Attachment_1_to_8_20141218.pdf

N68335-16-R-0256

ATTACHMENT 1

MONTHLY STATUS REPORT for (month and year)

Contractor

Task Order Number/Title

Contractor's Project Manager Name /

Phone Number

Date of Award

Period of Performance

Task Order Award Amount

Financial

Total billed hours for this period and to date

Total Costs for this period and to date

Travel costs

ODC costs

Funding Remaining

Ceiling Remaining

Program Support

Staffing Losses and Gains and related impacts

Significant concerns

Activities during reporting period by task

Government actions required

Training Status

Trips taken, conferences attended, etc.

Schedule (shows tasks, milestones, activities and deliverables per task; planned and actual start and completion dates for each)

Problems and corrective actions taken

Prepared by: (Signature) ___________________________ (date) ___________

(Name)

Project Manager

ATTACHMENT 2

PROBLEM NOTIFICATION REPORT

TASK ORDER NUMBER: DATE:

1. Nature and sources of problem:

2. COR was notified on: (date) ___________________

3. Is action required by the Government? Yes_____ No_____

4. If YES, describe Government action required and date required:

5. Will problem impact delivery schedule? Yes_____ No_____

6. If YES, identify what deliverables will be affected and extent of delay:

7. Can required delivery be brought back on schedule? Yes_____ No_____

8. Describe corrective action needed to resolve problems:

9. When will corrective action be completed?

10. Are increased costs anticipated? Yes_____ No_____

11. Identify amount of increased costs anticipated, their nature, and define Government responsibility for problems and costs if applicable:

ATTACHMENT 3

Travel Authorization Request Template

EMPLOYEE NAME: DATE PREPARED:

COMPANY: ORIGIN LOCATION:

CONTRACT/TASK ORDER NUMBER: DESTINATION LOCATION:

OWNING IPT: DEPARTURE DATE:

ORGANIZATION TO BE VISITED: RETURN DATE:

PURPOSE: TOTAL COST: $0.00

TYPE OF EXPENSE # OF DAYS DAILY EXPECTED EXPENSES TOTAL EXPENSE

AIRFARE $0.00 $0.00

LODGING $0.00 $0.00

MEALS AND INCIDENTALS $0.00 $0.00

GROUND TRANSPORTATION $0.00 $0.00

CONFERENCE/REGISTRATION FEES $0.00 $0.00

MISCELLANEOUS $0.00 $0.00

POV $0.00 $0.00

$0.00 $0.00

$0.00 $0.00

$0.00 $0.00

EMPLOYEE SIGNATURE: DATE:

TECH IPT LEAD SIGNATURE: DATE:

JSFPO COR SIGNATURE: DATE:

ACCOUNT FOR ALL EXPECTED TRAVEL EXPENSES ON THIS TRAVEL REQUEST FORM. THIS IS YOUR ESTIMATED COST FOR GOVERNMENT APPROVAL.

YOU ARE REQUIRED TO CHECK THE CURRENT PER DIEM RATE PRIOR TO YOUR AUTHORIZED TRAVEL. NOTE: CLICK ON CURRENT PER DIEM RATES - THE WEBSITE FOR THE DOD CENTER FOR TRAVEL

HAS BEEN HYPERLINKED TO THIS FORM FOR THE MOST UP TO DATE PER DIEM RATES AVAILABLE.

DM #: 218632

ADDITIONAL NOTES:

JSF SUPPORT CONTRACTS MANAGEMENT OFFICE TRAVEL AUTHORIZATION NUMBER

N/A

N/A

$0.00

N/A

JSF CONTRACTOR TRAVEL REQUEST FORM

CURRENT PER DIEM RATES

$0.00

$0.00

$0.00

$0.00

$0.00

N/A

DESCRIPTION

PROVIDE JUSTIFICATION THAT ALTERNATIVE MEANS SUCH AS TELECONFERENCING OR VTC (VIDEO TELECONFERENCING) ARE NOT SUFFICIENT TO ACCOMPLISH TRAVEL OBJECTIVES:

ATTACHMENT 4

CONSENT TO PURCHASE REQUEST TEMPLATE

ATTACHMENT 5

EMPLOYEE / CONTRACTOR NON-DISCLOSURE AGREEMENT

CONTRACTOR OR SUBCONTRACTOR EMPLOYEE

NON-DISCLOSURE AGREEMENT

I, ____________________________________________, will maintain the confidentiality of all documents, data, and other information provided, obtained, or accessed from the F-35 Joint Program Office (JPO) in performance of the Naval Air Warfare Center Aircraft Division Lakehurst Task Order Number [Insert Number] ("the Task Order title") in accordance with all applicable laws and regulations.

