Physical Security v2.pdf

DLAM 5200.08-V2, CH 1

Change 1, 07/20/2019

Defense Logistics Agency

MANUAL

DLAM 5200.08 V2

Incorporating Change 1, Effective: 07/20/2019

Accountable Office: DLA Installation Management (DM), Security and Emergency Services

(DM-S)

SUBJECT: Physical Security

REFERENCES: See Enclosure 1

1. PURPOSE:

a. Manual. This Manual is composed of several volumes, each containing its own purpose.

The purpose of the overall Manual in accordance with DLAI 4306 (reference (b)) and Joint Regulation AR 190-16; OPNAVINST 5530.15A; AFR 207-4; MCO 5500.13A; DLAR 5710.4 (reference (c)), is to implement policy, assign responsibilities, and provide procedures for the maintenance and disposition of DLA records. This Manual is directive in nature and implements DoD 5200.8-R (reference (d)). It prescribes procedures and minimum standards for the physical protection of DLA personnel, installations, activities and separate facilities, operations, and assets.

b. Volume. This Volume provides a compact source of information to assist Major Subordinate Command (MSC) Commanders/Directors, Installation Commanders, Depot Commanders, Site Directors, managers, designated officials, property officers, and security personnel in understanding and establishing appropriate physical security measures necessary to protect personnel, real and personal property, resources, and information. No information contained in the manual intends to alter any provision of any Federal law, Executive Order, or DoD directive.

c. Restrictions. This manual does not pertain to the construction standards of Sensitive Compartmented Information Facilities (SCIFs), Special Access Program (SAP) Facilities or Communications Security (COMSEC) vaults. For regulatory guidance on the aforementioned areas, refer to the appropriate directive, instruction, or regulation. DLA utilizes Air Force (AF) COMSEC accounts for secure communications and must adhere to AF COMSEC policy. In case of a conflict between DLA and AF COMSEC policy, AF policy will take precedence.

2. SUMMARY OF CHANGES: Primary Field Level Activity changed to Major Subordinate Command, PLFA changed to MSC, Installation Support changed to Installation Management, DS changed to DM, DS-S changed to DM-S, and DS-FF to DM-FF.

2. APPLICABILITY: This manual:

a. Applies to active duty military personnel, reserve duty military personnel, DoD civilians, and to contractors and their employees as required by binding agreement or obligation (Government Contract, Memorandum of Agreement/Understanding (MOA/MOU)) or DD Form 1144 (Support Agreement), etc.) with DLA.

b. Does not apply when there is a conflict between this manual and support agreements between DLA and the Host Installation. DLA, as a tenant, will abide by the Host Installation requirements and support agreements, etc.

Note: When operations unique to an activity necessitate a divergence from the requirements of this Manual, evaluate the local threat, operating environment and conditions to tailor the security requirements of this Manual to include compensatory measures implemented. Base the security requirements on risk management, practicality, cost, and mission performance. In these instances, submit deviations to the requirements of this Manual according to the provisions in Enclosure 7 of this Volume.

4. DEFINITIONS: See Glossary.

5. RESPONSIBILITIES: See Enclosure 2 of Volume 1

6. PROCEDURES:

Change 1, 07/20/2019

a. Implement general guidance for the security of personnel, installations, military operations, and additional assets.

b. Provide security guidance and general procedures that are realistic, harmonized with other security disciplines, and provide the necessary flexibility for MSC Commanders/Directors, Installation Commanders, and Depot Commanders to protect personnel, Installations, projects, operations, and related resources against capable threats from terrorists, criminal activity, and other subversive or illegal activity.

c. Reduce the loss, theft, diversion of, or damage to DoD assets using advanced technologies; thereby enhancing overall security, while maintaining the warfighting capability.

d. Safeguard Personally Identifiable Information (PII) collected and used in the execution of this Manual to prevent unauthorized use, disclosure, and/or loss.

e. Ensure the collection, use, and release of PII complies with the requirements of DoD Directive (DoDD) 5400.11, DoD Regulation 5400.11-R and DoD Instruction (DoDI) 5400.16 (references (e), (f) and (g)).

7. RELEASABILITY: RESTRICTED. This [instruction, volume] is approved for restricted release. It is available to users with Common Access Card authorization from the DLA Issuances Intranet

8. INTERNAL CONTROLS: DLA Installation Management, Security and Emergency Services (DM-S) will monitor the requirements established in this document using triennial Security Programs Reviews. The frequency of the Security Program Reviews might change based on the identification of new deficiencies or requirements.

9. EXPIRATION DATE: We will reissue or cancel this manual by the third anniversary of its publication date. If not, it will automatically expire effective 07/20/2022.

GORDON B. HACKETT III

Director DLA Installation Management

Enclosure(s) Enclosure 1 – References

Enclosure 2 – Designation and Protection of Secure Areas Enclosure 3 – Government Funds Protection Enclosure 4 – Arms, Ammunition, and, Explosives Enclosure 5 – Threat Assessment/Risk Management Enclosure 6 – Physical Security Surveys, Inspections, and Exercises Enclosure 7 – Deviations from the DLA Physical Security Program Enclosure 8 – Working Groups Enclosure 9 – Physical Security Education and Training Program

