Attachment_4_Security_Addendum_and_DD_254.pdf

DEPARTMENT OF DEFENSE 1. CLEARANCE AND SAFEGUARDING

CONTRACT SECURITY CLASSIFICATION SPECIFICATION a. FACILITY CLEARANCE REQUIRED

(The requirements of the DoD Industrial Security Manual apply to all aspects of this effort)

b. LEVEL OF SAFEGUARDING REQUIRED

2. THIS SPECIFICATION IS FOR: (X and complete as applicable) 3. THIS SPECIFICATION IS: (X and complete as applicable)

a. PRIME CONTRACT NUMBER a. ORIGINAL (Complete date in all cases) Date (YYMMDD)

b. SUBCONTRACT NUMBER

b. REVISED (Supersedes all previous specs)

Revision No.

Date (YYMMDD)

c. SOLICITATION OR OTHER NUMBER Due Date (YYMMDD) c. FINAL (Complete Item 5 in all cases) Date (YYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT? YES NO. If Yes complete the following

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract

5. IS THIS A FINAL DD FORM 254? YES NO. If Yes complete the following

In response to the contractor's request dated , retention of the identified classified material is authorized for the period of .

6. CONTRACTOR (Include Commercial and Government Entity ( CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICES ( Name, Address, and Zip Code)

8. ACTUAL PERFORMANCE

a. LOCATION b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

10. THIS CONTRACT WILL REQUIRE ACCESS TO: YES NO 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (COMSEC)

INFORMATION

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER

CONTRACTOR’S FACILITY OR A GOVERNMENT ACTIVITY

b. RESTRICTED DATA b. RECEIVE CLASSIFIED DOCUMENTS ONLY

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION c. RECEIVE AND GENERATE CLASSIFIED MATERIAL

d. FORMERLY RESTRICTED DATA: d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. INTELLIGENCE INFORMATION: e. PERFORM SERVICES ONLY

(1) Sensitive Compartmented Information (SCI) f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO

RICO, U.S. POSSESSIONS AND TRUST TERRITORIES

(2) Non-SCI g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL

INFORMATION CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER

f. SPECIAL ACCESS INFORMATION h. REQUIRE A COMSEC ACCOUNT

g. NATO INFORMATION i. HAVE A TEMPEST REQUIREMENT

h. FOREIGN GOVERNMENT INFORMATION j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

i. LIMITED DISSEMINATION INFORMATION k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

j. FOR OFFICIAL USE ONLY INFORMATION l. OTHER (Specify).

k. OTHER Specify)

DD Form 254, DEC 1999 Previous editions are obsolete

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the industrial

Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public release shall be submitted for approval prior to release

Direct

Through (Specify):

to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes: to challenge the guidance or classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any document/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract. (If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

Yes No

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. (If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.

Yes No

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL

b. TITLE

c. TELEPHONE (Include Area Code)

d. ADDRESS (Include ZIP Code) 17. REQUIRED DISTRIBUTION

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

e. SIGNATURE

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER

f. OTHERS AS NECESSARY

DD Form 254 Reverse, DEC 1999

SECURITY REQUIREMENTS APPLICABLE FOR ACCESS TO SUBMARINES INSIDE PEARL HARBOR

NAVAL SHIPYARD & INTERMEDIATE MAINTENANCE FACILITY’S CONTROLLED INDUSTRIAL AREAS

(Rev. OCT 2013)

1. The provisions of these security requirements are applicable to Shipyard & IMF areas including the areas listed below:

a. CIA-I (Controlled Industrial Area I) – The large fenced-in area encompassing the waterfront and industrial shops, extending from Building 1274 to include all of Bravo Pier 2.

b. CIA-II (Controlled Industrial Area II) - Dry Dock No. 4 Compound (including Building 1444).

2. Performance of all work under this Contract is restricted to U.S. citizens and U.S. nationals only.

U.S. citizen employees of a foreign owned, controlled, and/or influenced company (including a parent company) for access purposes are considered foreign nationals and special authorization would be required for escorted access to PHNSY & IMF spaces.

3. For issuance of Red or Yellow badges, a “classified contract” is required with a Contract Security Classification Specification (DD 254) that allows access to Restricted Data (for Red) and Naval Nuclear Propulsion Information (NNPI) (for both). Also in accordance with OPNAVINST N9210.3 (Safeguarding of NNPI) the contract or subcontract must incorporate all NNPI handling requirements.

4. Security requirements are applicable to the prime contractor as well as to all subcontractors and suppliers thereunder.

5. The period of proposed work to be performed on the submarine is subject to further approval of the Shipyard & IMF Commander depending on the sensitivity of Shipyard & IMF industrial operations in the affected areas.

