W911SA-18-Q-3110_Attachment_1_ATOPSEC.pdf

Requirements Package Title ________________________________________________________________________________ Date _________________

Date _____________________________

Phone Number ___________________

Date _____________________________

Phone Number ___________________

10. Contractor Authorized to Accompany the Force clause

5. Army Training Certification Tracking System (ATCTS) registration for contractor employees who require access to government information systems.

6. For contracts that require a formal OPSEC program.

11. Contract requiring performance or delivery in a foreign country

14. Delivery of Food and Water

Operations Security Review Signature: I am OPSEC level II certified and have reviewed the requirements package, and it is in compliance with Army Regulation 530-1, Operations Security .

7. Requirement for OPSEC training

Reviewer____________________________

Typed or printed name, rank/civ grade _____________________Signature

Date _____________________________

Phone Number ___________________

9. Information assurance/information technology certification

12. Handling/Access to Classified Information

4. iWATCH training

13. Threat Awareness Reporting Program

CONTRACT REQUIREMENTS PACKAGE ANTITERRORISM/OPERATIONS SECURITY REVIEW COVER SHEET

2a. For contractor requiring Common Access Card (CAC) 2b. For contractor not eligible for CAC, but requires access to DoD facility or

3. AT awareness training for US based contractor personnel traveling overseas.

8. Information assurance/information technology training

1. AT level 1 training (general)

Section I.

To document the review of the requirements package, statement of work (SOW), quality assurance surveillance plan and any applicable source selection evaluation criteria for antiterrorism (AT) and other related protection matters to include, but not limited to: AT, operations security (OPSEC), information assurance (IA)/cyber security, physical security, law enforcement, intelligence, foreign disclosure.

A signed AT/OPSEC cover sheet is required to be included in all requirements packages except for supply contracts under the simplified acquisition level threshold, field ordering officer actions and Government purchase card purchases. Command policy may require this form for supply contracts under the simplified acquisition level threshold.

The requiring activity antiterrorism officer (ATO) must review each requirements package prior to submission to the supporting contracting activity to include coordination with other staff elements for review as appropriate per section II below. If the requiring activity does not have an ATO, the first ATO in the chain of command will review the contract for considerations. An OPSEC and Info Officer review is also mandatory.

Section II. Standard Contract Language Provision/Contract Clause Text Applicability and/or Additional SOW Language. If standard contract or clause language found on page 2 (Section IV) of this form is sufficient to meet specific contract request requirements, check "yes" in block below and include this language in the SOW. If standard contract text (provisions or clauses) or clause language does not apply, check "no." If the standard SOW language applies, but is not in of itself sufficient, check "yes" and "SOW" and include both the standard language and additional contract specific language in the SOW. If standard contract text or clause language is not desired, but there is related contract specific language in the SOW, check "no" and "SOW." If yes is marked for items 1, 3, 4, 7, 8, 12 or 13, training is required. Mandatory training must be measured as a deliverable and evaluated in the QASP.

2. Access and general protection policy and procedures

Antiterrorism Review Signature: I am an ATO (Level II Certified) and have reviewed the requirements package and understand my responsibilities in accordance with Army Regulation 525-13, Antiterrorism .

Information Assurance Review Signature: I am IAM and IAT level III certified and have reviewed the requirements package and it is in compliance with DOD 8570.01-M and DOD 8580-1 para 4.

Reviewer____________________________

Typed or printed name, rank/civ grade _____________________Signature

Reviewer____________________________

Typed or printed name, rank/civ grade _____________________Signature

13. Threat Awareness Reporting Program

2. Access and general protection policy and procedures 2a. For contractor requiring Common Access Card (CAC) 2b. For contractor not eligible for CAC, but requires access to DoD facility or

Shower and Hand Washing Spt, Dragon Fire Exercise 30 Apr 18

Section III IAT Remarks:

Section II AT Remarks: 1.6.1 Quality Control. Recommend incorporating "As the holder of a contact with the Department of Defense, it is incumbent upon the awardee to insure that all products and/or packaging have not been tampered or contaminated. Delivery conveyances will be locked or sealed at all times, except when actively loading or unloading. Unsecured vehicles will not be left unattended." "The supplies delivered under this contract shall be transported in delivery conveyances maintained to prevent tampering with and / or adulteration or contamination of the supplies, and if applicable, equipped to maintain a prescribed temperature."

