, 1350 Wyoming Blvd SE, Kirtland AFB, NM 87117_____________________________ Date: ______________ AFNWC/XZ2S, SSO, 1350 Wyoming Blvd SE, Kirtland AFB, NM 87117_________________________ Date: _______________ AFRL/RVIA, IAM, 3550 Aberdeen SE, Kirtland -87117_______________________________________ Date: ______________

See Continuation of ITEM 13 and Attachments

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract. (If Yes, X Yes No identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

The contractor will provide AFRL/RDMS, 3550 Aberdeen Ave SE, Kirtland AFB NM 871117 with all information required by the Notification of Government

Security Activity Clause, and any additional information and/or documentation that is required by that office. For EMSEC requirements and guidance see attached

EMSEC Security (AKA TEMPEST) Security Requirements. SEE ATTACHED CONTINUATION SHEETS

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. (If Yes, identify specific areas or X Yes No elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

Defense Security Service (DSS) has Inspection responsibilities for portions performed at contractor facilities. AFRL/RDMS has security oversight for collateral work conducted at the government's facilities. AFNWC/XZ2S has inspection oversight for SCI Intelligence Classified and AFNWC/XZ2 has inspection oversight for Non-

SCI Intelligence Classified. SEE CONTINUATION SHEET

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below

a. TYPED NAME OF CERTIFYING OFFICIAL

b. TITLE

c. TELEPHONE

d. ADDRESS (Include Zip Code) 17. REQUIRED DISTRIBUTION

X a. CONTRACTOR

b. SUBCONTRACTOR

X c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

e. SIGNATURE d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINISTRATION CONTRACTING OFFICER

X f. OTHERS AS NECESSARY

DD Form 254, (BACK), DEC 1999

CONTINUATION OF RFP DD FORM 254 -- Request for Proposal # FA9451-13-R-0243 TO 0002

8. ACTUAL PERFORMANCE

Detachment 15, Air Force Research Lab (AFRL) AF Maui Optical and Supercomputing Site (AMOS) Haleakala Summit Bldgs 1 (MSSS), 2 (Dog House), 3 (Butler), 4 (AEOS), and 5 (GEODDS) Remote Maui Experiment (RME) 805 Lipoa Pkwy Kihei, HI 96753 (Government Facility)

N /A

3550 Aberdeen Ave SE Kirtland AFB, NM 87117

Maui High Performance Computing Center (MHPCC) 550 Lipoa Parkway, Suite 100 Kihei, HI 96753 (Government Facility)

N/A

3550 Aberdeen Ave SE Kirtland AFB, NM 87117

Item 10a:

The contractor will need administrative access to classified COMSEC material. The contractor will not receipt, copy, or generate classified COMSEC material.

Item 10.d.: The contractor is permitted access to Formerly Restricted Data (FRD) in the performance of this contract.

Access to FRD requires a final U.S. Government clearance at the appropriate level.

Items 10.e. (1) and 10.e. (2): SCI and Non-SCI intelligence work will only be performed within government accredited facilities. Prior approval of the contracting activity is required for subcontracting. Access to intelligence information requires a final U.S. Government clearance at the appropriate level. See Addendum to DD 254, Sensitive Compartmented

Information Clauses and Standard Security Instructions for Handling Non-SCI Intelligence. Attachment will be provided upon award of contract.

Item 10g: The contractor is permitted access to North Atlantic Treaty Organization (NATO) information in performance of this contract. The government project manager is the designated representative that will ensure the contractor Facility

Security Officer and concerned employees are NATO briefed prior to access being granted. Prior approval of the contracting activity is required for subcontracting. Access requires a final U.S. Government clearance at the appropriate level. Forward NATO classified materials needed by the contractor only from an Air Force Sub-registry directly to the contractor concerned.

Item 10h: The contractor is permitted access to Foreign Government information. Access to Foreign Government information requires a final U.S. Government clearance at the appropriate level.

Item 10j: FOUO information provided under this contract shall be safeguarded as specified in For Official Use Only

(FOUO) Addendum

Item 11.a.: Contractor performance is restricted to MSSC (Haleakala), RME (Kihei), MHPCC (Kihei) 805 Lipoa Pkwy, Kihei, HI 96753). Using contractor or activity will provide security classification guidance for performance of this contract.

The contractor requires access to classified source data up to and including TOP SECRET in support of the work effort.

Any extracts or use of such data requires the contractor to apply derivative classifications and markings consistent with the source documents. Use of “Multiple Sources” on the “Derived From” line necessitates compliance with the NISPOM, Chap.

