Attachment 8: Security Risk Review AFRLI 61-113

I. Notice of Intent.
(a) Security Risk Review. The Security Risk Review is applied to federally funded research designed to help protect Department of the Air Force Science and Technology (S&T) by identifying possible vectors of undue foreign influence. AFRL will follow all policy and procedures outlined in Air Force Research Laboratory (AFRL) Instruction AFRLI 61-113, Science and Technology Protection for the Air Force Research Laboratory and Department of the Air Force Instruction DAFI 63-101/20-101, Integrated Lifecycle Management. (b) Security risk review for proposals will be developed for all proposed Senior/Key personnel and “Covered Individuals”. These risk reviews will be based on information disclosed in a Research and Related Senior and Key Person Profile and Security Questionnaire. In addition, any accompanying or referenced documents, publicly available information, and information contained in internal U.S. Government databases will be utilized in risk reviews. Nationality or citizenship is not a factor in the security risk reviews. (c) When considering all external engagements, AFRL incorporates a holistic decision-making process that encompasses technical and security factors. The security review method implemented by AFRL measures risk factors to identify the appropriate Risk Acceptance Level (RAL) within the organization. The objective analysis of the security risk factors is conducted to empower AFRL’s S&T leaders to make risk-informed decisions. The review process generally looks at five factors, or risk areas, but with authority for expanded review as noted in OSD R&E Memorandum dated 6 Jun 2023. The potential security risk factors are set forth below: Potential security risk factors:

II. Actions Required by Offerors/Contractors at proposal submission. (a) In accordance with AFRLI 61-113, S&T Protection, Offerors/Contractors are required to submit the following documentation with their proposal: (1) Contract or Other Transaction Agreement (OTA) proposals: (i) Research and Related Senior and Key Person Profile Worksheet (See Appendix 2) AND; (ii) Security Program Questionnaire (See Appendix 1) AND; (iii) “Privacy Act Statement” consent form for each Covered Individual that is also signed by the Offeror/Contractor as that Individual’s Sponsor. (See “Covered Individual” section below, and Appendix 3) (2) In the event a security risk is identified, and the Government has determined the security risk exceeds the acceptable threshold, the Offeror/Contractor will be notified and informed of the decline of award. The Government will provide as much rationale for the decision as Government OPSEC measures allow for. Challenges under awards made solely for Fundamental Research shall follow the OSD R&E Memorandum dated 6 June 2023. Challenges under any other type of award shall follow the Ombudsman procedures within this Announcement/Solicitation.