I will not disclose documents, data, or information (including proprietary information) maintained by the F-35 JPO to any person not authorized under the Task Order or by Naval Air Warfare Center Aircraft Division Lakehurst to have access to such documents, data or information. Neither will I directly or indirectly use, or allow the use of that data for any other purpose other than that directly associated with my officially assigned duties.

I will not remove any documents, data, or information to which the Contractor has been given access without authorization by appropriate F-35 JPO and/or Naval Air Warfare Center Aircraft Division Lakehurst officials.

I will not directly or indirectly reveal or cause to be revealed the nature or content of any Government data, except to authorized personnel.

Further, I am aware that the unauthorized use or disclosure of information may be a violation of civil and criminal law.

This non-disclosure agreement shall be binding with regard to documents, data or information obtained at any time throughout the period of performance of the Task Order. This agreement is binding indefinitely unless released by a duly authorized official of the F-35 JPO and/or Naval Air Warfare Center Aircraft Division Lakehurst.

In accordance with Public Law No. 108-447, Consolidated Act, 2005, the following is applicable:

`These restrictions are consistent with and do not supersede, conflict with, or otherwise alter the employee obligations, rights, or liabilities created by Executive Order No. 12958;

section 7211 of title 5, United States Code (governing disclosures to Congress); section 1034 of title 10, United States Code, as amended by the Military Whistleblower Protection

Act (governing disclosure to Congress by members of the military); section 2302(b)(8) of title 5, United States Code, as amended by the Whistleblower Protection Act (governing disclosures of illegality, waste, fraud, abuse or public health or safety threats); the Intelligence Identities Protection Act of 1982 (50 U.S.C. 421 et seq.) (governing disclosures that could expose confidential Government agents); and the statutes which protect against disclosure that may compromise the national security, including sections 641, 793, 794, 798, and 952 of title 18, United States Code, and section 4(b) of the Subversive Activities Act of 1950 (50 U.S.C. 783(b)). The definitions, requirements, obligations, rights, sanctions, and liabilities created by said Executive order and listed statutes are incorporated into this agreement and are controlling.'

I understand that authorized persons refer only to persons assigned to the Task order who require access to the data or directly in the line of management over the project requiring access to the data.

Signature:____________________________________________________________

Date:________________________________________________________________

Company, Firm, Affiliation:______________________________________________

ATTACHMENT 6

JSF VISITOR GROUP SECURITY AGREEMENT

1. Contractual agreement: This agreement, promulgated under DOD 5220.22-R, Industrial Security Regulation and

DoD 5220.22-M, National Industrial Security Program Operating Manual (NISPOM), Chapter 1, Section 2, Paragraph 1-200 and entered into by the Joint Strike Fighter Program Executive Officer (PEO), David J Venlet, VADM and the contractor, hereinafter referred to as “visiting party” or “visitor group,” prescribes the specific actions to be taken by the visiting party’s employees and the Joint Strike Fighter Program Office to properly protect classified information involved in the performance of the above numbered task order to be performed by the visiting party at the visitor group’s performance locations 200 12th Street South, Suite 600, Arlington, Virginia 22202; 2450

Crystal Drive, Suite 800, Arlington, VA 22202; and 640th AESS Bldg 556, Wright-Patterson AFB, OH 45433. The