4, and use of bibliography, classification, declassification, and markings will be in accordance with EO 13526 and the

DoDM 5200.01, Volume 2, Marking of Classified Information, 24 Feb 2012, and supplements thereto.

Item 11g: The contractor is authorized to use the services of Defense Technical Information Center (DTIC) and is required to prepare and process a DD Form 1540, Registration for Scientific and Technical Information Services, and DD Form

2345, Military Critical Technical Data Agreement. The contracting activity must be involved in certifying need-to-know to

DTIC. If you need help registering or filling out the forms, please contact the DTIC Office at 1-800-225-3847.

Item 11.i.: Any transfer or processing of classified or sensitive information via electronic methods (e.g., facsimile, telemetry, voice, and computer) must be protected by implementing an appropriate combination of countermeasures such as encryption devices and sound practices and procedures. The specific countermeasures used, must be coordinated by the

Project Manager for approval through the 377 MSG/SCXS, 2500 Wyoming Blvd, Bldg. 20604, Room B-16, Kirtland AFB, NM 87117-5607

Item 11j: OPSEC. The contractor shall provide operations security (OPSEC) protection for all sensitive/critical information in accordance with AFI 10-701 and the (RV/RD OPSEC Plan or specific Program OPSEC Plan). The RD/RV Critical

Information list will be provided under separate cover. It is incumbent upon the contractor to request this document via the contracting officer or directly to the OPSEC Program Office. The contractor shall describe the steps necessary to protect sensitive/critical information. The contractor will include OPSEC awareness education and training to all personnel as part of their standard security program. Technology Protection unique security measures may apply. On site/on base contractors will participate in OPSEC Program. The contractor must comply with special OPSEC requirements contained in the contract or addendum thereto.

Item 11l: AIS (COMPUTER SECURITY)

Any transfer or processing of classified or sensitive information via electronic methods (e.g., facsimile, telemetry, voice, computer) must be protected by implementing an appropriate combination of countermeasures such as encryption devices and sound practices and procedures. The specific countermeasures used, must be coordinated by the Project Manager for approval through AFRL/RDSM 550 Lipoa Parkway (Suite 100) Kihei, Hi. 96753.

Item 13: SECURITY GUIDANCE:

The National Industrial Security Program Operating Manual (NISPOM), Feb 2006 and its supplements apply to this contract. The contractor must comply with special OPSEC requirements contained in the contract or addendum thereto.

SENSITIVE INFORMATION:

Any information, the loss, misuse, or unauthorized access to or modification of which could adversely affect the national interest or the conduct of federal programs, or the privacy to which individuals are entitled under Section 552a of Title 5, U.S. Code (The Privacy Act), but which has not been specifically authorized under criterions established by an Executive

Order or an Act of Congress to be kept secret in the interest of national defense or foreign policy.

NOTE: Within the Air Force, sensitive information includes, but is not limited to, information which could:

(1) Be useful to a hostile agent in developing countermeasures.

(2) Involving new or high technology.

(3) Involve key indicators of operational capabilities which could be used by hostile agents to determine operational capabilities, weaknesses, and wartime missions.

Protecting. The application of government-approved protection equipment, devices, techniques or services to C4 systems over which sensitive information is transmitted.Government - Approved Protection. Equipment or techniques that have been determined by National Security Agency (NSA) or the National Institute for Standards and Technology (NIST) to meet certain prescribed government security standards for the protection of sensitive information being transmitted over C4 systems.

Item 14: ADDITIONAL SECURITY REQUIREMENTS:

The contractor is expressly prohibited from representing subcontractor’s employees as prime contractor’s employees for the purpose of obtaining security clearances and/or access for these individuals. Any requests for customer provided classified material or data will be channeled through the AFRL sponsor and/or site security offices.

Whenever the contractor finds that the requirements of any of the clauses of the contract are in conflict with security instructions as they apply to a customer classified portion, the contractor shall call the Contracting Office to identify the conflict. The Contracting Officer (CO) shall issue to the contractor written instructions addressing the conflicting clauses and security requirements. Any waiver of compliance with the security guidance herein for customer classified portions of this contract shall be in writing and coordinated through the applicable customer. In the event a conflict occurs between the various security manuals, the contractor will utilize the most restrictive guidance and immediately refer the matter to the contractor program manager for resolution.

Item 14. continued: For EMSEC requirements and guidance see attachment Emissions Security (AKA TEMPEST) Security

Requirements from 377 MSG/SCSX.