Glossary

5 TABLE OF CONTENTS

TABLE OF CONTENTS

ENCLOSURE 1: REFERENCES……………………………………………………

ENCLOSURE 2: DESIGNATION AND PROTECTION OF SECURE AREAS

GENERAL

CONSIDERATIONS

OUTSIDE STORAGE AREAS

RESTRICTED AREAS

CONTROLLED AREAS

DESIGNATION OF RESOURCE LEVELS AND LEVELS OF SECURITY

WARNING SIGNS

ENCLOSURE 3: GOVERNMENT FUNDS PROTECTION

APPLICABILITY

GENERAL GUIDELINES

RESPONSIBILITIES OF THE FUNDS CUSTODIAN

FUNDS ESCORT PROCEDURES

FUNDS STORAGE LIMITS DURING NON-OPERATING HOURS

CENTRAL REPOSITORIES

STORING FUNDS AFTER DUTY HOURS

USE OF ESS

ROBBERY PREVENTION AND PLANNING

SECURITY CHECKS

ENCLOSURE 4: ARMS, AMMUNITION, AND EXPLOSIVES (AA&E)

GENERAL

6 TABLE OF CONTENTS

PROCEDURES

THREAT AND VULNERABILITY ASSESSMENTS

INSPECTIONS AND AUDITS

LOST, MISSING, OR STOLEN AA&E

KEY AND LOCK CONTROL

ENTRY CONTROL

AA&E WAIVER PROCESS

SAFE HAVEN

ENCLOSURE 5: THREAT ASSESSMENT/RISK MANAGEMENT

GENERAL

RISK MANAGEMENT METHODOLOGY

ENCLOSURE 6: PHYSICAL SECURITY SURVEYS, INSPECTIONS, AND

EXERCISES……..………………………………………………………………………….. 33

GENERAL

TYPES OF SURVEYS

INSPECTIONS

SURVEY AND INSPECTION REPORTS

ROBBERY AND PENETRATION EXERCISES

COMSEC AND SIPRNET

ENCLOSURE 7: DEVIATIONS FROM THE DLA PHYSICAL SECURITY

PROGRAM

GENERAL

TYPES OF DEVIATION

REVIEW

7 TABLE OF CONTENTS

PROCEDURES

AA&E WAIVER PROCESS

ENCLOSURE 8: WORKING GROUPS

GENERAL

HQ DLA PHYSICAL SECURITY WORKING GROUPS

INSTALLATION FACILITY WORKING GROUPS

ENCLOSURE 9: PHYSICAL SECURITY EDUCATION AND TRAINING

PROGRAM

GENERAL

OBJECTIVE

ELEMENTS

IMPLEMENTING THE PROGRAM

MSC/INSTALLATION COMMANDER/DIRECTOR RESPONSIBILITIES

RECORDS

GLOSSARY

PART I: ABBREVIATIONS AND ACRONYMS

PART II: DEFINITIONS

8 ENCLOSURE 1

ENCLOSURE 1: REFERENCES

(a) DLA Manual (DLAM) 5200.08-V2, Physical Security Manual; July 15, 2019 (hereby cancelled)

(b) DLA Instruction (DLAI) 4306, Physical Security Program; December 7, 2009.

(c) Joint Regulation AR 190-16/OPNAVINST 5530.15A/AFR 207-4/MCO 5500.13A/DLAR

5710.4; Military Police, Physical Security, September 1, 1986

(d) DoD 5200.08-R, Physical Security Program; May 27, 2009.

(e) DoD Directive (DoDD) 5400.11, DOD Privacy Program, October 29, 2014.

(f) DoD Regulation 5400.11-R, Department of Defense Privacy Program, May 14, 2007.

(g) DoD Instruction (DoDI) 5400.16, DoD Privacy Impact Assessment (PIA) Guidance, February 12, 2009.

(h) Internal Security Act of 1950 (50 U.S.C. 797)

(i) DoDI 5200.08, Security of DoD Installations and Resources and the DoD Physical

Security Review Board (PSRB); April 8, 2014.

(j) DoDD 5105.22, Defense Logistics Agency; May 17, 2006.

(k) Unified Facilities Criteria (UFC) 4-010-01, DoD Minimum Antiterrorism Standards for

Buildings, October 1, 2013.

(l) DLA Records Disposition Schedule.

(m) DLA Form 584, Visitor Register, June 2013.

(n) DLA Regulation (DLAR) 4145.11, Safeguarding of DLA Sensitive Inventory Items, Controlled Substances, and Pilferable Items of Supply, February 1, 1990.

(o) Standard Form (SF) 701, Activity Security Checklist

(p) DoDM 5200.01 Volume 3, DoD Information Security Program: Protection of Classified

Information, March 19, 2013.

(q) DLA Form 1886, Robbery Checklist, Oct 2007,

(r) DLA Instruction (DLAI) 4310, Carrying of Firearms and Use of Force, June 25, 2013.

(s) DoDI 5100.76, Safeguarding Sensitive Conventional Arms, Ammunition, and Explosives

(AA&E), February 28, 2014.

(t) DoD Manual (DoDM) 5100.76, Physical Security of Sensitive Conventional Arms, Ammunition, and Explosives (AA&E), April 17, 2012.

(u) Department of Defense Antiterrorism Officer Guide, DoD ATO Guide, December 2012

(FOUO)

(v) Defense Threat Reduction Agency (DTRA) Security Classification Guide for

Vulnerability Assessments, Joint Staff Integrated Vulnerability Assessment Program, February 1, 2010.

(w) DoDI 2000.12, DoD Antiterrorism (AT) Program, September 9, 2013.

(x) DoDI 2000.16, DoD Antiterrorism (AT) Standards, December 8, 2006.

(y) DLA (DL) Form 1885, Request for Deviation from Security and Emergency Services

Criteria, March 2014.

