20260401_RFI_SN-26-33_Attachment_3_-_Security.docx

Defense Advanced Research Program Agency (DARPA) Tactical Technology Office (TTO)

DARPA-SN-26-33

Attachment 3 – Security Information

1. PROGRAM SECURITY

1.1. Controlled Unclassified Information (CUI) and Controlled Technical Information (CTI) on Non-DoD Information Systems For unclassified white papers containing Controlled Unclassified Information (CUI), applicants will ensure personnel and information systems processing CUI security requirements are in place.

If an unclassified submission contains CUI or the suspicion of such, as defined by Executive Order 13556 and 32 CFR Part 2002, the information must be appropriately and conspicuously marked CUI in accordance with DoDI 5200.48. Identification of what is CUI or higher should be clearly detailed within your source security classification guide (SCG) or Controlled Unclassified Information Guide (CUIG).

Those submitting white papers involving the pursuit and protection of DARPA information designated as CUI must have an information system authorized to process CUI information IAW NIST SP 800-171 and DoDI 8582.01.

Further information on CUI identification, marking, protecting and control, to include processing on Non-DoD Information Systems, is incorporated herein and can be found at https://www.darpa.mil/about/offices/contracts-management/proposer-general-terms#cui.

1.2. Classified Submissions

For classified white paper submissions, applicants will ensure all industrial, personnel, and information systems processing security requirements are in place and at the appropriate level (e.g., Facility Clearance Level (FCL)), and that Automated Information Security (AIS), Certification and Accreditation (C&A), and any Foreign Ownership Control and Influence (FOCI) issues are mitigated prior to submission. Additional information on these subjects can be found at https://www.dcsa.mil/.

(a) Classified Markings Classified submissions shall be transmitted and marked in accordance with the security classification guidance referenced and sourced from your governing Security Classification Guide (SCG). This SCG must be provided to the DARPA Program Security Representative (PSR) for review along with written authorization for the use of classified information in response to this Request for Information from the Office of Primary Responsibility. Contact the PSR via the unclassified email DARPA-SN-26-33@darpa.mil.

If a submission contains Classified National Security Information or the suspicion of such, as defined by Executive Order 13526, the information must be appropriately and conspicuously marked with the classification level and declassification date. Classification must be detailed equal to the level that the sourced SCG dictates. Submissions requiring DARPA to make a final classification determination shall be marked as follows:

“CLASSIFICATION DETERMINATION PENDING. Final review by the DARPA PSR. ____________________(insert the recommended classification level, e.g., Top Secret, Secret or Confidential)”

Submissions containing both classified information and CUI must be appropriately and conspicuously marked with the proposed classification level as well as ensuring CUI is marked in accordance with DoDI 5200.48.

(b) Classified Submission Requirements and Procedures Those choosing to submit classified information from other collateral classified sources (i.e., sources other than DARPA) must ensure (1) they have permission from an authorized individual at the cognizant Government agency (e.g., Contracting Officer, Program Manager); (2) the proposal is marked in accordance with the source Security Classification Guide (SCG) from which the material is derived; and (3) the source SCG is submitted along with the proposal.

When a white paper includes a classified portion, and when able according to security guidelines, we ask that an e-mail be sent to DARPA-SN-26-33@darpa.mil as notification that there is a classified portion to the submission. When submitting classified white papers, digital submissions are preferred (email or CD-ROM) and will be accepted via appropriate channels. Pre-coordinate transmission by sending an unclassified e-mail to DARPA-SN-26-33@darpa.mil. Submissions containing the classified portion of the white paper should be submitted as a single searchable Adobe PDF file. A single hard copy may be submitted, if desired, in accordance with the instructions outlined below.

(c) Both Classified and Unclassified Submissions It is desired that all information is submitted on the same network, but if necessary, portions may be split between classified and unclassified systems as dictated below.

For a white paper that includes both classified and unclassified information, they may be separated into an unclassified portion and a classified portion. The white paper should include as much information as possible in the unclassified portion and use the classified portion ONLY for classified information. The unclassified portion can be submitted to DARPA-SN-26-33@darpa.mil. The classified portion must be provided separately, according to the instructions outlined in the ‘Classified Submission Requirements and Procedures’ section above.

1.3. Confidential, Secret, and Top Secret Information

Use transmission, classification, handling, and marking guidance provided by previously issued SCGs, the DoD Information Security Manual (DoDM 5200.01, Volumes 1 - 4), and the National Industrial Security Program Operating Manual (32 CFR Part 117), when submitting Confidential, Secret, and/or Top Secret classified information.

Confidential and Secret Confidential and Secret classified information may be submitted via ONE of the three following methods IAW DoDM 5200.01 Volume 3 to the mailing address listed in the contact information in Part I of this PS:

· Electronically via appropriate computer system. Senders should coordinate by sending an UNCLASSIFIED e-mail request to DARPA-SN-26-33@darpa.mil. Once appropriate access to Classified IT system is verified, the program team may accept the submission(s).

OR

· Hand-carried by an appropriately cleared and authorized courier to the DARPA Classified Document Registry (CDR). Prior to traveling, the courier shall contact the DARPA CDR at 703-526-4052 to coordinate arrival and delivery.

OR

· Mailed via U.S. Postal Service (USPS) Registered Mail or USPS Express Mail. All classified information will be enclosed in opaque inner and outer covers and double-wrapped. The inner envelope shall be sealed and plainly marked with the assigned classification and addresses of both sender and addressee. Senders should mail to the mailing address listed in the contact information herein.

The inner envelope shall be addressed to Defense Advanced Research Projects Agency, ATTN: TTO Front Office, with a reference to the SN number (DARPA-SN-26-33).

The outer envelope shall be sealed with no identification as to the classification of its contents and addressed to Defense Advanced Research Projects Agency, Security & Intelligence Directorate, Attn: CDR.

Top Secret, Sensitive Compartmented Information (SCI), and/or Special Access Program (SAP) Information If Top Secret, SCI, and/or SAP information must be included, senders shall coordinate by sending an UNCLASSIFIED e-mail request to DARPA-SN-26-33@darpa.mil to coordinate submission.

image1.jpeg