Att_15_-_CRP_Security_Procedures.pdf

DOS Request for Proposal No. SAQMMA17R0168, Attachment 15

SECURITY PROCEDURES FOR CONTRACTOR

CONSOLIDATION RECEIVING POINT (CRP)

1. All costs associated with the establishment and maintenance of the Consolidation Receiving

Point (CRP) are borne by the Contractor.

2. Facility Security Procedures: The company serving as the Consolidation Receiving Point

(CRP), and/or packaging Controlled Access Area (CAA) materials, must meet one of the following requirements:

a. They must have at least a SECRET facility security clearance in the Defense Industrial

Security Program (DISP).

b. They must meet the criteria established by the Bureau of Diplomatic Security (DS) to be approved as a CRP. These criteria include the following:

(1) The firm must be issued a favorable Facility National Agency Check (FNAC).

The firm will be provided forms (to be completed and returned within 10 working days from date of receipt) by DS/IS/IND to initiate the FNAC.

(2) The Department of State (DOS) must make a favorable determination about any foreign ownership of, control over or influence over the company. The firm will be provided a

DD Form 441 to be completed and returned to DS/IS/IND within 10 working days from date of receipt.

(3) A suitability determination will be made by DOS of the owners, officers, directors and executive personnel of the company. SF-86's shall be provided to the facility by

DS/IS/IND. These forms must be completed and returned to DS/IS/IND within 10 working days from date of receipt. All forms should be sent to: Department of State; DS/IS/IND; Attn.:

Andrea Jones, 13th Floor, SA-20, DS/IS/IND, department of State, 2201 “C” St., NW, Washington, D.C. 20520.

3. Personnel Security Procedures: In order to perform on this portion of this contract, personnel not holding a DISCO Clearance (minimum secret) at the time of contract award will be subject to an investigation by DOS and must be determined eligible for a personnel security clearance at the secret level. Paperwork for initiation of the background investigation (SF-86's and Fingerprint Cards) will be provided to the contractor by DS/IS/IND. This will occur after the Contracting Officer's Representative (COR) has notified DS/IS/IND of the identity of the firm that will be acting as the CRP for the contract.

a. NOTE: IT IS IMPERATIVE THAT THE COR BE NOTIFIED OF THE IDENTITY

OF THE CRP AT THE EARLIEST POSSIBLE TIME SO PROCESSING OF THE CRP FOR

APPROVAL CAN BEGIN IMMEDIATELY.

b. Paperwork provided to the firm must be completed and returned to DS/IS/IND within

10 workdays.

c. Personnel requiring investigations/clearances include the following individuals:

persons "manning" and/or controlling access to the segregated area, persons responsible for responding to any alarms in the segregated area, and persons requiring unescorted access into the area. The number of personnel submitted for investigations/clearances should be held to a minimum. A cleared US citizen employee shall escort any personnel eligible but not holding a personal security clearance at the secret level in the segregated area. Performance on the portion of this contract involving CAA material cannot begin until the contractor personnel have been approved by DS/IS/IND and the physical security procedures have been approved by

DS/PSD/CAT.

4. Physical Security Procedures: The requirements set forth below provide the minimum physical security standards to be met by the CRP. These procedures (or any modifications to these procedures) must be inspected and approved by DS/PSD/CAT.

a. Material shipped to the contractor's location for packaging shall be staged/handled in a segregated area (compartment). The warehouse facility is not required to be a dedicated facility used entirely for this project. If a shared facility is used, the CAA materials shall be securely isolated within the shared warehouse space. This isolation shall be accomplished by providing a floor to ceiling barrier of sound construction to form an opaque six-sided compartment encompassing the CAA materials. If chain link fencing is used to separate the CAA materials, plastic decorative slats shall be woven into the fencing, up to 2.5 meters (8-feet), making climbing difficult, and obscuring the contents of the area from the casual observer. There shall be a 1.8-meter (6 feet) clear zone established between stored materials and the interior of the fencing/cage.