EMISSIONS SECURITY (AKA TEMPEST) SECURITY REQUIREMENTS

a. The contractor shall ensure that emissions security (EMSEC) conditions related to this contract are minimized.

b. The contractor shall provide countermeasures assessment data to the Contracting Officer (CO), with an informational copy to 377 MSG/SCXS, 2500 Wyoming Blvd., Bldg 20604, Room B-16, Kirtland AFB NM 87117-5607, in the form of an

EMSEC Security Protection Assessment Request (ESPAR). The ESPAR shall provide only specific responses to the data required in paragraph c. below; the contractor’s standard security plan shall not be used as a “stand-alone” ESPAR response. The contractor shall not submit a detailed facility analysis/assessment. The ESPAR information will be used by the government EMSEC authority to complete an EMSEC Countermeasures Assessment of the contractor’s facility using current Air Force EMSEC directives. EMSEC is applied on a case-by-case basis and further information may be required to complete the ESPAR; should this be the case, the contractor shall provide this information to the contracting officer when requested. After evaluation of the ESPAR by the government EMSEC authority, additional EMSEC requirements may be necessary. When changes to the information required in paragraph c. below occur (including, but not limited to, relocation of equipment from the originally approved room, or increasing the classification level or volume of processing), the contractor shall submit to the CO a new ESPAR, with an informational copy to 377 MSG/SCXS, address as shown above, identifying the new configuration at least thirty (30) days before the changes occur; the contractor shall not commence

SECRET or higher processing with the new configuration until receiving approval to do so from the CO.

c. ESPAR Contents:

(1) SYSTEM DESCRIPTION:

(a) SYSTEM/FACILITY: Full name and address of company submitting request and RFP/contract number and duration.

Manufacturer, model, and serial number of all electronic processing equipment that will be used for processing classified information (SECRET and above). Also, provide a brief title identifying the overall system or facility (e.g., XYZ missile word processing system, ABC aircraft interactive graphics system, etc.).

(b) LOCATION: Identify the address (including city, state, zip code, facility, building and room number) where the system and facility are located.

(2) RESPONSIBLE PERSONNEL

(a) SECURITY OFFICER/MANAGER: Provide name, title, office symbol and telephone number. Include the company appointed EMSEC authority, if applicable.

(b) SYSTEM CUSTODIAN: If different from c(2)(a) above, provide name, title, office symbol and telephone number.

(3) OPERATIONAL RISK: Level/amount of classified: Identify the levels of classification (including specific designator, such as SCI, SAP, SIOP, etc.) that will be processed, the estimated volume per day/month for each level expressed as a percent (of total material processed) for each level. If time-sharing an advice, list classification(s), volume(s), and percentage(s) of use by other program(s). Volume may be described in data bytes/day, lines/day, pages/day or hours/day.

d. The prime contractor shall ensure that all subcontractors/vendors are included as part of their ESPAR.

Subcontractors/vendors are subject to comply with Air Force EMSEC requirements.

e. Classified processing shall not begin until specific written approval/authorization, including approval for changes required pursuant to paragraph c above, are provided by the Contracting Officer based on an EMSEC certification letter issued by the EMSEC authority. The EMSEC authority at Kirtland AFB is 377 MSG/SCXS.

f. Use of any telecommunications system or a device to include, but not limited to; cellular phones, hand-held radios, beepers/pagers, cordless telephones, cordless microphones, facsimile machines and computers constitutes consent to monitoring in accordance with AFI 10-712, (TMAP).

COMSEC ACCESS AND /OR ACCOUNT

General Guidance

Access to classified COMSEC information shall be restricted to U.S. citizens who have been granted a final security clearance by the U.S. Government, have a valid need-to-know (as defined in the National Industrial Security Program

Operating Manual),and have successfully completed a non-lifestyle, counterintelligence scope polygraph examination, when required by the U.S. Government or appropriate security office, administered in accordance with DoD or agency requirements and applicable law. Non-U.S. citizens, including immigrant aliens, are not eligible for access to classified

COMSEC information. For access to some types of COMSEC information a Cryptographic Access Briefing or COMSEC

Briefing may be required. (NSA Contractor accounts refer to NSA/CSS PM 3-16 Para 7 and 8 for briefings required under specific types of access.) Access to unclassified controlled cryptographic items (CCI) will be limited to U.S. Citizens who have a need for such access.

If a National Security Agency (NSA) Contractor COMSEC Account is established (or already exists), NSA/CSS Policy

Manual 3-16 and appropriate follow-on documents shall apply. If contractor personnel will have access to COMSEC information via an Air Force COMSEC user account, U.S.A.F. COMSEC regulations (e.g.: AFI 33-201 V2, AFI33-201 V4, AFI 33-201 V9, et al), Command COMSEC supplements (and appropriate follow-on documents) and guidance provided by the supporting AF COMSEC Office regarding operation of Air Force COMSEC user accounts shall apply.

