Security Statements.pdf

Security Requirements for Work Within Norfolk Naval Shipyard

(NNSY)

The security requirements listed below are to be utilized either in full, or as needed, in the generation of NNSY, N42158 contracts. Each of the sections listed below contains relevant requirements based on the security needs of the contract.

The table below indicates which security requirement section(s) are applicable to this contract.

CONTRACT SECURITY REQUIREMENTS

THE BELOW LISTED SECTIONS APPLY TO THIS CONTRACT

SECTION

ONE

SECTION

TWO

SECTION

THREE

SECTION

FOUR

SECTION

FIVE

SECTION

SIX

SECTION

SEVEN

SECTION

EIGHT

SECTION

TEN

SECURITY REQUIREMENTS:

SECTION 1

Defense Biometric Identification System and NAVSEA Badging

(REQUIRED FOR ALL CONTRACTS)

All contractors, with the exception of contractors with Common Access Cards (CACs), will be required to obtain a DBIDS card to gain access to NNSY.

Procedure for receiving a DBIDS card:

a. Contractor will complete the SECNAV 5512 form(s) and forward them to their NNSY Sponsor/Contracting Officer’s Representative

(COR).

b. The sponsor/COR will complete the CVS spreadsheet utilizing the information on the completed SECNAV 5512 forms and forward all documents to Commander Navy Region Mid-Atlantic (CNRMA) for vetting. The sponsor/COR will determine and indicate the required color of the NAVSEA badge required for the execution of the contract requirements. If no color badge is specified, the worker will receive Defense Biometrics Identification System (DBIDS) credential or pass for base access only, but no shipyard badge and not permitted access to the CIA.

c. Once vetting is complete CNRMA will add the contractor to the “179-Day List” which is utilized by the Pass and ID office to create the DBIDS card.

d. Once on the 179-Day List, the contractor may go to the NNSY Pass and ID office (NNSY Bldg. 1502) to have their DBIDS card generated. Contracts less than 30 days will not be issued DBIDS cards, only a paper DBIDS pass. Contractors must provide proof of U.S. Citizenship (Birth Certificate/US Passport) while also providing another form of government issued photo ID such as a REAL ID compliant driver’s license or identification card.

Refer to SECNAV 5512 form for acceptable forms of identification. Foreign nationals are not to be permitted to work on site or be utilized as truck drivers.

SECTION 2

NNSY Safety Video (REQUIRED FOR ALL CONTRACTS)

a. Prior to receiving a NAVSEA badge, contractor personnel are required to watch a SECURITY, RADCON, SAFETY AND HEALTH video, and must sign certification that they have seen and understand the requirements of subject videos. Videos will last approximately 30 minutes. Contractors will sign and certify that they have viewed the video and acknowledge the terms and conditions for accessing and working aboard NNSY.

SECTION 3

Norfolk Naval Shipyard Badging

a. Green NAVSEA badges are reserved for contractors whose duties require access to the NNSY NAVSEA controlled spaces (to include the Controlled Industrial Area) but do not require access to classified material or spaces.

b. Yellow NAVSEA badges are reserved for contractors requiring access to classified material or spaces containing classified material. Yellow NAVSEA badges will also be utilized for contractors working in the presence of Naval Nuclear Propulsion Information Restricted Data (Restricted Data) whose information can be negated by an authorized sanitization plan.

c. Red NAVSEA badges are reserved for contractors who require access to Restricted Data due to the specific nature of the work they are completing. Further, Red NAVSEA badges may also be issued due to the operational status of the space where an authorized sanitization plan is not authorized. Red NAVSEA badges will never be issued for matters of convenience.

d. Blue NAVSEA badges are reserved for foreign nationals visiting or performing work at NNSY. Pre-approval through NAVSEA HQ required.

e. Escort Required NAVSEA badges may be utilized for contractors/vendors providing immediate repairs to a specific location for one day or less. Escort required badges are not issued for routine access to NAVESA controlled areas, nor are they issued for convenience . Escorted contractors/vendors are still thoroughly vetted (via SECNAV 5512) and must also provide proof of US citizenship.