9 ENCLOSURE 2

ENCLOSURE 2: DESIGNATION AND PROTECTION OF SECURE AREAS

1. GENERAL.

a. Different degrees of security protection are required for DLA's operations. The variance in security protection results from the nature and purpose of mission requirements, the information or material contained in the area, and the identified risks to the operations or the material. Designation and establishment of secure areas are the responsibilities of DLA MSC/Installation/Activity Commanders/Directors. To assist in this designation process, DLA uses the terms, in descending security sensitivity, Restricted Area and Controlled Area.

b. 50 USC 797 (reference (h), Section 21), provides for military Commanders of DoD installations to promulgate orders and regulations to ensure the security of DoD personnel, property, and equipment. DoDI 5200.08 (reference (i)) identifies DoD Commanders as authorized personnel to promulgate installation security regulations and orders. DoDD 5105.22 (reference (j)), Defense Logistics Agency, gives the Director, DLA, the authority to promulgate security orders and regulations. These manual and local directives identify the special entry conditions and security requirements of the activity.

c. Designate in writing all secure areas. Post with warning signs in conspicuous places such as entrances and approaches to these areas and on perimeter fences or barriers of the areas. Only indicate Restricted Area or Controlled Area as a descriptive term on the signs.

d. For Restricted and Controlled Areas, written operating procedures must be developed by owner/user personnel covering, as a minimum, the following areas:

(1) Entry/exit control procedures.

(2) Bomb threat procedures.

(3) Other emergency evacuation procedures for fires, etc.

(4) Owner/user personnel training requirements.

(5) Visitor control procedures.

10 ENCLOSURE 2

(6) End of Day Checks

e. Do not base the designation or non-designation of secure areas on existing physical security measures or the lack thereof.

2. CONSIDERATIONS. There are other important considerations concerning secure areas and their lines of division. These considerations include the following:

a. The survey and analysis of the installation/facility, missions, and security interests to determine the immediate and anticipated protection needs. Anticipated needs are determined from plans for the future.

b. Protection required based on size and nature of the security interest. Safes may provide adequate protection for classified documents and small items; however, consider placing large items within guarded enclosures.

c. Some security interests are more sensitive to compromise than others. Brief observation or a simple act by an untrained person may constitute a compromise in some cases. In others, detailed study and planned action by an expert may be required.

d. Consider evaluating all security interests according to their importance (i.e. documents or materials marked by a security classification such as confidential, secret, or top secret).

e. Establish parking areas for privately owned vehicles (POVs) outside of restricted areas.

Keep vehicle entrances at a minimum for safe and efficient control.

f. Install physical protective measures (such as fences, gates, and window bars). For additional information on protective and construction requirements, see applicable DoD Directives (see Glossary of References).

3. OUTSIDE STORAGE AREAS. Outside Storage Areas. The following physical security standards are prescribed for outside storage areas:

a. Fencing (if needed).

(1) Protect property stored outside, which has potential for pilferage or malicious damage due to its size and/or value, by a security fence. The fence precludes easy access into the storage area and cuts off the flow of pedestrian or vehicular traffic except through designated points of entry and exit.

11 ENCLOSURE 2

(2) Security fencing will be at least 6-feet high and constructed of 9-gauge chain link.

Mount a 3-strand barbed wire outrigger, sloping outward, on top.

(3) Open storage of large items not easily pilfered is permissible, providing there is no history or a very low rate of pilferage. Consider blocking off those points of entry and exit commonly used by vehicular traffic with a chain, cable, or other suitable barrier.

(4) Store material at least 50-feet from the security fence (available real estate permitting).

b. Illuminate the storage area with sufficient intensity to enable visual surveillance by the security force.

c. Security Procedures.

(1) Do not park POVs within 13 feet of the area and 50 feet from any entrance.

(2) Immediately report all unexpected shortages or suspected pilferage to the servicing Security Office.

4. RESTRICTED AREAS. MSC/Installation Commander/Director must authorize all restricted areas in writing, properly post warning signs, and employ physical security measures. Ensure personnel assigned to the Restricted Area escort visitors and uncleared personnel. Protect all classified and sensitive information from observation, disclosure, or removal.

a. Restricted Areas include:

(1) Open storage areas authorized to store classified information.

(2) Data processing centers processing classified information including server rooms, tape libraries, computer rooms, and removable disks containing backup data.

(3) Communication centers.

(4) Cryptographic areas.

(5) Storage areas for CIIC "R" coded material.

(6) Storage areas for CIIC "Q" coded material (non-bulk).

(7) Armory/AA&E storage facilities.

12 ENCLOSURE 2

(8) Storage areas for CIIC “9” coded material.

(9) Storage areas for CIIC “W” coded material.

(10) Storage areas for ozone depleting substance (ODS) material.

b. Security Procedures. The following security procedures apply to all Restricted Areas unless otherwise stated.

(1) The area will be designated a Restricted Area and signs will be posted on the outside doors and the perimeter of the area.

(2) The Restricted Area owner/user designates in writing a Restricted Area monitor. The Chief, Security and Emergency Services/Chief, Security Services ensures all monitors complete training.

(3) Restricted Area Monitors will maintain a continuity book for their respective area that contains, at a minimum, the following:

(a) Designation of Restricted Area letter

(b) Restricted Area Monitor appointment letter

(c) Three physical security inspections of Restricted Area, including initial, last Higher Headquarters assessment, and last self-assessment.

(d) Visitor Control logs maintained in accordance with Records Management procedures (reference (l)).

(e) At least one year of alarm test records

(4) The Restricted Area will only have one active personnel entrance. During normal duty hours, designated on-duty personnel will lock the entrance and control entry. Equip exit doors with panic bar-type locking devices with enunciation capability.

(5) Use access lists and security badges to control access to the area. Allow only those individuals identified on the access list unescorted access to the area.

