Section Four: Employee and Visitor Access Controls Note: All classified markings contained within this presentation are for training purposes only.

Facility Access Employee and Visitor Access Controls Facility Access Employees, visitors, contractors, consultants and contractors are required to provide proof of U.S. citizenship or permanent residency (Green card) prior to being granted unescorted access to the facility A picture identification and one of the following documents is required: ‒U.S. Passport ‒Certificate of U.S. Citizenship (INS Form N-560 or N-561) ‒Certificate of Naturalization (INS Form N-550 or N-570) ‒Certificate of Birth Abroad issued by the Dept of State (Form FS-240 or Form DS-1350) ‒Original or certified copy of a birth certificate ‒Permanent Resident Card I-551 The requesting {Company} host/designee is responsible for informing their visitor/contractor of the Proof of Citizenship/Permanent Residency requirement – See the Classified Visits and Foreign National Visits section for additional requirements If acceptable documentation has not been received prior to the visit or commencement of work, access privileges may be significantly restricted or facility access will be altogether denied

Identification Badges Employee and Visitor Access Controls Identification Badges The {Company} Identification Badge indicates the level of an individual’s DoD security clearance (if any) – Color-coded to designate your clearance level – Verify authorized access of those entering the facility behind you – Your badge must be worn at all times above the waist (and visible) while on the premises – Everyone must prox their badge prior to entering the facility (No tailgating) – Stop and question employees/visitors who are not wearing a identification badge, or contact Security No one is exempt from wearing a badge at any time while in the building – Your badge shall only be used as {Company} identification only – Remove your badge and store it in a secure location when you leave the property – Report any loss, forgotten or damaged identification badges immediately to the Security Department A temporary or replacement badge will be provided Lost badges will be immediately deactivated

Identification Badges Employee and Visitor Access Controls Identification Badges Name Company name and/or Logo Employee Name Company name and/or Logo TEMPORARY OR VISITOR ESCORT OR NO ESCORT REQUIRED Company name and/or Logo Contractor Name CONTRACTOR Company name and/or Logo FOREIGN NATIONAL ESCORT REQUIRED Company name and/or Logo Employee Name UNCLEARED EMPLOYEE Company name and/or Logo DAY VISITOR NO ESCORT REQUIRED The badges below represent the different types of badges in use here at {Company and location}: Country Flag If individual has an “interim”, it must be indicated on the badge.

Employee and Visitor Access Controls Classified Visits - Incoming Cleared Visitors – Pre-register and provide advance notice to the Security Department of the anticipated visitors – Security Administrator or designee will verify receipt and level of accesses – Escorts must  Appropriately sanitize (as necessary) the area to be visited prior to allowing entrance  If visiting Secure Areas, the escort must sign visitors in and out of the visitors log, if used  Ensure all visitors are only allowed access to areas and information consistent with their level of access and need-to- know  If applicable, ensure all visitor badges are returned at the end of the visit

Uncleared Visitors – Pre-register and provide advance notice to the Security Department of the anticipated visitors – Security Administrator or designee will verify need for access – Escorts must  Be knowledgeable of the visitor’s need for access (i.e., maintenance, etc.)  Sanitize the visit path and destination prior to allowing entrance  If visiting secure areas, the escort must o Sign visitors in and out of the visitors log o Notify staff in the area that an unclassified visitor is in the area  Only share information that is on the public domain  Maintain shoulder-to-shoulder escort for the entire visit  If applicable, ensure all visitor badges are returned at the end of the visit Employee and Visitor Access Controls Classified Visits – Incoming (cont.)

Employee and Visitor Access Controls Classified Visits – Outgoing {Company} personnel who need to visit other facilities within the U.S. for official classified business must – Submit a Request for Classified Visit electronic form to the Security Department at least five days prior to the visit  This must be completed for all classified visits  The Technical POC and Security POC cannot be the same, must be active employees, and subcontractors cannot be listed as a POC ‒Non contractual and special meetings/conferences require the endorsement of the Contracting Officer – requires additional lead time ‒If your VAR is submitted less than 48 hours prior to the visit, the requestor must contact the Security Department ‒Notifications pertaining to the visit will be handled via only Employees are not authorized to hand-carry their Visit Authorization Letter (VAL) to the facility being visited ‒Coordination of classified visits are handled by the Security Department ‒The acceptance of the visit is at the discretion of the facility A 45-day lead time is required for all classified visits to foreign countries

Foreign National visitors include anyone that is not a U.S. citizen or any individual representing or working for a foreign corporation, agency or division of a foreign government (Including U.S. citizens) – If the visitor is a Permanent Resident  The Individual must provide the permanent card for verification  The requestor must annotate that the visitor is a permanent resident on the visit request Foreign national visits must be approved prior to arrival by the Security Department and appropriate management Additional requirements – 10-day lead time for unsponsored visits – 45-day lead time for sponsored visits (representing Government agency) – Lobby and cafeteria visits must be approved prior to visit – Pre-register visitors Employee and Visitor Access Controls Foreign Nationals

Prior to the visit, escorts must – Be aware of their Foreign National Escort Responsibilities and {Company} Technology Control Plan – Inform the visitor of their requirement to comply with the procedures within the Technology Control Plan – Ensure that the visitor does not gain access to any unauthorized Classified/Controlled Unclassified/Personally Identifiable information or technology  All information shared must be in the public domain  Access to any Information Systems or Networks is prohibited  If the visitor requires the use of a personal/{Company} owned laptop, Security Department approval is required – Use the most direct route to destination must be taken (no tours)  Avoid any rooms where classified processing is occurring – Maintain Shoulder–to–shoulder escort at all times Escorting duties can only be transferred to another cleared employee who has signed and read the foreign national escorting responsibilities briefing Employee and Visitor Access Controls Foreign Nationals (cont.)