Atch 3 - LSS DD254.pdf

Please wait...

If this message is not eventually replaced by the proper contents of the document, your PDF viewer may not be able to display this type of document.

You can upgrade to the latest version of Adobe Reader for Windows®, Mac, or Linux® by visiting http://www.adobe.com/go/reader_download.

For more assistance with Adobe Reader visit http://www.adobe.com/go/acrreader.

Windows is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Mac is a trademark of Apple Inc., registered in the United States and other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.

DRAFT

SAMPLE

PREVIOUS EDITION IS OBSOLETE.

Page of

DD FORM 254, APR 2018

NEEDS DD67

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the National Industrial Security Program (NISP) apply to all security aspects of this effort involving classified information.)

OMB No. 0704-0567 OMB approval expires:

June 30, 2025 The public reporting burden for this collection of information, 0704-0567, is estimated to average 70 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, at whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

RETURN COMPLETED FORM AS DIRECTED IN THE INSTRUCTIONS.

1. CLEARANCE AND SAFEGUARDING

2. THIS SPECIFICATION IS FOR: (X and complete as applicable.)

3. THIS SPECIFICATION IS: (X and complete as applicable.)

a. ORIGINAL (Complete date in all cases.)

b. REVISED (Supersedes all previous specifications.)

4. IS THIS A FOLLOW-ON CONTRACT?

If yes, complete the following:

Classified material received or generated under

5. IS THIS A FINAL DD FORM 254?

If yes, complete the following:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

7. SUBCONTRACTOR(S) (Click button if you choose to add or list the subcontractors -- but will still require a separate DD Form 254 issued by a prime contractor to each subcontractor)

8. ACTUAL PERFORMANCE (Click button to add more locations.)

10. CONTRACTOR WILL REQUIRE ACCESS TO: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

e. NATIONAL INTELLIGENCE INFORMATION:

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. See instructions. Provide details in Blocks 13 or 14 as set forth in the instructions.)

12. PUBLIC RELEASE

Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the National Industrial Security Program Operating Manual (NISPOM) or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified here with at least office and phone contact information and if available, an e-mail address. (See instructions)

13. SECURITY GUIDANCE

The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended.

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. The field will expand as text is added. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. Also allows for up to 6 internal reviewers to digitally sign. See instructions for additional guidance or use of the fillable PDF.)

List of Attachments (All Files Must be attached Prior to Signing, i.e., for any digital signature on the form)

14. ADDITIONAL SECURITY REQUIREMENTS

Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the CSO. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

15. INSPECTIONS

Elements of this contract are outside the inspection responsibility of the CSO.

If Yes, explain and identify specific areas and government activity responsible for inspections. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

17. CERTIFICATION AND SIGNATURES

Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. Upon digitally signing Item 17h, no changes can be made as the form will be locked.

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICIAL

9.0.0.2.20120627.2.874785 DD 254, "DoD Contract Security Classification Specification"

TBD

Enter typed name of certifying official (last, first, middle initial).:

N/A

TBD

Enter cognizant security office(s) (Name, Address, ZIP Code, Telephone required; Email Address optional).:

N/A Enter cognizant security office(s) (Name, Address, ZIP Code, Telephone required; Email Address optional).: [Servicing Information Protection (IP) Office in lieu of (ILO) CSO] 88 ABW/IPD, 1801 Tenth Street, Area B, Bldg 8 Wright-Patterson AFB OH 45433-7625 937-255-2878/88abw.ipd.industrial.security@us.af.mil

5236 Chase Street, Bldg 257 Wright-Patterson AFB OH 45433

(2) Comply with AFFARS 5352.204-9000. See Item 13.

Ref Item 12: Continued.

(1) Information requiring AF or DoD–level review will be forwarded by the entry-level public affairs office through the AFIMSC Public Affairs Office to the Secretary of the Air Force, Office of Public Affairs, Security and Review Division (SAF/PAX), 1690 Air Force Pentagon, Washington DC 20330-1690. MAJCOM/DRUs will send information requiring AF or DoD-level review directly to SAF/PAX.

(2) 88 LRS/CL, 1940 Allbrook Dr, WPAFB OH 45433 for non-SAR related material. Transmission of public release request via e-mail is not authorized.