b. The compartment shall have a gate. The gate shall be constructed to be at least as strong as the surrounding enclosure. The fit of the gate shall be such that access between the gate, posts, lintel and floor is not possible when the gate is closed. The gate must be alarmed to enunciate openings and tampering. A cleared U.S. citizen employee shall man this gate whenever access to the compartment is required. At all other times the gate shall be closed securely locked and alarmed. An entry verification device approved by DOS shall control access into the compartment. Persons having the combination to the lock or control of the keys to the lock must be appropriately cleared.

c. All perimeter windows located below 16-feet must be alarmed with an intrusion detection system (IDS) with sensing devices that would not only alarm at entry, but would also alarm to motion and tampering. DS/PSD/CAT shall approve the method to be used for in-stallation of the window alarm systems. The compartment shall be alarmed and monitoring of the IDS shall be accomplished through a commercial monitoring facility (central station). When a commercial central station is used, a UL-rated, Class "A" service is required. An established and reputable firm must accomplish installation and maintenance of the IDS system.

d. All IDS systems shall include the following:

(1) Alarm system shall be UL-approved.

(2) All areas of the compartment between the floor and the ceilings shall be protected. This includes detection of cutting/ climbing attempts. (Compartment is the controlled area constructed of chain link and supports.)

(3) Balanced magnetic switches (emergency exits/ secondary doors shall be on separate zones from the volumetric sensors and main entrance sensors) shall protect perimeter doors. The perimeter doors are all doors that provide access into or out of the warehouse/building, to include overhead loading doors.

e. Each area shall have its own (arm/ disarm) control panel at the area. Intrusion alarms for each area shall be identified at the central annunciation panel.

f. All IDS systems shall be locally tested quarterly (every three months), by the users

(i.e., doors opened and volumetric sensors walk-tested). The contractor will maintain a record of these tests for review by DS/PSD/CAT.

g. All alarm systems shall be capable of operating from AC power. In the event of commercial power failure, battery backup shall be available for emergency power. Batteries shall be maintained at full charge by automatic charging circuits. Emergency power must be capable of operating the system for a minimum of six (6) hours.

h. Signal transmitting lines shall be electronically supervised. All sensors and control units shall be equipped with tamper detection.

i. Response time to an activated alarm shall not exceed fifteen minutes. All alarm activation shall be reported to the Contracting Officer's Representative (COR) the next business day; however, if it is determined that a break-in or compromise has occurred, the COR shall be notified immediately. The employee from the firm responsible for responding to the call from the central station and accessing the compartment must be cleared and must escort any uncleared visitors into the area.

5. Additional Security Procedures: The contractor shall also implement the following security procedures:

a. A security awareness program reminding employees of security awareness with respect to property, safety and visitor control must be established. All individuals granted access to the compartment must be specifically briefed on their responsibilities concerning the handling of sensitive information/ materials.

b. Procedures for a "walk-through" of each protected area by the last person leaving the area must be instituted. Utilization of "sign-in/out" sheets for recording door actions is to be maintained.

c. A visitor control log shall be used to record the name of any uncleared employee/ visitor entering the area, the date and time the uncleared employee/visitor entered the area, the reason for entry, the company/agency the visitor/employee represents, the identity of the cleared

U.S. citizen escort and the time the visitor left the area.

6. Approval and Inspections of Compartment/ Security Procedures: DS/PSD/CAT must approve the physical security aspects of the compartment and all checks/actions mandated by

Paragraphs 1 and 2 of this Attachment must be completed and approved by DS/IS/IND prior to authorization to receive CAA material. DS/PSD/CAT and DS/IS/IND will conduct periodic inspections (announced and/or unannounced) during contract performance to ascertain the facility's compliance with established security procedures. DS/IS/IND and DS/PSD/CAT employees acting in this capacity will not be considered visitors.

7. RESPONSIBILITY: CONTRACTOR IS RESPONSIBLE FOR ALL COSTS

ASSOCIATED WITH REPLACEMENT OF AND/OR DELAYS CAUSED BY A

COMPROMISE OR SUSPECTED COMPROMISE OF THE "TECHNICAL INTEGRITY" OF

MATERIAL BEING PACKAGED CAUSED BY NON-COMPLIANCE WITH THESE

PROCEDURES.