Section III OPSEC Remarks:No known OPSEC measures needed based on PWS.

No No No No N/A N/A

N/A

N/A N/A N/A N/A N/A N/A N/A N/A Yes

N/A N/A N/A N/A N/A N/A

N/A

N/A No No No N/A N/A N/A N/A N/A Yes

20180430

30APR2018SFC Lee, Jason

Zachary G. Whitehead

LEE.JASON.

1254188235

Digitally signed by

LEE.JASON.1254188235

DN: c=US, o=U.S. Government, ou=DoD, ou=PKI, ou=USA, cn=LEE.JASON.1254188235 Date: 2018.04.30 15:40:57 -06'00'

WHITEHEAD.ZA

CHARY.GILES.12

71505368

Digitally signed by

WHITEHEAD.ZACHARY.GILES.1271505368

DN: c=US, o=U.S. Government, ou=DoD, ou=PKI, ou=USA, cn=WHITEHEAD.ZACHARY.GILES.1271505368 Date: 2018.04.30 14:28:19 -06'00'

719-366-1360

719-366-1361

6. For contracts that require a formal OPSEC program. The contractor shall develop an OPSEC Standing Operating Procedure (SOP)/Plan within 90 calendar days of contract award, to be reviewed and approved by the responsible Government OPSEC officer. This plan will include a process to identify critical information, where it is located, who is responsible for it, how to protect it and why it needs to be protected. The contractor shall implement OPSEC measures as ordered by the commander. In addition, the contractor shall have an identified certified Level II OPSEC coordinator per AR 530-1.

5. Army Training Certification Tracking System (ATCTS) registration for contractor employees who require access to government information systems. All contractor employees with access to a government information systems must be registered in the ATCTS (Army Training Certification Tracking System) at commencement of services, and must successfully complete the DOD Information Assurance Awareness prior to access to the IS and then annually thereafter.

4. iWATCH Training. This standard language is for contractor employees with an area of performance within an Army controlled installation, facility or area. The contractor and all associated sub-contractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity ATO). This locally developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 calendar days of contract award and within 05 calendar days of new employees commencing performance with the results reported to the COR NLT 30 calendar days after contract award.

Section IV. Standard Contract Language/Contract Clause Applicability and/or Additional SOW Language.

Requirements Package Title ________________________________________________________________________________ Date _________________

Date _____________________________

Phone Number ___________________

Date _____________________________

Phone Number ___________________

10. Contractor Authorized to Accompany the Force clause

5. Army Training Certification Tracking System (ATCTS) registration for contractor employees who require access to government information systems.

6. For contracts that require a formal OPSEC program.

11. Contract requiring performance or delivery in a foreign country

14. Delivery of Food and Water

Operations Security Review Signature: I am OPSEC level II certified and have reviewed the requirements package, and it is in compliance with Army Regulation 530-1, Operations Security .

7. Requirement for OPSEC training

Reviewer____________________________

Typed or printed name, rank/civ grade _____________________Signature

Date _____________________________

Phone Number ___________________

9. Information assurance/information technology certification

12. Handling/Access to Classified Information

4. iWATCH training

13. Threat Awareness Reporting Program

CONTRACT REQUIREMENTS PACKAGE ANTITERRORISM/OPERATIONS SECURITY REVIEW COVER SHEET

2a. For contractor requiring Common Access Card (CAC) 2b. For contractor not eligible for CAC, but requires access to DoD facility or

3. AT awareness training for US based contractor personnel traveling overseas.

8. Information assurance/information technology training

1. AT level 1 training (general)

Section I.

To document the review of the requirements package, statement of work (SOW), quality assurance surveillance plan and any applicable source selection evaluation criteria for antiterrorism (AT) and other related protection matters to include, but not limited to: AT, operations security (OPSEC), information assurance (IA)/cyber security, physical security, law enforcement, intelligence, foreign disclosure.

A signed AT/OPSEC cover sheet is required to be included in all requirements packages except for supply contracts under the simplified acquisition level threshold, field ordering officer actions and Government purchase card purchases. Command policy may require this form for supply contracts under the simplified acquisition level threshold.

The requiring activity antiterrorism officer (ATO) must review each requirements package prior to submission to the supporting contracting activity to include coordination with other staff elements for review as appropriate per section II below. If the requiring activity does not have an ATO, the first ATO in the chain of command will review the contract for considerations. An OPSEC and Info Officer review is also mandatory.

