W911SA-15-T-0116_Attachment_5_ATOPSEC.pdf

CONTRACT REQUIREMENTS PACKAGE ANTITERRORISM AND OPERATIONS SECURITY REVIEW COVER SHEET (The proponent for this form is the G-4)

SECTION I - PURPOSE

Purpose of cover sheet: To document the review of the requirements package performance work statement (PWS), quality assurance surveillance plan, and any applicable source selection evaluation criteria for antiterrorism (AT) and other related protection matters to include, but not limited to: AT, operational security (OPSEC), information assurance (IA), physical security, law enforcement, intelligence, and foreign disclosure.

SECTION II - STANDARD CONTRACT LANGUAGE PROVISION/CONTRACT CLAUSE TEXT APPLICABILITY AND/OR ADDITIONAL PWS LANGUAGE

ARNORTH Form XXX, V1.00

YES NO

1. AT level 1 training (general).

MO041 Snow New Contract Solicitation

PR 10634742

Daniel F. Skowronski/GS11

Antiterrorism Review: I am ATO level II certified. I have reviewed the requirements package. I understand my responsibilities in accordance with AR 525-13, Antiterrorism.

REVIEWER NAME AND RANK/CIVILIAN GRADE

Army policy requirement: A signed AT/OPSEC cover sheet is required to be included in all requirements packages except for supply contracts under the simplified acquisition level threshold, field ordering officer actions, and Government purchase card purchases. Command policy may require this form for supply contracts under the simplified acquisition level threshold.

Mandatory review and signatures: The organizational antiterrorism officer (ATO) must review each requirements package prior to submission to supporting contracting activity to include coordination with other staff review as appropriate per section II below. If the requiring activity does not have an ATO, the first ATO in the chain of command will review the contract for AT considerations. An OPSEC officer review is also mandatory.

If the standard contract or clause language text found on page 3 of this form is sufficient to meet specific contract request requirements, check "YES" in the block below and include this language in the PWS. If standard contractual text (provisions or clauses) or clause language does not apply, check "NO." If the standard PWS language applies, but is not in and of itself sufficient, check "YES" and "PWS," and include both the standard language and additional contract specific language in the PWS. If standard contractual text or clause language is not desired, but there is related contract specific language in the PWS, check "NO" and

"PWS."

PWS

2. AT awareness training for U.S. based contractor personnel traveling overseas.

3. Access and general protection policy and procedures.

4. iWATCH training.

5. Access to Government information systems.

6. OPSEC SOP or Plan requirements.

7. Requirement for OPSEC training.

8. Information assurance and/or information technology training.

9. Information assurance and/or information technology training certification.

10. Contractors Authorized to Accompany the Force.

11. Contract requiring performance or delivery in a foreign country.

12. Handling and/or access to classified information.

SECTION III - REMARKS

SECTION IV - CERTIFICATION

SIGNATURE DATE TELEPHONE NUMBER

29 Dec 2014 (608) 388-0580

Jason R. Marcellus/GS09

Operations Security Review: I am OPSEC level II certified. I have reviewed the requirements package. It is in compliance with AR 530-1, Operations Security.

REVIEWER NAME AND RANK/CIVILIAN GRADE SIGNATURE DATE TELEPHONE NUMBER

29 Dec 2014 (608) 388-0511

MO041 SnowTITLE:

SECTION V - ADDITIONAL COMMENTS

ARNORTH Form XXX, Page 2 of 3

REVIEWER NAME AND RANK/CIVILIAN GRADE SIGNATURE DATE TELEPHONE NUMBER

SECTION V - STANDARD CONTRACT PROVISION AND CLAUSE TEXT APPLICABILITY AND/OR ADDITIONAL PWS LANGUAGE

ARNORTH Form XXX,

1. AT Level I Training. This provision and/or contract text is for contractor employees with an area of performance within an Army controlled installation, facility, or area. All contractor employees, to include subcontractor employees, requiring access to Army installations, facilities, and controlled access areas shall complete

AT Level I awareness training within XX calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR or to the contracting officer, if a COR is not assigned, within XX calendar days after completion of training by all employees and subcontractor personnel. AT Level I awareness training is available at the following website: https://atlevel1.dtic.mil/at.