f. Contractors may only wear the NAVSEA badge issued to them while within the NAVSEA controlled spaces. Contractors may not wear any other badge from any other facility or organization while in the Shipyard. Identification badges must be visibly worn on the outermost garment above the waist at all times while on board NNSY. NAVSEA badges may only be removed from visibility at a work site as directed by existing Safety Program measures (Federal, DoD, Local) which address the safety requirements associated with the performance of the work. If NAVSEA badges are removed for this reason, they must be re-attached to the outermost layer of clothing and worn above the waist when leaving the work site. Contractors issued non-picture NNSY badges must carry a government issued picture ID with them at all times.

g. Contractors must return all NAVSEA badges to NNSY Pass and ID Office (Bldg. 1502) or account in writing for each missing badge. Badges are to be turned in upon completion of the term of the contract or when an employee is no longer working for the company executing the contract. Failure to return badges will result in delays in badging personnel for future contracts awarded to the company involved.

h. Weekend/After-Hours Access: Work Integration Managers and Work integration Leaders must coordinate through their COR and Naval Support Activity Portsmouth Security Department to make adjustments to installation access times in BDIDS.

i. NNSY Pass and ID Office Hours of Operation: NNSY Pass and ID Office is open M-F, 0630-1500.

SECTION 4

Portable Electronic Devices (PEDs) (REQUIRED FOR ALL CONTRACTS)

A PED is defined as any non-stationary electronic apparatus with singular or multiple capabilities of, but not limited to recording, storing, and/or transmitting data, voice, video, or photo images (e.g., cell phones, laptops, tablets and wearable devices such as fitness bands and smart watches).

The following references apply:

a. NAVSEA 04 Ser 04/281 IMPLEMENTATION PLAN FOR ALLOWING CAMERA-

PORTABLE ELECTRONIC DEVICES WITHIN THE CONTROLLED INDSUTRIAL

AREA

b. NAVSEAINST 2200.1A PORTABLE ELECTRONIC DEVICES POLICY

c. SECPROMAN Vol 1 5510.36 Rev F

In accordance with ref (a), personally owned camera enabled PEDs will be authorized inside of the Controlled Industrial Area (CIA) and all

Security Islands. Camera enabled PEDs will remain unauthorized within Controlled Nuclear Information Areas (CNIAs), Nuclear Work Areas (NWAs) and Open Storage Areas.

All PEDs, camera enabled or not, are still prohibited within NWAs and Open Storage Areas.

The allowance of camera enabled PEDs inside of the CIA and Security Islands does not negate existing photography policies.

Unofficial photography, filming of video, or live streaming from the camera-enabled PED remains prohibited within the CIA or any NAVSEA controlled space outside of the CIA. Further, audio recordings (both digitally and magnetically) in NAVSEA spaces are prohibited without the approval of the Code 1120 Security Director.

The contractor shall be required to adhere to any Ship/Vessel's IT equipment policies and requirements and obtain the Ship's Security Officer's permission prior to any IT equipment being brought onboard.

Submarine SPECIFIC PEDs Instructions: In accordance with COMSUBLANT/ COMSUBPACINST 2075.1C, the use of PEDs while in or on Department of Navy Submarines are prohibited.

Contractors, pursuant to mandatory DoD contract provisions, will submit unclassified DoD information for review and approval for release in accordance with the standard DoD Component processes and DoDI 5230.09.

All CUI records must follow the approved mandatory disposition authorities whenever the DoD provides CUI to, or CUI is generated by, non-DoD entities in accordance with Section 1220- 1236 of Title 36, CFR, Section 3301a of Title 44, U.S.C., and this issuance.

SECTION 5

OPERATIONAL SECURITY

The contractor, and any sub-contractors, shall comply with the DoD Operations Security (OPSEC) Program Manual, DoD 5205.02-E as well as the OPSEC Plan generated for the contract. Enclosures number two and three of the contract OPSEC Plan will describe the information to be protected by the contractor and the agreement of the contractor to protect the information. The information illustrated in the OPSEC Plan is to be protected by the contractor in accordance with CF 32 Part 117 National Industrial Security Program Operating Manual (NISPOM).

