Appendix B Terms

APPENDIX B - SECURITY THREAT ASSESSMENT AND

DISCLOSURE OF SSI

FOR

SPECIAL NOTICE

70T04026SN7573N001

Document: 70T04026SN7573N001

VENDOR ACCESS TO SENSITIVE SECURITY INFORMATION (SSI) NECESSARY

FOR AIR CARGO SCREENING TECHNOLOGY PROGRAM (ACSTP): AIR CARGO

SCREENING QUALIFICATION TEST (ACSQT) ACTIVITIES AND AIR CARGO

SCREENING TECHNOLOGY LIST (ACSTL) DEVICE SUSTAINMENT ACTIVITIES

A. Background. Sensitive Security Information (SSI) may be available to vendors in support of this program. Vendors must obtain specific authorization in order to obtain SSI. SSI will not be available or otherwise provided or disclosed to any person not specifically authorized to receive it. SSI provided under the ACSTP may only be used to satisfy ACSQT requirements and ACSTL device sustainment.
B. Corporation Vetting. Vendors who do not have current contracts with TSA and do not hold National Industrial Security Program (NISP) facility clearance will have to undergo clearance. Other companies with personnel who require access to program-specific SSI for the purposes of the ACSQT will be reviewed and determined to be accountable parties. TSA will collect fully executed Department of Homeland Security Non-Disclosure Agreements (DHS Form 11000-6) for all individuals who are cleared for access to SSI prior to providing any sensitive information and will provide these individuals a copy of the SSI Quick Reference Guide for DHS Employees and Contractors prior to providing any sensitive information. C. Senior Corporate Official. Each vendor must designate in writing via [email protected] a single, Senior Corporate Official who will serve as the single point of contact for sensitive information. This individual must certify that all appropriate protections will be followed, only authorized individuals will have access to the sensitive information, and that those individuals adequately understand their responsibilities to protect the information. This official must also certify via [email protected] annually that all appropriate protections have been followed, only authorized individuals have access to the sensitive information, and that those individuals with access adequately understand their responsibilities to protect the information. This official will also ensure that the TSA is notified of staffing changes or circumstances in which individuals no longer need access to the information. C. Vendor Responsibility. TSA will review the Excluded Parties List System (www.epls.gov) and the Unique Entity Identifier (UEI) under SAM.gov. While this review does not replace the