CONTINUATION_SHEET_Solicitation_W56KGY _8208 16 _8208 R _8208 0023_-_FOUO_updated__4-4-2016_(Recovered).pdf

CONTRACT #

SOLICITATION # W56KGY-16-0023

APPENDIX D

SAFEGUARDING “FOR OFFICIAL USE ONLY” (FOUO) INFORMATION

Provided by the CECOM Director of Intelligence & Security/G2

(Updated: 14 July 2008)

Reference: AR 25-55, Chapter IV

1. The “FOR OFFICIAL USE ONLY” marking is assigned to information at the time of its creation in a DOD User Agency. It is not authorized as a substitute for a security classification marking but it is used on official Government Information that may be withheld from the public under exemptions 2 through 9 of the Freedom of Information Act.

2. Other non-security markings such as “Limited Official Use” and “Official Use Only” are used by non-DOD User Agencies for the same type of information and should be safeguarded and handled in accordance with instructions received from such agencies.

3. Use of the above markings does not mean that the information cannot be released to the public, only that it must be reviewed by the Government prior to its release, to determine whether a significant and legitimate Government purpose is served by withholding the information or portions of it.

4. IDENTIFICATION MARKINGS:

a. An unclassified document containing FOUO information shall be marked “For Official Use Only” in bold letters at least

3/16 of an inch high at the bottom of the front cover (if any), on each page containing FOUO information, and on the outside of the back cover (if any). No portion marking will be shown.

b. Within a classified document, an individual page that contains both FOUO and classified information will be marked at the top and bottom with the highest security classification appearing on the page. If an individual portion contains FOUO information but no classified information, the portion will be marked ‘FOUO.’

c. Any “FOR OFFICIAL USE ONLY” information released to a contractor by a DOD User Agency is required to be marked with the following statement prior to transfer:

THIS DOCUMENT CONTAINS INFORMATION EXEMPT FROM MANDATORY DISCLOSURE UNDER THE

FOIA. EXEMPTIONS APPLY.

d. Removal of the “FOR OFFICIAL USE ONLY” marking can only be accomplished by the originator or other competent authority. When “FOR OFFICIAL USE ONLY” status is terminated, all known holders will be notified to the extent possible.

5. DISSEMINATION: Contractors may disseminate “FOR OFFICIAL USE ONLY” information to their employees and subcontractors who have a need for the information in connection with a classified contract.

6. STORAGE: During normal working hours “FOR OFFICIAL USE ONLY” information shall be placed in an out-of-sight location if the work area is accessible to persons who do not have a need for the information. During non-working hours, the information shall be stored to preclude unauthorized access. Filing such material with other unclassified records in unlocked files or desks is adequate when internal building security is provided during non-working hours. When such internal security control is not exercised, locked buildings or rooms will provide adequate after hours protection or the material can be stored in locked receptacles such as file cabinets, desks or bookcases.

7. TRANSMISSION: “FOR OFFICIAL USE ONLY” information may be sent via first-class mail or parcel post. Bulky shipments may be sent fourth-class mail.

8. DISPOSITION: When no longer needed, FOUO information may be disposed of by tearing each copy into pieces to preclude reconstructing, and placing it in a trash container or as directed by the User Agency.

9. UNAUTHORIZED DISCLOSURE: Unauthorized disclosure of “FOR OFFICIAL USE ONLY” information does not constitute a security violation but the releasing agency should be informed of any unauthorized disclosure. The unauthorized disclosure of FOUO information protected by the Privacy Act may result in criminal sanctions.

10. Point of contact is CECOM Director of Intelligence & Security/G2, ATTN: AMSEL-MI.

SOLICITATION # W56KGY‐16‐R‐0023

DD 254 BLOCK 13 CONTINUATION SHEET

10j. Safeguarding "For Official Use Only” (FOUO) information, Appendix D. FOUO Information generated and/or provided under this contract shall be safeguarded and marked as specified in AR 25-55 and DoD 5200.1-M (Marking is in Volume 2).

10k. Contractor requires access to NIPRNet, and Security/Program Classification Guidance will be provided by the government installation that the contractor is performing work for, within 10 working days from date of request from contractor.