2. AT Awareness Training for Contractor Personnel Traveling Overseas. This standard language text required U.S. based contractor employees and associated subcontractor employees to make available and to receive government provided area of responsibility (AOR) specific AT awareness training as directed by AR 525

-13. Specific AOR training content is directed by the combatant commander with the unit ATO being the local point of contact.

3. Access, General Protection, and Security Policy and Procedures. This standard language text is for contractor employees with an area of performance within an Army controlled installation, facility, or area. Contractor and all associated subcontractor employees shall comply with applicable installation, facility, and area commander installation and/or facility access and local security policies and procedures (provided by government representative). The contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of

Emergency Services, or Security Office. Contractor workforce must comply with all personal identity verification requirements as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

4. iWATCH Training. This standard language is for contractor employees with an area of performance within an Army controlled installation, facility, or area. The contractor and all associated subcontractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity ATO). This locally developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR.

This training shall be completed within XX calendar days of contract award and within YY calendar days of new employees commencing performance with the results reported to the COR NLT XX calendar days after contract award.

5. Contractor Employees Who Require Access to Government Information Systems. All contractor employees with access to a government information system must be registered in the Army Training Certification Tracking System (ATCTS) at the commencement of services, and must successfully complete the DOD

Information Assurance Awareness training prior to access to the information systems and then annually thereafter.

6. For Contracts that Require an OPSEC Standing Operating Procedure or Plan. The contractor shall develop an OPSEC Standing Operating Procedure (SOP) or

Plan within 90 calendar days of contract award, to be reviewed and approved by the responsible Government OPSEC officer per AR 530-1, Operations Security.

This SOP/Plan will include the Government's critical information, why it needs to be protected, where it is located, who is responsible for it, and how to protect it. In addition, the contractor shall identify an individual who will be an OPSEC Coordinator. The contractor will ensure this individual becomes OPSEC Level II certified per AR 530-1.

7. For Contracts that Require OPSEC Training. Per AR 530-1, Operations Security, new contractor employees must complete Level I OPSEC training within 30 calendar days of reporting for duty. All contractor employees must complete annual OPSEC awareness training.

8. For Information assurance (IA) and/or information technology (IT) training. All contractor employees and associated subcontractor employees must complete the

DOD IA awareness training before issuance of network access and annually thereafter. All contractor employees working IA/IT functions must comply with DOD and Army training requirements in DoDD 8570.01, DoD 8570.01-M, and AR 25-2 within six months of employment.

9. For information assurance (IA) and/or information technology (IT) certification. Per DoD 8570.01-M, DFARS 252.239.7001, and AR 25-2, the contractor employees supporting IA/IT functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award.

10. For Contractors Authorized to Accompany the Force. DFARS Clause 252.225-7040, Contractor Personnel Authorized to Accompany U.S. Armed Forces

Deployed Outside the United States. The clause shall be used in solicitations and contracts that authorize contractor personnel to accompany U.S. Armed Forces deployed outside the U.S. in contingency operations; humanitarian or peacekeeping operations; or other military operations or exercises, when designated by the combatant commander. The clause discusses the following AT/OPSEC related topics: required compliance with laws and regulations, predeployment requirements, required training (per combatant command guidance), and personnel data required.

11. For Contract Requiring Performance or Delivery in a Foreign Country. DFARS Clause 252.225-7043, Antiterrorism and Force Protection for Defense Contractors

Outside the U.S. The clause shall be used in solicitations and contracts that require performance or delivery in a foreign country. This clause applies to both contingencies and noncontingency support. The key AT requirement is for nonlocal national contractor personnel to comply with theater clearance requirements and allows the combatant commander to exercise oversight to ensure the contractor’s compliance with combatant commander and subordinate task force commander policies and directives.

12. For Contracts That Require Handling or Access to Classified Information. Contractor shall comply with FAR 52.204-2, Security Requirements. This clause involves access to information classified “(Con)fidential,” “(Sec)ret,” or “Top (Sec)ret,” and requires contractors to comply with - (1) The Security Agreement

(DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M); any revisions to DOD 5220.22-M, notice of which has been furnished to the contractor.