6. Three weeks prior to the visit, the contractor, subcontractors, and suppliers shall complete applicable items on Part 1 of the Contractor Visit Request (VR) form (PH-SYD 5512/28) and submit it to the Government Contracting Activity (GCA) or COR for completion of Part 2. The GCA/COR will then forward the VR and DD 254, as applicable, to the Shipyard & IMF Sponsor for completion of Part 3 no later than two weeks prior to the visit. The Shipyard & IMF Sponsor will submit the VR to the Pass and Identification Office (Pass and ID) no later than one week prior to the visit. The VR must specify the areas to be accessed on the submarine. Entry into the CIA and access onboard a submarine for those listed on the VR may be authorized under the following conditions:

a. All contractors, subcontractors, and suppliers must have a DOD Facility Security Clearance and those contractors who need access to the submarine must have DOD security clearances granted by Defense Security Service (DSS) and the contractors’ clearance eligibility, access and affiliation data must be current and accurate in the DOD Joint Personnel Adjudication System. A Yellow or Red badge will be issued depending on the areas needed to be accessed onboard the submarine. Unescorted or escorted access for Yellow badged contractors onboard the submarine will depend on how the submarine is controlling access to the Nuclear Work Areas. For a Yellow (CNIA) badge, the contractor must have at least an Interim Confidential. For a Red (NWA) badge, the contractor must have a final security clearance.

b. Under no circumstances shall personnel sign, transmit or hand-carry their own VR. The VR should be mailed, e-mailed encrypted or password protected, or delivered by the GCA or Shipyard & IMF Sponsor.

c. Ensure that all contractor employees provide a valid (i.e. state or federally issued) photo identification card and proof of U.S. citizenship to the Pass and ID Office prior to being issued a Shipyard & IMF badge, see Attachment (1) for a list of acceptable documents.

d. Ensure any derogatory or questionable information concerning contractor employees possessing a DOD security clearance or a Shipyard & IMF badge is immediately reported to the Security Office (Code 1125) so that access eligibility can be evaluated.

(R

(R

(R

(R

(R

Attachment (d)

e. Ensure that contractor employees attend a 30-minute annual orientation on the safety, security, and radiological protection aspects of industrial operations within the Shipyard & IMF.

NOTE: The briefing, which is in the form of a video presentation, will be given at the Pass and ID Office in groups of 10, prior to the issuance of Shipyard & IMF badges. Special arrangements for larger groups can be scheduled upon request.

f. Ensure that all employees wear and display the Shipyard & IMF badge in the chest area at all times while entering, remaining in, and exiting Shipyard & IMF spaces.

g. Ensure that each badge is used only by the specific individual named on the badge.

h. Maintain strict accountability over identification badges and passes issued by the Pass and ID Office.

Report immediately, to the Pass and ID Office, any badges/passes that are missing or lost and the circumstances. Return badges/passes to the GCA immediately upon termination of any employee, upon expiration, upon completion of the work, or when no longer required. The GCA will ensure that all badges/passes are returned and forwarded to the Shipyard & IMF Pass and ID Office (Code 1125.2).

i. Restrict hours of work to 0630 – 1500 hours Monday through Friday only. When operational needs require the contractor to schedule work before 0630 and/or after 1500 (Monday through Friday) or on weekends and holidays, provide written notification at least two weeks in advance to the GCA who will obtain approval from the respective Shipyard & IMF departments, offices, and shops. Such notifications will include the company name, type of work to be performed, location of work, specific dates, and hours of work. The POC will submit a request in writing to the Security Office (Code 1124) by Wednesday of each week to add the contractor to the “Non-Duty Hours Contractor Access List” that is prepared weekly. Emergency access for contractors not on the non-duty hours list may be authorized entry by the Security Officer or Security Operations Officer upon verification with the POC.

j. Restrict employees/representatives to the work site and control travel directly to and from the work site.

7. The Pass and ID Office is located in Building 207 at Safeguard Street and Russell Avenue.

8. No vehicle will be permitted access to a work site in the CIA without a Shipyard & IMF CIA vehicle pass.

The Shipyard & IMF CIA vehicle passes are issued for limited purposes by the Shipyard & IMF Pass and ID Office. Shipyard & IMF CIA vehicle passes will not be issued proof of vehicle registration to the contractor’s company has been presented to Shipyard & IMF Pass and ID. All vehicles are required to conform to Shipyard & IMF traffic regulations. The speed limit is 15 MPH in the CIA. Outside the CIA, the speed limit is as posted or marked.