SECTION 6

CONTROLLED UNCLASSIFIED INFORMATION ACCESS

The DoD will provide information to contractors and will identify all information which is Controlled Unclassified Information (CUI) via the contracting vehicle, in whole or part, and will mark such documents, material, or media in accordance with this issuance.

All forms of CUI are required to be protected by the contractor in accordance with the NISPOM.

When CUI is generated by non-DoD entities protective measures and dissemination controls, including those directed by relevant law, regulation, or government-wide policy, will be articulated in the contract, grant, or other legal agreement, as appropriate.

DoD contracts must require contractors to monitor CUI for aggregation and compilation based on the potential to generate classified information pursuant to security classification guidance addressing the accumulation of unclassified data or information. DoD contracts require contractors to report the potential classification of aggregated or compiled CUI to a DoD representative.

SECTION 7

Access to Classified Information or Spaces

a. All contractors executing this contract are required to have a minimum-security clearance commensurate to the security clearance level associated with the Contract Security Classification Specification DD Form 254 (DD-254).

All contractors requiring access to classified information, or those spaces containing un-sanitized classified information, shall possess a final security clearance.

The contract company’s Facility Security Officer is required to submit a visit request for each contractor in the Defense Information System for Security (DISS) to Security Management Office (SMO) Code 001816. The SMO Code(s) of the ship or command the contractor is visiting are not to be utilized.

After receiving a DBIDS card, their visit request, security clearance and access permissions (verified in DISS) are reviewed to ensure they meet the minimum-security requirements set forth in the contract. Once verified, the contractor will receive the appropriate NAVSEA access badge.

SECTION 8

RESTRICTED DATA SPECIFIC

All contractors requiring a red NAVSEA badge and access to Restricted Data (RD) shall have a final security clearance.

Contractors requiring access to Restricted Data must have “Restricted Data” listed in the authorized accesses portion of

Red NAVSEA badge personnel may require access to Nuclear Areas, Nuclear Information, Nuclear equipment, Naval Nuclear Propulsion Information (NNPI), RD, and Not Releasable to Foreign Nationals (NOFORN) data due to the nature of the work being performed on Naval Nuclear propulsion systems.

A Red NAVSEA badge is necessary for the execution of nuclear and some non-nuclear work; inclusive of the propulsion plant and secondary spaces as well as those systems which support the propulsion plants which may not be located in the propulsion plant when any of those spaces can’t be sanitized.

Access to RD and the issuance of red NAVSEA badges will be issued in accordance with NAVSEA M-5510.2.

SECTION 9

ON SITE SUPPORT CONTRACTORS

All contractors who receive CACs and are granted access to Navy or NNSY information technology systems with NNSY as their permanent work location are on-site support contractors (a.k.a.

“Seated”) contractors.

These contractors are required to report to BLDG 1502, 2nd floor, to the Personnel Security Office (Code 1127) for check-in. Code 1127 will be responsible for the maintenance and oversight of the on-site support contractor’s clearance information in the system of record and will be responsible for the maintenance of the contractor’s security profile.

All on-site support contractors will be required to attend, at a minimum, the security education portion of NNSY New Employee Orientation. The security education portion will contain, but is not limited to, Antiterrorism Level 1, Combatting Trafficking in Persons, Active Shooter training, Information Security, Personnel Security, and Operations Security Awareness training.

Further, all on-site support contractors will be required to complete all annual computer-based security refresher training, which is tracked and verified by the training coordinator for the code to which the contractor is assigned.

SECTION 10

Vehicle Access to NNSY Controlled Industrial Area

All commercial vehicles shall be subject to a complex inspection by a vehicle inspection team prior to being granted access to a controlled area where ships are berthed. To meet this requirement Norfolk Naval Shipyard (NNSY) uses the Installation Commercial Vehicle Inspection Station (CVIS) for all commercial vehicles entering the Controlled Industrial Area (CIA).