All individuals with access to COMSEC information via an AF COMSEC user account who:

• Have access to cryptographic media classified SECRET or above;

• Operate Key Generating equipment (e.g.: KG-83, KoK-22, Etc);

• Prepare, authenticate, or decode nuclear control orders (actual or exercise);

• Are responsible for keying cryptographic equipment to SECRET or above; or

• Are responsible for crypto engineering or designated installation technicians;

MUST be enrolled in the AF Cryptographic Access Program PRIOR to having such access.

Audit and inspection of NSA contractor COMSEC accounts shall be in accordance with NSA/CSS PM 3-16 Section

XVII. Audit and Inspection of AF COMSEC user accounts shall be in accordance with AFI 33-201, V2. COMSEC and non-

COMSEC inspections of AF user accounts will not be conducted concurrently.

The POC for MAUI Communications Security (COMSEC) is: AFRL/RDSM, 805 Lipoa Parkway, Suite 100, Kihei, HI

96753

FOR OFFICIAL USE ONLY (FOUO) ADDENDUM

The following procedures will be used to protect FOR OFFICIAL USE ONLY (FOUO) material:

1. HANDLING: Access to FOUO material shall be limited to those employees needing the material to do their jobs. The

FOUO marking is assigned to material created by a DoD user agency. FOUO is not a classification, but requires extra precaution to insure it is not released to the public.

2. MARKING UNCLASSIFIED: Mark unclassified documents containing FOUO; "FOR OFFICIAL USE ONLY" at the bottom of each page and back cover (if any). Paragraphs, sentences, illustrations, and figures that are deemed to be FOUO will be portion marked (U//FOUO) at the beginning of the item. FOUO material released to a contractor by a DoD user agency must have the following statement on the front page or cover: "THIS DOCUMENT CONTAINS MATERIAL

EXEMPT FROM MANDATORY DISCLOSURE UNDER THE FREEDOM OF INFORMATION ACT. EXEMPTION(S)

---------'APPLY."

3. MARKING CLASSIFIED: In a classified document, mark:

a. An individual paragraph that contains FOUO, but not classified material by placing "U//FOUO" at the beginning of the paragraph.

b. The top and bottom of each page that has both FOUO and classified material with the highest security classification of the material on that page.

c. "UNCLASSIFIED//FOR OFFICIAL USE ONLY" at the bottom of each page that has FOUO but no classified material.

d. If a classified document also contains FOUO material or if the classified material becomes FOUO when declassified, place the following statement on the bottom of the cover or the first page under the classification marking:

NOTE: If declassified, review the document to make sure material is not FOUO and not exempt under AFI 37-131 before public release."

e. Mark other records such as computer print outs, photographs, films, tapes, or slides "UNCLASSIFIED//FOR

OFFICIAL USE ONLY" so the receiver or viewer knows the record contains FOUO material.

f. Ensure documents that transmit FOUO material call attention to any FOUO attachments.

4. FOUO DETERMINATION: All documents determined to contain FOUO information will identify the FOUO exemption criteria from the Freedom of Information Act (FOIA), by citing the applicable paragraph number. FOUO material released to a contractor by a DoD user agency must have the following statement on the front page or cover: "THIS DOCUMENT

CONTAINS MATERIAL EXEMPT FROM MANDATORY DISCLOSURE UNDER THE FREEDOM OF

INFORMATION ACT. EXEMPTION(S) ________ APPLY."

5. STORAGE: During normal duty hours, place FOUO material in an out-of-sight location, if your work area is accessible to persons who do not have a valid need for the material. After normal duty hours, store FOUO material to prevent unauthorized access. File with other unclassified records in unlocked files or desks when internal building security is provided. When there is not internal security, locked buildings or rooms usually provide adequate after-hours protection.

For additional protection, store FOUO material in locked container such as file cabinets, desks, or bookcases.

Expenditure of funds for security container or closed areas solely for the protection of FOUO material is prohibited.

6. TRANSMISSION: FOUO material shall be transmitted by the same methods as other unclassified material. Discussion of

FOUO material on the telephone is authorized if necessary for the performance of the contract. FOUO material may be transmitted over telephone lines in digital form, by telecopies, or by other DSN Teletype lines without encryption.

7. RELEASE: FOUO material shall not be released outside the contractor's facility except to representatives of the DOD.

8. DESTRUCTION: When no longer needed, FOUO material shall be disposed of by a method that precludes its disclosure to unauthorized individuals.