Attachment_2_-_DD254.pdf

Please wait...

If this message is not eventually replaced by the proper contents of the document, your PDF viewer may not be able to display this type of document.

You can upgrade to the latest version of Adobe Reader for Windows®, Mac, or Linux® by visiting http://www.adobe.com/go/reader_download.

For more assistance with Adobe Reader visit http://www.adobe.com/go/acrreader.

Windows is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Mac is a trademark of Apple Inc., registered in the United States and other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.

PROTECTING SPECIAL ACCESS PROGRAM (SAP) INFORMATION

(2 January 2018 edition)

Special Access Program (SAP) discussion, storage, and processing associated with this effort will be conducted in SAP Facilities (SAPF) specifically approved, in writing, by the USSOCOM SAPCO or designated USSOCOM Program Security Officer (PSO). Contact the individual in Block 16 for approved SAPF locations.

SAP activities are governed by Revision 1, of the Department of Defense Overprint to the National Industrial Security Program Operating Manual (NISPOM) Supplement; DOD Manual 5200.01 (DOD Information Security Program) Volumes 1-4, DOD Directive 5205.07 (Special Access Program Policy); DOD Manual 5205.07 (DOD Special Access Program Security Manual), Volumes 1-4; DOD Instruction 5205.11, (Joint SAP Implementation Guide (JSIG)); USSOCOM Manual 380-2 (SAP Security Guide); USSOCOM Manual 380-7 (USSOCOM Arms Control Readiness Inspection Program) and applicable program security classification guides and subsequent versions. Applicable documents will be provided to the contractor by the PSO under separate cover.

Access to SAP information requires employees to undergo additional personnel security screening and meet the requirements of DoD SAP accessing directives and policies in accordance with DODM 5205.07, Volume 2. The individual must meet applicable eligibility requirements and possess a final Secret or Top Secret security clearance depending on the level of access required in performance of this contract. Program Access Requests (PAR) for contractor personnel must be submitted by the Contractor’s Program Security Officer (CPSO) to the PSO for approval by the designated Access Approval Authority (AAA). Personnel approved for access will receive a program indoctrination briefing and must sign a SAP Indoctrination Agreement (PIA) prior to receiving access to program information or material. The CPSO will maintain the signed PIA and forward a copy to the PSO for entry into the appropriate database system.

SAP inspections and security oversight while in USSOCOM or Component government facilities are under the cognizance of the USSOCOM PSO or SAPCO representative, as appropriate. Additional Component SAP security requirements may apply for activities conducted at Service Component or Sub-unified command locations. The Performance Monitor or component command COR at these locations/facilities will provide specific or additional guidance. SAP reviews conducted at contractor facilities are under the security oversight of the Defense Security Service (DSS) unless officially relieved of oversight responsibilities.

OPSEC-sensitive or classified communication will be conducted via PSO-approved secure channels from within the SAPF. Transmission of documents via secure facsimile between terminals within SAPFs may be approved by the PSO. Only the U.S. Postal Service Register or Certified mail, if authorized, will be used to mail program material unless an alternate method is approved by the PSO. Briefed personnel are authorized to courier classified information within the continental United States with written approval from the CPSO or PSO. Two (program briefed) personnel are required to courier Top Secret material unless prior approval is obtained from the PSO. Couriers will be in the possession of PSO-issued courier authorization letters prior to travel. All material, to be mailed or carried, will be wrapped and transmitted in accordance with DODM 5205.07, Volume 1.

Prior to processing SAP information on any Automated Information System (AIS), the contractor will provide the PSO with a System Security Plan (SSP) and other documentation required in JSIG for Assessment & Authorization (A&A) from the Authorizing Official (AO), or subsequent policy. The PSO will issue program specific Security Authorization following verification of the A&A process. USSOCOM Special Access Program (SAP) Policy Memorandum: Removable Media and Two-Person Integrity Control Policy is applicable for this contract.

Destruction of program material will be conducted only by program indoctrinated personnel using destruction equipment and procedures approved by the PSO. A single person may destroy non-accountable classified material. Accountable material must be destroyed, and documented, by two program cleared individuals.

The PSO will be advised of any reports which affect the baseline facility clearance or any incident that has an adverse impact on a personnel security clearance. All briefed personnel are required to report any information that could have an impact on their ability to protect classified information. Reportable items include: foreign travel, contacts, or associations; criminal, civil, financial, or mental health issues; and changes in personal status such as marriage, divorce, or employment. CPSOs are reminded of their responsibilities to diligently report any significant action or any change in an employee’s eligibility to the PSO immediately.

Per DOD Manual 5205.07 Volume 1, Encl. 11, Sec 3. : “Any (contractual) relationship with a prospective subcontractor requires prior approval by the PSO.” All security requirements levied upon the prime contractor will “flow-down” to the subcontractor. SAP access and other requirements must be pre-coordinated and approved by the PSO prior to implementation.

IAW DODM 5200.01, Vol 3, Encl. 6, any security incident involving the potential loss, compromise, or suspected compromise of classified information must be reported to the PSO immediately using appropriate secure channels. Security infractions will be documented in the individuals personal security file and made available for review during PSO visits.

PROTECTING "FOR OFFICIAL USE ONLY" (FOUO) INFORMATION

(Updated June 2014)

1. GENERAL:

a. The "For Official Use Only" (FOUO) marking is assigned to information at the ti.me of its creation in a DOD User Agency. It is not authorized as a substitute for a security classification marking but is used on official government information that may be withheld from the public under exemptions 2 through 9 of the Freedom of Information Act (FOIA).

b. Other non-security markings, such as "Limited Official Use" and "Official Use Only" are used by non-DOD User Agencies for the same type of information and should be safeguarded and handled in accordance with instruction received from such agencies.

c. Use of the above markings does not mean that the information cannot be released to the public under FOIA, only that it must be reviewed by the Government prior to its release to determine whether a significant and legitimate government purpose is served by withholding the information or portions of it

2. MARKINGS:

a. Unclassified documents containing FOUO information will be marked "UNCLASSIFIED//For Official Use Only" or "U//FOUO" at the bottom of the front cover (if any), on the first page, on each page containing FOUO information , on the back page, and on the outside of the back cover (if any). Each paragraph containing FOUO information shall be marked as such.

b. Within a classified document, an individual page that contains both FOUO and classified information will be marked at the top and bottom with the highest security classification of information appearing on the page. Individual paragraphs shall be marked at the appropriate level be it classified, unclassified, or FOUO. An individual page that ONLY contains FOUO and unclassified information shall be marked “FOR OFFICIAL USE ONLY” or the highest classification of the entire document at the top and bottom of the page.

If an individual portion contains FOUO information but no classified information, the portion will be marked, "FOUO."

c. Mark other records, such as computer print outs, photographs, films, tapes, or slides "FOR OFFICIAL USE ONLY" so that the viewer knows the record contains FOUO information.

d. Removal of the "For Official Use Only" marking can only be accomplished by the originator or other competent authority. When the "For Official Use Only" status is terminated, all known holders will be notified to the extent practical.

3. DISSEMINATION: "For Official Use Only" information may be disseminated between officials of DOD Components, DOD contractors, consultants, and grantees to conduct official business for the DOD. FOUO information may also be passed to officials in other departments and agencies of the executive and judicial branches to fulfill a government function. Recipients shall ·be made aware of the special handling instructions detailed in this document and that it's exempt from public disclosure under the FOIA utilizing the following statement: "This document contains information EXEMPT FROM MANDATORY DISCLOSURE UNDER THE FOIA".

4. STORAGE: During working hours, "For Official Use Only" information shall be placed in an out-of-sight location if the work area is accessible to persons who do not have a need for the information. During nonworking hours, the information shall be stored to preclude unauthorized access. Filing such material with other unclassified records in unlocked files or desks, is adequate when internal building security is provided during nonworking hours. When such internal security control is not exercised, locked buildings or rooms will provide adequate after- hours protection or the material can be stored in locked receptacles such as file cabinets, desks, or bookcases.

