TE-33_Draft_Security_Addendum.pdf

Security

Addendum As Applied to Solicitation

Date: 3 August 2015

1. The Director, DIA has exclusive security responsibility for all Sensitive Compartmented Information (SCI); classified material released to or developed under the contract and held within the Mission Command Training Program (MCTP) Sensitive Compartmented Facility (SCIF). DoD 5105.21-M-1 (SCI Administrative Security Manual), DCID 6/1, DCID 6/3, DCID 6/4, DCID 6/6, DCID 6/7, DCID 6/9, National Industrial Security Program Operating Manual (NISPOM), DoD.22-M (Department of Defense Industrial Security Program) and will comply with all regulations/manuals/directives stated therein which provide the necessary security and classification guidance for personnel, information, physical, AIS, and technical security measures and is a part of the SCI security specifications for the contract. Inquiries pertaining to SCI classification guidance determination or interpretations shall be directed to the Contracting Officer/Contracting Officer Representative (CO/COR) identified in paragraph (3), below.

2. Date to be completed: 00/00/0000 Contractor personnel performing work under this contract must have a Secret security clearance at time of the proposal submission, and must maintain the level of security required for the life of the contract. Select contractor personnel will be required to have a Top Secret security clearance. The security requirements are in accordance with the DD254.

3. The User Agency SCI Security Office will recognize this date as the completion date for the contract. The User Agency SCI security office will initiate action to debrief contractor personnel with access to this contract unless extensions or modifications to the contract are received by the User Agency SCI security office no later than 30 days after the established date.

4. The name, telephone number, e-mail address, and address of the KO/COR for this contract is: Mr. Robert M. Hanson, 913 684-5916, robert.m.hanson@us.army.mil, ATTN: ATZL-CTB-S3 (Robert Hanson) Commander Mission Command Training Program 400 Kearny Avenue Fort Leavenworth, Kansas 66027-1305

5. This contract requires continuing SCI access. (Item 10. e .(1))

6. This contract does require access to SCI at U.S. Government installations. (Item 11. a.)

7. The private use of classified information is not permitted except in furtherance of a lawful and authorized Government purpose.

8. If DD Form 254, Block 11f, is marked “Yes”, the contractor requires access to classified outside the U.S., Puerto Rico, U.S. Possessions and Trust Terrorities in the following cities and countries: Korea, Iraq, Afghanistan, Germany, Kuwait, Japan, Italy, Thailand, England and Poland. (Item 11.f.)

9. SCI material associated with this contract will be separately stored and worked on only in facilities accredited through DIA/DAC-2A2, or accredited through another Government agency and properly covered by a Co- Utilization Agreement (CUA).

(Item 11.a.)

10. The contractor will establish and maintain a current access list of those employees working on the contract. A copy of this list will be furnished to the KO/COR, supporting SCI security office, and User Agency SCI security office. (Item 10. e .(1))

11. Names of contractor personnel requiring access to SCI will be submitted to the KO/COR for approval. On written approval by the CO/COR, forms requesting Single Scope Background Investigations (SSBI) will be prepared in accordance with the National Industrial Security Operating Manual (NISPOM) and submitted to the Defense Security Service. (Item 10. e .(1))

12. All contactor personnel nominated for access to classified information, (released or generated under this contract) must be U.S. citizens granted a final security clearance in accordance with DCID 6/4 by the Cognizant Security Authority (CSA), have a valid need-to-know, sign a nondisclosure agreement, and complete applicable security indoctrination’s, prior to being given access. (Item 10. e .(1))

13. Security briefings will be in accordance with the NISPOM, and/or other appropriate directives, (DoD 5105.21- M-1). In all cases, the employee will be briefed on his/her obligation to safeguard the information. The employee/contractor will be debriefed according to the applicable regulations when the access is terminated and/or no longer has the need-to-know. (Item 10. e .(1) (2) and item 10.g.)