(6) Designate personnel to control entry to the Restricted Areas. Personnel designated to control entry will use the DLA Form 584 (reference (m)) or equivalent to record movement of personnel in and out of the secure area.

(7) Escort visitors at all times.

13 ENCLOSURE 2

(8) Safeguard combination(s) and/or keys to the entrance door in accordance with this manual. Change combinations in accordance with DoDM 5200.01-V3 (reference (p))

(9) At the close of business, designated personnel will utilize Standard Form 701 (reference (o)), or equivalent, to perform a security check prior to departure. In addition, if needed, amend reference (o) and use to document daily checks of window(s), door(s), equipment, and property ensuring proper security and the alarm is set. These procedures will be documented in the Security Area Standard Operating Procedure (SOP), which all personnel on the Access List for the area will be familiar with and have access to at all times.

(10) During non-duty hours, protect the area by an intrusion detection system (IDS) and check by a police patrol at least once daily, or more often based on threat and risk assessment.

In cases where the DLA Activity is a tenant, establish the requirements for these checks via the Support Agreements.

(11) Prescribe additional local procedures for all Restricted Areas in writing. Include security measures for inspections of items moving in and out of the area, opening and closing of the door, trash removal, restrictions regarding briefcases, purses, lunch boxes, etc., searches, and visitor control.

(12) The following procedures apply only to material storage areas designated as

Restricted Areas:

(a) Do not park POVs closer than 13 feet of the area and 50 feet from any entrance.

(b) Do not pre-stage outside the secure area to await loading. Load material ready to ship on carriers directly from the Restricted Area.

(c) Immediately report all incidents of unexplained shortages, suspected pilferage, or compromise to the local DLA security specialist/law enforcement/investigative agency and subsequently to the Chief, Security and Emergency Services/Chief, Security Services.

(d) The Restricted Area monitor will conduct annual inspections of secure storage areas using the checklist provided by the installation/site Physical Security Specialist to ensure adequacy of physical security measures and compliance with security policies. Submit reports of findings resulting from these inspections to the Installation/Facility Commander/Director through the Director of the affected area and DLA Installation Management, Security and Emergency Services.

(e) The Installation/Facility Physical Security Specialist will review the storage locations of all restricted items at least triennially. During off years, the Restricted Area monitor is responsible for conducting self-inspections. The Restricted Area monitor will review the

14 ENCLOSURE 2

storage locations of all controlled items at least monthly to ensure the items are properly stored and protected.

5. CONTROLLED AREAS. The MSC/Installation Commander/Director designates Controlled Areas in writing wherein sensitive resources, information, or operations occur and require limited and controlled access. Admittance to a controlled area is limited to persons who have official business within the area.

a. Controlled Areas include:

(1) Fund handling areas (more than $25,000).

(2) Central mail room.

(3) IT centers processing unclassified information to include server rooms, tape libraries and computer rooms.

(4) Security Operations Center.

(5) Emergency Operation Center (EOC) (when activated).

(6) ESS Alarm Rooms.

(7) DLA Energy fuel storage facilities.

(8) Storage areas for pilferable items. For more information, refer to reference (n).

(9) Storage areas for CIIC "Q" coded material (bulk).

(10) Storage areas for hazardous material (for Radioactive Material consult the local RPO or Safety Officer for additional requirements).

(11) Storage areas for medical supplies.

(12) Investigative evidence rooms.

b. Security Procedures. The following security procedures apply to all Controlled Areas unless otherwise stated.

(1) Designate the area in writing as a Controlled Area and post signs on the outside doors and perimeter of the area.

15 ENCLOSURE 2

(2) The Controlled Area owner/user designates in writing a Controlled Area monitor.

The Chief, Security and Emergency Services/Chief, Security Services, ensures all monitors receive training.

(3) Controlled Area monitors will maintain a continuity book for their respective area that contains, at a minimum, the following:

(a) Designation of Controlled Area letter.

(b) Controlled Area Monitor appointment letter.

(c) Three physical security inspections of Controlled Area, including initial, last higher HQ assessment, and last self-assessment.

(d) Visitor control logs maintained in accordance with Records Management Schedule reference (l).

(e) At least one year of alarm test records (if Area alarmed).

(f) SOPs specific to the Controlled Area; e.g. end of day checks, visitor control, etc.

(4) The Controlled Area will only have one active personnel entrance. During normal duty hours, lock the entrance and control entry by designated on-duty personnel. Secure other entrances and exits and equip exit doors with panic bar-type locking devices with enunciation capability.

(5) Consider using security badges to control access into the area. Only those individuals identified on the access list will be authorized unescorted access to the area.

(6) Designate personnel to control entry to the Controlled Area. Personnel designated to control entry will use the reference (m) to record movement of personnel in and out of the secure area.

(7) Escort visitors at all times.

(8) Control keys to the area in accordance with Enclosure 9 of Volume 1.

(9) Local procedures will prescribe security controls for the movement of items and personnel in and out of the secure area and for inspections of packages.

(10) At close of business, designated operating personnel will utilize Standard Form 701

(reference (o)), or equivalent, to perform a security check prior to departure. In addition, if

16 ENCLOSURE 2

needed, amend reference (o) and use to document daily checks of window(s), door(s), equipment, and property ensuring proper security and the alarm is set. These procedures will be documented in the Security Area SOP, which all personnel on the Access List for the Area will be familiar with and have access to at all times.

(11) During off duty hours the area will be protected by IDS and will be checked by a security patrol/police patrol at least once daily during non-duty hours, or more often based on threat and risk assessment. Police/security patrols will check outside storage areas storing classified material at least once daily during non-duty hours, or more often based on threat and risk assessment. In cases where the DLA Activity is a tenant, establish the requirements for these checks in the ISSA.

