IVCO Defence Contractor Guidance Oct 2012U PDF
IVCO Defence Contractor Guidance Oct 2012U PDF
IVCO Defence Contractor Guidance Oct 2012U PDF
Deliberately Blank
Page
Introduction
3
3
Outward Visits
Principles
Procedures
Amendments
Emergency Visits
USA Visits General Advice
NATO Visits General Advice
Attachments or Extended Visits
General Points for Outward Visits
Personal Index Card
Lead Times
Points to Note
8
8
8
9
9
10
10
10
11
11
12
Inward Visits
Principles
Procedures
RFVs from MISWG, LoI & NATO Members
RFVs from Nationals of all other Nations
Recurring Visitors
Attachments or Extended Visits
Emergency Visits
Uncleared Visitors Areas (UVA)
Points to Note
12
12
13
13
14
14
15
16
16
Forms
Introduction
1.
The International Visits Control Office (IVCO) is a part of the United Kingdom Ministry
of Defence (MOD). Located within the Defence Equipment & Support (DE&S), Principal
Security Advisers Organisation it has two main functions:
a).
b).
IVCO Inward: dealing with visits by foreign nationals to UK MOD establishments and
MOD List X sites.
2.
IVCO is not responsible for processing requests for visits to Service establishments of the
UK Armed Forces. Such visits are the direct responsibility of the Service Security Authority
concerned. However, should a proposed visit include visits to both Service and Defence
Headquarter and MOD List X sites, IVCO is responsible for the coordination of the visit request and
where appropriate will liaise with the relevant Service/MOD Security Authorities. IVCO is also not
responsible for processing requests for visits to other government departments or non MOD List X
sites.
b).
Establishing and maintaining records of the staff of MOD List X Contractors to meet
requests for security assurances from foreign governments or international defence
organisations.
c).
Acting as a focal point to liaise with the MOD Project Team to ascertain the permitted
levels of access to UK protectively marked information by foreign visitors to UK
Defence Establishments and MOD List X sites.
Governance Procedures
4.
IVCO services and processes are governed by a number of regulatory procedures and
international agreements, primarily:
3
NOT PROTECTIVELY MARKED
b).
9.
Visits where there is a need to access shareable protectively marked information graded
CONFIDENTIAL or above, are subject to the following conditions:
a).
The information is approved by the MOD as shareable. In cases of doubt advice should
be sought from the relevant Project Team.
b).
The visit has an official purpose related to defence activities of one or more of the
Parties and they both agree that there is a need for the visit.
c).
d).
Prior to arrival at the facility, the FSO of the requesting (sending) facility must provide
details of the visitors and confirmation of the visitors Personnel Security Clearance to
the receiving facility using the LoI RFV form.
e).
10. The receiving FSO must ensure that accurate and full records are kept of all visitors,
including their name, the organisation they represent, date of expiry of the Personal Security
5
NOT PROTECTIVELY MARKED
15. Visits to or from the USA involving the access/exchange of information marked Confidential
or above will require the prior approval of both participants and the existing RFV form must
continue to be submitted.
16. Programmes that involve visits related to contracts conforming to a bilateral programme
conducted under a Memorandum of Understanding (MoU), or related to commercial contracts that
have been approved by governments, may be processed as a visitor block list.
a).
Australia
Canada
Estonia
Greece
Latvia
New Zealand
Romania
Sweden
United States
Austria
Croatia
Finland
Hungary
Lithuania
Norway
Slovakia
Switzerland
Belgium
Czech Republic
France
Israel
Luxembourg
Poland
Slovenia
Turkey
Belgium
Czech Republic
Germany
Italy
Netherlands
Romania
Bulgaria
Canada
Denmark
Estonia
Greece
Hungary
Latvia
Lithuania
Norway
Poland
Slovakia
Slovenia
7
NOT PROTECTIVELY MARKED
Turkey
United Kingdom
United States
24.
Except for visits between the Parties to the LoI Framework Agreement relating to
shareable information or where exceptionally special arrangements are made, such as
those related to the Typhoon programme communicated in List X Notice 2012/07, all
RFVs must be submitted to IVCO where access is required to information marked
CONFIDENTIAL or above.
RFVs must be submitted to IVCO, for any visits to any country not listed at 23. a). even
though the level of access/discussions would not exceed RESTRICTED level and
where information related to Defence Projects; Programmes or Contracts information is
being discussed.
b).
c).
This ruling is applicable to one time and intermittent visits of less than 21 consecutive
days only. Attachments in excess of 21 consecutive days, regardless of the level of
information involved, will still require a RFV to be submitted to IVCO.
d).
e).