14. . As a further enhancement of security measures, for the protection of classified information, the Contractor agrees to permit necessary polygraph interviews on Contractor personnel having access to National Security Information (NSI) under mailto:robert.m.hanson@us.army.mil this contract. It is understood that the polygraph interview will be limited to counterintelligence issues. (Item 10. e .(1))

15. The Special Security Officer/Contractor Special Security Officer, (SSO/CSSO) will maintain records, by name and title, or all employees and authorized visitors who have access to the classified and/or intelligence material. The SSO/CSSO will confirm that all employees/visitors are appropriately cleared and authorized, prior to gaining access to the material. (Item 10. e .(1))

16. The contractor will inform the KO/COR and the User Agency SCI security office at least 20 working days in advance of any business visits that will involve the passing of access from one location to another. (Note: Emergency exceptions will be handled on a case-by-case basis.) The KO/COR will certify need-to-know and approve passing of clearances by User Agency SCI security offices. (Item 10. e .(1))

17. The government activity will provide security and classification guidance for the performance of this contract. The highest level of classification for the contract is TOP SECRET with access to SCI.

18. . ALL MATERIALS GENERATED BY THE CONTACTOR (including but not limited to correspondence, drawings, models, mockups, photographs, schematics, status, progress, and special reports) will be classified according to its own content and/or by special instructions issued by the CSA, Contracting Officer or his/duly appointed representative. (Item 10. e.(1) and (2))

19. All classified information received or generated in performance of this contract is the property of the U.S. Government and shall be safeguarded, classified (according to the marking shown on the source material) and returned to the U.S.

Government in accordance with the DoD 5105.21-M-1 and/or other applicable documents. (Item 10. e.(1) and (2))

20. Special instructions and controls for the handling, processing, storing, and transmission of classified information and material are provided in the appropriate regulations, manuals, or directives. The documents are identified as follows: DIAM (58-series manuals), DIA Desk Reference Guide to Executive Order 12958, DoD 5105.21-M-1 (Sensitive compartmented Information (SCI) Administrative Security Manual), AR 380-28 (C) (Department of the Army Special Security System), and AR 380-5 (DA Information Security Program). (Item 10. e.(1) and (2))

21. SCI with restrictive caveats will be released to the contactor only when the originator’s approval has been obtained. All other SCI may be SCI may be released to the contractor on approval by the KO/COR. The contractor will not release SCI to any personnel without prior approval from the KO/COR. (Item 10. e.(1))

22. NO PUBLIC RELEASE OF ANY COLLATERAL OR SCI IS AUTHORIZED. The contractor will not make any reference to any collateral or SCI access, even unclassified acronyms, in any public publication. Requests for release for other than SCI, (CLASSIFIED or UNCLASSIFIED) must be approved by the US Army Mission Command Training Program (MCTP) through the KO/COR. (Item 12).

23. Any SCI released to the contractor in support of this contract remains the property of the Military Department, agency, or organization that releases it. The contractor will maintain a record of all SCI released to his custody and on completion or cancellation of the contract, must return all such materials in accordance with disposition instructions of the KO/COR unless a follow-on contract specifies that the material will be transferred to a follow-on contract or the KO/COR approves retention of the material. This retention must be in accordance with approved procedures, to include a final DD Form 254. (Item 10. e.(1))

24. The contractors will not release classified and/or intelligence material to any activity, employee, or other person not directly engaged in providing under this contract unless specific written authorization for such release is received from the KO/COR. This prohibition precludes release without written authority to another contractor or subcontractor, Government agency, private individual, or other organization. (Item 10.

e.(2))

25. Unclassified information released or generated under this contract will be restricted in its dissemination to contractor and Government personnel involved in the contract. Release in open literature or exhibition of such information is strictly prohibited without permission of the KO/COR. (Item 12)

26. Intelligence material, whether or not bearing control markings, will not be released to foreign visitors, foreign nationals, or immigrant aliens regardless of their position or level of their security clearance, except with the specific permission of the originating agency.