9. Only those contractor vehicles meeting all of the following criteria will be allowed to enter the CIA with the Shipyard & IMF CIA vehicle pass:

a. All vehicles must clearly display an authorized company sign or logo on both sides of the vehicles. The logo must be either painted or a magnetic sign. Paper or cardboard signs are not authorized. Lettering of the logo must not be less than 2-1/2 inches in height and 1/4 inch wide.

b. They must be company or commercial vehicles used by the contractor to transport heavy equipment and/or material to the job site. In limited circumstances, contractor vehicles may be allowed entry to conduct on-site inspections at the job site.

NOTE: Contractor vehicles will not be used solely to transport employees to the job site. Privately owned vehicles will not be allowed in the CIA.

10. A limited number of CIA vehicles passes will be issued to each contractor, subcontractor and vendor to facilitate work requirements. Every vehicle entering the CIA will display the pass on the dashboard or visor (facing outward). The pass will be visible at all times while in the CIA. Parking is limited to those areas that are

(A

(R

(D specifically identified on the pass. If additional passes are required, adequate justification must be presented to the Pass and ID Office via the GCA.

11. Vehicles may enter and exit from gates located on Paul Hamilton Avenue or on Chosin Street, Monday through Friday, 0630 to 1500 hours. For access before 0630 and after 1500 hours, weekends, and holidays the contractors must comply with paragraph 6.i. After proper notification, contractors may enter and exit from either gate after hours, weekends, and holidays.

12. Parking is not permitted on any piers on any dry dock/waterfront areas. Contractors shall not park on or block the marked fire lanes at any time. Vehicles may stop on the piers of dry dock/waterfront areas for 15 minutes for loading or unloading. An exception may be made for vehicles which are part of the equipment needed to do the required work and are attached or connected to the pier or ship, i.e., a truck which uses a mounted generator, a vehicle with built-in equipment, etc. A written request for pier parking authorization for these types of vehicles with justification will be sent to the Shipyard & IMF Security Officer (Code 1120) via the GCA at least two weeks prior to the date the parking space is required. The following information is required:

a. The license number of the vehicle(s).

b. The type and size of the vehicle(s) (pickup truck, crane, forklift, etc.)

c. Parking location.

d. Purpose and duration.

13. Parking for privately-owned vehicles is available:

a. In the “N” parking lot on Central Avenue and “D” parking lot on Paul Hamilton Avenue, located between South Avenue and Safeguard Street or;

b. In the “C” parking lot on Lake Erie Street and Central Avenue.

14. All vehicles are subject to search while entering, remaining in, or leaving the Shipyard & IMF and/or JBPHH areas. A Property Pass (OP-7) issued and signed by the GCA must cover all government material being transported out of the CIA by contractors. Material found without a Property Pass will be confiscated and a police offense report issued.

15. Entry into shop/office/ship spaces covered by this contract will be subject to prior approval of the respective Shop Superintendent/Office Head/Ship’s Commanding Officer. Contractors will coordinate action with the GCA for obtaining entry approval.

16. The Shipyard & IMF Security Officer will provide guard services on a reimbursable basis for contractors requiring guard services. The contractor must notify and obtain approval from the Shipyard & IMF Security Office via the GCA at least two weeks prior to the time guard services will be required. Notification in writing shall (include the purpose and number of hours guard services will be required.

17. Contractor personnel will not be permitted to enter Shipyard & IMF buildings, spaces, and areas not covered by this contract except on prior approval of the Shipyard & IMF department/office/shop having jurisdiction of the areas. Contractors will coordinate action with the GCA to obtain such entry approval.

18. Access to unclassified and classified U.S. Navy shipbuilding, conversion, or repair technology and related technical information manuals, documents, drawings, plans, specifications, etc., by the Contractor shall be restricted to an official need-to-know basis. This type of information shall be handled, controlled, and safeguarded to prevent oral, visual, and documentary disclosure to uncleared personnel, the public, to foreign sources, and to all personnel not having an official need-to-know. It shall be returned to the Pearl Harbor Naval Shipyard & IMF upon completion of contracted work, except when the GCA grants specific retention authorization.

(R

(R (R

19. Photography and photographic equipment are prohibited in Pearl Harbor Naval Shipyard & IMF, to include personal cellular phones with camera features. When operationally required, a written request containing specific justification and details will be submitted to the Security Office (Code 1125) via the GCA for consideration. If a Shipyard & IMF photographer is unable to take the photographs, authorization will only to be granted to the contractor if the contractor has a Shipyard & IMF Sponsor and is under continuous escort of a designated Shipyard & IMF employee. The designated escort shall be briefed by Code 1125. The escort will take the film or photographic media in his or her custody. The Sponsoring Shipyard Code/Office will mark and control the photographs as “For Official Use Only” and route the photographs in accordance with local regulations for review and approval of a Distribution Statement (prior to release from Shipyard & IMF).