JSF Security Director is designated as the Information Security Program Manager (ISPM). The ISPM acts and signs on the behalf of the PEO for industrial security matters. As used in this agreement, the term visitor group, contractor and home office facility (HOF) are synonymous with the above named and undersigned visiting party to this agreement. Furthermore, references to the Joint Strike Fighter Program, Government activity, contracting activity and ISPM refer to representatives of the Government in their appropriate and respective capacity. The responsibilities of the parties are as follows:

a. Visitor Group Security Supervision: Under the terms of this agreement, the visitor group will operate per DoD 5200.1-R, Information Security Program Regulation, applicable portions of the NISPOM and the

JSF Security Operation Procedures. Compliance with this agreement is in lieu of publication of Standard Practice

Procedures. The designated ISPM is responsible for providing security program oversight, implementation, and management of the Government activity security program per DOD 5200.1-R.

(1) The visitor group’s HOF will identify in writing to the ISPM an on-base employee to interface with and serve as the visitor group’s focal point for security related matters. Under the terms of this agreement, the identified employees per this paragraph will provide appropriate security program management assistance to the ISPM.

(2) The visitor group’s HOF will provide the ISPM the name of the HOF’s Facility Security

Officer (FSO) and the ISPM will likewise provide the visitor group’s FSO with the names of the ISPM information security specialist.

(3) All parties will perform duties specified by this agreement in a timely manner.

b. Access to and Accountability of Classified Material: All access to and/or possession of (oral and visual) classified material by visitor group personnel will be under the Joint Strike Fighter Program supervision.

JSF will maintain accountability, control, and ownership of all said classified information at all times per DOD

5200-1R. The visitor group’s access to classified information will be controlled by JSF and limited to “contract-specific,” need-to-know, information only, unless mission requirements dictate otherwise. SAF/AQL, AFOSI/PJ provides oversight for all SAP/SAR classified material and activity. Navy SSO, Naval Air Station PAX River, will provide guidance for sensitive compartmented information (SCI).

c. Storage of Classified Material: All classified material will be returned and secured in the designated

JSF security container or facility at the end of the duty day.

d. Transmission of Classified Material:

(1) The visitor group is not authorized to receive or dispatch classified material, except as stipulated by this task order and attachments hereto.

(2) Classified material must be prepared in accordance with DOD 5200.1-R and processed through the Joint Strike Fighter Document Control Offices. The address for transmission, dispatch, and receipt of collateral classified information will be provided at each site listed within paragraph 1 above, as needed.

(3) Classified material may be hand carried by an appropriately cleared and briefed visitor group courier, provided the employee is so designated and approved in writing by the JSF Security Director of the

Joint Strike Fighter Program or designated designee per DOD 5200.1-R.

e. Reproduction of Classified Material: The visitor group may only reproduce classified material in performance of their duties as stipulated in the task order statement of work.

f. Security Education:

(1) The Government activity will be responsible for administering security education training per DOD 5200.1-R. The Contractor is responsible for ensuring Contractor personnel attend this training.

(2) The visitor group’s security focal point shall ensure employees have been briefed and completed the SF 312, Classified Information Nondisclosure Agreement. Disposition of the SF 312 will be in accordance with the NISPOM.

g. Personnel Security Clearances: The visitor group’s HOF will submit visit authorization letters

(VAL) to the ISPM, per DOD 5200.1-R and DOD 5220.22-M. JSF serves as sponsor for the visits.

h. Reports: The visitor group must immediately submit, in writing, to the ISPM, reports of any adverse information that are required under DoD 5200.1-R and/or DoD 5220.22-M. The ISPM reports security violations committed by visitor group employees to the appropriate DSS Cognizant Security Office (CSO) and the visitor group’s HOF, when appropriate. The visitor group must keep the ISPM advised of any reports submitted as a result of the Counterintelligence Awareness and Briefing Program.