32 Code of Federal Regulations, Part 117, National Industrial Security Program Operating Manual (NISPOM), 24 February 2021, applies.

a. The Contractor will notify the Government Contracting Activity and the Government Security Manager within 48 hours of any incident involving the actual or suspected compromise/loss of classified information to enable the Government to conduct immediate assessment of potential impact pending formal inquiry/investigation. Actual or suspected compromise of Covered Defense Information will be reported IAW DFARS Clause 252.204-7012.

b. Ref Item 10j/11l: The contractor shall comply with DoDI 5200.48, DAFI 16-1403 Controlled Unclassified Information (CUI), DoD 5400.7‑R/Air Force Manual 33‑302, DoD Freedom of Information Act (FOIA) Program, and AFI 16-1404, Air Force Information Security

c. Ref Item 10k:

(1) Authorized users of an information technology system with no privileged access (IT Level III), must have, at a minimum, a favorably completed Tier 1 personnel security investigation in accordance with AFMAN 17-1301, Computer Security, 10 Feb 17, Para 4.2., prior to being granted access.

(2) Prior to accessing military personally identifiable information, at a minimum, a favorably adjudicated Tier 3 background investigation is required IAW DoDM 5220.22V2_AFMAN 16-1406V2, Para 6.a(2)(a)1 (Added)(AF), National Industrial Security Program: Industrial Security Procedures for Government Activities.

d. Ref item 11b: Contractor will receive classified documents for reference only.

e. Ref Item 11m:

(1) Provide the information requested by the Notification of Government Security Activity and Visitor Group Security Agreements clause, Air Force Federal Acquisition Regulation Supplement (AFFARS) 5352.204-9000, to 88 ABW/IPD, 1801 10th St, WPAFB OH 45433, 88abw.ipd.industrial.security@us.af.mil. The contractor shall comply with DODM 5220.22, Volume 2, AFMAN 16-1406, Volume 2, AFMCSUP, National Industrial Security Program: Industrial Security Procedures For Government Activities, 3 Dec 21 and supplemental guidance.

(2) Security Agreement for Independent Visitor Groups under 88 ABW/IP security cognizance (Revised 2 Apr 21)

1. This agreement is promulgated by DoDM 5220.22V2_AFMAN 16-1406V2, National Industrial Security Program, Industrial Security Procedures for Government Activities, and 32 CFR, Part 117, National Industrial Security Program Operating Manual (NISPOM), §117.7(a) and Air Force Federal Acquisition Regulation, 5352.204-9000, Notification of Government Security Activity and Visitor Group Security Agreements. This guidance is applicable for contractor performance as a visitor group (VG) under the 88th Air Base Wing Information Protection Office security cognizant, Wright-Patterson AFB OH. For performance on other installations, prior to the start of performance, the contractor shall contact the host information protection office to execute an agreement as required by the above referenced documents.

2. Classification Management.

a. Control and Accountability: All access to, or possession of classified material by contractor personnel, including oral and visual at WPAFB, will be under the control of the contractor. When the government transfers material to the contractor to safeguard and store, the transfer must be accomplished using an AF Form 310, Document Receipt and Destruction Certificate.

(1) The contractor shall maintain a record of the receipt and dispatch of SECRET and CONFIDENTIAL in accordance with NISPOM, Chapter 5, Section 2. (NOTE: The document accountability system for SECRET is eliminated as a security protection measure, unless specified by specific program classification guidance.)

(2) The contractor shall maintain complete and appropriate accountability records for all TOP SECRET material generated, reproduced, received, transmitted, and maintained IAW the NISPOM, Chapter 5, Section 2.

(3) If VG personnel find unattended classified material or an unsecured/unattended classified vault or container, they will safeguard it and immediately notify the SA. The SA will notify 88 ABW/IPD. If discovered during government non-duty hours, the VG shall follow the procedures outlined in the government activity’s Information Protection Program Operating Instruction (OI).

b. Storage of Classified Information:

(1) The contractor is authorized to store classified information necessary to the performance of this contract. The USAF program official will furnish storage containers; however the container cannot be shared with government activities or other contractors. Access to government storage containers will be at the discretion of the Government Program Manager (GPM).

(2) Storage containers furnished to the contractor will remain the property of the USAF.

(3) The contractor has responsibility for setting, recording, and maintaining the container combination. The SF 700, Security Container Information, will be used to identify the container's base identification number, those persons having knowledge of the combination, and the date of combination change. Part 1 of the SF 700 will be posted inside the locking drawer of each container or the inside of vault doors. Part 2 will be used to record the safe combination and shall be appropriately marked with the classification level (reflecting the highest level of information stored within the container) and stored. Access to the combination will only be given to individuals authorized access to the classified information. However, if the performance is by one VG employee, then it may be provided to the GPM and part 2 of the SF 700 must contain a notice that the GPM [Name, symbol, building, and room number] is the individual to be contacted in the event the contractor is incapacitated.)

(4) The Optional Form 89, Maintenance Record for Security Containers/Vault Doors, will be used to record preventive maintenance/repairs and posted inside the locking drawer of each container or the inside of the vault door. Maintain all records of security container and vault door maintenance, repairs, and inspections while the container is in use.