5. TRANSMISSION: "For Official Use Only" information may be sent in the following ways:

a. Mail - FOUO may be sent via first-class mail or parcel post. Bulky shipments may be sent by fourth-class mail.

b. Fax - Normally FOUO may be sent over facsimile equipment. To prevent unauthorized disclosure the following should be considered:

Use of special cover sheets, location of fax machines {both ends), and whether authorized persoru1el are around to receive FOUO information.

c. E-Mail/Websites E-mail may be used on approved secure communication systems or systems utilizing other protective measures such as Public Key Infrastructure (PKI) or transport layer security (e.g., https).

**Make sure documents/methods that transmit FOUO material call attention to any FOUO attachments. **

6. DISPOSITION: When no longer needed, FOUO information must be disposed of in a way that will preclude its disclosure to unauthorized individuals.

7. UNAUTHORIZED DISCLOSURE: Unauthorized disclosure of "For Official Use Only" information does not constitute a security violation but the releasing agency should be informed of any unauthorized disclosure. The unauthorized disclosure of FOUO information protected by the Privacy Act may result in criminal sanctions and disciplinary action may be taken against those responsible.

DRAFT

SAMPLE

PREVIOUS EDITION IS OBSOLETE.

Page of AEM LiveCycle Designer

DD FORM 254, APR 2018

NEEDS DD67

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the National Industrial Security Program (NISP) apply to all security aspects of this effort involving classified information.)

OMB No. 0704-0567 OMB approval expires:

October 31, 2020 The public reporting burden for this collection of information, 0704-0567, is estimated to average 70 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, at whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

RETURN COMPLETED FORM AS DIRECTED IN THE INSTRUCTIONS.

1. CLEARANCE AND SAFEGUARDING

2. THIS SPECIFICATION IS FOR: (X and complete as applicable.)

3. THIS SPECIFICATION IS: (X and complete as applicable.)

a. ORIGINAL (Complete date in all cases.)

b. REVISED (Supersedes all previous specifications.)

4. IS THIS A FOLLOW-ON CONTRACT?

If yes, complete the following:

Classified material received or generated under

5. IS THIS A FINAL DD FORM 254?

If yes, complete the following:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

7. SUBCONTRACTOR(S) (Click button if you choose to add or list the subcontractors -- but will still require a separate DD Form 254 issued by a prime contractor to each subcontractor)

8. ACTUAL PERFORMANCE (Click button to add more locations.)

10. CONTRACTOR WILL REQUIRE ACCESS TO: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

e. NATIONAL INTELLIGENCE INFORMATION:

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. See instructions. Provide details in Blocks 13 or 14 as set forth in the instructions.)

12. PUBLIC RELEASE

Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the National Industrial Security Program Operating Manual (NISPOM) or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified here with at least office and phone contact information and if available, an e-mail address. (See instructions)

13. SECURITY GUIDANCE

The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended.

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. The field will expand as text is added. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. Also allows for up to 6 internal reviewers to digitally sign. See instructions for additional guidance or use of the fillable PDF.)

14. ADDITIONAL SECURITY REQUIREMENTS

Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the CSO. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

15. INSPECTIONS

Elements of this contract are outside the inspection responsibility of the CSO.

If Yes, explain and identify specific areas and government activity responsible for inspections. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

17. CERTIFICATION AND SIGNATURES

Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. Upon digitally signing Item 17h, no changes can be made as the form will be locked.

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICIAL

9.0.0.2.20120627.2.874785 DD 254, DoD Contract Security Classification Specification List of Attachments (All Files Must be Attached Prior to Signing, i.e., for any digital signature on the form)

SEE ITEM 13

2000 TRIDENT WAY, BLDG 624

SAN DIEGO, CA 92155

CSO: NAVAL SPECIAL WARFARE COMMAND

2000 TRIDENT WAY, BLDG 624

SAN DIEGO, CA 92155

CSO: NAVAL SPECIAL WARFARE COMMAND

2000 TRIDENT WAY, BLDG 624

SAN DIEGO, CA 92155

3632 GUADALCANAL ROAD

SAN DIEGO, CA 92155

Location: NAVAL SPECIAL WARFARE GROUP TWO

1300 HELICOPTER ROAD, BLDG 3854

VIRGINIA BEACH, VA 23459

Location: NAVAL SPECIAL WARFARE GROUP TEN

1600 SEABEE DRIVE, SUITE 100

VIRGINIA BEACH, VA 23459

Block9: CONTRACTOR SHALL PROVIDE THE PERSONNEL, MANAGEMENT, AND MATERIALS NECESSARY TO PERFORM THE MARITIME SPECIAL OPERATIONS FORCES SUPPORT (M-SOFS).

PERIOD OF PERFORMANCE: TBD AT CONTRACT AWARD (ANNUAL DD254 REVIEW REQUIRED FOR ALL OPTION YEARS)

UPON COMPLETION OR TERMINATION OF THIS CLASSIFIED CONTRACT, OR SOONER WHEN THE PURPOSE OF RELEASE HAS BEEN SERVED, THE CONTRACTOR SHALL RETURN ALL CLASSIFIED INFORMATION (FURNISHED OR GENERATED) TO THE SOURCE FROM WHICH RECEIVED UNLESS RETENTION OR OTHER DISPOSITION INSTRUCTIONS ARE AUTHORIZED IN WRITING BY THE USSOCOM GOVERNMENT CONTRACTING AGENCY/ACTIVITY. THE CONTRACTOR SHALL ACCOUNT FOR AND RETURN TO THE APPROPRIATE ISSUING OFFICE, ALL IDENTIFICATION BADGES AND/OR ENTRY PASSES/VEHICLE DECALS ISSUED TO CONTRACTOR PERSONNEL UPON COMPLETION OR TERMINATION OF THE CLASSIFIED CONTRACT, TERMINATION OF EMPLOYMENT, OR SUSPENSION OF CLASSIFIED CLEARANCE OR ACCESS OF ANY CONTRACTOR EMPLOYEE.

ALL CLASSIFIED INFORMATION/HARDWARE DEVELOPED WILL BE CLASSIFIED PURSUANT TO DERIVATIVE CLASSIFICATION PROCEDURES OR AS ANY APPLICABLE CLASSIFICATION GUIDE SO DICTATES (NISPOM CHAPT 4, SECT 2) AND EXECUTIVE ORDER 13526 DTD 5 JAN 2010, OR AS AMENDED. ALL APPLICABLE CLASSIFICATION GUIDES WILL BE IDENTIFIED AND MADE AVAILABLE BY THE PROGRAM MANAGER/COR.

2.B SUBCONTRACTING OF THIS EFFORT MUST BE APPROVED BY HQ USSOCOM PRIOR TO AWARD. FORWARD REQUESTS AND DRAFT SUBCONTRACT DD FM 254S TO THE CONTRACTING OFFICER’S REPRESENTATIVE/PROGRAM MANAGER AND USSOCOM INDUSTRIAL SECURITY (INDUSTRIALSECURITY@SOCOM.MIL).

(IAW USSOCOM R 380-9, INDUSTRIAL SECURITY, PLEASE ALLOW 10 DUTY DAYS FOR REVIEW/APPROVAL).

7.A SEE GUIDANCE IN 2.B ABOVE.

10.E (2) CONTRACT IS FOR NSW SUPPORT SERVICES PURPOSES. CLEARED CONTRACTOR PERSONNEL ARE AUTHORIZED ACCESS TO NON-SCI INTELLIGENCE INFORMATION RELATED TO THE CONTRACT REQUIREMENTS LISTED IN THE PWS. PRIOR APPROVAL OF THE COR IS REQUIRED FOR SUBCONTRACTORS TO ACCESS NON-SCI INTELLIGENCE INFORMATION.

10.J CONTROLLED UNCLASSIFIED INFORMATION (CUI) PROVIDED UNDER THIS CONTRACT SHALL BE SAFEGUARDED AS SPECIFIED IN THE FOUO ADDENDUM INCLUDED WITH THIS SPECIFICATION.

