DD_FM_254_OPSEC_Addendum_(002).pdf

Prime Contract or Solicitation #

FD2060-18-00562

Ref Item 11.j. OPSEC requirements are as follows:

Reference: National Security Decision Directive (NSDD) 298

DOD 5205.02

DODD 5205.02E

AFI10-701AFGM_2018-01

All contractors, subcontractors, their employees, associates, and consultants who have access to critical informati5on must comply with the DOD and Air Force-sponsored Operations Security (OPSEC) program. The OPSEC Program is directed by NSDD298, DOD Publications, and applicable Air Force guidance.

OPSEC is a systematic means of identifying and protecting information which an adversary could use to their advantage or to our disadvantage. Critical Information (CI) is generally unclassified but can become classified through compilation. This sensitive information has been identified by the organization’s OPSEC program as requiring protection. OPSEC Measures (OM) are control standards with which all personnel must comply in order to protect CI against adversaries.

Only contract personnel working on, or in support of the specified contract are required to take the OPSEC training.

RESPONSIBILITIES:

The 448 SCMW OPSEC Program Manager at Robins AFB will provide OPSEC training curriculum for use by the contractor to the Contracting Officer Representative (COR) or to the Contract’s Program Manager (Logistician).

Critical Information and Indicator Listings (CIILs) must be protected by all contract personnel. Approved organizational OPSEC measures must be used by all contract personnel to protect critical information in their possession and protect against current foreign intelligence and industrial espionage threats. The 448 SCMW OPSEC Program Manager and the COR/Contract’s Program Manager must ensure all contract personnel working on the contract or having access to CI attend initial and annually recurring refresher training and that the approved curriculum is presented. Training completion will be documented on AF IMT 1151. Training must be provided before contract personnel are allowed access to or handling of critical information. All contract personnel will comply with the organizations OPSEC standards and practices as trained. Additional training may be required based on updates to critical information, OPSEC measures, intelligence threat/vulnerability, or other fundamental changes to the OPSEC program. The

Prime Contract or Solicitation #

FD2060-18-00562

OPSEC Coordinator is responsible for contacting the OPSEC Program Manager if OPSEC isn’t written into the contract.

The COR/Contract’s Program Manager will track OPSEC training statistics for all personnel working on the contract, when each individual has received the required OPSEC training, and when refresher training is due. Training statistics must be forwarded to the OPSEC Program Manager at the end of each calendar quarter and/or upon request.

Contactors with OPSEC requirements within a contract must ensure employees receive OPSEC training as specified within the contract. Accomplishment of training must not exceed 90 days from initial assignment to a contract with OPSEC requirements. Annual training will be accomplished NLT 30 September of each year. The contractor personnel will not be given access to an organizations CIIL until after training has been completed and documented by the organization.

Prior to seeking approval through Robins AFB Public Affairs, any information to be released outside of official U.S. Government channels, via any media, must be approved through an OPSEC review by the 448 SCMW Security Manager or OPSEC Program manager.

All personnel must promptly report OPSEC related incidents, issues, and concerns to:

448 SCMW OPSEC Program Manager, 638scmg.na@us.af.mil