00 74 70.pdf

SECTION TABLE OF CONTENTS

DIVISION 00 - PROCUREMENT AND CONTRACTING REQUIREMENTS

SECTION 00 74 70

ANTI-TERRRORISM/OPERATIONS SECURITY REQUIREMENTS

10/19

PART 1 GENERAL

1.1 PURPOSE

1.2 REFERENCES

1.3 ACRONYMS AND ABBREVIATIONS

PART 2 PRODUCTS

PART 3 EXECUTION

3.1 REQUIREMENTS

-- End of Section Table of Contents --

DOCUMENT 00 74 70 Page 1

SECTION 00 74 70

ANTI-TERRRORISM/OPERATIONS SECURITY REQUIREMENTS

10/19

PART 1 GENERAL

1.1 PURPOSE

This section describes the minimum Anti-Terrorism and Operations Security requirements of the contract. The contractor is required to comply with the requirements identified herein as part of this contract.

These requirements are in addition to other requirements specified in other Sections regarding Installation Access and Military Installation Access Procedures.

1.2 REFERENCES

The publications listed below form a part of this specification to the extent referenced. The publications are referred to within the text by the basic designation only.

U.S. DEPARTMENT OF DEFENSE (DoD)

DoD 5220.22-M (2006; Change 2 2016) National industrial Security Program Operating Manual

DoD 8570.01-M (2005; Change 4 20157) Information Assurance Workforce Improvement Program

U.S. ARMY (DA)

DA AR 25-2 (2007; RAR 2009) Information Assurance

DA AR 190-13 (2011) The Army Physical Security Program

DA AR 381-12 (2016) Threat Awareness and Reporting Program

DA AR 380-49 (2013) Industrial Security Program

DA AR 380-67 (2014; RAR 2014) Personnel Security Program

1.3 ACRONYMS AND ABBREVIATIONS

AT - AntiTerrorism

HQDA - Headquarters, U.S. Department of the Army

RA - Requiring Activity.

PART 2 PRODUCTS

Not Used

DOCUMENT 00 74 70 Page 2

PART 3 EXECUTION

3.1 REQUIREMENTS

The contractor shall comply with all items indicated as "Applicable" in Table 1 for this contract. Items marked "Not Applicable" are not included in the scope of work of this contract.

TABLE 1: REQUIREMENTS

Project

Item Appli-cable

Not Appli-cable

Requirement

1 AT Level I Training

All contractor employees, to include subcontractor employees, requiring access to Army installations, facilities, controlled access areas, or require network access, shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable.

Upon request, the contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR or to the contracting officer (if a COR is not assigned), within 5 calendar days after completion of training by all employees and subcontractor personnel. AT Level I awareness training is available at the following website: http://jko.jten.mil/courses/atl1/launch.html;

or it can be provided by the RA ATO in presentation form which will be documented via memorandum.

2 Access & General Protection/Security Policy & Procedures

All contractor and all associated sub-contractors employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative). The contractor shall also provide all information required for background checks or background investigation and to meet installation/facility access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any installation or facility change, the Government may require changes in contractor security matters or processes.

DOCUMENT 00 74 70 Page 3

TABLE 1: REQUIREMENTS

Project

Item Appli-cable

Not Appli-cable

Requirement

2a Contractors requiring Common Access Card (CAC)

The Contractor and all sub-contractors employees will be issued a CAC only if duties involve one of the following: (1) Both physical access to a DoD facility and access, via logon, to DoD networks on-site or remotely; (2) Remote access, via logon, to a DoD network using DoD-approved remote access procedures;

or (3) Physical access to multiple DoD facilities or multiple non-DoD federally controlled facilities on behalf of the DoD on a recurring basis for a period of 6 months or more. At the discretion of the sponsoring activity, an interim CAC may be issued based on a favorable review of the FBI fingerprint check and a successfully scheduled NACI at the Office of Personnel Management.

2b Contractors who do not require CAC, but require access to a DoD facility or installation

Contractor and all associated sub-contractors employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (TSDB) (Army Directive 2014-05 / DA AR 190-13), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative, as NCIC and TSDB are available), or, at OCONUS locations, in accordance with status of forces agreements and other theater regulations.

3 AT Awareness Training for Contractor Personnel Traveling Overseas

All US based contractor employees and associated sub-contractor employees traveling overseas will receive the government provided Area of Responsibility (AOR) specific AT awareness training. The documentation of training completion must be provided to the COR prior to departure.

DOCUMENT 00 74 70 Page 4

Item Appli-cable

Not Appli-cable

Requirement

4 Suspicious Activity Reporting Training (e.g. iWATCH, CorpsWatch, or See Something, Say Something

The contractor and all associated sub-contractors shall receive a brief/training (provided by the RA) on the local suspicious activity reporting program. This locally developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the project manager, security representative or law enforcement entity. This training shall be completed within 30 calendar days of contract award and within 30 calendar days of new employees commencing performance with the results reported to the COR NLT 5 calendar days after the completion of the training.

5 Contractor Employees Who Require Access to Government Information Systems

All contractor employees with access to a government info system must be registered in the Army Training Certification Tracking System (ATCTS) at commencement of services, and must successfully complete the DOD Information Assurance Awareness prior to access to the information systems and then annually thereafter in accordance with personnel security standards listed in DA AR 25-2 (Information Assurance), an appropriate background investigation will be conducted prior to accessing the government information systems.