(1) ISPM appoints inquiry official or investigation officers

(2) The visitor group’s HOF will advise the ISPM of any changes in management, location, address or contractual performance requirements.

i. Access Badges and Cards: When required for task order performance, access/entry badges and cards will be issued to visitor group personnel for entry into JSF facilities. Entry credentials will be issued by JSF. Upon termination of work or task order completion, visitor group personnel will return the badges and cards to the local

JSF Security Representative.

j. Security Checks: JSF has the option of scheduling contractor visitor group personnel to perform end-of-day checks within their assigned work areas per DOD 5200.1-Rand JSF Security Operation Procedures.

k. Emergency Protection: The visitor group will make every effort to secure all classified material in an approved storage container in the event of a natural disaster, major accident, or civil disturbance per DOD

5200.1-Rand JSF Security Operation Procedures. If the area is evacuated and/or containers abandoned, visitor group personnel will, upon termination of the emergency condition, examine classified holdings to ensure there has been no compromise or loss of any exposed information. In the event of missing material or possible compromise, the visitor group employees will immediately notify the local JSF Security Representative.

l. Protection of Government Resources: The visitor group will comply with JSF Security Operations

Manual and other security and safety bulletins of JSF. File systems containing classified records will be maintained as directed by the JSF Security Operations Manual.

m. Clarification of Security Requirements: The visitor group will address inquiries or questions pertaining to the provisions of DOD 5200.1-Rto the ISPM.

n. Task Order and Associated DD Form 254: The visitor group’s on-base management will maintain on file a copy of the DD Form 254, DOD Contract Security Classification Specification, the Visit Authorization

Letter (VAL) and this VGSA. JSF will review the DD Form 254 at least biennially and coordinate revisions, as necessary.

o. Access to Foreign Government Information: Item 10h, DD Forms 254 must indicate “yes” for visitor group personnel to have access to foreign Government information or involvement.

p. Foreign Involvement Foreign Oversight Control or Influence (FOCI): Under the terms of this agreement the Contractor is required to notify the NAVAIR Contracting Office and the Joint Strike Fighter Program

Office prior to any foreign involvement, regardless of access requirements or the sensitivity of information to be disclosed (classified or unclassified).

q. Foreign Involvement JSF Official Business: Authorized in accordance with approved Technical

Assistance Agreement (TAA).

2. Security Reviews

a. Staff Assistance Visits (SAVs), and Security Program Reviews (SPRs), may be conducted by the

ISPM.

b. The ISPM conducts SPRs, in the following manner:

(1) The ISPM will notify and schedule all SPRs. SPRs will be conducted per DOD 5200.1-

Ras supplemented and this agreement. A copy of the SPR report will be provided to the visitor group. The visitor group is not required to acknowledge receipt, nor respond unless directed to do so in the report.

(2) The visitor group will also be included in the JSF’s own semiannual security self-inspection program. JSF will use the self-inspection criteria to monitor the visitor group’s performance and compliance. Document and maintain inspection report as required by DOD 5200.1-R.

3. Expenditure of Funds for Security: This agreement is not an authorization for commitment of funds.

4. Review of this Agreement: All parties must review this agreement at least annually for accuracy. JSF will keep on file a copy of the latest evaluation, self-inspection or equivalent review. Copies of reports will be made available to the visitor group for their files.

5. Other:

a. Forms: The Government activity furnishes all Government forms and applicable regulations, Security Bulletins, and/or security plans as required in support of this agreement.

b. Subcontracts: A VGSA will be initiated whenever the Contractor enters into a subcontract arrangement with another contractor for classified performance within a JSF facility. This VGSA must address the subcontractor operation separately. JSF, the visitor group or its HOF, as applicable, and all subcontractors must sign the agreement. A separate DD Form 254 is completed for each subcontractor requiring access to classified information. The Contractor is responsible for preparing and coordinating the DD Form 254 for subcontractors and must provide a copy to the ISPM. The Contractor signs item 15 of the DD Form 254 for subcontractors and makes required distribution.

c. Task Order Termination: Notify the ISPM 30 days prior to task order completion. The ISPM must review Contractor operations to ensure proper disposition of classified materials per DoD 5200.1-Rand this security agreement.

d. Government Liability: Nothing in this agreement shall be construed to impose any liability on the

U.S. Government for injury or loss to the person or property of the agents, employees, subcontractors, assignees, or other individuals, acting for or on the behalf of the visiting party.

e. Special Access: Portions of this task order identified as Special Access remain under the cognizance of SAF/AQL. SCI remains under the cognizance of Navy SSO, NAS PAX River, MD.