One hundred percent of all commercial vehicles entering the CIA must be inspected for weapons, drugs, and other contraband, etc., via CVIS inspection team. Once successfully inspected, the vehicle driver will receive a pass indicating the commercial

Common Security Statements for Statements of Work and Performance of Work Statements vehicle has been satisfactorily inspected. For commercial vehicles where contraband has been discovered, the vehicle and driver will be denied entry and banned from NNSY. The Contracting Officer’s Representative (COR) will be notified and verification of completion of the entry into the Contractor Performance Assessment Reporting System (CPARS) will be requested.

Commercial vehicles entering the CIA equipped with a camera(s) which provide video recording capability, must have the camera lens covered at all times while in the CIA.

Commercial vehicular access to the CIA will be minimized and all vehicles will comply with the following requirements:

a. Must visibly display a CIA vehicle entry pass at all times;

b. Must clearly display an authorized company sign or logo affixed to, and visibly displayed, on right and left side of the vehicle at all times. Company sign must be no smaller than 12” x 12” and be visible from a distance to easily identify the vehicle is contractor owned.

c. Will only be authorized into the CIA for the transportation of contractors', tools, parts, and materials to and from the work site. An exception to this policy is for Military Construction (MILCON), large scope SRM or other major construction projects, for which contractors may transport employees to and from work sites if a specific security plan has been developed and approved by the Shipyard Security Director.

Once drop off/pick up is complete, the commercial vehicle must exit the CIA as quickly as possible, not to exceed one hour.

d. No commercial vehicles are authorized to park inside the CIA unless they are granted permission in writing by the security director, display an authorized parking placard, display company logo, and parked within the confines their respective jobsite area. For commercial vehicles which need to be parked and not authorized to park inside the CIA, a designated parking lot for commercial vehicles is located at the south gate area of NNSY.

Privately Owned Vehicles (POV) are not authorized inside the CIA without specific written permission from the director of security. POV access may be granted only for specific, short term drop off and pickup of personnel with a temporary handicap (i.e. on crutches post-surgery) and who cannot be temporarily accommodated in a workspace outside the CIA. Parking of POVs, including vanpools and private buses, is prohibited within the CIA. An exception to this policy are handicapped personnel who have been verified by the Reasonable Accommodations office and issued a handicap parking pass by Code 1120. NNSY does provide a shuttle service for personnel who are in need of transiting throughout the CIA.

Vehicular operators who fail to comply with this memo while accessing the CIA will be subject to one or more of the following:

a. Revocation of vehicular privileges to the CIA;

b. Barred from NNSY and/or NSA Portsmouth;

c. The Contracting Officer’s Representative (COR) will be notified and verification of completion of the entry into the Contractor Performance Assessment Reporting System (CPARS) will be requested. For those contractors performing work at NNSY who are sponsored from commands external of NNSY (NAVFAC, SURFMEP, AIRLANT, etc.), leadership of those commands (to include the COR) will be notified and verification of CPARS entry requested.

d. All information pertaining to parking violations and incidents involving contractors violating this policy will be delivered to Code 1122 Industrial Security for documentation purposes.

e. Non-Government Owned or Leased Vehicles found parked inside the CIA without written authorization and valid parking pass displayed, will be removed from the CIA. Vehicles parked in violation will be towed outside the CIA at the owner’s expense.

f. POV’s or personnel granted parking privileges, to include handicap parking, from the Security Director and found to be park outside the appropriate designated area, will also be towed outside the CIA at the owner's expense.

For contractors requesting CIA parking authorization for all vehicles used to support contract work, a “Request for CIA Parking Authorization form must be completed by the COR or appropriate contractual sponsor prior to parking. A justification stating why the vehicle needs to be parked is required.

All CIA vehicle access/parking passes and request forms will be issued by Code 1121 at Bldg. 1502, Pass and I.D. Office.