(12) The following procedures apply only to material storage areas designated as

Controlled Areas:

(a) Do not park POVs closer than the AT/FP requirements for parking.

(b) Material removed from the secure area for shipment will be loaded on carriers as soon as possible. Transfer items received at a consolidated receiving area to the appropriate secure area as soon as possible. A cage or container will be available at designated staging areas for temporary storage of items that are awaiting shipment or transfer.

(c) Immediately report all unexplained shortages or suspected pilferage to the local

DLA Security Specialist/local law enforcement/investigative agency and subsequently to Chief, Security and Emergency Services/Chief, Security Services.

(d) The Controlled Area monitor will conduct annual inspections of secure storage areas using the checklist provided by the local Physical Security Specialist to ensure adequacy of physical security measures and compliance with security policies. Submit reports of findings resulting from these inspections to the MSC Commander through the Director of the affected area and DLA Installation Management, Security and Emergency Services.

(e) The MSC/Installation Physical Security Specialist will review the storage locations of all controlled items at least triennially. During off years, the Controlled Area monitor is responsible for conducting self-inspections.

6. DESIGNATION OF RESOURCE LEVELS AND LEVELS OF SECURITY.

a. General.

(1) MSC/Installation Commanders/Directors are responsible for the protection of resources located on their installations/facilities. Identify and assign the resource level utilizing

17 ENCLOSURE 2

the Resource Level (RL) System and the additional level of security required at each RL.

Identify RL’s as RL1, RL2 and RL3. Apply the RL system to resources assigned to tenant organizations on DLA Installations. Additionally, when an Installation/Facility has an IDS that protects many alarmed areas, clearly distinguish each area from the other to facilitate a priority response. The RL will allow the MSC Commander/Director to establish an Alarm Priority Response List (APRL) to ensure immediate armed response to higher priority resources.

Responses to RL1 resources will have priority over RL2 and RL3 resources. Responses to RL 2 resources will have priority over RL3 resources.

Note: DLA tenant activities will work with the Host installation in accordance with written support agreements to meet the intent of the RL guidance to the extent possible.

(2) The Installation/Facility Force Protection Working Group (FEW) will ensure the owner/user of the resource coordinates on the R assigned to their resource. To prioritize the resources assigned within a RL, use a criticality assessment for each resource. The FPWG will accumulate the data, create an APRL and forward its recommendation to the Installation’s Security Executive Committee (ISEC). Upon the ISEC review and approval, the information will be an annex to the installation physical security plan and only provided to organizations that have a need to know. The following paragraphs provide definitions and examples of resources to categorize as RL 1, 2 or 3. Assign RL 3 to resources that do not meet the definitions of RL 1 and 2.

b. Resource Level 1 (RL1).

(1) Assign RL1 to resources located on DLA installations/facilities that the loss, theft, destruction, misuse, sabotage or compromise would cause grave damage to the DoD war-fighting capability and/or national security.

(2) Examples:

(a) Selected Critical Command, Control and Communications (C3) facilities, systems, or equipment.

(b) Expensive, few in numbers, or one of a kind systems.

(c) Intelligence-gathering systems critical to US operational capability.

(d) Vital computer facilities and equipment.

(e) Facilities storing any number of Category I, II, III, or IV Sensitive Conventional

AA&E.

18 ENCLOSURE 2

(3) Level of Security for RL1.

(a) Security measures employed must result in significant deterrence against hostile acts. Security will ensure a significant probability of detecting and intercepting hostile intentions. Employ the following security measures in addition to those mentioned in 4.b. above.

(b) Restrict entry to the areas.

(c) Expand the security of the area with defense-in-depth and active patrolling.

(d) Provide IDS and surveillance at the perimeter (Position armed security officers at the area when IDS not operational or installed).

(e) Provide police officers to respond to alarm activations.

c. Resource Level 2 (RL2).

(1) Assign RL2 to resources located on DLA installations/facilities that the loss, theft, destruction, issue, sabotage or compromise of would cause serious damage to the DoD war-fighting capability and/or national security.

(a) Selected C3 facilities, systems, and equipment.

(b) Intelligence-gathering systems not critical to US operational capability.

(3) Level of Security for RL2.

(a) Security measures employed must result in a reasonable degree of deterrence against hostile acts. Security will ensure the capability to impede a hostile force and limit damage to resources. Employ the following security measures in addition to those mentioned in 4.b. above.

(b) Control entry to areas.

(c) Provide IDS and surveillance at the perimeter.

(d) Provide police officers to response to alarm activations.

d. Resource Level 3 (RL3).

19 ENCLOSURE 2

(1) Assign RL3 to resources located on DLA installation/facilities that the loss, theft, destruction, misuse, sabotage or compromise of would cause damage to national security and/or adversely affect the operation capability of DLA and its tenants. RL3 resources are contained in areas with owner/users being primarily responsible for security. DLA Police provide response.

(a) Mission essential communications facilities and computer centers.

(b) Power plants and environmental control systems critical to operational capability.

(c) Fuels and Liquid Oxygen Storage Areas.

(d) Warehouses storing aircraft or weapons systems spare parts.

(e) Medical logistics vaults.

(3) Level of Security for RL3.

(a) Security measures employed must reduce the opportunity for theft or damage to resources. Employ the following security measures in addition to those mentioned in 5.b.above.

(b) Owner/user will:

1. Implement entry and circulation control procedures in controlled areas.

2. Identify assigned mission essential resources.

3. Ensure proper training of assigned personnel.

4. Provide physical protection and conduct security inspections in accordance with all applicable directives.

(4) Installation/Facility Chief, Security and Emergency Services/Chief, Security Services will:

(a) Conduct random patrols in areas.