10.K NIPRNET/SIPRNET ACCESS AT GOVERNMENT FACILITIES.

11.A CONTRACTOR PERFORMANCE IS RESTRICTED TO GOVERNMENT FACILITIES OWNED AND OPERATED BY NAVAL SPECIAL WARFARE COMMAND. GOVERNMENT AGENCY OR ACTIVITY WILL PROVIDE SECURITY CLASSIFICATION GUIDANCE FOR PERFORMANCE OF THIS CONTRACT. SUBMIT VISIT REQUESTS TO COR AND/OR SECURITY MANAGEMENT OFFICE FOR NEED-TO-KNOW VERIFICATION.

11.E CONTRACT IS FOR NSW SUPPORT SERVICES. CLASSIFICATION MARKINGS ON THE MATERIAL TO BE FURNISHED WILL PROVIDE THE GUIDANCE NECESSARY FOR PERFORMANCE OF THE CONTRACT.

11.J SEE OPERATIONS SECURITY (OPSEC) ADDENDUM

11.L CONTROLLED UNCLASSIFIED INFORMATION (CUI) PROVIDED UNDER THIS CONTRACT SHALL BE SAFEGUARDED AS SPECIFIED IN THE FOUO ADDENDUM INCLUDED WITH THIS SPECIFICATION.

11.M ACCESS TO ALL NAVSPECWAR FACILITIES REQUIRES CONTRACTORS TO POSSESS A MINIMUM OF A TOP SECRET CLEARANCE.

THE USE OF PERSONAL ELECTRONIC MEDIA (CAMERAS, VIDEO RECORDERS, COMPUTER LAPTOPS, FLASH (THUMB), OR OTHER REMOVABLE DRIVES) IS PROHIBITED IN ALL NAVAL SPECIAL WARFARE SPACES. ALL REMOVABLE ELECTRONIC MEDIA MUST BE LABELED (UNCLASSIFIED, ETC.) TO THE HIGHEST CLASSIFICATION OF DATA STORED, AND/OR FOR THE CLASSIFICATION OF THE SYSTEM IN WHICH IT IS USED. IF CLASSIFIED, ANY REMOVABLE ELECTRONIC MEDIA MUST BE TRACKED AND STORED APPROPRIATE TO THAT LEVEL OF CLASSIFICATION.

ANTI-TERRORISM/FORCE PROTECTION (AT/FP) BRIEFINGS ARE REQUIRED FOR ALL PERSONNEL (MILITARY, DOD CIVILIAN, AND CONTRACTOR) PER OPNAVINST F3300.53C. CONTRACTOR EMPLOYEES MUST RECEIVE THE AT/FP BRIEFING ANNUALLY. THE BRIEFING IS AVAILABLE AT HTTP://JKO.JTEN.MIL/COURSES/ATL1/LAUNCH.HTML. FORWARD A COPY OF TRAINING CERTIFICATE TO THE COR.

THE CONTRACTING OFFICER’S REPRESENTATIVE (COR) WILL SPECIFY WHICH POSITIONS REQUIRE ANY ADDITIONAL CLEARANCE AND WHEN THE CONTRACTOR IS AUTHORIZED TO COURIER CLASSIFIED INFORMATION AND EQUIPMENT IN SUPPORT OF THE NAVAL SPECIAL WARFARE COMMAND.

THE SECURITY REQUIREMENTS FOR PERSONNEL ASSIGNED UNDER THIS TASK SHALL BE IN ACCORDANCE WITH THE REQUIREMENTS OF OPNAVINST 5510.1 SERIES. THE HIGHEST-LEVEL SECURITY REQUIRED FOR THIS TASK IS TOP SECRET. THE WORK PERFORMED BY THE CONTRACTOR WILL INCLUDE ACCESS TO UNCLASSIFIED AND UP TO TOP SECRET INFORMATION, AND SPACES. THE CONTRACTOR MAY BE REQUIRED TO ATTEND MEETINGS CLASSIFIED UP TO THE TOP SECRET LEVEL.

PERSONNEL PERFORMING CLASSIFIED WORK OR REQUIRING ACCESS TO CLASSIFIED MATERIAL OR SPACES UNDER THIS DELIVERY ORDER/TASK ORDER SHALL POSSESS BOTH A DOD SECURITY CLEARANCE AT THE APPROPRIATE LEVEL AND THE NEED TO KNOW. REQUEST FOR VISIT AUTHORIZATION SHALL BE SUBMITTED IN ACCORDANCE WITH DOD 5220.22M (INDUSTRIAL SECURITY MANUAL FOR SAFEGUARDING CLASSIFIED INFORMATION) NOT LATER THAN ONE (1) WEEK PRIOR TO VISIT. FORM DD-254 OF THE BASIC CONTRACT APPLIES.

ALL DEVELOPMENT OF DATABASES, CLASSIFIED HARDWARE, AND GRAPHICS (WHEN CONDUCTED AT THE CONTRACTOR’S LOCATION) WILL BE DONE UPON DEFENSE SECURITY SERVICE APPROVED AUTOMATED INFORMATION SECURITY (AIS) EQUIPMENT.

ALL CLASSIFIED INFORMATION/HARDWARE DEVELOPED WILL BE CLASSIFIED PURSUANT TO DERIVATIVE CLASSIFICATION PROCEDURES OR AS ANY APPLICABLE CLASSIFICATION GUIDE SO DICTATES (NISPOM CH 4, SECTION 2) AND EXECUTIVE ORDER 13526. ALL APPLICABLE CLASSIFICATION GUIDES WILL BE IDENTIFIED AND MADE AVAILABLE BY THE COR LOCATED IN BLOCK 16.

MEETINGS OR VISITS CONDUCTED BY THE CONTRACTOR WILL BE DONE IAW NISPOM CH. 6.

AS REQUIRED BY NISPOM, CHAPTER 1, SECTION 3, CONTRACTORS ARE REQUIRED TO REPORT CERTAIN EVENTS THAT HAVE AN IMPACT ON THE STATUS OF THE FACILITY CLEARANCE (FCL), THE STATUS OF AN EMPLOYEE'S PERSONNEL CLEARANCE (PCL), THE PROPER SAFEGUARDING OF CLASSIFIED INFORMATION, OR AN INDICATION THAT CLASSIFIED INFORMATION HAS BEEN LOST OR COMPROMISED. CONTRACTORS WORKING UNDER NAVAL SPECIAL WARFARE CONTRACTS WILL ENSURE INFORMATION PERTAINING TO ASSIGNED CONTRACTOR PERSONNEL ARE REPORTED TO THE PROGRAM MANAGER, COR, AND SECURITY MANAGER ALONG WITH NOTIFYING THE APPROPRIATE AGENCIES SUCH AS CSA, CSO, OR DODCAF WHEN RELATED TO THE DENIAL, SUSPENSION, OR REVOCATION OF A SECURITY CLEARANCE OF ANY ASSIGNED PERSONNEL, ANY ADVERSE INFORMATION ON AN ASSIGNED EMPLOYEE'S CONTINUED SUITABILITY FOR CONTINUED ACCESS TO CLASSIFIED ACCESS; ANY INSTANCE OF LOSS OR COMPROMISE, OR SUSPECTED LOSS OR COMPROMISE, OF CLASSIFIED INFORMATION; ACTUAL, PROBABLE OR POSSIBLE ESPIONAGE, SABOTAGE, OR SUBVERSIVE INFORMATION; OR ANY OTHER CIRCUMSTANCES OF A SECURITY NATURE THAT WOULD AFFECT THE CONTRACTOR'S OPERATION WHILE WORKING UNDER NAVAL SPECIAL WARFARE CONTRACTS.

COPIES OF ALL SUBCONTRACT DD FORM 254S MUST BE PROVIDED TO THE DISTRIBUTION LISTED IN BLOCK 17.