11a. Contractor performance is restricted to Government facility (ies). Government agency or activity will provide security classification guidance for performance of this contract. Submit visit request to the KO and/or Security

Management Office for need-to-know verification.

11j. OPSEC requirements are IAW AR 530-1, Chapter 6 as listed in the PWS CDRL # A002.

11l. IT Sensitive Duties Required (See Block 13, Item 13a).

13a. Contractor personnel performing IT sensitive duties are subject to investigative and assignment requirements IAW

AR 25-2, AR 380-67, DoD 8570.0 and affiliated regulations. Army regulation available at www.apd.army.mil.

13b. Foreign subcontractors, foreign vendors and/or visitors that are not cleared US Companies, participating in

Army foreign disclosure issues will be handled in accordance with AR 380-10, Foreign Disclosure and Contacts with

Foreign Representatives, dated 4 DEC 2013.

All disclosures (i.e., oral, visual, briefing, documents) to foreign nationals require prior approval by the foreign disclosure officer.

All requests for non-US cleared Foreign subcontractor and/or Foreign own companies to perform on this contract must be requested from the Prime Contract to the KO through Program Office and approved by Foreign Disclosure Officer.

13c. Classified information will be protected IAW the NISPOM, Chapter 5. All security incidents involving classified information will be reported to the CECOM G2 Industrial Security Office, and DSS Industrial Security Representative.

Information will be forwarded to KO and the PM for a program damage assessment to be conducted IAW AR 380-49

13d. All subcontractor DD Form 254s and subcontractor tier DD Form 254s will be sent to the KO. Any

Contractors/subcontractors owned by Foreign Companies and that have a clearance issued by the Defense

Security Service under a Special Security Agreement need to have a National Interest Determination (NID) approved if access is required to: Secret; COMSEC; Restricted Data; SCI and/or SAP. NID requirements and justification must be sent through CECOM G2 to be forwarded to the approving agencies.

Only after a NID approval is received will a FOCI contracting firm be authorized to work on the program.

13e. Security Training and Briefing: IAW AR 380-49 Chapter 3, the FSO will provide Threat Awareness and Reporting

Program (TARP) training in addition to initial and refresher security training IAW AR 381-12, paragraph 1-14 and

Chapter 2 for contractors working in contractor facilities. Contractors may be exempt from such security training if they can provide documentation they have had similar training from their FSO. The FSO will forward Certificates and/or a signed Letter of Certification for Training to the COR for verification of required training to be included in the contract folder.

_Integrated/embedded contractors will receive security training from the assigned CECOM Security

Manager/Representative. Some Security training provided to integrated/embedded contractors will include:

--TARP Training: Live training provided by 902d

– Annual training requirement

--Initial Security Orientation: Online training available on the Army Learning Management System (ALMS) site, reference

ALARACT 207-2103 – Initial training

--Annual Security Orientation: Online training available on the Army Learning Management System (ALMS) site, reference http://www.apd.army.mil/

SOLICITATION # W56KGY‐16‐R‐0023

DD 254 BLOCK 13 CONTINUATION SHEET

ALARACT 207-2103 – Annual training requirement

--Derivative Classification Training, reference DoD 5200.01-V3-Biennial training requirement

--Operations Security Training, reference AR 530-1

--Annual training requirement

--Foreign travel training, AR 525-13 – Required when traveling abroad

The previous listing includes some training requirements that are provided. Any training requirements that the installation or tenant facilities require of the contractors must be added to the DD 254 and the security section of the contract document AR 380-49 Chapter 3

13f. The contractor must submit subcontracts to DD Form 254’s to the KO for the contract file and forward to

CECOM G2 for review to insure Army requirements flow down to the subcontractor.

13g. All Facility Clearance sponsorships for subcontractors must have Government approval and certification on the subcontractor’s DD Form 254. Submit all requests to the CECOM G2 Industrial Security.

13h. Records of security related training of contractors and imbedded contractors must be available for review.

Certification and Signature: Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

Vincent Santorelli

Program Analyst/COR (443)861-6872

March 29, 2016