ATTACHMENT_VI_-_SECURITY_REQUIREMENT_LETTER_-_NNPICO.docx

Date: XX December 2018

From: Name of CEO or President

Phone:

Vendor Cage Code:

DUNS:

TIN:

Greg Finke Contracting Officer Submarine and Availability Contract Support Norfolk Naval Shipyard Bldg. 65, 2nd Floor Portsmouth, VA 23709-5000 Phone: 757-396-7584

RE: Solicitation N42158-19-Q-0001_Sol

1. The undersigned hereby agrees that when provided documents (specifications, drawings, etc.) that are marked NOFORN (not releasable to foreign nationals) containing sensitive information, referred to as Unclassified Naval Nuclear Propulsion Information (U-NNPI), must be controlled pursuant to Federal Law. The information contained therein and generated as part of the inquiry shall be used only for the purpose stated in the solicitation/contract and shall in no case be transmitted outside the company, (unless such transmittals comply with the detailed guidance of the contract), or to any foreign national within the company. While in use, the documents shall be protected from unauthorized observation and shall be kept secure so as to preclude access by anyone not having a legitimate need to view them. The documents shall NOT be copied unless done in conformance with the detailed guidance of the contract. All the documents shall be promptly returned in their entirety, unless authorized for proper disposal or retention, following completion of the solicitation/contract.

2. Specific Requirements for Protecting U-NNPI

a. Only U.S. Citizens who have a NTK (need to know) required providing the solicitation and/or executing the contract shall be allowed access to U-NNPI in NOFORN labeled documents.

b. When not in direct control of an authorized individual, U-NNPI must be secured in a locked container, (e.g. file cabinet, desk, safe). Access to the container must be such that only authorized persons can access it, and compromise of the container would be obvious at sight.

Containers should have no labels that indicate the contents. If removed from the site, NOFORN labeled documents must remain in the personal possession of the individual. At NO TIME should NOFORN labeled documents be left unsecured (e.g. in a home or automobile, or unattended in a motel room or sent with baggage).

c. NOFORN documents will have the word NOFORN at the top and bottom of each page. The cover sheet should have the warning statement shown below. Documents originated in the course of work that reproduce, expand or modify marked information shall be marked and controlled in the same way as the original. Media such as video tapes, disks, etc., must be marked and controlled similar to the markings on the original information.

NOFORN: This document is subject to special export controls, and each transmittal to foreign governments or foreign nationals may be made only with the approval of Naval Sea Systems Command.

d. U-NNPI may not be processed on networked computers with outside access unless approved by the Chief of Naval Operations; CNO (N00N). If desired, the company may submit a proposal for processing U-NNPI on company computer systems. Personally owned computing systems, such as personal computers, laptops, personal digital assistants, and other portable electronic devices are not authorized for processing U-NNPI. Exceptions require the specific approval of the cognizant DAA (Designated accrediting authority) and CNO (N00N). DO NOT email U-NNPI documents back to the Contracting Officer.

e. NOFORN documents may be faxed within the continental United States and Hawaii provided there is an authorized individual waiting to receive the document and properly control it. NOFORN documents may not be faxed to facilities outside the continental United States, including military installations, unless encrypted by means approved by CNO (N00N)

f. NOFORN documents may be sent within the continental United States and Hawaii via first class mail in a single opaque envelope that has no markings indicating the nature of the contents.

g. Documents containing U-NNPI sensitive information shall be disposed of by burning, by shredding, or cutting to preclude reconstruction.

h. Report any attempts to elicit U-NNPI by unauthorized persons to the Contracting Officer who will immediately notify appropriate security personal.

i. Report any compromises of U-NNPI to the Contracting Officer who will immediately notify appropriate security personnel. This includes intentional or unintentional public release via such methods as theft, improper disposal (e.g., material not shredded, disks lost, placement on Web site, transmission via email, or violation of the information system containing U-NNPI).

SENIOR COMPANY OFFICIAL SIGNATURE & TITLE Date

Solicitation No. N42158-19-Q-0001_Sol