One-time and recurring visits conducted without the submission of an RFV cannot be
converted to an attachment without an RFV being submitted to IVCO.
Amendments
25.
It is not permitted to extend the dates of a visit if the change will result in the visit being
valid for longer than 1 year. Likewise, dates cannot be amended to bring the start date
of a visit forward to an earlier date.
8
NOT PROTECTIVELY MARKED
A visitor can be added to an RFV that originally requested visits to a number of sites,
even if they will be required to only visit one of the sites. There is a maximum of 10
amendments allowed per visit request and 100 people per amendment.
c).
d).
Emergency Visits
26. IVCO are aware that urgencies to undertake a visit arise and in such circumstances a visitor
may not have the required number of days notice in which to submit an RFV. If this is the case
then an emergency visit can be requested. For an emergency visit the required lead-time can be
exceptionally cut to 10 full working days. However, the following should be noted.
a).
b).
The visit must be related to an official government programme, request for tender offer
(e.g. submission of, or amendment to a bid or proposal or attendance at a pre-contract
negotiations or bidders conference).
c).
d).
27. IVCO require a letter from the host advising that an emergency RFV is to be submitted and
providing full justification for the request. This should then be attached to the RFV.
28. IVCO will always be prepared to consider a legitimate emergency visit application but such
requests will be stringently vetted by IVCO and the receiving Government security authority.
Accordingly they should only be submitted for the most genuine and pressing of reasons. The
following examples do not justify the use of the emergency visit procedure.
a).
Courtesy calls.
b).
c).
d).
Seniority or rank.
For visitors to the US the following general points should be taken into account:
a).
The US minimum lead-time is 30 working days. This means that the RFV must be in
the US DoD visit system at least 30 working days prior to the requested start date of
the visit. To process the RFV via the British Embassy Washington this means that the
RFV must be submitted to IVCO at least 35 working days prior to the start date of the
visit.
b).
A fax number (and e-mail address if known) for the US Point of Contact (PoC) is
9
NOT PROTECTIVELY MARKED
The US PoC must be aware of the visit and must still be in post and working on the site
to be visited.
d).
e).
Zip codes (postcodes) must be supplied for all sites. Failure to provide them will result
in the immediate rejection of the RFV by the US Authorities.
For visitors to NATO the following general points should be taken into account:
a).
A separate visit request is required for each visit to NATO HQ or NATO Agencies.
b).
An annual pass (Annex C) will only be permitted if the visitor requires regular access at
least twice a month, each month.
Visits where a visitor would remain resident within a country for 21 consecutive days or
longer are considered to be an attachment.
b).
c).
The lead-time for such requests will be the same as for other types of visit.
d).
Attachments can be valid for a period of up to one years duration. If the visit extends
beyond the one year period a new request should be submitted.
e).
Groups of visitors on attachment can be submitted as a block list, provided that all the
visitors will be resident at the same site for the same period of time.
f).
Visits to other sites must be submitted on a new RFV form as individuals may only be
attached to a single site.
The following general points should be considered for all outward visits:
a).
b).
If using any acronym, ensure that it is fully explained and that it is recognised in the
country being visited.
c).
The visitors security clearance level must be recorded as either TOP SECRET
(TS)/SECRET (S) or CONFIDENTIAL (C) and not DV or SC.
10
NOT PROTECTIVELY MARKED
Norway - Recurring visits can only run to the 31 December of the year of submission.
If there is a requirement for the visit to continue past 31 December, then a new request
will need to be submitted.
e).
NATO Agencies (NETMA, NC3A etc) Each visit must be a separate request.
f).
The Maximum number of visitors per visit is 100 (amendments can be made as and
when necessary).
g).
Block lists containing the names of visitors that will have a requirement to undertake
recurring visits to a particular facility on a specific over a annual period may be
submitted on the standard RFV form.
b).
A valid Proof of Vetting (POV) number and date must be quoted. It is important to
remember that the clearance must be equal to, or greater than, the classification of the
subject to be discussed.
c).
A NATO certificate (attached to the clearance) will be required for access to NATO
information. This should be requested from Defence Business Services National
Security Vetting (DBS NSV).
d).
If the person for whom the card is being completed is acting as a consultant to your
company, this should be clearly identified on the card.
e).
The Personal Index Card information will be retained until the company notifies IVCO
that the security clearance(s) is/are no longer required.
Lead Times
34.