20 ENCLOSURE 2

(b) Monitor IDS where required.

(c) Provide police response to alarm activations, when required.

(d) Provide technical guidance and advice to owner/user.

(f) Conduct physical security surveys in accordance with all applicable directives.

7. WARNING SIGNS.

a. General. Fabricate Installation Boundary, Restricted Area, and Controlled Area warning signs will of metal with black lettering on a white background, except that words shown in all capital letters will be red. Existing signs need not be replaced provided the signs are in good repair, the lettering is legible, and the wording conforms to the requirements in this paragraph and below. Fabricate interior signs of wood, metal, plastic, or cardboard. Post signs in areas or countries where English is not the prevalent language or another language is also prevalent with the approval of the Installation Commander as long as the sign states the present guidance as in English.

b. Installation Boundary Signs.

(1) Design and wording will be as follows:

WARNING

(Enter name of Installation)

It is unlawful to enter this installation without permission of the Installation Commander.

Section 21 of the Internal Security Act of 1950, 50 USC 797.

While in this installation, all personnel and the property under their control are subject to search.

(2) Post signs at all installation entrances and approaches. Post additional signs along the boundaries of such areas not to exceed 500 feet between each sign.

c. Restricted Area Signs.

21 ENCLOSURE 2

Restricted Area

It is unlawful to enter this area without permission of the Installation Commander.

While in the area all personnel and the property under their control are subject to search.

(2) Post signs at all Restricted Area entrances and approaches. Post additional signs posted along the boundaries of such areas not to exceed 500 feet between each sign.

d. Controlled Area Signs.

Controlled Area

It is unlawful to enter this area without permission of the Installation Commander.

While in this area, all personnel and the property under their control are subject to search.

(2) Placement will be as prescribed for Restricted Area signs.

e. Sign Sizes.

(1) Installation Boundary - 2-feet by 1-foot.

(2) Personnel and Vehicle Entry Points - 4-feet by 2-feet.

(3) Building, area and interior personnel entry points such as cashier cages, firearms facilities, etc., 2-feet by 1-foot.

(4) Use signs smaller than 2-feet by 1-foot in administrative areas where the sign would detract from the aesthetic value, as long as the sign maintains the proper wording and legibility.

22 ENCLOSURE 3

ENCLOSURE 3: GOVERNMENT FUNDS PROTECTION

1. APPLICABILITY.

a. The standards and procedures in this section apply to all appropriated, non-appropriated, and other Government funds or negotiable instruments under DLA control.

b. Those businesses located on DLA activities will comply with these standards and procedures.

c. Army and Air Force Exchange Service (AAFES) manuals provide protection requirements guidance for AAFES facilities. The protection requirements protection must equal or be greater than the standards prescribed herein.

d. Secure commissary sales stores in accordance with applicable commissary operating manuals provided those requirements provide protection equal to or greater than the standards prescribed herein.

e. Control and secure imprest funds in accordance with the procedures contained in this section or unless otherwise indicated. Inspection of imprest funds at least annually by security personnel for compliance with local procedures and this manual.

f. Class VI (package beverage) stores will be secured in accordance with applicable operating manuals provided those requirements provide protection equal to or greater than the standards prescribed herein. Designate and post storage and sales areas as Controlled Areas.

Protect entrances and exits to sales and storage areas by an intrusion detection system during nonoperational periods.

g. Include security of funds as part of the contract where a contractual relationship exists (as with an exchange concessionaire).

5. GENERAL GUIDELINES.

a. Controlled Area Designation for Funds Facilities. Designate all funds facilities handling or storing $25,000 or more as Controlled Areas. The decision to designate other funds facilities as Controlled Areas rests with the MSC/Installation Commander/Director, but is discouraged.

b. Protecting High Cash Value Resources. Protect these resources according to their dollar value as prescribed by this chapter. Do not count these items when determining the total amount of funds for storage purposes:

23 ENCLOSURE 3

(1) United States Postal Services postage stamp stocks.

(2) Blank money orders and Government pay checks.

(3) Negotiable instruments marked payable to the United States Treasury, stamped For

Deposit Only, or made payable to an Accounting and Finance Office or a non-appropriated fund instrumentality but not endorsed.

c. Do not use containers that store classified information or material to store funds.

d. Except for central depositories, secure to the premises any fund container on casters or one that weighs less than 500 pounds and is not protected by an IDS system or not located inside a vault. Bolts or heavy metal straps may secure it or, if intended to remain part of the structure, one may secure it by imbedding it in concrete.

6. RESPONSIBILITIES OF THE FUNDS ACTIVITY CUSTODIAN. Fund handling activities will designate a fund custodian in writing to the installation Chief, Security and Emergency Services. The custodian is responsible for the following.

a. Protecting Funds. Protect funds as prescribed by this manual and according to local procedures.

b. Operating Instructions. Publish a local operating instruction, outlining procedures for the following, as a minimum:

(1) Use DLA Form 1886, (reference (q)) Robbery Checklist and actions to take in the event of a robbery.

(2) Steps to reduce cash on hand.

(3) Control of alarm systems key boxes if applicable.

(4) Training procedures.

(5) Bomb threat procedures.

(6) Funds escort procedures.

(7) Controlled area entry and escort procedures.

(8) Emergency entry and egress procedures.

24 ENCLOSURE 3

c. Storage Approval. Obtain Installation Chief, Security and Emergency Services approval for funds storage limits.

