Personnel Security Clearance and Vetting Requirements.docx

Personnel Security Clearance and Vetting Requirements DoD 5200.2-R, DoD Personnel Security Program, assigns DoD contractor personnel who perform work on IT systems to one of three ADP position categories (ADP-I, ADP-II, ADP-III) that equate to Critical Sensitive, Non-Critical Sensitive, and Non-Critical, respectively. DoDI 8500.2, Information Assurance Implementation renamed the ADP position categories as IT Level I (IT-I) (Privileged), IT-II (Limited Privileged), and IT-III (Non-Privileged), respectively. Contractor personnel must be vetted to the IT level, as determined/specified by DMDC, in accordance with DoD Regulation 5200.1-R. Personnel who are charged with security as a duty should be professionally certified to the IT level-1 category as specified in 8570.01-M.

Contractor personnel may have access to sensitive but unclassified information. In the event the contractor is given access to sensitive Government data, the contractor hereby agrees to protect such data from unauthorized use or disclosure as long as such data remains sensitive. In order to protect this sensitive information, the contractor shall comply with DoD Regulation 5200.1-R, Information Security Program and DoD Regulation 5200.2-R, Personnel Security Program.

All contractor personnel under this contract shall comply DMDC Information Systems Security Group (DISSG) procedures to obtain proper security clearance or vetting prior to beginning work under the contract. Based upon the work to be performed under the contract, the DMDC DISSG will determine the proper vetting or security clearance requirement. Due to varying access requirements, information and data to which each contractor person may have access, personnel security clearance and vetting requirements will vary. However, all contractor personnel must meet, obtain or maintain, at a minimum, the following requirements to perform work under this contract:

1. Execute Non-Disclosure Agreements prior to be provided access to any DMDC application or administrator passwords. The contractor should refer to DoD Regulation 5200.2-R, Personnel Security Program for details;

1. Wear Government-issued access badges (Common Access Card) with coloration that distinguishes contractors from Government employees;

1. *Obtain/Maintain a favorably adjudicated Criminal Background Investigation (CBI) prior to beginning work under this contract; and, submit a completed National Agency Check with Inquiries (NACI) package for processing prior to beginning work under this contract.

2. If at any time, any contractor person is unable to obtain/maintain an adjudicated CBI or NACI, the contractor person shall be immediately removed from work under this contract and the government site;

1. Be a natural born or naturalized citizen of the United States;

3. The contractor may request relief from this requirement in unique or compelling circumstances where only non-US citizens are capable of performing the requirement or providing specific areas of expertise. In such extremely limited and unusual circumstances, the contractor shall submit a request for relief from this requirement to the Contracting Officer. The Director, DMDC is the granting authority;

1. Execute a DD Form 2841, Department of Defense (DoD) Public Key Infrastructure (PKI) Certificate of Acceptance and Acknowledgement of Responsibilities, and adhere to the acknowledged responsibilities there under (required for CAC issuance); and,

1. Attend and complete (annually) DMDC Information Assurance/Security Awareness training and other security related training provided by DMDC to ensure users understand all DMDC and DoD protocols.

Selected tasks under this contract will require contractor personnel to obtain/maintain personnel security clearances at a minimum of SECRET or TOP SECRET level, depending upon the classification of the materials to be accessed. This requirement is identified in the tasks, accordingly.

The contractor shall designate personnel who either possess or will need to obtain the proper security clearances not later than 10 business days after contract award. In the event of personnel turnover after contract award, the contractor shall submit revised personnel designations within five business days of being made aware of pending personnel turn over action or within two business days of actual personnel turn over. Thereafter, the contractor shall compel its designated personnel who will need to obtain the proper security clearances to submit personnel security clearance packages as defined by the DMDC DISSG within ten (10) business days. Contractors are cautioned to keep personnel requiring clearances to only those numbers of personnel required to execute the work.