(5) Combinations will be changed as follows: when placed in use, whenever an individual knowing the combination no longer requires access, when the combination has been subject to possible compromise and when taken out of service.

c. Disposition/Review of Classified Information:

(1) The VG shall review (at least annually) classified holdings for the purpose of reducing holdings to an absolute minimum.

(2) The VG will return all classified material furnished by the User Agency, including all reproductions thereof and material for destruction, and will surrender all classified material developed by the VG in connection with the contract or program when no longer required for contract performance. Any retention for other purposes or other method of disposition must be coordinated with the GPM and approved by the contracting officer.

d. Reproduction of Classified Material: Reproduction of classified information shall be accomplished only on AF-controlled-approved equipment and procedures IAW DoDM 5200.01-V3, Enclosure 2, Paras 14 and 15.

3. Information Systems.

a. Contractors shall not access government information systems prior to being determined trustworthy based on a personnel security investigation commensurate with assigned duties and adjudicated by a designated government official.

b. The VG is prohibited from establishing their own Information System/networks (Local Area Networks, Wide Area Network, Cellular phone/USB Modem, Wi-Fi, Storage Area Network, etc.) without the direct permission of governing communications and responsible information systems office.

4. Guard Services: The host government activity will provide guard services.

5. Security Forms: Security forms and publications are accessible at: Air Force publications: https://www.e-publishing.af.mil/ DoD publications: https://www.esd.whs.mil/DD/. Local forms will be provided by the government activity.

6. Security Inspections:

a. 88 ABW/IPD will conduct a security review of the VG on-base activity at twelve (12) month intervals to ensure compliance with the VGSA and provide written results to the VG Home Office Facility, Security Assistant (SA) and Security Focal Point (SFP). A response is not required unless discrepancies are noted during inspection.

b. The VG will conduct a self-review of the on-base activity midway between 88 ABW/IPD security reviews, using the government-furnished self-inspection checklist and this VGSA for guidance. The checklist is available on the 88 ABW Industrial Security share point site.

c. Unannounced security program reviews may be conducted on an unscheduled basis. Those reviews are the same as and take the place of a regularly scheduled review.

d. The security focal point (SFP) will maintain the following documentation and have available for security reviews:

(1) A signed copy of the current prime DD Forms 254, and all subcontractors DD Forms 254, if applicable.

(2) Copy of the Security Agreement for visitor groups under 88 ABW/IP security cognizance.

(3) Documentation the Security Agreement was provided to all subcontractors, if applicable.

(4) Documentation of the last program review and self-inspection.

(5) Consultant Agreements, if applicable.

(6) Current list of all employees identifying their security clearance access level, including subcontractors, if applicable.

7. Transmission of Classified Material/Information:

a. Receipt and dispatch of classified material is the responsibility of the government. The VG is not authorized to perform these activities unless they are specifically contracted for and identified in the Statement of Work or Performance Work Statement. When this service is required for contract performance, the designated VG employee shall comply with DoDM 5200.01V1_AFMAN 16-1404V1, DoDM 5200.01V2_AFMAN 16-1404V2, DoDM 5200.01V3_AFMAN 16-1404V3 and the government activity’s security program OI. The security assistant (SA) will provide VG personnel training on mail handling procedures, to include proper securing of Registered, Certified, USPS Express and FedEx Mail and/or First Class mail. However, under no circumstances will the VG be authorized to open a classified package beyond the outer wrapper to determine further distribution or sign the classified document receipt.

b. The VG is not authorized direct receipt or dispatch of classified material at WPAFB through the U.S. Postal channels. The VG will use the address of the USAF program official, with the attention line indicating the VGs on-base activity designation.

c. The VG shall maintain a record of the receipt and dispatch of all classified material in accordance with Chapter 5, Section 4 of the NISPOM.

d. The VG's work site is the area allocated to the VG for use. If classified information is transported outside the facility, the classified information must be properly marked, double wrapped, sealed, etc., in accordance with the NISPOM. However, if a cleared VG employee hand carries classified from the VG's on-base work site to a government office within the same building, he/she may transmit the material without single or double-wrapping provided adequate measures are taken to protect the material against unauthorized disclosure IAW DoDMV3 5200.1_AFMAN 16-1404, Enclosure 4, and the Government activity’s Information Protection Program OI.

e. Classified material may be hand carried off WPAFB by VG personnel provided the employee is so designated in writing by the VG's Facility Security Officer (FSO) as an official VG courier and has been briefed by the SFP or FSO regarding his/her responsibilities under the NISPOM. The removal will be annotated on the VG's receipt and dispatch record. An inventory of the material will be accomplished prior to departure. A copy of the inventory will be carried by the employee. The employee will also carry an identification card or badge identifying the contractor’s name and the name and a photograph of the employee. When the employee returns, an inventory of the material will be conducted. NOTE: Government Contracting Activity (GCA) written authorization is always required when hand carrying TOP SECRET material. It is also needed to hand carry SECRET and CONFIDENTIAL material that is not related to contract performance.

f. If necessary, emergency overnight storage may be arranged with the WPAFB Consolidated Command Post, Bldg 266, Area A, Phone 937-257-6314. WP Form 1409, Accountable Container(s) Receipt, should be obtained from the Command Post upon release of classified material.