7. FUNDS ESCORT PROCEDURES.

a. Either the fund activity or the security force will furnish escorts. Contract armored car service may be used.

b. The use of armed or unarmed escorts for fund amounts less than $10,000 will depend upon local conditions. Based on providing adequate protection against the local criminal threat, the DLA MSC/Installation Site Director's allows armed escorts on the Installation.

c. Arm escorts for fund amounts of $10,000 or more.

d. When personnel are armed for the purpose of escorting funds, coordination will be made with local jurisdictions concerning the carrying of weapons off the DLA Activity and the provisions of DLA Instruction 4310 (reference (r)) apply.

e. Regularly escorted funds between a fund activity and a protected facility on the activity vary the routes between the two points and times of departure. Personnel assigned as escorts will not carry funds.

f. During a security force escort, maintain constant radio contact between the security force escort and security operations center.

g. Escorts assigned from the fund activity will call the security force immediately prior to departure and give the time and place of departure, route of travel, destination, and estimated time of arrival. Notify the security force upon termination of the escort.

h. Movements of funds off the activity will be closely coordinated with the local police.

i. Escorts will obey traffic regulations and all instructions of any local police escorts as long as they do not violate Federal law or lessen the protection of funds. Escorts will not use sirens or red lights except in emergencies.

j. Fund escort requirements for DLA Activities tenant on military installations will be in accordance with the criteria established by the host.

k. Transporting Funds. Do not transport escorted funds in any vehicle operated by or carrying DLA Police personnel.

l. DLA Police. DLA Police personnel will occupy a trail vehicle during all funds escorts.

25 ENCLOSURE 3

m. Commissaries, AAFES facilities, on-base banks and non-appropriated funds facilities are encouraged to contract escort facilities. If contractor services are not available or the Chief Security and Emergency Services determines the threat level is such that contractor services are impractical, the Security Manager will determine if security forces personnel will perform escorts for non-government funds.

8. FUNDS STORAGE LIMITS DURING NON-OPERATING HOURS.

a. Funds facilities storing less than $10,000 do so in accordance with local Physical Security Plan or installation security guidelines.

b. Utilize a General Services Administration (GSA)-Approved Class 5 security container or an UL-rated burglary resistant safe (see Enclosure 2) to safeguard funds over $10,000 because these containers provide adequate forced entry protection. Based upon local vulnerabilities, consider installation of a panic or holdup alarm. Compare the cost of any additional security systems with the amount of cash safeguarded.

c. Alarm each container/room that store $10,000 but less than $50,000.

d. Not more than $50,000 will be stored in any individual fund container unless stored inside an alarmed vault.

9. CENTRAL REPOSITORIES. Do not utilize a central repository under the supervision of DLA Police personnel.

10. STORING FUNDS AFTER DUTY HOURS. Facilities subject to this manual follow these guidelines after duty hours and at cashier cages during duty hours.

a. Procedures. Keep a packet of money (including foreign currency where applicable) designated as separate from the rest of the funds. Place at least five $20 bills in the packet. Keep the bills with operating funds, but do not distribute them unless a robbery occurs at which time the bills will be included with the stolen money.

b. Recording Serial Numbers. Record the serial numbers and series year of each bill and keep the recorded information in a separate container from the funds.

26 ENCLOSURE 3

11. USE OF ELECTRONIC SECURITY SYSTEM (ESS). An effective ESS is a prime deterrent in preventing the loss of funds by theft. The following funds activities must have their funds storage areas protected by ESS:

a. Accounting and Finance Offices.

b. Facilities Storing $10,000 or More.

c. Other Funds Facilities as Required Locally.

12. ROBBERY PREVENTION AND PLANNING.

a. Prepare a written plan describing actions taken in case of a robbery for each DLA fund handling activity. A plan is also required for each non-DLA fund handling activity located on a DLA Installation. For DLA Installations, a single plan may be prepared with a separate annex for each fund activity identifying procedures unique to that activity. Plans will include the following:

(1) Fund handling activity employees action;

(2) Security force officers action;

(3) Supporting law enforcement agency or agencies actions;

(4) Notification of Agencies and officials, and the individual, by position, responsible for the notification.

(5) All required reports.

b. Robbery Prevention Plans will be coordinated with all local law enforcement agencies.

DLA fund handling activities tenant in non-DLA buildings, or on military installations, will coordinate their plan with the host. Together with the Host, conduct liaison with outside agencies.

c. The Office of Security and Emergency Services will test robbery Prevention Plans for activities maintaining more than $10,000 during operating hours at least annually.

d. All fund handling personnel will receive initial and annual anti-robbery training from the installation Office of Security and Emergency Services.

e. The following prevention measures should be considered in Robbery Prevention planning:

27 ENCLOSURE 3

(1) Instruct employees to observe persons loitering in or near the activity.

(2) Encourage employees to challenge unidentified personnel.

(3) Keep the amount of cash in cashier cages at a minimum level.

(4) Require employees to secure all funds from their immediate work area prior to their departure.

(5) Avoid establishing unnecessary operating routines.

(6) Upon closing at night, ensure the safe or vault and all doors and other points of access to the activity are locked.

f. Employee Conduct During and After a Robbery. The following actions should be taken by employees during and after a robbery:

(1) Avoid actions that might increase danger to yourself or others.

(2) If it is safe, activate the robbery alarm system.

(3) Observe the robber's physical features; voice, accent, mannerism, dress, the kind of weapon he has, and any other characteristics that would be useful for identification purposes.

(4) If it is safe, any evidence the robber leaves (such as a note), try to put it aside and out of sight. Retain the evidence, do not handle unless necessary, and give it to the security police when they arrive.

(5) Refrain from touching, and prevent others from touching articles or places the robber may have touched or evidence he may have left, to preserve fingerprints of the robber.