(Item 10. e.(1) and (2))

27. Electronic processing of SCI must be accomplished on equipment accredited in accordance with DoD 5105.21- M-1, DIAM 50-5, DCID 6/3, and the Joint DoDIIS Cryptologic SCI Information Systems Security Standards. (Item 10. e.(1))

28. The contractor will control and account for reproduced SCI related material in the same manner as pertains to the originals. Markings will be in accordance with DoD 5105.21-M1 and applicable regulations. (Item 10. e.(1))

29. The contractor will have access to the NSC accredited SCIF for the purpose of processing SCI for contract requirements and the Contract Monitor will provide this information to the NSC Special Security Representative and the CAC Special Security

Officer. Any additional requirements needed to fulfill the contract will be addressed by the Contract Monitor. (Item 11. a.) Also the contractor shall provide Contractor Special Security Monitor (CSSM) in the NSC SCIF during a twenty four hour exercise.

Contractor shall open, close, occupy, and maintain security of the Government SCIF in the absence of the Government (Special Security Representative) SSR or (Assistant Special Security Representative) ASSR.

30. The contractor will comply with DIA policy, and policy as may be revised, regarding the use of Personal Electronic Devices (PED) within DIA accredited facilities. Any additional requirements needed to fulfill the contract will be addressed by the Contract Monitor. Should the contractor be within spaces belonging to another agency (host), the contractor will comply with the host requirements. A PED is any electronic device that receives, transmits, stores, processes, records audio/visual, scans, or otherwise is capable of manipulating information in any form. A PED includes but is not limited to cellular telephones, cameras, pocket scanners, voice recorders, pagers, and computers. (Item 10. e.(1))

31. The contractor will reference DoD 5205.2 “DoD Operations Security Program,” for guidance on operations security (OPSEC) requirements. (Item 11.j.)

32. Transporting of SCI on commercial aircraft is only authorized by an exception waiver issued by the User Agency Senior Intelligence Officer (SIO). (Item 10.

e.(1))

33. Classified and/or intelligence related material released to or generated by the contractor may be destroyed locally by the contractor. Such destruction will be in accordance with the applicable regulations: DoD 5105.21-M- 1 or Chapter 5, Section 7, NISPOM, utilizing destruction procedures, devices, methods, or equipment approved by the National Security Agency. (Item 10. e.(1))

34. By virtue of access to SCI and/or intelligence material, contractor employees may have restrictions placed on them for foreign travel in or through designated countries or geographic areas. The contractor shall be responsible for exercising adequate supervision to assure that employees are willing to comply with notification requirements for anticipated and completed travel. (Item 11.f.)

35. . The contractor is authorized direct communications with the designated KO/COR and the User Agency SCI security office in all matters pertaining to SCI requirements.

The KO/COR identified in paragraph (3), above, will received a copy of any correspondence, which may have an impact upon the contractor’s ability to perform under this contract.(Item 10. e.(1))

36. On receipt of any SCI that impacts the cost of the contract, the contractor will inform the KO/COR, who, in turn, will notify the Contracting Officer/Activity prior to expending additional funds. The User Agency SCI security office will receive a copy of this cost modification as well. (Item 10. e.(1))

37. The contractor is governed by DoD 5220.22-S COMSEC Supplement to the NISPOM. Access to COMSEC material is restricted to U.S. citizens holding a final U.S. Government clearance. Such information is not releasable to personnel holding only reciprocal clearances. A COMSEC account is not required for contractor access.

Contractor must comply with DIA/SY guidelines. (Item 10. a.)

38. If the contractor requires access to North Atlantic Treaty Organization (NATO) information. Special briefings are required for access to NATO information, and then access to classified NATO information requires a final U.S. Government cleared at the Secret level. Access to this information will be authorized at the location identified in Block 8a. Contractor personnel shall be debriefed by the Government program manager prior to departure from this contract. (Item 10. g.)