6 OPSEC Standing Operating Procedure (SOP)/Plan

The Contractor shall develop an OPSEC SOP/Plan within 90 days of contract award. The OPSEC SOP/Plan must be reviewed and approved by the RA OPSEC Officer. The SOP/Plan will include the government's critical information, why it needs to be protected, where it is located, who is responsible for it and how to protect

it. In addition, the contractor shall identify an individual who will be an OPSEC Coordinator.

DOCUMENT 00 74 70 Page 5

Item Appli-cable

Not Appli-cable

Requirement

7 OPSEC Level I Training

All new contractor employees will complete Level I OPSEC Training within 30 calendar days of their reporting for duty. Additionally, all contractor employees must complete annual OPSEC awareness training. The contractor shall submit certificates of completion for each affected contractor and subcontractor employee, to the COR or to the contracting officer (if a COR is not assigned), within 5 calendar days after completion of training. OPSEC awareness training is available at the following websites: https://www.iad.gov/ioss/ or http://www.cdse.edu/catalog/operations-security.html;

or it can be provided by the RA OPSEC Officer in presentation form which will be documented via memorandum.

8 Information assurance (IA)/information technology (IT) training

All contractor employees and associated sub-contractor employees must complete the DoD IA awareness training before issuance of network access and annually thereafter. All contractor employees working IA/IT functions must comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M and DA AR 25-2 within six months of employment.

9 Information assurance (IA)/information technology (IT) certification

All contractor employees supporting IA/IT functions shall be appropriately certified upon contract IAW DoD 8570.01-M, DFARS 252.239-7001 and DA AR 25-2. The baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award.

10 Contractor Personnel Authorized to Accompany U.S. Armed Forces Deployed Outside the United States

All contractor employees shall ensure the AT/OPSEC requirements are met prior to deploying personnel authorized to accompany U.S. Armed Forces outside the United States; to include compliance with laws, regulations, pre-deployment requirements, and required training in accordance with combatant command guidance.

DOCUMENT 00 74 70 Page 6

Item Appli-cable

Not Appli-cable

Requirement

11 Contracts Requiring Performance or Delivery in a Foreign Country

All non-local contracting personnel will comply with theater clearance requirements and allows the combatant commander to exercise oversight to ensure the contractor's compliance with combatant commander and subordinate task force commander policies and directives.

12 Contracts That Require Handling or Access to Classified Information.

Contractor shall comply with DA AR 380-67 (Personnel Security Program) and Homeland Security Presidential Directive 12 (Policy for a Common Identification Standard for Federal Employees and Contractors) as well as FAR 52.204-2, Security Requirements. Additionally, Contractors must comply with - (1) The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual ( DoD 5220.22-M); any revisions to DoD 5220.22-M, notice of which has been furnished to the contractor. For classified contracts, the DD Form 254 will be attached with the contract.

13 Escorts in Areas Where Contractor may be Exposed to Classified and/or Sensitive Materials and/or Sensitive or Restricted Areas

All contractor employees, iincluding subcontractor employees, who are not in possession of the appropriate security clearance or access privileges, will be escorted in areas where they may be exposed to classified and/or sensitive materials and/or sensitive or restricted areas.

DOCUMENT 00 74 70 Page 7

Item Appli-cable

Not Appli-cable

Requirement

14 Contractor Company to obtain a Facility Clearance and individual clearances at the appropriate level.

The Prime Contractor Company must have a Facility Clearance (FCL) at the appropriate level (IAW the NISPOM DOD 5220.22-M and DA AR 380-49) prior to the start of the contract awarded period of performance.

Contractor personnel performing work under this contract must have the required security clearance, per DA AR 380-67, at the appropriate level at the start of the period of performance. Security Clearances and FCL requirements are required to be maintained for the life of the contract IAW the DD Form 254 attached to the contract. If no FCL, the supporting Government Contracting Activity will sponsor the prime contract company in obtaining the FCL.

15 Pre-screen candidates using E-Verify Program

The Contractor must pre-screen Candidates using the E-verify Program (http://www.uscis.gov/e-verify) website to meet the established employment eligibility requirements. The Vendor must ensure that the Candidate has two valid forms of Government issued identification prior to enrollment to ensure the correct information is entered into the E-verify system. An initial list of verified/eligible Candidates must be provided to the COR no later than 3 business days after the initial contract award. *When contracts are with individuals, the individuals will be required to complete a Form I-9, Employment Eligibility Verification, with the designated Government representative. This Form will be provided to the Contracting Officer and shall become part of the official contract file.

16 Contract Requiring Armed Security Guards

All contractor and all associated sub-contractors employees shall comply with applicable installation, facility and area commander installation/facility policies and procedures on storing weapons and ammunition IAW AR 190-11 (provided by government representative

DOCUMENT 00 74 70 Page 8

Item Appli-cable

Not Appli-cable

Requirement

17 Threat Awareness Reporting Program

All new contractor employees will complete annual Threat Awareness and Reporting Program (TARP) Training provided by a Counterintelligence Agent, IAW DA AR 381-12. The contractor shall submit certificates of completion for each affected contractor and subcontractor employee(s) or a memorandum for the record, to the COR or to the contracting officer (if a COR is not assigned), within 5 calendar days after completion of training. Authorized webbased TARP training for CAC card holders is available at the following website:

https://www.us.army.mil/suite/page/655474

-- End of Section --

DOCUMENT 00 74 70 Page 9