8. Security Badges: The government activity will issue security badges. The contractor shall return security badges to the issuing office upon the period of performance end date, termination of the contract, or when an employee is no longer supporting the contract, whichever is sooner. Transfer of security badges to another contract is not authorized.

9. Visitor Control: The contractor shall comply with DoDM 5200.08V3_AFMAN 31-101V3, Installation Perimeter Access Control, and the host installation commander’s visitor control procedures for access to the installation and the government activity’s visitor control procedures to access facilities.

10. Security Incidents: The contractor shall report security incidents to the government activity’s SA and host Information Protection Office, 88 ABW/IPD. The government shall conduct the preliminary inquiry for security incidents occurring on the installation IAW DoDMV3 5200.01_AFMAN 16-1404V3, Information Security Program Protection of Classified Information, Enclosure 6.

11. Security Checks: Government personnel shall conduct end-of-day security checks unless the contract specifically identifies contractors to conduct end-of-day security checks.

12. Internal Security Controls: The contractor shall comply with the government activity’s security operating instructions.

13. Emergency Procedures to Protect Classified Material: The contractor shall implement emergency procedures to protect classified material as identified in the host government activity’s operating instruction.

14. Training: The contractor shall participate in the host government activity’s initial and reoccurring information protection security awareness and training education programs.

15. Subcontract DD Form 254: Should a subcontract be issued under this effort, whereas the subcontractor will require access to classified information and be physically located on Wright-Patterson AFB for a minimum of 90 days, the VG must issue a subcontract DD Form 254, IAW the NISPOM, and comply with the following:

a. Provide a signed copy of the subcontract DD Form 254 to the GPM, SA and the SFP and 88 ABW/IPD.

b. Ensure the subcontractor complies with this security agreement or enter into a separate agreement with the subcontractor. The agreement to comply must be documented and a copy of the documentation provided to GPM, SA, SFP and 88 ABW/IPD. If a separate agreement is prepared, a copy shall be provided to the GPM, SA, SFP and 88 ABW/IPD.

16. Consultants: Should a consultant be acquired who will require access to classified information and be physically located on WPAFB for a minimum of 90 days, a copy of the Consulting Agreement must be provided to the GPM, SA, SFP, and 88 ABW/IPD.

17. Reporting Requirements: VG employees report shall report adverse information, suspicious contacts, espionage, sabotage, and subversive activities to government activity’s SA IAW DoDM 5220.22V2_AFMAN 16-1406V2, para 4.14 (Added)(AF). The contractor shall furnish a copy of adverse information reports required by 32 CFR, Part 117, National Industrial Security Program Operating Manual, §117.8(c)(1)(i), SEAD 3 and CSA-provided guidance to the 88 ABW Industrial Security Division (88 ABW/IPD), via email 88ABW.IPD.Industrial.Security@us.af.mil.

f. Program Manager: Thomas Riste, 88 LRS/CL, 937-257-6601, thomas.riste@us.af.mil

g. Contracting Officer's Representative: Robert Spires, 88 LRS/LGRM, 937-904-3881, robert.spires@us.af.mil

h. Security Assistant: Kent Klotz, 88 LRS/LGLO, 937-257-6815, kent.klotz.2@us.af.mil

i. Ref Item 18f (Distribution con't):

(1) 88 ABW/IPD, 1801 10th St, WPAFB, OH 45433-7625, 88ABW.IPD.industrial.security@us.af.mil

(2) 88 LRS/LGLO, Kent Klotz, Security Assistant, 1940 Allbrook Dr, WPAFB OH 45433, kent.klotz.2@us.af.mil

(3) 88 LRS/LGRM, Robert Spires, Contracting Officer's Representative, 1940 Allbrook Dr, WPAFB OH 45433, robert.spires@us.af.mil

(4) GCA: AFLCMC/PZIBB, 1940 Allbrook Dr. Suite 3, WPAFB, OH 45433, joaquin.perez@us.af.mil text: 88th Air Base Wing Information Protection Directorate Industrial Security Division (88 ABW/IPD) Coordination / Solicitation Contract Review

Security Specialist

WPAFB, OH 45433

Enter address (include zip code).: 1940 Allbrook Dr., Suite 3

WPAFB, OH 45433