(CONTINUED ON NEXT PAGE)

PROTECTING "FOR OFFICIAL USE ONLY" (FOUO) INFORMATION

(UPDATED JUNE 2014)

1. GENERAL:

a. THE "FOR OFFICIAL USE ONLY" (FOUO) MARKING IS ASSIGNED TO INFORMATION AT THE TI.ME OF ITS CREATION IN A DOD USER AGENCY. IT IS NOT AUTHORIZED AS A SUBSTITUTE FOR A SECURITY CLASSIFICATION MARKING BUT IS USED ON OFFICIAL GOVERNMENT INFORMATION THAT MAY BE WITHHELD FROM THE PUBLIC UNDER EXEMPTIONS 2 THROUGH 9 OF THE FREEDOM OF INFORMATION ACT (FOIA).

b. OTHER NON-SECURITY MARKINGS, SUCH AS "LIMITED OFFICIAL USE" AND "OFFICIAL USE ONLY" ARE USED BY NON-DOD USER AGENCIES FOR THE SAME TYPE OF INFORMATION AND SHOULD BE SAFEGUARDED AND HANDLED IN ACCORDANCE WITH INSTRUCTION RECEIVED FROM SUCH AGENCIES.

c. USE OF THE ABOVE MARKINGS DOES NOT MEAN THAT THE INFORMATION CANNOT BE RELEASED TO THE PUBLIC UNDER FOIA, ONLY THAT IT MUST BE REVIEWED BY THE GOVERNMENT PRIOR TO ITS RELEASE TO DETERMINE WHETHER A SIGNIFICANT AND LEGITIMATE GOVERNMENT PURPOSE IS SERVED BY WITHHOLDING THE INFORMATION OR PORTIONS OF IT

2. MARKINGS:

a. UNCLASSIFIED DOCUMENTS CONTAINING FOUO INFORMATION WILL BE MARKED "UNCLASSIFIED//FOR OFFICIAL USE ONLY" OR "U//FOUO" AT THE BOTTOM OF THE FRONT COVER (IF ANY), ON THE FIRST PAGE, ON EACH PAGE CONTAINING FOUO INFORMATION , ON THE BACK PAGE, AND ON THE OUTSIDE OF THE BACK COVER (IF ANY). EACH PARAGRAPH CONTAINING FOUO INFORMATION SHALL BE MARKED AS SUCH.

b. WITHIN A CLASSIFIED DOCUMENT, AN INDIVIDUAL PAGE THAT CONTAINS BOTH FOUO AND CLASSIFIED INFORMATION WILL BE MARKED AT THE TOP AND BOTTOM WITH THE HIGHEST SECURITY CLASSIFICATION OF INFORMATION APPEARING ON THE PAGE. INDIVIDUAL PARAGRAPHS SHALL BE MARKED AT THE APPROPRIATE LEVEL BE IT CLASSIFIED, UNCLASSIFIED, OR FOUO. AN INDIVIDUAL PAGE THAT ONLY CONTAINS FOUO AND UNCLASSIFIED INFORMATION SHALL BE MARKED “FOR OFFICIAL USE ONLY” OR THE HIGHEST CLASSIFICATION OF THE ENTIRE DOCUMENT AT THE TOP AND BOTTOM OF THE PAGE. IF AN INDIVIDUAL PORTION CONTAINS FOUO INFORMATION BUT NO CLASSIFIED INFORMATION, THE PORTION WILL BE MARKED, "FOUO."

c. MARK OTHER RECORDS, SUCH AS COMPUTER PRINT OUTS, PHOTOGRAPHS, FILMS, TAPES, OR SLIDES "FOR OFFICIAL USE ONLY" SO THAT THE VIEWER KNOWS THE RECORD CONTAINS FOUO INFORMATION.

d. REMOVAL OF THE "FOR OFFICIAL USE ONLY" MARKING CAN ONLY BE ACCOMPLISHED BY THE ORIGINATOR OR OTHER COMPETENT AUTHORITY. WHEN THE "FOR OFFICIAL USE ONLY" STATUS IS TERMINATED, ALL KNOWN HOLDERS WILL BE NOTIFIED TO THE EXTENT PRACTICAL.

3. DISSEMINATION: "FOR OFFICIAL USE ONLY" INFORMATION MAY BE DISSEMINATED BETWEEN OFFICIALS OF DOD COMPONENTS, DOD CONTRACTORS, CONSULTANTS, AND GRANTEES TO CONDUCT OFFICIAL BUSINESS FOR THE DOD. FOUO INFORMATION MAY ALSO BE PASSED TO OFFICIALS IN OTHER DEPARTMENTS AND AGENCIES OF THE EXECUTIVE AND JUDICIAL BRANCHES TO FULFILL A GOVERNMENT FUNCTION. RECIPIENTS SHALL ·BE MADE AWARE OF THE SPECIAL HANDLING INSTRUCTIONS DETAILED IN THIS DOCUMENT AND THAT IT'S EXEMPT FROM PUBLIC DISCLOSURE UNDER THE FOIA UTILIZING THE FOLLOWING STATEMENT: "THIS DOCUMENT CONTAINS INFORMATION EXEMPT FROM MANDATORY DISCLOSURE UNDER THE FOIA EXEMPTIONS APPLY."

4. STORAGE: DURING WORKING HOURS, "FOR OFFICIAL USE ONLY" INFORMATION SHALL BE PLACED IN AN OUT-OF-SIGHT LOCATION IF THE WORK AREA IS ACCESSIBLE TO PERSONS WHO DO NOT HAVE A NEED FOR THE INFORMATION. DURING NONWORKING HOURS, THE INFORMATION SHALL BE STORED TO PRECLUDE UNAUTHORIZED ACCESS. FILING SUCH MATERIAL WITH OTHER UNCLASSIFIED RECORDS IN UNLOCKED FILES OR DESKS, IS ADEQUATE WHEN INTERNAL BUILDING SECURITY IS PROVIDED DURING NONWORKING HOURS. WHEN SUCH INTERNAL SECURITY CONTROL IS NOT EXERCISED, LOCKED BUILDINGS OR ROOMS WILL PROVIDE ADEQUATE AFTER- HOURS PROTECTION OR THE MATERIAL CAN BE STORED IN LOCKED RECEPTACLES SUCH AS FILE CABINETS, DESKS, OR BOOKCASES.

5. TRANSMISSION: "FOR OFFICIAL USE ONLY" INFORMATION MAY BE SENT IN THE FOLLOWING WAYS:

a. MAIL - FOUO MAY BE SENT VIA FIRST-CLASS MAIL OR PARCEL POST. BULKY SHIPMENTS MAY BE SENT BY FOURTH-CLASS MAIL.

b. FAX - NOM1ALLY FOUO MAY BE SENT OVER FACSIMILE EQUIPMENT. TO PREVENT UNAUTHORIZED DISCLOSURE THE FOLLOWING SHOULD BE CONSIDERED: USE OF SPECIAL COVER SHEETS, LOCATION OF FAX MACHINES {BOTH ENDS), AND WHETHER AUTHORIZED PERSORU1EL ARE AROUND TO RECEIVE FOUO INFORMATION.

c. E-MAIL/WEBSITES E-MAIL MAY BE USED ON APPROVED SECURE COMMUNICATION SYSTEMS OR SYSTEMS UTILIZING OTHER PROTECTIVE MEASURES SUCH AS PUBLIC KEY INFRASTRUCTURE (PK1) OR TRANSPORT LAYER SECURITY (E.G., HTTPS).

**MAKE SURE DOCUMENTS/METHODS THAT TRANSMIT FOUO MATERIAL CALL ATTENTION TO ANY FOUO ATTACHMENTS. **

6. DISPOSITION: WHEN NO LONGER NEEDED, FOUO INFORMATION MUST BE DISPOSED OF IN A WAY THAT WILL PRECLUDE ITS DISCLOSURE TO UNAUTHORIZED INDIVIDUALS.

7. UNAUTHORIZED DISCLOSURE: UNAUTHORIZED DISCLOSURE OF "FOR OFFICIAL USE ONLY" INFORMATION DOES NOT CONSTITUTE A SECURITY VIOLATION BUT THE RELEASING AGENCY SHOULD BE INFORMED OF ANY UNAUTHORIZED DISCLOSURE. THE UNAUTHORIZED DISCLOSURE OF FOUO INFORMATION PROTECTED BY THE PRIVACY ACT MAY RESULT IN CRIMINAL SANCTIONS AND DISCIPLINARY ACTION MAY BE TAKEN AGAINST THOSE RESPONSIBLE.