Leads times (in weeks) for visits to MISWG member countries are:
Australia
Austria
Belgium
Canada
Czech Republic
Denmark
Finland
France
Germany
Greece
Hungary
Iceland
United States
6
5
5
6
4
4
4
5
4
5
4
4
6
Italy
Luxembourg
Netherlands
New Zealand
Norway
Poland
Portugal
Spain
Sweden
Switzerland
Turkey
United Kingdom
5
4
4
4
5
4
5
6
4
5
4
3
11
NOT PROTECTIVELY MARKED
Lead times (in weeks) for visits to other countries/international organisations are:
Bahrain
Brazil
Brunei
Bulgaria
Croatia
India
Israel
Japan
Kuwait
South Korea
4
5
4
5
6
4
4
5
4
5
Oman
Qatar
Russia
Saudi Arabia
Singapore
Slovakia
South Africa
UAE
NATO Agencies
NATO HQ
4
4
4
4
5
4
5
4
4
1
Inward Visits
Principles
41. IVCO process requests for foreign nationals to visit UK MOD establishments and MOD List X
Contractors sites.
Procedures
42. Foreign nationals who wish to undertake a visit requiring access to protectively marked
information, and/or access to a RESTRICTED area, within a UK MOD establishment or MOD List
X Contractor site must provide official confirmation of their security clearance in the form of an
RFV. This RFV must arrive in IVCO at least 20 working days before the intended start of the visit.
43. It is the responsibility of the visitors to initiate the visit request and to ensure that it is
approved by and transmitted through their own National Security Authorities/Designated Security
Authorities (NSAs/DSAs) who should then send the RFV to their Embassy/High Commission in the
UK. The Embassy/High Commission should process the RFV to IVCO. It is not the responsibility of
the host MOD establishment or contractor to initiate the visit, only to inform the visitors of the
agreed rules and regulations.
44. When an Embassy has received an RFV via its own National/Designated Security Authority
and, due to the purely commercial nature of the proposed visit declines to endorse it; then it is
acceptable for the FSO of the MOD List X Contractor site being visited to submit the RFV direct to
12
NOT PROTECTIVELY MARKED
IVCO no longer require RFVs to be submitted for visits to MOD establishments or MOD
List X Contractor sites, where the level of access/discussions would not exceed
RESTRICTED. However the prior arrangement and agreement of such visits must be
made between the visitor and the MOD establishment or MOD List X Contractor site to
be visited and the MOD List X Contractor must obtain prior approval from the relevant
MOD Project Authority/Sponsor to release any information to the visitors.
b).
MOD List X Contractor FSOs will remain responsible for ensuring that such visitors
are escorted where appropriate.
c).
d).
e).
One-time and recurring visits conducted without the submission of a RFV cannot be
converted to an attachment without the submission of an RFV from the visitors
NSA/DSA.
a).
49.
RFVs must be submitted to IVCO for any visits to a MOD establishment or MOD List X
Contractor sites, by all other countries, even though the level of access/discussions
would not exceed RESTRICTED level.
For visits by foreign nationals of all nations, where access is required at CONFIDENTIAL or
13
NOT PROTECTIVELY MARKED
RFVs must be submitted to IVCO by foreign nationals from all nations except in the
case of visitors from the Parties to the LoI Framework Agreement and where the
information has been pre-determined as shareable.
Recurring Visitors
50.
b).
If the visitor is required to spend longer than 21 consecutive days on a site at any one
time an attachment to that site should be applied for.
c).
A visitor can have more than one recurring visit running concurrently, for different
projects, and different sites but a separate RFV must be submitted for each project.
d).
A recurring RFV can be valid for a period of one year. There is no limit to the number of
personnel, or sites which can be included upon it
e).
Whilst on site visitors will be expected to comply with the security regulations of the
host and or any other instructions that may be given to them by the Facility Security
Officer or other representative of the site being visited.
Except in the case of a visit under the LOI Framework Agreement (see paragraph 47
c). above), if a foreign national is required to be resident at a site for a period of
greater than 21 consecutive days at any one time, they must apply for an RFV
Attachment, regardless of any UK protectively marked information involved.
b).
Personnel who are seconded to the UK on an attachment for a specific project activity
can apply for attachment authorisation for a period of up to 3 years. However
restrictions may apply to the work that can be carried out.
c).
Once attached a visitor can only visit other sites or be involved in other projects with
the submission of a new RFV.
d).
e).
No attachment should proceed without the prior submission of an RFV from the visitors
NSA/DSA and approval from IVCO.
f).
You are not allowed to extend the dates of a visit if this change will result in the visit
being valid for longer than one year. Also, dates cannot be amended to bring the start
date of a visit forward to an earlier date.
g).