39. If the contractor is required access to Special Access Information, then special briefings are required for each individual program. Access to Special Access Information requires a final U.S. Government clearance at the Top Secret level or as identified by the Special Program Manager for each, appropriate, Special Access Program. The contractor must contact the Special Access Manager for each program, through the KO/COR, for authorization and access to such material. (Item 10.f.)

40. If the contractor requires access to Foreign Government Information (FGI), then access to FGI requires a final U.S. Government Facility Clearance at the level required for this contract. Access to FGI will be granted on a case- by-case basis at the locations identified in DD 254, Block 8a. FGI will be protected, handled, disseminated and stored at the U.S. facility. (Item

10. h.)

41. For Official Use Only (FOUO) Information will be safeguarded as specified in DoD 5400.7R “Protecting FOUO Information” and as may be supplemented by DIA and the Department of the Army. (Item 10. j.)

42. If the contractor requires use of the Defense Courier Service (DCS), then the contractor, through the CO/COR, must contact DCS, Fort Meade, MD, to establish a DCS account. (Item 11. k.)

43. . Subcontracting this contract or any portion thereof requires the contractor to sponsor the subcontractor and must be approved by the KO/COR. The subcontractor must complete a separate DD 254. Additionally the subcontractor must have a final facility clearance issued by Defense Security Service (DSS) or other U.S. Government agency authorized to issue equivalent clearances.

44. If the contractor requires the services of the Defense Technical Information Center (DTIC), then the contractor, through the KO/COR must submit DD Form 1540, Registration for Scientific and Technical Information Services, and/or DD Form 2345, Military Critical Technical Data Agreement, as may be applicable, to the address on the form(s). (Item 11.g.)

45. Contractors are prohibited from having access to ‘PROPRIETARY INFORMATION” (abbreviated PROPIN or PR), and “DISSEMINATION AND EXTRACTION OF INFORMATION CONTROLLED BY ORIGINATOR (abbreviated ORCON) unless in compliance with one of the following. (Item 10. e.(1))

a. The originating agency of the PROPIN and ORCON provides written consent to the accessing contractor, and the accessing contractor agrees in writing with the originating agency not to divulge, use or otherwise release PROPIN and ORCON. The originating agency of the PROPIN and ORCON is responsible for identifying and marking PROPIN and ORCON. The CO/COR is responsible for identifying marked PROPIN and ORCON information within their control and initiating the request and release documentation between the originating agency owing the

PROPIN and ORCON and the accessing contractor. If the originating agency of the PROPIN and ORCON fails to or denies access to the accessing contractor, or if the accessing contractor fails to or does not agree to not divulge, use, or other release PROPIN or ORCON, then the KO/COR is responsible for denying PROPIN and ORCON access until the appropriate documentation has been completed. Contractors who intentionally obtain access to PROPIN and ORCON without the required documentation, may be subject to civil and criminal liabilities and penalties as provided by law. U.S. Government employees who release PROPIN and ORCON, whether intentionally or accidentally, to unauthorized contractors, are subject to civil and criminal liabilities and penalties as provided by law, or

b. A. U.S. Government employee (military or civilian) is on-site, when contractor access to PROPIN or ORCON is possible or available. (Item 10. e.(1))

46. If the contractor requires access to JWICS/INTELINK the DD 254 will state so.

Accounts will be requested from the local Special Security Office or MCTP Special Security Representative. DIA retains full responsibility for the secure operation of the connectivity, and protection of classified material on the system. The KO/COR will ensure that the concept of operations includes how access to all Proprietary Information (PROPIN), ORCON, GAMMA, Law Enforcement Sensitive (LES), and other special program materials are secured to preclude contractor access to this material, or as outlined in Paragraph 46, above. (Item 11. l.)