NAVAL SPECIAL WARFARE COMMAND OPERATIONS SECURITY (OPSEC) REQUIREMENTS

(Adherence to all NSW Component Command OPSEC Requirements is MANDATORY)

ALL WORK IS TO BE PERFORMED IN ACCORDANCE WITH DOD AND NAVY OPERATIONS SECURITY (OPSEC) REQUIREMENTS, PER THE FOLLOWING APPLICABLE DOCUMENTS:

- NATIONAL SECURITY DECISION DIRECTIVE 298 -NATIONAL OPERATIONS SECURITY PROGRAM (NSDD) 298

- DOD 5205.02 -DOD OPERATIONS SECURITY (OPSEC) PROGRAM

- OPNAVINST 3432.1 -DON OPERATIONS SECURITY

- NSWC OPERATIONS SECURITY POLICY

THE CONTRACTOR WILL ACCOMPLISH THE FOLLOWING MINIMUM REQUIREMENTS IN SUPPORT OF NAVAL SPECIAL WARFARE COMMAND (WARCOM) OPERATIONS SECURITY (OPSEC) PROGRAM:

- THE CONTRACTOR WILL PRACTICE OPSEC AND IMPLEMENT OPSEC COUNTERMEASURES TO PROTECT DOD CRITICAL INFORMATION. ITEMS OF CRITICAL INFORMATION ARE THOSE FACTS, WHICH INDIVIDUALLY, OR IN THE AGGREGATE, REVEAL SENSITIVE DETAILS ABOUT WARCOM OR THE CONTRACTOR’S SECURITY OR OPERATIONS RELATED TO THE SUPPORT OR PERFORMANCE OF THIS SOW, AND THUS REQUIRE A LEVEL OF PROTECTION FROM ADVERSARIAL COLLECTION OR EXPLOITATION NOT NORMALLY AFFORDED TO UNCLASSIFIED INFORMATION.

- CONTRACTOR MUST PROTECT CRITICAL INFORMATION AND OTHER SENSITIVE UNCLASSIFIED INFORMATION AND ACTIVITIES, ESPECIALLY THOSE ACTIVITIES OR INFORMATION WHICH COULD COMPROMISE CLASSIFIED INFORMATION OR OPERATIONS, OR DEGRADE THE PLANNING AND EXECUTION OF MILITARY OPERATIONS PERFORMED OR SUPPORTED BY THE CONTRACTOR IN SUPPORT OF THE MISSION. PROTECTION OF CRITICAL INFORMATION WILL INCLUDE THE ADHERENCE TO AND EXECUTION OF COUNTERMEASURES WHICH THE CONTRACTOR IS NOTIFIED BY OR PROVIDED BY WARCOM, FOR CRITICAL INFORMATION ON OR RELATED TO THE SOW.

- SENSITIVE UNCLASSIFIED INFORMATION IS THAT INFORMATION MARKED FOR OFFICIAL USE ONLY (OR FOUO), PRIVACY ACT OF 1974, COMPANY PROPRIETARY, AND ALSO INFORMATION AS IDENTIFIED BY WARCOM.

- WARCOM HAS IDENTIFIED THE FOLLOWING ITEMS AS CRITICAL INFORMATION THAT MAY BE RELATED TO THIS PWS/SOW:

• KNOWN OR PROBABLE VULNERABILITIES TO ANY U.S. SYSTEM AND THEIR DIRECT SUPPORT SYSTEMS.

• DETAILS OF CAPABILITIES OR LIMITATIONS OF ANY U.S. SYSTEM THAT REVEAL OR COULD REVEAL KNOWN OR PROBABLE VULNERABILITIES OF ANY U.S. SYSTEM AND THEIR DIRECT SUPPORT SYSTEMS.

• DETAILS OF INFORMATION ABOUT MILITARY OPERATIONS, MISSIONS AND EXERCISES.

• DETAILS OF U.S. SYSTEMS SUPPORTING COMBAT OPERATIONS (NUMBERS OF SYSTEMS DEPLOYED, DEPLOYMENT TIMELINES, LOCATIONS, EFFECTIVENESS, UNIQUE CAPABILITIES, ETC.).

• OPERATIONAL CHARACTERISTICS FOR NEW OR MODIFIED WEAPON SYSTEMS (PROBABILITY OF KILL (PK), COUNTERMEASURES, SURVIVABILITY, ETC.).

• REQUIRED PERFORMANCE CHARACTERISTICS OF U.S. SYSTEMS USING LEADING EDGE OR GREATER TECHNOLOGY (NEW, MODIFIED OR EXISTING).

• TELEMETERED OR DATA-LINKED DATA OR INFORMATION FROM WHICH OPERATIONAL CHARACTERISTICS CAN BE INFERRED OR DERIVED.

• TEST OR EVALUATION INFORMATION PERTAINING TO SCHEDULES OF EVENTS DURING WHICH CRITICAL INFORMATION MIGHT BE CAPTURED. (ADVANCE GREATER THAN 3 DAYS).

• DETAILS OF NAVAL SPECIAL WARFARE UNIQUE TEST OR EVALUATION CAPABILITIES (DISCLOSURE OF UNIQUE CAPABILITIES).

• EXISTENCE AND/OR DETAILS OF INTRUSIONS INTO OR ATTACKS AGAINST DOD NETWORKS OR INFORMATION SYSTEMS, INCLUDING, BUT NOT LIMITED TO, TACTICS, TECHNIQUES AND PROCEDURES USED, NETWORK VULNERABILITIES EXPLOITED, AND DATA TARGETED FOR EXPLOITATION.

• NETWORK USER ID’S AND PASSWORDS.

• COUNTER-IED CAPABILITIES AND CHARACTERISTICS, INCLUDING SUCCESS OR FAILURE RATES, DAMAGE ASSESSMENTS, ADVANCEMENTS TO EXISTING OR NEW CAPABILITIES.

• VULNERABILITIES IN COMMAND PROCESSES, DISCLOSURE OF WHICH COULD ALLOW SOMEONE TO CIRCUMVENT SECURITY, FINANCIAL, PERSONNEL SAFETY, OR OPERATIONS PROCEDURES.

• FORCE PROTECTION SPECIFIC CAPABILITIES OR RESPONSE PROTOCOLS (TIMELINES/EQUIPMENT/NUMBERS OF PERSONNEL/TRAINING RECEIVED/ETC.).

• COMMAND LEADERSHIP AND VIP AGENDAS, RESERVATIONS, PLANS/ROUTES ETC.

• DETAILED FACILITY MAPS OR INSTALLATION OVERHEAD PHOTOGRAPHY (PHOTO WITH ANNOTATION OF COMMAND AREAS OR GREATER RESOLUTION THAN COMMERCIALLY AVAILABLE).

• DETAILS OF COOP, NAVAL SPECIAL WARFARE EMERGENCY EVACUATION PROCEDURES, OR EMERGENCY RECALL PROCEDURES.

• GOVERNMENT PERSONNEL INFORMATION THAT WOULD REVEAL FORCE STRUCTURE AND READINESS (SUCH AS RECALL ROSTERS OR DEPLOYMENT LISTS).

• COMPILATIONS OF INFORMATION THAT DIRECTLY DISCLOSE COMMAND CRITICAL INFORMATION.

- THE ABOVE CRITICAL INFORMATION AND ANY THAT THE CONTRACTOR DEVELOPS, REGARDLESS IF IN ELECTRONIC OR HARDCOPY FORM, MUST BE PROTECTED BY A MINIMUM OF THE FOLLOWING COUNTERMEASURES:

• ALL EMAILS CONTAINING CRITICAL INFORMATION MUST BE DOD PUBLIC KEY INFRASTRUCTURE (PKI) SIGNED AND PKI ENCRYPTED WHEN SENT.