20. Portable Electronic Devices (PEDs). PEDs include pagers, mobile/cellular telephones (with/without cameras), personal digital assistants/job performance aids, laptop/notebook/handheld computers, digital imagery (still/video) devices, analog/digital sound recorders (e.g. I-PODs), video game devices, USB devices, and devices of similar capability, functionality, or design. Privately-Owned PED devices such as those listed above are prohibited on Shipyard premises. Privately-Owned PEDs without camera devices are prohibited unless approved in writing by the local Information Assurance Authority (IAA) or Information Assurance Manager (IAM). Violations may result in the confiscation and sanitization of the PEDs.

The only approved method of sanitizing most PEDs is physical destruction.

a. All personnel authorized to use PEDs in Shipyard & IMF workspaces, whether privately-owned (includes contractor-owned) or government-owned, are required to comply with NAVSHIPYD&IMFPEARLINST 5239.1(series), Activity Information Systems Security Plan (AISSP)

b. For Privately-Owned PEDs without camera devices approved for use in Shipyard & IMF spaces, the user shall follow:

(1) The PEDs will not handle, process, or store any U.S. Government information unless otherwise authorized by the IAM.

(2) The PEDs will not be connected to any Shipyard & IMF network, U.S. Government-Owned computers, or associated peripherals.

(3) The PEDs will operate in only approved locations. These PEDs are not allowed in spaces processing and/or handling classified information.

(4) Users shall comply with software copyright laws and agreements.

(5) Violations of the above may result in the confiscation of the PED.

(6) The U.S. Government will not be liable for the privately-owned PED hardware/software while on the Shipyard & IMF premises.

c. For U.S. Government-Owned PEDs approved for use in Shipyard & IMF spaces and issued for official government travel, the user shall follow:

(1) Government-Owned PEDs that are synchronized with desktop computers on Shipyard & IMF Local Area Network (LAN) shall follow the security measures in Enclosure (2) of NAVSHIPYD&IMFPEARLINST 5239.1(series).

(2) Use of Government-Owned PED equipment while on travel and performing official government business is allowed.

(3) Government-Owned PEDs shall not be checked as baggage, stored in airport or bus station lockers, or left with desk clerks at motels. PEDs with NNPI data shall not be left unattended in the motel room. If a PED

(R with no NNPI data is left unattended in the motel room, it must be locked in a personally owned container (i.e., luggage, brief case, etc.).

(4) Government-Owned PEDs shall not be taken out of the United States without an authorization letter from the IAM.

(5) Government-Owned PEDs will not be used to store passwords; safe and door combinations;

personal identification numbers (PINs); as well as classified information.

(6) Government-Owned PEDs shall not be used for classified information processing unless specifically authorized in writing by the local IAA.

(7) Where feasible, Government-Owned PEDs shall employ up-to-date signature files that are used to profile and identify viruses, worms, and malicious code. As proven anti-virus clients for PEDs become available, these clients shall be deployed to the greatest possible extent in all PEDs that connect to the Shipyard & IMF LAN.

21. Ensure that yellow plastic material is not used for warning signs, covering material, etc.

22. Be responsible for control and security of all contractor-owned equipment and material at the work site.

Report immediately, all missing/lost/stolen property to the Joint Base Pearl Harbor Hickam Security Detachment (phone 474-6751) as each case occurs.

23. Ensure that no material is stacked within ten (10) feet of the CIA perimeter. Remove from the work site, or secure, ladders or other such equipment, which could be used to climb the CIA perimeter fence. Ensure that no vehicles are parked within ten (10) feet of the CIA perimeter.

24. Provide written notification to the Commander, Pearl Harbor Naval Shipyard & IMF (Code 1120) via the GCA, two (2) weeks prior to actual start of work to allow for notification of the appropriate Shipyard & IMF departments, offices, and shops of the impact resulting from the contract work. Such notifications will include specific details such as work schedules (including actual start date for Shipyard & IMF entry), and impact statements concerning tasks to be done, e.g. specific parking spaces to be vacated, inclusive dates involved, traffic rerouting, changes to traffic and parking patterns, traffic/parking controls to be instituted by the contractor, barricades to be erected by the contractor, etc., along with sketches of the particular areas involved.

25. Two weeks prior to making any penetrations (i.e. tunneling under, cutting through a fence or building, etc.)

in a restricted area (e.g. CIA fence line, CNIA or NWA) the contractor shall contact Code 1120 via the GCA to make arrangements for a security guard or other measures required to meet all security requirements. The cost for the security guard will be charged to the contractor.

26. Any exceptions to these security requirements must be coordinated with the Security Office (Code 1120).