47. Contractors who have TOP SECRET/SCI access may have unescorted access to a government facility, including Government Owned Contractor Operated (GOCO) facilities, and may be permitted to work alone inside the facility without the requirement for the presence of a U.S. Government employed representative provided all PROPIN, ORCON, GAMMA, SIOP, CNWDI, Law Enforcement Sensitive (LES) and other special program materials are secured to preclude contractor access to this material, or as outlined in Paragraph 44, above. (Item 11.a)

48. The contractor is governed by DCID 6/4, ‘Personnel Security Standards and Procedures Governing Eligibility for Access to Sensitive Compartmented Information (SCI)’ and as may be supplemented by DIA and DA. (Item 10. e.(1))

49. . The contractor must comply with Foreign Ownership, Control or Influence (FOCI) restrictions and notifications as outlined in the NISPOM. (Item 10. e.(1) and (2))

50. . If the contractor identified in DD 245, Block 6a, Block 7a or Block 8a is identified as being under FOCI by Defense Security Service (DSS), a favorable National Interest Determination (NID) must be completed as outlined within the NISPOM prior to the contractor being awarded the contract and having access to proscribed information.

Proscribed information includes COMSEC, Sensitive Compartmented Information, Critical Nuclear Weapons Design Information, Restricted Data, Formerly Restricted Data, Top Secret, Special Access Programs, other classified information under the cognizance of such, and other Executive Branch Departments and agencies for classified information under the cognizance of such. (Item 10. e. (1) and (2)

51. The contractor must have a FINAL TOP SECRET FACILITY CLEARANCE prior to having access to HCS Sensitive Compartmented Information, and to Restricted Data, Critical Nuclear Weapons Design Information. (Item 10. e.(1))

52. The contractor must have valid need-to-know as determined by the KO/COR prior to having access to Law Enforcement Sensitive (LES) information. A facility clearance is not required. (Item 10. e.(1) and (2))

53. The contractor may not introduce or use any wireless transmission devices within any DIA facilities without first receiving written permission from DAC-2A2. Military Departments, Major Commands, Combatant Commands, Senior Intelligence Officers, and local Special Security Officers or Contractor Special Security Officers may require more stringent standards which must be complied with. If the contractor is located within another agency’s facility or accredited facility, the contractor will comply with the other agency’s policies regarding the introduction, activation or use of any such device.

The Director, National Intelligence (DNI) may by policy, directive or other means, bar the introduction of any wireless transmission device into any SCIF area after the date of this contract. Should this occur the DNI policy will automatically supercede this paragraph and if the wireless device is still required to be introduced into the SCIF area, justification and a waiver request must be submitted to DAC-2A for a determination.

(Item 10. e.(1))

54. Contractors who anticipate a change of name and/or ownership, must notify the KO/COR in writing upon consideration of the proposed change. Changes may affect facility clearances which may affect continuance of the contract. (Item 10. e.(1) and (2))

55.A security review of this DD Form 254 is required during the different stages of the contract or any revision of this contract. The KO/COR will provide the contractor with applicable changes in security requirement(s) by issuing a revised DD Form 254.

MCTP Support contractor’s shall be given combinations to access the safe’s in room 101, located in the McHugh Training Center. The safes will be used to store classified drives and storage of classified media. (Item 10. e.(1) and (2))

NOTE: CONTRACTORS, PLEASE GO THROUGH YOUR CONTRACT

MONITOR/CONTRACTING OFFICER REPRESENTATIVE (KO/COR) PRIOR

TO CONTACTING THE OFFICES BELOW.

Ft Leavenworth, Ks Points of Contact for Security Issues:

W911S0-11-C-0014 Contract Monitor

W911S0-11-C-0014 Contracting Officer Representative Mr. Robert Hanson 913 684-

CAC Senior Intelligence Officer Mrs. Pamela H. Senterfitt 913 684-0035

CAC Special Security Officer Mr. Peter Robinson 913 684-4634

MCTP Security Manager Mr. Keith Collier (FDO) 913 684-7824

MCTP S-2 CPT Candra K. Maita 913-684-7807