DSOAE3001_cont_PAGE_4_-_5_(2)_(2)_v1.pdf

ddform254cont1 ddform254cont2

The Contractor will be required to prepare an AIS/SSP for their AIS operations and the system will require approval of the CSO/CSA in accordance with DoD 5220.22M.

Reference Block 11d: The Contractor will properly safeguard and will provide adequate and appropriate storage space for all Classified Hardware. The number of GSA approved containers will be determined by the quantity of classified documents and storage requirements. Restricted and or Closed Areas will be required (approximately 15,000 square feet).

Reference Block 11f: Contractors when performing or traveling outside the United States under this contract will:

a) All personnel will obtain an AOR specific foreign travel brief within 90 days of travel and will provide proof of training to the COR/TM.

b) All personnel will receive the Antiterrorism Level I Awareness training within one year prior to travel.

Reference ITEM 11g:

a. Technical information on file at the Defense Technical Information Center will be made available to the contractor if the contractor requires such information.

b. The contractor must prepare and forward a DD Form 1540 to the COR/TM for authorization BEFORE the services may be requested.

c. Contractors requiring to courier classified information or equipment, up to Top Secret shall receive a Government Issued Collateral Courier card from the Government Security office prior to couriering classified information or material in support of official duties. The contractor will only be issued a collateral courier card to hand carry classified information or equipment if there are no other means of safely and securely transporting or sending the classified information or equipment.

The contractors must also have a requirement to courier any classified information or equipment on a weekly basis. A courier letter can be issued by the Government Security Manager if there is a requirement to courier periodically. All contractors will follow the DoD Manual 5200.01, Information Security and the collateral courier card standard operating procedures (SOP) that is issued by the DISA Security Office. A collateral courier card or letter will only be issued up to the clearance level of the individual contractor.

Reference ITEM 11h:

Contractor is authorized to receive Government furnished cryptographic equipment. Access to classified COMSEC information requires a final U.S. Government clearance at the appropriate level. Further disclosure of COMSEC information by a contractor, to include subcontracting, requires prior approval of the contracting activity.

Reference ITEM 11i:

The contractor is required to impose TEMPEST countermeasures on information-processing equipment after vulnerability assessments are completed. The contractor shall not process classified information by electrical means prior to a DISA TEMPEST evaluation of the equipment/systems and facility, and written DISA certification that the facility meets DISA TEMPEST criteria. In order to expedite the DISA TEMPEST evaluation, the contractor shall provide a list of equipment, to include model number, which is associated with the processing of classified information. In addition, the estimated percentage of classified information processed, cable/conduit runs, a floor plan layout that depicts placement of equipment in relation to other rooms, equipment distances from walls or uncontrolled areas, and physical security being afforded the equipment both during processing and after hours. The above TEMPEST evaluation and DISA approval will not be required if previous DISA approval can be furnished and is no more than 2 years old. The existing approval must be for processing information at the same or higher level and at the same facility and items of equipment.

Reference ITEM 11j:

The contractor must adhere to and enforce US Government polices and procedures concerning Operation Security (OPSEC) requirements. OPSEC requirements will not be imposed until the DoD User Agency has finalized an OPSEC plan. Final review of the DoD User Agency OPSEC plan must be sent to, and approved by, the DISA OPSEC office.

Reference ITEM 11k:

Contractors requiring to courier classified information or equipment, up to Top Secret shall receive a Government Issued Collateral Courier card from the Government Security office prior to couriering classified information or material in support of official duties. The contractor will only be issued a collateral courier card to hand carry classified information or equipment if there are no other means of safely and securely transporting or sending the classified information or equipment. The contractors must also have a requirement to courier any classified information or equipment on a weekly basis. A courier letter can be issued by the Government Security Manager if there is a requirement to courier periodically. All contractors will follow the DoD Manual 5200.01, Information Security and the collateral courier card standard operating procedures (SOP) that is issued by the DISA Security Office. A collateral courier card or letter will only be issued up to the clearance level of the individual contractor.

Reference ITEM 11l:

IT-I access required. NOTE: IT-I requires at least a Single Scope Background Investigation or Public Trust Special Background Investigation.

IT-II access required. NOTE: IT-II requires at least a National Agency Check with Local Agency and Credit, National Agency Check with Inquiries, Access National Agency Check with Inquiries, or National Agency Check investigation.

N. Reference Block 11j: The contractor will comply with OPSEC requirements contained in the contract or attached under separate cover.

O. The prime contractor and the prime contractor’s subcontractors under this contract are authorized to courier information classified at the SECRET level or below between their respective locations in furtherance of efforts under this contract without passing the information through the Joint Spectrum Center. All individuals couriering classified must be briefed in accordance with the National Industrial Security Program Operating Manual (NISPOM) Section 5-410 Use of Couriers, Handcarriers, and Escorts with regard to their responsibilities as a courier and approved by their respective FSO prior to acting as a courier.

ITEM 14, ADDITIONAL SECURITY REQUIREMENTS (CONTINUED)

A. Intelligence Information (10.e.):

(1) SCI (10.e.(1)): Instruction for access to SCI are as follows:

(a) The User Agency SSR is:

Marty E. Robinson DSO/OS2 2004 Turbot Landing Annapolis, MD 21402-5064 DSN 281-2329 or Comm. (410) 293-2329

(b) The User Agency Alternate SSR is: John W. Gagnon JSC/OS43 2004 Turbot Landing Annapolis, MD 21402-5064 DSN 281-2609 or Comm. (410) 293-2609

(c) The CM for SCI is: Steven J. Averett, Captain USN Commander JSC/OS3 2004 Turbot Landing Annapolis, MD 21402-5064 DSN 281-2456 or Comm. (410) 293-2456 13_cont2: (d) SCI data furnished to or generated by the contractor will require special security handling and controls beyond those in DoD 5220.22-M. These supplemental instructions will be furnished and/or made available to the contractor by the JSC SSR or CM, and CSSOs will comply with all requirements outlined in the SSR’s handbook. The CSSO will complete an annual self-inspection of all SCI related contract activity using the self-inspection checklist located in DoDM 5105.21, Volume 1. SCI security officials shall conduct self-inspections of their SCIFs annually and will use the self-inspection checklist provided on the DIA/DAC Joint Worldwide Intelligence Communication System (JWICS) webpage at http://www.dia.ic.gov/homepage/da/security/field/scifforms.html. The purpose of the self-inspection is to ensure compliance with DIA policies and procedures. The self- inspection should take place in January of each year, and a report of the self-inspection and all discrepancies noted will be forwarded to the JSC SSR before the end of that month.

(e) Seventy (4) contractor SCI billets are required to perform this contract. The contract expiration date is 20 September 2017 for the Basic Period. There are four one-year options.

(f) Names of contractor personnel requiring access to SCI shall be submitted to the JSC Security Manager for approval. Upon written approval by the JSC Security Manager, forms requesting SSBI shall be prepared in accordance with DoD 5220.22-M and submitted to the JSC SSR.

(g) The contractor shall establish and maintain an access list of those employees working on this contract. A copy of this list shall be furnished to the JSC Security Manager.

(h) The contractor shall advise the JSC SSR and the JSC Security Manager immediately upon reassignment of SCI cleared personnel to other duties not associated with this contract.

(i) Release of Information: SCI shall not be released to contractor employees without specific release approval of the JSC SSR or the originator of the material when applicable. SCI with restrictive caveats (ORCON, PROPIN, etc.) will be released to contractors only when originator approval has been obtained. This approval shall be obtained through the JSC SSR based on approval and certification of “need-to- know” by the CM. SCI documentation or other material concerning this contract, shall not be discussed with or released to any individual, subcontractor, agency (including Federal government agencies and employees) and contractor employees not working on the contract without prior written approval from the CM.

(j) Any SCI data released to or generated by the contractor in support of this contract remains the property of the DoD Department, agency, or command that released it. Upon completion/ cancellation of the contract, the contractor must return all such materials to the JSC SSR. A copy of this record shall be sent to the SCI CM quarterly and JSC SSR annually for their review. This applies to all data and materials, including working papers and notes. SCI inventories will be conducted in accordance with DoDM 5105.21, Volume 1.