A visitor can be added to an RFV that originally requested visits to a number of sites,
even if they will be required to only visit one of the sites. The amendment should
clearly show which site they are required to visit.
14
NOT PROTECTIVELY MARKED
52.
h).
Deletions of visitors from RFVs should be passed to IVCO as soon as any changes are
identified.
i).
Emergency Visits
53.
In certain urgent circumstances a visitor will not have the required 20 working days
notice in which to submit a RFV. In these circumstances an emergency visit may be
requested.
b).
For an emergency visit the required lead-time can be cut to 5 working days. However,
the following should be noted:
i). An emergency visit can only last for 30 days.
ii). The visit must be related to an official government request for proposal, request
for tender offer (e.g. submission of, or amendment to, a bid or proposal;
attendance at pre-contract negotiations or bidders conference).
iii). The visit must be in response to the invitation of a host Government official.
iv). A programme, project or contract opportunity will be placed in jeopardy if the
RFV is submitted in the required lead-time.
v). The visit is in support to operations.
54. IVCO require a letter from the UK host advising us that an emergency RFV will be submitted
and providing full justification for the request. This should be forwarded to IVCO immediately so
that it can be attached to the RFV when it is dispatched to the MOD Project Authority.
55. FSO are reminded that they have the power to prevent or refuse any visit, including those
identified as emergencies to their site which they do not feel is fully justified or warranted and
refuse access to their site by any visitor who has demonstrated either directly or indirectly that they
will not be compliant with either UK national regulations or measures required locally by the
Contractor. Should such circumstances arise IVCO must be informed immediately
56. Whilst IVCO will always be prepared to consider an emergency visit request, the following
examples do not justify the use of the emergency visit procedure.
a).
b).
c).
d).
57. Any cases of a foreign defence contractor, or Government, placing undue or unwarranted
pressure on a UK defence contractor to accept an emergency visit request should be reported to
15
NOT PROTECTIVELY MARKED
Hosting facilities do not need to inform IVCO via an RFV if a visitor is only accessing a
designated and approved UVA. The visitor may deal direct with the hosting facility.
However, visits by Chinese or Russian nationals, must be notified to IVCO by the FSO
of the MOD List X Contractor at least 5 working days prior to the proposed visit. Such
notification must include at least the following information:
Full Name
Passport details
Date of Birth
Visit Dates
This information can be sent either by fax (01179 134924) or by e-mail (desinfraivco@mod.uk)
Points to Note: Inward
60. If a foreign national is expected at a facility and they are not part of MISWG, NATO or LOI
and confirmation of the visit has not been received from IVCO, contact IVCO immediately for
advice.
61. Please submit all queries on current visits or requests for further information by either e-mail
via desinfra-ivco@mod.uk or phone 030679 33840.
16
NOT PROTECTIVELY MARKED
Annex A
]
]
]
One Time
Recurring
More than 21 days
1. REQUESTING ESTABLISHMENT/COMPANY/AGENCY
Name:
Address:
Security Officer:
Email:
Tel No:
Fax No:
Point of Contact:
2. ESTABLISHMENT/COMPANY/AGENCY TO BE VISITED
Name:
Address:
Security Officer:
Email:
Tel No:
Fax No:
Point of Contact:
Please use Continuation Sheet 1 for any additional Sites to be visited
3. DATE OF VISIT
From:
To:
4. SUBJECT TO BE DISCUSSED:
Project/ Contract/ Programme:
CONFIDENTIAL [
SECRET [
6. VISITOR DETAILS
Name:
Passport Number:
Date of Birth:
Nationality:
Expiry Date:
Company/Agency:
Position
/
:
DATE:
Rank/Grade:
Passport Number:
Date of Birth:
Nationality:
Expiry Date:
Company/Agency:
Position:
Name:
Passport Number:
Date of Birth:
Nationality:
Expiry Date:
Company/Agency:
Position:
Name:
Passport Number:
Date of Birth:
Nationality:
Expiry Date:
Company/Agency:
Position:
Name:
Passport Number:
Date of Birth:
Nationality:
Expiry Date:
Company/Agency:
Position:
Name:
Passport Number:
Date of Birth:
Nationality:
Expiry Date:
Company/Agency:
Position:
Name:
Passport Number:
Date of Birth:
Nationality:
Expiry Date:
Company/Agency:
Position:
Name:
Passport Number:
Date of Birth:
Nationality:
Expiry Date:
Company/Agency:
Position:
Name:
Passport Number:
Date of Birth:
Nationality:
Expiry Date:
Company/Agency:
Position:
Rank/Grade:
Rank/Grade:
Rank/Grade:
Rank/Grade:
Rank/Grade:
Rank/Grade:
Rank/Grade:
Rank/Grade:
Annex B
]
]
]
]
]
Annex(es)
One Time
Recurring
Extended
Emergency
Amendment
Yes
No
1. ADMINISTRATIVE DATA
REQUESTOR:
DATE:
TO:
VISIT ID:
Email:
POSTAL ADDRESS:
TELEX/FAX NO:
TEL NO:
Email:
ADDRESS:
TELEX/FAX NO:
POINT OF CONTACT
TEL NO:
If more than one site is to be visited please use the continuation sheet (Annex 2)
4. DATES OF VISIT:
/
TO
TO
GOVERNMENT INITIATIVE
FACILITY
[
] COMMERCIAL INITIATIVE
6. SUBJECT TO BE DISCUSSED/JUSTIFICATION
Tel:
SPECIFY:
A PROGRAMME OR AGREEMENT
OTHER
SECURITY CLEARANCE:
PLACE OF BIRTH:
PASSPORT NO:
NATIONALITY:
POSITION:
COMPANY/AGENCY
NAME:
DATE OF BIRTH:
SECURITY CLEARANCE:
PLACE OF BIRTH:
PASSPORT NO:
NATIONALITY:
POSITION:
COMPANY/AGENCY
If needed please use the continuation sheet (Annex 2)
10. THE SECURITY OFFICER OF THE REQUESTING FACILITY OR AGENCY
NAME:
Email:
TEL NO:
Fax:
SIGNATURE:
11. CERTIFICATION OF SECURITY CLEARANCE (Completed by Government Certifying Authority)
NAME:
STAMP
ADDRESS:
TEL NO:
SIGNATURE:
12. REQUESTING SECURITY AUTHORITY (Requesting NSA/DSA)
NAME:
STAMP
ADDRESS:
TEL NO:
SIGNATURE:
DATE:
13. REMARKS
Email:
ADDRESS:
TELEX/FAX NO:
POINT OF CONTACT
NAME:
TEL NO:
Email:
ADDRESS:
TELEX/FAX NO:
POINT OF CONTACT
NAME:
TEL NO:
Email:
ADDRESS:
TELEX/FAX NO:
POINT OF CONTACT
NAME:
TEL NO:
Email:
ADDRESS:
TELEX/FAX NO:
POINT OF CONTACT
NAME:
TEL NO:
Email:
ADDRESS:
TELEX/FAX NO:
POINT OF CONTACT
NAME:
TEL NO:
Email:
ADDRESS:
TELEX/FAX NO:
POINT OF CONTACT
TEL NO:
SECURITY CLEARANCE:
PLACE OF BIRTH:
PASSPORT NO:
NATIONALITY:
POSITION:
COMPANY/AGENCY
NAME:
DATE OF BIRTH:
SECURITY CLEARANCE:
PLACE OF BIRTH:
PASSPORT NO:
NATIONALITY:
POSITION:
COMPANY/AGENCY
NAME:
DATE OF BIRTH:
SECURITY CLEARANCE:
PLACE OF BIRTH:
PASSPORT NO:
NATIONALITY:
POSITION:
COMPANY/AGENCY
NAME:
DATE OF BIRTH:
SECURITY CLEARANCE:
PLACE OF BIRTH:
PASSPORT NO:
NATIONALITY:
POSITION:
COMPANY/AGENCY
NAME:
DATE OF BIRTH:
SECURITY CLEARANCE:
PLACE OF BIRTH:
PASSPORT NO:
NATIONALITY:
POSITION:
COMPANY/AGENCY
NAME:
DATE OF BIRTH:
SECURITY CLEARANCE:
POSITION:
COMPANY/AGENCY
PLACE OF BIRTH:
PASSPORT NO:
NATIONALITY:
Annex C
] Temporary
] Annual
Date:
/
From:
Visit ID:
Fax No:
3. Visitor Details
Full Name:
Date of Birth:
Nationality:
Passport No:
Security Clearance:
Rank/Grade:
Date of Birth:
Nationality:
Passport No:
Security Clearance:
Rank/Grade:
Date of Birth:
Nationality:
Passport No:
Security Clearance:
Rank/Grade:
to
Email:
Signature:
Date:
Stamp
7. IVCO Authorisation
Stamp
Name:
Signature:
Date:
Date:
Annex D
New Card
Surname:
Nationality:
Forename(s):
Nationality other:
Country of birth:
Place of birth:
Date of Birth:
Clearance level:
POV* Reference:
POV* Date:
Passport Number:
Passport Country:
Passport issue:
Company Name:
Position in firm:
Date left: