Industrial_Personnel_SecurityLanuage_for_IT-IIIIT-II.pdf

Unclassified Contracts Access to post and IT-III Basic User NIPR Account:

For contractors requiring Common Access Card (CAC) and Home Security Presidential Directive-12

(HSPD-12) requirements. Before CAC issuance, the contractor employee requires, at a minimum, a favorably adjudicated National Agency Check with Inquiries T-1 (NACI) or an equivalent or higher investigation in accordance with Army Directive 2014-05. The contractor employee will be issued a CAC only if duties involve one of the following: (1) Both physical access to a DoD facility and access, via logon, to DoD NIPR networks on-site or remotely; (2) Remote access, via logon, to a DoD network using

DoD-approved remote access procedures; or (3) Physical access to multiple DoD facilities or multiple non-DoD federally controlled facilities on behalf of the DoD on a recurring basis for a period of 6 months or more. At the discretion of the sponsoring activity, an initial CAC may be issued based on a favorable review of the FBI fingerprint check and a successfully scheduled T-1(NACI) at the Office of Personnel

Management. The COR will request an appointment (with all corresponding forms required) for the contract employee with the Ft Detrick United States Army Garrison (USAG) Security Office to initiate a

T-1(NACI) if the contractor does not have NACI or an equivalent or higher investigation.

Unclassified Contracts for IT-II Limited System Admin :

IAW Army Regulations 380-67, 25-2, 380-49 the Contractor shall ensure all personnel performing under this contract have a National Agency Check with Local Agency and Credit Checks T-3 (NACLC), position of trust, in order to meet the minimum IT-II computer access requirement. If the contract employee currently has a open T-3, that the Ft Detrick USAG Security Office did not initiate, a copy of the open investigation (SF86) must be sent three days prior to in-processing to determine a favorable review. If derogatory is found the COR will be notified and no further action will be taken, and the contract employee cannot in-process until T-3 is complete and adjudicated favorable by the DoD CAF.

The security requirements must be maintained for the life of the contract. The Contractor must supply personnel with a completed National Agency Check with Local Checks T-3 (NACLC) that has been completed by Office of Personnel Management and adjudicated by DOD CAF to the start of the contract for positions of trust. It is incumbent on the Contractor if they have the capability or USAG Security to initiate a T-3( NACLC) if the employee does not currently have one. If the Contract Company has a

Facility Clearance (FCL) they must show affiliation (ownership) of its employees and access must be granted in the Joint Personnel Adjudication System (JPAS) to start of work for all personnel assigned to this contract. In processing must be coordinated by the government representative. During this appointment, contract employee citizenship will be verified by employee presenting an original Birth

Certificate or a US Passport or the Original Naturalization Certificate to the USAG Security Office for all contract and sub-contract personnel assigned to this contract. Any derogatory information, to include law enforcement issues, mental health issues, or alcohol/drug related issues must be reported to the government COR or Program Manager who will notify the USAG Security Office.

The Contractor may require access to information which may be sensitive and is to be handled as "For

Official Use Only". The Contractor shall ensure that staff assigned to this task understand the meaning of this category of data and handle them accordingly.

NEC requirements

1.6.7.7 Information Assurance REQUIREMENTS: The security requirements for this contract is a favorable

T-1 (NACI) (for unclassified contract) or a T-3(NACLC) (for classified and unclassified contract) background investigation. The Contractor shall ensure that all personnel performing under this contract have a favorable

T-1(NACI) or T-3(NACLC) investigation, and shall submit employee’s T-1 (NACI) (unclassified contract only) request with required documents to the USAG Security Office for submission within 3 days of the start date of the employee beginning to work on this contract. The security requirements must be maintained for the life of the contract and citizenship will be verified by the Security Office on all contract personnel. Within 3 days from start of

Transition/Phase-in period, the contractor shall provide names and related citizenship and personal identification information to the COR for contract personnel who need T-1 (unclassified contract only) investigations. The COR will coordinate with Fort Detrick's Security Office to request the T-1 (unclassified contract only) investigations for personnel who do not meet the security requirements. A T-3(NACLC) (for classified contract) background investigation are submitted by the Company FSO.

The Contractor will complete the DoD Information Assurance Awareness Training prior to receiving a network account, and will renew the training within one calendar year of the last completed training. The Contractor will also sign and abide by the terms in the Fort Detrick Acceptable Use Policy.

3. If Contractor requires privileged-user computer access (IT-II access – includes administrative computer account/access):

-Ensure T3 “ANACI/NACLC” is required under Security requirements (1.6.7.1) -Include the following section on the PWS:

1.6.7.7 Information Assurance REQUIREMENTS: The Contractor will complete the DoD Information Assurance

Awareness Training prior to receiving a network account, and will renew the training within one calendar year of the last completed training. The Contractor will sign and abide by the terms in the Fort Detrick Acceptable Use Policy.

The Contractor will obtain a BASELINE Information Assurance Technical – I (IAT-I) certification IAW DoD

8570.01-M, prior to the Contractor’s start date. Within six months of the start date, the Contractor will acquire a

COMPUTING ENVIRONMENT IAT-I certification. The Contractor will sign a Privileged Level Access

Agreement, and upload into the Army Certification and Training Tracking System (ATC-TS), and complete the

Information Assurance Fundamentals distributed learning course.

4. If Contractor requires privileged-user network access (IT-II access – includes administrative server/database access):

-Ensure T3 “ANACI/NACLC” is required under Security requirements (1.6.7.1) -Include the following section on the PWS:

The Contractor will obtain a BASELINE Information Assurance Technical – II (IAT-II) certification IAW DoD

8570.01-M, prior to the Contractor’s start date. Within six months of the start date, the Contractor will acquire a

COMPUTING ENVIRONMENT IAT-II certification. The Contractor will sign a Privileged Level Access

Agreement, and upload into the Army Certification and Training Tracking System (ATC-TS), and complete the

Information Assurance Fundamentals distributed learning course.