• CRITICAL INFORMATION MAY NOT BE SENT VIA UNCLASSIFIED FAX.

• CRITICAL INFORMATION MAY NOT BE DISCUSSED VIA NON-SECURE PHONES.

• CRITICAL INFORMATION MAY NOT BE PROVIDED TO INDIVIDUALS THAT DO NOT HAVE A NEED TO KNOW IT IN ORDER TO COMPLETE THEIR ASSIGNED DUTIES.

• CRITICAL INFORMATION MAY NOT BE DISPOSED OF IN RECYCLE BINS OR TRASH CONTAINERS.

• CRITICAL INFORMATION MAY NOT BE LEFT UNATTENDED IN UNCONTROLLED AREAS.

• CRITICAL INFORMATION IN GENERAL SHOULD BE TREATED WITH THE SAME CARE AS FOUO OR PROPRIETARY INFORMATION.

• CRITICAL INFORMATION MUST BE DESTROYED IN THE SAME MANNER AS FOUO.

• CRITICAL INFORMATION MUST BE DESTROYED AT CONTRACT TERMINATION OR RETURNED TO THE GOVERNMENT AT THE GOVERNMENT’S DISCRETION.

- THE CONTRACTOR SHALL DOCUMENT ITEMS OF CRITICAL INFORMATION THAT ARE APPLICABLE TO CONTRACTOR OPERATIONS INVOLVING INFORMATION ON OR RELATED TO THE PWS/SOW. SUCH DETERMINATIONS OF CRITICAL INFORMATION WILL BE COMPLETED USING THE DOD OPSEC 5 STEP PROCESS AS DESCRIBED IN NATIONAL SECURITY DECISION DIRECTIVE (NSDD) 298, “NATIONAL OPERATIONS SECURITY PROGRAM”.

- OPSEC TRAINING MUST BE INCLUDED AS PART OF THE CONTRACTORS ONGOING SECURITY AWARENESS PROGRAM CONDUCTED IN ACCORDANCE WITH CHAPTER 3, SECTION 1, OF THE NISPOM. NSDD 298, DOD 5205.02, “DOD OPERATIONS SECURITY (OPSEC) PROGRAM”, AND OPNAVINST 3432.1, “OPERATIONS SECURITY” SHOULD BE USED TO ASSIST IN CREATION OR MANAGEMENT OF TRAINING CURRICULUM.

- IF THE CONTRACTOR CANNOT RESOLVE AN ISSUE CONCERNING OPSEC THEY WILL CONTACT THE PROGRAM MANAGER / COR (WHO WILL CONSULT WITH THE WARCOM SECURITY MANAGER).

- ALL ABOVE REQUIREMENTS MUST BE PASSED TO ALL SUB-CONTRACTORS.

NAVAL SPECIAL WARFARE COMMAND INFORMATION TECHNOLOGY (IT) SYSTEMS SECURITY REQUIREMENTS (Adherence to all NSW Component Command IT Requirements is MANDATORY)

THE U.S. GOVERNMENT CONDUCTS TRUSTWORTHINESS INVESTIGATIONS OF PERSONNEL WHO ARE ASSIGNED TO POSITIONS THAT DIRECTLY OR INDIRECTLY AFFECT THE OPERATION OF UNCLASSIFIED IT RESOURCES AND SYSTEMS THAT PROCESS DEPARTMENT OF DEFENSE (DOD) INFORMATION, TO INCLUDE FOR OFFICIAL USE ONLY (FOUO) AND OTHER CONTROLLED UNCLASSIFIED INFORMATION (CUI).

THE UNITED STATES OFFICE OF PERSONNEL MANAGEMENT (OPM), FEDERAL INVESTIGATIONS PROCESSING CENTER (FIPC) PROCESS ALL REQUESTS FOR U.S. GOVERNMENT TRUSTWORTHINESS INVESTIGATIONS. REQUIREMENTS FOR THESE INVESTIGATIONS ARE OUTLINED IN PARAGRAPH C3.6.15 AND APPENDIX 10 OF DOD 5200.2-R, AVAILABLE AT HTTP://WWW.DTIC.MIL/WHS/DIRECTIVES/CORRES/DIR.HTML. PERSONNEL OCCUPYING AN IT POSITION SHALL BE DESIGNATED AS FILLING ONE OF THE IT POSITION CATEGORIES LISTED BELOW. THE CONTRACTOR SHALL INCLUDE ALL OF THESE REQUIREMENTS IN ANY SUBCONTRACTS INVOLVING IT SUPPORT. (NOTE: TERMINOLOGY USED IN DOD 5200.2-R REFERENCES “ADP” VICE “IT”. FOR PURPOSES OF THIS REQUIREMENT, THE TERMS ADP AND IT ARE SYNONYMOUS.)

THE CONTRACTING OFFICER’S REPRESENTATIVE (COR) FOR COMMANDER NAVAL SPECIAL WARFARE COMMAND (WARCOM) OR A COR DESIGNATED WARCOM TECHNICAL REPRESENTATIVE (TR) SHALL DETERMINE IF THEY OR THE CONTRACTOR SHALL ASSIGN THE IT POSITION CATEGORY TO CONTRACTOR PERSONNEL AND INFORM THE CONTRACTOR OF THEIR DETERMINATION. IF IT IS DECIDED THE CONTRACTOR SHALL MAKE THE ASSIGNMENT, THE COR, OR TR MUST CONCUR WITH THE DESIGNATION.

DODD DIRECTIVE 8500.01E, SUBJECT: INFORMATION ASSURANCE (IA), PARAGRAPH 4.8 STATES "ACCESS TO ALL DOD INFORMATION SYSTEMS SHALL BE BASED ON A DEMONSTRATED NEED-TO-KNOW, AND GRANTED IN ACCORDANCE WITH APPLICABLE LAWS AND DOD 5200.2-R FOR BACKGROUND INVESTIGATIONS, SPECIAL ACCESS AND IT POSITION DESIGNATIONS AND REQUIREMENTS. AN APPROPRIATE SECURITY CLEARANCE AND NON-DISCLOSURE AGREEMENT ARE ALSO REQUIRED FOR ACCESS TO CLASSIFIED INFORMATION” IN ACCORDANCE WITH DODM 5200.01 VOL. 1. DOD 5200.2-R AND DODD 5200.2 REQUIRE ALL PERSONS ASSIGNED TO SENSITIVE POSITIONS OR ASSIGNED TO SENSITIVE DUTIES BE U.S. CITIZENS. ALL PERSONS ASSIGNED TO IT-I AND IT-II POSITIONS, AS WELL AS ALL PERSONS WITH ACCESS TO CONTROLLED UNCLASSIFIED INFORMATION (WITHOUT REGARD TO DEGREE OF IT ACCESS) OR PERFORMING OTHER DUTIES THAT ARE CONSIDERED "SENSITIVE" AS DEFINED IN DODD 5200.2 AND DOD 5200.2-R MUST BE U.S. CITIZENS. FURTHERMORE, ACCESS BY NON-U.S. CITIZENS TO UNCLASSIFIED EXPORT CONTROLLED DATA WILL ONLY BE GRANTED TO PERSONS PURSUANT TO THE EXPORT CONTROL LAWS OF THE U.S. THE CATEGORIES OF CONTROLLED UNCLASSIFIED INFORMATION ARE SPECIFIED IN DODM 5200.01 VOL. 4. THESE SAME RESTRICTIONS APPLY TO "REPRESENTATIVES OF A FOREIGN INTEREST" AS DEFINED BY DOD 5220.22-M (NATIONAL INDUSTRIAL SECURITY PROGRAM OPERATING MANUAL, NISPOM). DOD 8570.01-M FURTHER STIPULATES ADDITIONAL TRAINING AND/OR CERTIFICATION THAT IS REQUIRED BY ALL PERSONS ASSIGNED TO INFORMATION ASSURANCE FUNCTIONS.