(6) Give the robber no more money than the amount he demands and include "bait" money in the amount given ("bait money" consists of a serially recorded packet of paper money inconspicuously banded or clipped for identification purposes).

(7) If it is safe, observe the direction of the robber's escape and the description and license plate number of the vehicle used, if any.

(8) Telephone the security office or inform a designated officer or other employee who has this responsibility that a robbery has been committed. Give the security force dispatcher all available information; i.e., your location, description of the robbers and the vehicle, and the escape route.

28 ENCLOSURE 3

(9) If the robber leaves before the police arrive, assure that a designated officer or other employee waits outside the office to inform the security police.

(10) Attempt to determine the names and addresses of persons who witnessed the robbery or the escape and request them to record their observations or to assist a designated officer or other employee to record their observations.

(11) Refrain from discussing the details of the robbery with others before recording the observations. This will assist in keeping the memory clear of distractions.

(12) When it is safe, the employee documents pertinent information on reference (q).

13. SECURITY CHECKS.

a. Security managers will establish local procedures for daily checks of fund handling activities by security force personnel.

b. In the event of alarm malfunction, the owner/user is responsible for responding to assume responsibility of the area, according to local procedures. Perform security checks at least once during nonoperational hours.

c. Annotate all security checks and maintain the record for 30 days per General Records

Schedule (GRS) 18, item 18b but does not include records of security checks that reflect a security violation.

29 ENCLOSURE 4

ENCLOSURE 4: ARMS, AMMUNITION, AND EXPLOSIVES (AA&E)

1. GENERAL. In accordance with DoDI 5100.76 and DoD 5100.76-M (references (s) and (t), this Manual prescribes minimum standards and criteria for the physical security of DoD sensitive conventional AA&E, including non-nuclear missiles and rockets, in the custody of any DLA component or DLA contractor. DLA components may impose additional protective measures above those prescribed herein where warranted. However, such measures will not violate or conflict with references (t) and (u). DLA operational requirements and the need to moderate work force and material costs dictate prudence in achieving a balance between security and acceptable degrees of risk.

2. PROCEDURES.

a. AA&E facilities will be consolidated to the maximum extent possible consistent with operational, safety, and mission requirements to reduce protection costs.

b. The construction of AA&E facilities built at land-based facilities is in accordance with the security structural requirements of reference (u), and upgrades existing facilities must meet the requirements. Such facilities will be prioritized for security upgrade as follows:

(1) Facilities storing Category I items.

(2) Facilities storing Category II items.

(3) Facilities storing Category III and IV items.

c. Personnel assigned custody, maintenance, disposal, or security responsibilities for AA&E on DoD installations will be subject to one of the following investigations and periodic reinvestigations per reference (u) and will meet the requirements for handling AA&E in the Lautenberg Amendment:

(1) Military Personnel: National Agency Check with Law and Credit (NACLC).

(2) DoD Civilian Personnel: Access National Agency Check and Inquiries.

(3) Contractor Personnel (Including Sub-contractors): NACLC

d. Installation physical security plans required for DLA components will address the protection of AA&E. The host installation/activity will assume responsibility for coordinating tenant AA&E protective measures.

30 ENCLOSURE 4

e. If a facility outside a military installation has IDS, make arrangements to connect to local police or commercial monitoring companies from which immediate response to activated alarms can be directed. Document response agreements/requirements in applicable contracts and/or support agreements.

f. Maintain a daily log of all alarms received. Maintain logs for a minimum of 90 days and review to identify and correct IDS reliability problems. The log will reflect the following:

(1) Nature of the alarm (nuisance, system failure, illegal entry).

(2) Date, time, and location of alarm.

(3) Action taken in response to the alarm.

g. Test IDS Systems monthly to ensure the proper functioning of the alarm sensors. At least quarterly, perform checks for bulk storage areas (depots, weapon stations, etc.), Maintain a log documenting such tests and keep for one year.

h. Arms and ammunition issued to generals, flag officers and DLA criminal investigators are exempt from the requirements of reference (u), except for loss reporting and safeguarding and accountability provisions (Enclosure 5 of reference (u)).

3. THREAT AND VULNERABILITY ASSESSMENTS.

a. Conduct a threat analysis and vulnerability assessment for each DLA AA&E facility prior to its occupation, use, or major renovation.

b. Update threat analyses and vulnerability assessments annually or more frequently as new threats or vulnerabilities when known.

c. Vulnerability assessments must include specific threats, a capabilities-based threat assessment, physical security surveys and inspections, security measures, and results of security and response force exercises.

4. INSPECTIONS AND AUDITS.

a. Conduct inspections of AA&E storage facilities at intervals not to exceed 18 months utilizing the DLA Armory Checklist, Appendix and must include at a minimum:

(1) Review of physical security measures and policy compliance.

31 ENCLOSURE 4

(2) Review of existing deviations from policy.

(3) Review of suitability and screening of personnel with access to AA&E in accordance with paragraph 2.c. of this enclosure.

(4) Inventory and accountability procedures.

(5) Facility design and construction.

b. Audits of AA&E storage facilities will include at a minimum:

(1) Review of records of lost, stolen, or missing AA&E.

(2) Review of accountability and inventory procedures.

(3) Review of internal processes developed to ensure compliance with AA&E protective and accountability measures.

5. LOST, MISSING, OR STOLEN AA&E.

a. Report all incidents involving lost, missing, or stolen AA&E to DM-S within 24 hours of identifying the loss.

b. Incident reports will include:

(1) A summary of the circumstances in each instance.

(2) Dates, locations, and person(s) involved.

(3) Explanation for the loss and recovery…