Att_6_JPO_Visitor_Group_Security_Agreement.pdf

F-35 JOINT PROGRAM OFFICE VISITOR

GROUP SECURITY AGREEMENT

1. Contractual agreement: This agreement, promulgated under DOD 5220.22-R, Industrial Security Regulation and DoD 5220.22-M, National Industrial Security Program Operating Manual (NISPOM), Chapter 1, Section 2, Paragraph 1-200 and entered into by the F-35 Joint Program Office (JPO) and the contractor, hereinafter referred to as “visiting party” or “visitor group,” prescribes the specific actions to be taken by the visiting party’s employees and the F-35 JPO to properly protect classified information involved in the performance of the above numbered task order to be performed by the visiting party at the visitor group’s performance locations: 200 12th Street South, 201 12th Street South and 2521 South. Clark Street in Arlington, Virginia (VA). The F-35 JPO Security Director is designated as the Information Security Program Manager (ISPM). The ISPM acts and signs on the behalf of the PEO for industrial security matters. As used in this agreement, the term visitor group, contractor and home office facility (HOF) are synonymous with the above named and undersigned visiting party to this agreement. Furthermore, references to the JPO, Government activity, contracting activity and ISPM refer to representatives of the Government in their appropriate and respective capacity. The responsibilities of the parties are as follows:

a. Visitor Group Security Supervision: Under the terms of this agreement, the visitor group will operate per DoD 5200.1-R, Information Security Program Regulation, applicable portions of the NISPOM and the JPO Security Operations Manual. Compliance with this agreement is in lieu of publication of Standard Practice Procedures. The designated ISPM is responsible for providing security program oversight, implementation, and management of the Government activity security program per DOD 5200.1-R.

(1) The visitor group’s HOF will identify in writing to the ISPM an on-base employee to interface with and serve as the visitor group’s focal point for security related matters. Under the terms of this agreement, the identified employees per this paragraph will provide appropriate security program management assistance to the ISPM.

(2) The visitor group’s HOF will provide the ISPM the name of the HOF’s Facility Security

Officer (FSO) and the ISPM will likewise provide the visitor group’s FSO with the names of the ISPM information security specialist.

(3) All parties will perform duties specified by this agreement in a timely manner.

b. Access to and Accountability of Classified Material: All access to and/or possession of (oral and visual) classified material by visitor group personnel will be under the F-35 JPO supervision. F-35 JPO will maintain accountability, control, and ownership of all said classified information at all times per DOD 5200-1R. The visitor group’s access to classified information will be controlled by JPO and limited to “contract- specific,” need-to-know, information only, unless mission requirements dictate otherwise.

AFOSI/PJ provides oversight for all SAP/SAR classified material and activity. Navy SSO, Naval Air Station PAX River, will provide guidance for sensitive compartmented information (SCI).

c. Storage of Classified Material: All classified material will be secured in the designated security container or facility at the end of the duty day.

d. Transmission of Classified Material:

(1) The visitor group is not authorized to receive or dispatch classified material, except as stipulated by this task order and attachments hereto.

(2) Classified material must be prepared in accordance with DOD 5200.1-R and processed through the JPO. The address for transmission, dispatch, and receipt of collateral classified information will be provided at each site listed within paragraph 1 above, as needed.

(3) Classified material may be hand carried by an appropriately cleared and briefed visitor group courier, provided the employee is so designated and approved in writing by the JSF Security Director of the Joint Strike Fighter Program or designated designee per DOD 5200.1-R.

e. Reproduction of Classified Material: The visitor group may only reproduce classified material in performance of their duties as stipulated in the task order statement of work.

f. Security Education:

(1) The Government activity will be responsible for administering security education training per DOD 5200.1-R. The Contractor is responsible for ensuring Contractor personnel attend this training.

(2) The visitor group’s security focal point shall ensure employees have been briefed and completed the SF 312, Classified Information Nondisclosure Agreement. Disposition of the SF 312 will be in accordance with the NISPOM.

g. Personnel Security Clearances: The visitor group’s HOF will submit visit authorization letters (VAL) to the ISPM, per DOD 5200.1-R and DOD 5220.22-M. JPO serves as sponsor for the visits.

h. Reports: The visitor group must immediately submit, in writing, to the ISPM, reports of any adverse information that are required under DoD 5200.1-R and/or DoD 5220.22-M. The ISPM reports security violations committed by visitor group employees to the appropriate DSS Cognizant Security Office (CSO) and the visitor group’s HOF, when appropriate. The visitor group must keep the ISPM advised of any reports submitted as a result of the Counterintelligence Awareness and Briefing Program.

(1) The visitor group’s HOF will advise the ISPM of any changes in management, location, address or contractual performance requirements.

i. Access Badges and Cards: When required for task order performance, access/entry badges and cards will be issued to visitor group personnel for entry into JPO facilities. Entry credentials will be issued by JPO. Upon termination of work or task order completion, visitor group personnel will return the badges and cards to the local JPO Security Representative.

j. Security Checks: JPO has the option of scheduling contractor visitor group personnel to perform end-of-day checks within their assigned work areas per DOD 5200.1-Rand JSF Security Operation Procedures.

k. Emergency Protection: The visitor group will make every effort to secure all classified material in an approved storage container in the event of a natural disaster, major accident, or civil disturbance per DOD 5200.1-Rand JPO Security Operation Procedures. If the area is evacuated and/or containers abandoned, visitor group personnel will, upon termination of the emergency condition, examine classified holdings to ensure there has been no compromise or loss of any exposed information. In the event of missing material or possible compromise, the visitor group employees will immediately notify the local JPO Security Representative.

l. Protection of Government Resources: The visitor group will comply with JPO Security Operations

Manual and other security and safety bulletins of JSF. File systems containing classified records will be maintained as directed by the JPO Security Operations Manual.

m. Clarification of Security Requirements: The visitor group will address inquiries or questions pertaining to the provisions of DOD 5200.1-Rto the ISPM.

n. Task Order and Associated DD Form 254: The visitor group’s on-base management will maintain on file a copy of the DD Form 254, DOD Contract Security Classification Specification, the Visit Authorization Letter (VAL) and this VGSA. JPO will review the DD Form 254 at least biennially and coordinate revisions, as necessary.

o. Access to Foreign Government Information: Item 10h, DD Forms 254 must indicate “yes” for visitor group personnel to have access to foreign Government information or involvement.

p. Foreign Involvement Foreign Oversight Control or Influence (FOCI): Under the terms of this agreement the Contractor is required to notify the NAVAIR Contracting Office and the Joint Strike Fighter Program Office prior to any foreign involvement, regardless of access requirements or the sensitivity of information to be disclosed (classified or unclassified).

q. Foreign Involvement JSF Official Business: Authorized in accordance with approved Technical

Assistance Agreement (TAA).

2. Security Reviews

a. Staff Assistance Visits (SAVs), and Security Program Reviews (SPRs), may be conducted by the

ISPM.

b. The ISPM conducts SPRs, in the following manner:

(1) The ISPM will notify and schedule all SPRs. SPRs will be conducted per DOD 5200.1- Ras supplemented and this agreement. A copy of the SPR report will be provided to the visitor group. The visitor group is not required to acknowledge receipt, nor respond unless directed to do so in the report.

(2) The visitor group will also be included in the JPO’s own security self- inspection program.

JPO will use the self-inspection criteria to monitor the visitor group’s performance and compliance. Document and maintain inspection report as required by DOD 5200.1-R.

3. Expenditure of Funds for Security: This agreement is not an authorization for commitment of funds.

4. Review of this Agreement: All parties must review this agreement at least annually for accuracy. JPO will keep on file a copy of the latest evaluation, self-inspection or equivalent review. Copies of reports will be made available to the visitor group for their files.

5. Other:

a. Forms: The Government activity furnishes all Government forms and applicable regulations, Security

Bulletins, and/or security plans as required in support of this agreement.

b. Subcontracts: A VGSA will be initiated whenever the Contractor enters into a subcontract arrangement with another contractor for classified performance within a JPO facility. This VGSA must address the subcontractor operation separately. JPO, the visitor group or its HOF, as applicable, and all subcontractors must sign the agreement. A separate DD Form 254 is completed for each subcontractor requiring access to classified information. The Contractor is responsible for preparing and coordinating the DD Form 254 for subcontractors and must provide a copy to the ISPM. The Contractor signs item 15 of the DD Form 254 for subcontractors and makes required distribution.

c. Task Order Termination: Notify the ISPM 30 days prior to task order completion. The ISPM must review

Contractor operations to ensure proper disposition of classified materials per DoD 5200.1- Rand this security agreement.

d. Government Liability: Nothing in this agreement shall be construed to impose any liability on the

U.S. Government for injury or loss to the person or property of the agents, employees, subcontractors, assignees, or other individuals, acting for or on the behalf of the visiting party.

e. Special Access: Portions of this task order identified as Special Access remain under the cognizance of AFOSI PJ. SCI remains under the cognizance of Navy SSO, NAS PAX River, MD.

Contractor Representative

F-35 Joint Program Office Representative

(COR/COTR)

Date:

Information Security Program Manager (ISPM)