_______________________________________ Date: ____________

Contractor Representative

_______________________________________ Date: _____________

Joint Strike Fighter Program Representative

(COR/COTR)

_______________________________________ Date: _____________

Information Security Program Manager (ISPM)

ATTACHMENT 7

ACRONYMS

ACAT Acquisition Category

ACRN Accounting Classification Reference Number

AF Air Force

AFB Air Force Base

ALARACT All Army Activities

ANSI American National Standard Institutes

AS Air System

BFM Business Financial Management

CA California

CAC Common Access Card

CAGE Commercial and Government Entity

CCaRS Comprehensive Cost and Requirement System

CDRL Contract Data Requirements List

CFSR Contract Funds Status Reports

CLIN Contract Line Item Number

CO Contracting Officer

COB Close of Business

CONUS Continental United States

COR Contracting Officer Representative

CPR Contractor Performance Review

CSDR Contractor Software Data Reports

DC District of Columbia

DCARC Defense Cost and Resource Center

DCMA Defense Contract Management Agency

DDTC Director, Defense Trade Controls

DEERS Defense Enrollment Eligibility Reporting System

DOA Date of Award

DoD Department of Defense

DoDD DoD Directive

DoDI DoD Instruction

DFARS Defense Federal Acquisition Regulations

DMO Distributed Mission Operations

DoS Department of State

DSSR Department of State Standardized Regulations

EAC Estimate at Completion

EIA Electronic Industries Alliance

EVM Earned Value Management

FAR Federal Acquisition Regulations

FIPS PUB Federal Information Processing Standards Publication

FL Florida

FMS Foreign Military Sales

FOD Follow-on Development

G&A General and Administrative

GFI Government Furnished Information

GFP Government Furnished Property

HSPD-12 Homeland Security Presidential Directives-12

IAW In Accordance With

IBR Integrated Baseline Reviews

ID Identification

IMS Integrated Master Schedules

IPT Integrated Product Team

ISPM Information Security Program Manager

IT Information Technology

JSF Joint Strike Fighter

JTR Joint Travel Regulations

JVE JSF Virtual Enterprise

FMS Foreign Military Sales

F-35 JPO F-35 Program Office

LOE level of effort

LRIP Low-Rate Initial Production

MAJCOM Major Command

MD Maryland

MDA Milestone Decision Authority

MDAP Major Defense Acquisition Program

MS Microsoft

MSR Monthly Status Report

NAC National Agency Check

NAWC/AD Naval Air Warfare Center/Aircraft Division

NAWC/WD Naval Air Warfare Center/Weapons Division

NCR National Capital Region

NDA Non-Disclosure Agreement

NISPOM National Industrial Security Program operating Manual

NLT No Later Than

NTE Not-To-Exceed

OCI Organizational Conflict of Interest

OCONUS Outside the Continental United States

ODC Other Direct Costs

OH Ohio

OMB Office of Management and Budget

OSCAM Operating and Support Cost Analysis Model

O&S Operations and Sustainment

PAX Patuxent River

PCO Procuring Contracting Officer

PM Program Manager

PMP Project Management Plan

PNR Problem Notification Report

PO Program Office

POC Point of Contact

PoP Period of Performance

POV Privately Owned Vehicle

PPBE Planning, Programming, Budgeting, and Execution

SAP Special Access Program

SAR Special Access Request

SCI Sensitive Compartmented Information

SDD System Development and Demonstration

SecDef Secretary of Defense

SMART System Metrics and Reporting Tool

SOW Statement of Work

SRA Schedule Risk Assessments

TO Task Order

TOA Task Order Award

TPOC Technical Point of Contact

TS Top Secret

UID Unique Identification

ULO/NULOS Unliquidated Obligations/Negative Unliquidated Obligations

U.S. United States

USAF United States Air Force

USG United States Government

USMC United States Marine Corps

USN United States Navy

VA Virginia

ATTACHMENT 8

SECURITY REGULATION REFERENCE DOCUMENTS

The contractor shall comply with the following DoD Air Force and Navy Security Regulations is required. This list is not all-inclusive, additional regulations may be identified as the program matures:

Chairman of the Joint Chiefs of Staff Instruction (CJCSI) 6210.02B, Defense Information

System Network (DISN): Policy, Responsibilities, and Processes

DoD 5200.1-R, Information Security Program

DoD 5200.2-R, Personnel Security Program

DoD 5220.22-M, National Industrial Security Program Operating Manual (NISPOM)

DoD 5205.02-M, DoD Operations Security (OPSEC) Program Manual

DoD 8570.01-M, Information Assurance Workforce Improvement Program

DoD 8510.1-M, Department of Defense Information Technology Security and

Accreditation Process (DITSCAP) Application Manual

DoD Directive (DoDD) 5230.11, Disclosure of Classified Military Information to

Foreign Governments and International Organizations

DoD Directive (DoDD) 2000.16, DoD Anti-Terrorism Standards

DoD Directive (DoDD) 8500.1, Information Assurance

DoD Instruction (DoDI) 5200.01, DoD Information Security Program and Protection of

Sensitive Compartment Information

DoD Instruction (DoDI) 5200.40 DoD Information Technology Security Certification and Accreditation Process (DITSCAP)

DoD Instruction (DoDI) 5000.2, Operation of the Defense Acquisition System

DoD Instruction (DoDI) 8500.2, Information Assurance Implementation

DoD Instruction (DoDI) 5200.39, Critical Program Information Protection with the DoD

DoD Instruction (DoDI) 5205, Management, Administration, and Oversight of DoD

Special Access Programs

Executive Order (EO) 13526, Access to Classified Information

Joint Air Force-Army-Navy JAFAN Manual, Special Access Program Security Manual, JAFAN 6/0

Joint Air Force-Army-Navy JAFAN Manual, Protecting Special Access Program

Information within Information Systems (JAFAN 6/3)

Joint Air Force-Army-Navy JAFAN Manual, Special Access Program Tier Review

Process, JAFAN 6/4

Joint Air Force-Army-Navy JAFAN Manual, Physical Security Standards for Special

Access Program Facilities, JAFAN 6/9

Security Telecommunications and Information Systems Security Instructions (NSTISSI)

No. 7003, Protective Distribution Systems (PDS)

National Security Telecommunications and Information Systems Security Policy

(NSTISSP) No. 11

National Security Telecommunications and Information Systems Security Advisory

Memorandum (NSTISSAM) TEMPEST/2-95, RED/BLACK Installation Guidance

National Security Telecommunications and Information Systems Security Advisory

Memorandum (NSTISSAM) TEMPEST/1-92, Compromising Emanations

National Security Telecommunications and Information Systems Security Advisory

Memorandum (NSTISSAM) TEMPEST/1-00, DRAFT, NONSTOP Evaluation

Techniques

Air Force Instruction 31-101, Air Force Installation Security Program

Force Instruction 31-401, Information Security Program Management

Air Force Instruction 31-703, Product Security

Air Force Instruction 37-131, Freedom of Information Act Program

NATO Security Directive AC/35-D/2000, Directive on Personnel Security

Security Directive AC/35-D/2001, Directive on Physical Security

NATO Security Directive AC/35-D/2002, Directive on Security of Information

NATO Security Directive AC/35-D/2003, Directive on Industrial Security

NATO Security Directive AC/35-D/2004, Primary Directive on INFOSEC

NATO Security Directive AC/35-D/2005, INFOSEC Management Directive for

Communication and Information Systems (CIS)

Directorate of Defense Trade Controls, International Traffic in Arms Regulation 2010

Secretary of the Navy Instruction (SECNAVINST) 5510.30A, Department of Navy

Personnel Security Program

SECNAVINST 5510.36, Department of Navy Information Security Program

Director of Central Intelligence Agency Directive 6/4, Personnel Security Standards and

Procedures Governing Eligibility for Access to Sensitive Compartmented Information

Director of Central Intelligence Agency Directive 6/9, Physical Security of Sensitive

Compartment Information Facilities