CRITERIA FOR DESIGNATING POSITIONS:

IT-I POSITION (PRIVILEGED)

• RESPONSIBILITY OR THE DEVELOPMENT AND ADMINISTRATION OF GOVERNMENT COMPUTER SECURITY PROGRAMS, AND INCLUDING DIRECTION AND CONTROL OF RISK ANALYSIS AND/OR THREAT ASSESSMENT.

• SIGNIFICANT INVOLVEMENT IN LIFE-CRITICAL OR MISSION-CRITICAL SYSTEMS.

• RESPONSIBILITY FOR THE PREPARATION OR APPROVAL OF DATA FOR INPUT INTO A SYSTEM, WHICH DOES NOT NECESSARILY INVOLVE PERSONAL ACCESS TO THE SYSTEM, BUT WITH RELATIVELY HIGH RISK FOR EFFECTING GRAVE DAMAGE OR REALIZING SIGNIFICANT PERSONAL GAIN.

• RELATIVELY HIGH RISK ASSIGNMENTS ASSOCIATED WITH OR DIRECTLY INVOLVING THE ACCOUNTING, DISBURSEMENT, OR AUTHORIZATION FOR DISBURSEMENT FROM SYSTEMS OF (1) DOLLAR AMOUNTS OF $10 MILLION PER YEAR OR GREATER, OR (2) LESSER AMOUNTS IF THE ACTIVITIES OF THE INDIVIDUAL ARE NOT SUBJECT TO TECHNICAL REVIEW BY HIGHER AUTHORITY IN THE IT-I CATEGORY TO ENSURE THE INTEGRITY OF THE SYSTEM.

• POSITIONS INVOLVING MAJOR RESPONSIBILITY FOR THE DIRECTION, PLANNING, DESIGN, TESTING, MAINTENANCE, OPERATION, MONITORING, AND/OR MANAGEMENT OF SYSTEMS HARDWARE AND SOFTWARE.

• OTHER POSITIONS AS DESIGNATED BY WARCOM THAT INVOLVE RELATIVELY HIGH RISK FOR EFFECTING GRAVE DAMAGE OR REALIZING SIGNIFICANT PERSONAL GAIN.

PERSONNEL WHOSE DUTIES MEET THE CRITERIA FOR IT-I POSITION DESIGNATION REQUIRE A FAVORABLY ADJUDICATED SINGLE SCOPE BACKGROUND INVESTIGATION (SSBI), SSBI PERIODIC REINVESTIGATION (SSBI-PR) OR T5/T5R INVESTIGATIONS. THE SSBI, SSBI-PR, T5/T5R SHALL BE UPDATED EVERY 5 YEARS BY USING THE ELECTRONIC QUESTIONNAIRE FOR INVESTIGATION PROCESSING (EQIP) WEB BASED PROGRAM (SF86 FORMAT).

IT-II POSITION (LIMITED PRIVILEGED)

RESPONSIBILITY FOR SYSTEMS DESIGN, OPERATION, TESTING, MAINTENANCE, AND/OR MONITORING THAT IS CARRIED OUT UNDER TECHNICAL REVIEW OF HIGHER AUTHORITY IN THE IT-I CATEGORY, INCLUDES BUT IS NOT LIMITED TO:

• ACCESS TO AND/OR PROCESSING OF PROPRIETARY DATA, INFORMATION REQUIRING PROTECTION UNDER THE PRIVACY ACT OF 1974, AND GOVERNMENT-DEVELOPED PRIVILEGED INFORMATION INVOLVING THE AWARD OF CONTRACTS;

• ACCOUNTING, DISBURSEMENT, OR AUTHORIZATION FOR DISBURSEMENT FROM SYSTEMS OF DOLLAR AMOUNTS LESS THAN $10 MILLION PER YEAR. OTHER POSITIONS ARE DESIGNATED BY WARCOM THAT INVOLVE A DEGREE OF ACCESS TO A SYSTEM THAT CREATES A SIGNIFICANT POTENTIAL FOR DAMAGE OR PERSONAL GAIN LESS THAN THAT IN IT-I POSITIONS. PERSONNEL WHOSE DUTIES MEET THE CRITERIA FOR AN IT-II POSITION REQUIRE A FAVORABLY ADJUDICATED NATIONAL AGENCY CHECK WITH LOCAL AGENCY CHECK AND CREDIT CHECK (NACLC) OR T3/T3R INVESTIGATION. THE NACLC OR T3R SHALL BE UPDATED EVERY 10 YEARS BY USING THE ELECTRONIC QUESTIONNAIRE FOR INVESTIGATION PROCESSING (EQIP) WEB BASED PROGRAM (SF86 FORMAT).

IT-III POSITION (NON-PRIVILEGED)

• ALL OTHER POSITIONS INVOLVING FEDERAL IT ACTIVITIES. INCUMBENT IN THIS POSITION HAS NON-PRIVILEGED ACCESS TO ONE OR MORE DOD INFORMATION SYSTEMS, APPLICATION, OR DATABASE TO WHICH THEY ARE AUTHORIZED ACCESS. PERSONNEL WHOSE DUTIES MEET THE CRITERIA FOR AN IT-III POSITION DESIGNATION REQUIRE A FAVORABLY ADJUDICATED NATIONAL AGENCY CHECK WITH INQUIRIES (NACI).

QUALIFIED CLEARED PERSONNEL DO NOT REQUIRE TRUSTWORTHINESS INVESTIGATIONS:

WHEN BACKGROUND INVESTIGATIONS SUPPORTING CLEARANCE ELIGIBILITY HAVE BEEN SUBMITTED AND/OR ADJUDICATED TO SUPPORT ASSIGNMENT TO SENSITIVE NATIONAL SECURITY POSITIONS, A SEPARATE INVESTIGATION TO SUPPORT IT ACCESS WILL NORMALLY NOT BE REQUIRED. A DETERMINATION THAT AN INDIVIDUAL IS NOT ELIGIBLE FOR ASSIGNMENT TO A POSITION OF TRUST WILL ALSO RESULT IN THE REMOVAL OF ELIGIBILITY FOR SECURITY CLEARANCE. LIKEWISE, A DETERMINATION THAT AN INDIVIDUAL IS NOT ELIGIBLE FOR A SECURITY CLEARANCE WILL RESULT IN THE DENIAL OF ELIGIBILITY FOR A POSITION OF TRUST.

PROCEDURES FOR SUBMITTING U.S. GOVERNMENT TRUSTWORTHINESS INVESTIGATIONS:

ONLY THE E-QIP VERSION OF SF-85 AND SF 86 ARE ACCEPTABLE BY OPM-FIPC.

THE FACILITY SECURITY OFFICER (FSO) MUST VERIFY EMPLOYEE'S SECURITY CLEARANCE ELIGIBILITY IN THE JOINT PERSONNEL ADJUDICATION SYSTEM (JPAS) BEFORE CONTACTING THE WARCOM COR TO INITIATE REQUEST FOR TRUSTWORTHINESS INVESTIGATIONS.

AFTER DETERMINING THAT AN INDIVIDUAL REQUIRES PUBLIC TRUST POSITION DETERMINATION, THE FSO WILL IDENTIFY THE REQUIREMENT AND THE INDIVIDUAL TO THE WARCOM COR AND SECURITY OFFICE AND THE SPECIFIC IT LEVEL CATEGORY ASSIGNED FOR REQUESTING THE APPROPRIATE TYPE OF INVESTIGATION. THE FSO WILL ALSO PROVIDE THE FOLLOWING INFORMATION IN ENCRYPTED EMAIL FORMAT TO THE WARCOM SECURITY MANAGER TO INITIATE A REQUEST THRU E-QIP:

FULL SSN OF THE APPLICANT

FULL NAME

DATE OF BIRTH

PLACE OF BIRTH

EMAIL ADDRESS

PHONE NUMBER

THE PERSONNEL SECURITY OFFICE WILL SEND EMAIL NOTIFICATION AND INSTRUCTION TO THE APPLICANT TO COMPLETE AND SUBMIT E-QIP EXPEDITIOUSLY.