Section II. Standard Contract Language Provision/Contract Clause Text Applicability and/or Additional SOW Language. If standard contract or clause language found on page 2 (Section IV) of this form is sufficient to meet specific contract request requirements, check "yes" in block below and include this language in the SOW. If standard contract text (provisions or clauses) or clause language does not apply, check "no." If the standard SOW language applies, but is not in of itself sufficient, check "yes" and "SOW" and include both the standard language and additional contract specific language in the SOW. If standard contract text or clause language is not desired, but there is related contract specific language in the SOW, check "no" and "SOW." If yes is marked for items 1, 3, 4, 7, 8, 12 or 13, training is required. Mandatory training must be measured as a deliverable and evaluated in the QASP.

2. Access and general protection policy and procedures

Antiterrorism Review Signature: I am an ATO (Level II Certified) and have reviewed the requirements package and understand my responsibilities in accordance with Army Regulation 525-13, Antiterrorism .

Information Assurance Review Signature: I am IAM and IAT level III certified and have reviewed the requirements package and it is in compliance with DOD 8570.01-M and DOD 8580-1 para 4.

Reviewer____________________________

Typed or printed name, rank/civ grade _____________________Signature

Reviewer____________________________

Typed or printed name, rank/civ grade _____________________Signature

13. Threat Awareness Reporting Program

2. Access and general protection policy and procedures 2a. For contractor requiring Common Access Card (CAC) 2b. For contractor not eligible for CAC, but requires access to DoD facility or

Laundry Svc, Dragon Fire Exercise 30 Apr 18

Section III IAT Remarks:

Section II AT Remarks: 1.6.1 Quality Control. Recommend incorporating "As the holder of a contact with the Department of Defense, it is incumbent upon the awardee to insure that all products and/or packaging have not been tampered or contaminated. Delivery conveyances will be locked or sealed at all times, except when actively loading or unloading. Unsecured vehicles will not be left unattended." "The supplies delivered under this contract shall be transported in delivery conveyances maintained to prevent tampering with and / or adulteration or contamination of the supplies, and if applicable, equipped to maintain a prescribed temperature."

Section III OPSEC Remarks:No known OPSEC measures needed based on PWS.

No No No No N/A N/A

N/A

N/A N/A N/A N/A N/A N/A N/A N/A Yes

N/A N/A N/A N/A N/A N/A

N/A

N/A No No No N/A N/A N/A N/A N/A Yes

20180430

30APR2018SFC Lee, Jason

Zachary G. Whitehead

LEE.JASON.

1254188235

Digitally signed by

LEE.JASON.1254188235

DN: c=US, o=U.S. Government, ou=DoD, ou=PKI, ou=USA, cn=LEE.JASON.1254188235 Date: 2018.04.30 15:40:57 -06'00'

WHITEHEAD.ZA

CHARY.GILES.12

71505368

Digitally signed by

WHITEHEAD.ZACHARY.GILES.1271505368

DN: c=US, o=U.S. Government, ou=DoD, ou=PKI, ou=USA, cn=WHITEHEAD.ZACHARY.GILES.1271505368 Date: 2018.04.30 14:28:19 -06'00'

719-366-1360

719-366-1361

6. For contracts that require a formal OPSEC program. The contractor shall develop an OPSEC Standing Operating Procedure (SOP)/Plan within 90 calendar days of contract award, to be reviewed and approved by the responsible Government OPSEC officer. This plan will include a process to identify critical information, where it is located, who is responsible for it, how to protect it and why it needs to be protected. The contractor shall implement OPSEC measures as ordered by the commander. In addition, the contractor shall have an identified certified Level II OPSEC coordinator per AR 530-1.

5. Army Training Certification Tracking System (ATCTS) registration for contractor employees who require access to government information systems. All contractor employees with access to a government information systems must be registered in the ATCTS (Army Training Certification Tracking System) at commencement of services, and must successfully complete the DOD Information Assurance Awareness prior to access to the IS and then annually thereafter.

4. iWATCH Training. This standard language is for contractor employees with an area of performance within an Army controlled installation, facility or area. The contractor and all associated sub-contractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity ATO). This locally developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 calendar days of contract award and within 05 calendar days of new employees commencing performance with the results reported to the COR NLT 30 calendar days after contract award.

Section IV. Standard Contract Language/Contract Clause Applicability and/or Additional SOW Language.