(k) The contractor shall not reproduce any SCI related to this contract without the written permission from the CM. When such permission has been granted, the contractor shall control and account for such reproductions in the same manner as pertains to originals. Reproduction of hard copy SCI documents in entirety is not permitted.

(l) A government SCIF has been established. The SCIF has been built in accordance with DCID 6/9 standards and an SCI accreditation message is on file within the SCIF. Routine SCIF administrative operations are conducted by the contractor and monitored by the JSC SSR. SCI material associated with this contract shall be separately stored and maintained only in such properly accredited facilities and in approved safes at the contractor location. The supporting SSO is DISA/MPS6.

(m) This contract requires the use of DCS. The JSC SSR will validate DCS Forms 10.

(n) This contract requires electronic processing of SCI. The security provisions of DCID 6/3, DIAM 50-4, and Joint DODIIS/Cryptologic SCI Information System Security Standards apply and are part of this contract. No electronic processing will take place in the SCIF until Automatic Data Processing (ADP) accreditation messages from the JSC SSR are on file within the facility. The contractor’s equipment and ADP are currently accredited for SCI operations.

(o) The CSSO must coordinate with the CM prior to subcontracting any portion of the SCI efforts involved in the contract. A separate DD Form 254 for the subcontractor shall be processed and approved and separate subcontractor SCI billets obtained before any work can be performed. Subcontractors cannot use the prime contractor’s SCI billets.

(p) The contractor will not use references to SCI accesses, even by unclassified acronyms, in advertising, promotional efforts, or recruitment of employees.

(q) The following activity is designated as the User Agency SSO for DCI requirement in accordance with DoDM 5105.21, Volume 1:

MPS6 Security Operations Branch P.O. Box 549 Fort George G. Meade, 20755-0549 DSN (312) 226-1406 or (301) 225-

(2) Non-SCI Intelligence Requirements (10.e.(2)):

(a) Intelligence, to include non-SCI intelligence materials, refers to the following:

1 Foreign intelligence and counterintelligence as defined in Executive Order #12333.

2 Intelligence describing U.S. foreign intelligence and counterintelligence activities, sources, and equipment used in acquiring, processing, or exploiting such intelligence; as well as the exploiting of military hardware, photography, or records resulting from such efforts.

3 Intelligence produced by authorized activities within the national intelligence community and identifiable as such by the various control markings listed in DCID 1/7.

(b) In addition to the requirements and controls for classified materials stated in DoD 5220.22-M, the DCI has prescribed separate requirements and controls for intelligence materials in the possession of contractors; namely they must:

1 Maintain accountability for all intelligence information – including that marked CONFIDENTIAL

– released into their custody.

2 Obtain the releasing Agency’s written permission before reproducing intelligence information. For purposes of this contract, the JSC SSR is the releasing agency unless otherwise noted in ORCON materials or those controlled by special directive (e.g. SAR). The contractor must control each copy reproduced in the same manner as the original.

3 Obtain the releasing agency’s approval before destroying intelligence information.

4 Restrict access to only those individuals who possess the required security clearance, have accomplished the required INTEL indoctrination briefing, and are actually providing services under the contract.

5 Further dissemination to other contractors, subcontractors, other government agencies, and private individuals or organizations is prohibited unless authorized in writing by the releasing agency.

6 Obtain written permission from the originator before releasing intelligence materials to foreign nationals or immigrant aliens. This applies even if the foreign nationals or immigrant aliens are consultants, U.S. contractors, or employees of the contractor; and it applies regardless of the level of their security clearance.

7 Ensure that each employee who has access to intelligence materials is fully aware of the material’s special handling requirements and maintains retrievable record of individuals who have had access to the materials in their custody.

(c) When implementing the foregoing DCI requirements, the following applies:

1 Requests for non–SCI intelligence must be submitted to the JSC SSR for approval. Each request must contain the following information or certification of need-to-know.

a Name and address of subcontractor requiring intelligence.