THE FSO WILL TAKE AND SUBMIT FINGERPRINTS USING SF-87, FD-258 OR ELECTRONIC SUBMISSION. THE FSO MUST OBTAIN FROM THE WARCOM SECURITY MANAGER THE E-QIP REQUEST NUMBER FOR INCLUSION IN SUBMITTING THE FINGERPRINTS. FOR IMMEDIATE FINGERPRINT RESULT, ELECTRONIC TRANSMISSION OF FINGERPRINTS IS ENCOURAGED. SUBMISSION OF HARD COPY SF-87 OR FD-258 TO:

E-QIP RAPID RESPONSE TEAM

OPM-FIPC

1137 BRANCHTON ROAD

BOYERS, PA 16020

THE WARCOM SECURITY MANAGER WILL NOTIFY THE FSO WHEN THE PUBLIC TRUST INVESTIGATION REQUEST IS RELEASED TO THE PARENT AGENCY, THE OFFICE OF PERSONNEL MANAGEMENT (OPM).

CONTRACTOR FITNESS DETERMINATIONS MADE BY THE DOD CAF ARE MAINTAINED IN THE JOINT PERSONNEL ADJUDICATION SYSTEM (JPAS). FAVORABLE FITNESS DETERMINATIONS WILL SUPPORT PUBLIC TRUST POSITIONS ONLY AND NOT NATIONAL SECURITY ELIGIBILITY. IF NO ISSUES ARE DISCOVERED, ACCORDING TO RESPECTIVE GUIDELINES A “FAVORABLE DETERMINATION” WILL BE POPULATED IN JPAS AND WILL BE RECIPROCAL WITHIN DOD. IF ISSUES ARE DISCOVERED, THE DOD CAF WILL PLACE A “NO DETERMINATION MADE” IN THE JPAS AND FORWARD THE INVESTIGATION TO THE SUBMITTING OFFICE FOR THE COMMANDER’S FINAL DETERMINATION.”

FOR TRUSTWORTHINESS INVESTIGATIONS THAT HAVE BEEN RETURNED TO THE WARCOM SECURITY MANAGER WITH A “NO DETERMINATION MADE” DECISION, YOUR COMPANY WILL BE NOTIFIED IN WRITING. IF AN INDIVIDUAL RECEIVED A NEGATIVE TRUSTWORTHINESS DETERMINATION, THEY WILL BE IMMEDIATELY REMOVED FROM THEIR POSITION OF TRUST, THE CONTRACTOR WILL FOLLOW THE SAME EMPLOYEE TERMINATION PROCESSING ABOVE, AND THEY WILL REPLACE ANY INDIVIDUAL WHO HAS RECEIVED A NEGATIVE TRUSTWORTHINESS DETERMINATION.

VISIT AUTHORIZATION REQUESTS (VARS) FOR QUALIFIED EMPLOYEES:

CONTRACTORS THAT HAVE BEEN AWARDED A CLASSIFIED CONTRACT MUST SUBMIT VISIT REQUESTS USING “ONLY” THE JOINT PERSONNEL ADJUDICATION SYSTEM (JPAS). ALL GOVERNMENT ACTIVITIES HAVE BEEN DIRECTED TO USE JPAS WHEN TRANSMITTING OR RECEIVING VARS. THEREFORE, CONTRACTORS WHO WORK ON CLASSIFIED CONTRACTS ARE REQUIRED TO HAVE ESTABLISHED AN ACCOUNT THROUGH JPAS FOR THEIR FACILITY. THIS DATABASE CONTAINS ALL U.S. CITIZENS WHO HAVE RECEIVED A CLEARANCE OF CONFIDENTIAL, SECRET, AND/OR TOP SECRET. THE VISIT REQUEST SHALL BE SUBMITTED FOR THE LENGTH OF THE CONTRACT BUT NOT LONGER THAN ONE YEAR. WHEN SUBMITTING A VISIT REQUESTS TO WARCOM, USE THE FOLLOWING SECURITY MANAGEMENT OFFICE (SMO) NUMBERS (SCI: N000743; NON-SCI: N000744). THIS INFORMATION IS PROVIDED IN ACCORDANCE WITH GUIDANCE PROVIDED TO CONTRACTORS VIA THE DEFENSE SECURITY SERVICE (DSS) WEBSITE HTTPS://WWW.DSS.MIL/ (DSS GUIDANCE DATED 24 APRIL 2007, SUBJECT: PROCEDURES GOVERNING THE USE OF JPAS BY CLEARED CONTRACTORS).

FOR ALL OTHER NSW COMPONENTS, FOLLOW GUIDANCE OF THE SPECIFIC COMMAND’S SECURITY OFFICE.

EMPLOYMENT TERMINATIONS:

THE CONTRACTOR SHALL:

• IMMEDIATELY NOTIFY THE COR AND WARCOM SECURITY MANAGER OF THE EMPLOYEE’S TERMINATION.

• RETURN ANY BADGE CREDENTIALS, TO INCLUDE COMMON ACCESS CARDS TO COMMANDER NAVAL SPECIAL WARFARE COMMAND, 2000 TRIDENT WAY, BLDG 624, SAN DIEGO, CA 92155-5599 OR NSW COMPONENT COMMAND SECURITY OFFICE.

NAVAL SPECIAL WARFARE COMMAND SPECIFIC ON-SITE SECURITY REQUIREMENTS

(Adherence to all NSW Component Command ONSITE Requirements is MANDATORY)

I. GENERAL.

A. CONTRACTOR PERFORMANCE. IN PERFORMANCE OF THIS CONTRACT THE FOLLOWING SECURITY SERVICES AND PROCEDURES ARE INCORPORATED AS AN ATTACHMENT TO THE DD 254. THE CONTRACTOR WILL CONFORM TO THE REQUIREMENTS OF DOD 5220.22-M, DEPARTMENT OF DEFENSE NATIONAL INDUSTRIAL SECURITY PROGRAM, OPERATING MANUAL (NISPOM), AS REVISED. THE CONTRACTOR WILL FOLLOW ALL EXPORT LAWS AND REGULATIONS IN THE PERFORMANCE OF THIS CONTRACT. WHEN VISITING COMMANDER NAVAL SPECIAL WARFARE COMMAND (WARCOM) THE CONTRACTOR WILL COMPLY WITH THE SECURITY DIRECTIVES USED REGARDING THE PROTECTION OF CLASSIFIED AND CONTROLLED UNCLASSIFIED INFORMATION (CUI), SECNAV M-5510.36 (SERIES), SECNAV M-5510.30 (SERIES), DOD M-5200.01 VOLUMES 1 THROUGH 4, AND COMNAVSPECWARCOMINST 5520.1 (SERIES). BOTH OF THE SECNAV INSTRUCTIONS AND MANUALS ARE AVAILABLE ONLINE AT HTTP://DONI.DAPS.DLA.MIL/SECNAV.ASPX AND THE DOD INSTRUCTIONS CAN BE FOUND AT HTTP://WWW.DTIC.MIL/WHS/DIRECTIVES/CORRES/PUB1.HTML. A COPY OF COMNAVSPECWARCOMINST 5520.1 WILL BE PROVIDED UPON RECEIPT OF A WRITTEN REQUEST FROM THE CONTRACTOR’S FACILITY SECURITY OFFICER (FSO) TO THE WARCOM CONTRACTING OFFICER’S REPRESENTATIVE (COR) LISTED ON THE CONTRACT DD254. IF THE CONTRACTOR ESTABLISHES A CLEARED FACILITY OR DEFENSE SECURITY SERVICE (DSS) APPROVED OFF-SITE LOCATION ABOARD A US GOVERNMENT INSTALLATION, THE SECURITY PROVISIONS OF THE NISPOM WILL BE FOLLOWED WITHIN THIS CLEARED FACILITY.

B. SECURITY SUPERVISION. US GOVERNMENT PERSONNEL SHALL EXERCISE SECURITY SUPERVISION OVER ALL CONTRACTORS VISITING WARCOM AND SHALL PROVIDE SECURITY SUPPORT TO THE CONTRACTOR AS NOTED BELOW.