Attachment 0002 DD Form 254_HSIF-Warehouse Management.pdf

DEPARTMENT OF DEFENSE 1. CLEARANCE AND SAFEGUARDING

CONTRACT SECURITY CLASSIFICATION SPECIFICATION a. FACILITY CLEARANCE REQUIRED

NONE

(The requirements of the DoD Industrial Security Manual apply to all aspects of this effort)

b. LEVEL OF SAFEGUARDING REQUIRED

NONE

2. THIS SPECIFICATION IS FOR: (X and complete as applicable) 3. THIS SPECIFICATION IS: (X and complete as applicable)

a. PRIME CONTRACT NUMBER

a. ORIGINAL (Complete date in all cases) Date (YYMMDD)

TBD 200201

b. SUBCONTRACT NUMBER

b. REVISED (Supersedes all previous specs)

Revision No. Date (YYMMDD)

c. SOLICITATION OR OTHER NUMBER Due Date (YYMMDD)

c. FINAL (Complete Item 5 in all cases) Date (YYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT? YES NO. If Yes complete the following

Classified material received or generated under W52P1J-17-C-0014 (Preceding Contract Number) is transferred to this follow-on contract

5. IS THIS A FINAL DD FORM 254? YES NO. If Yes complete the following

In response to the contractor's request dated , retention of the identified classified material is authorized for the period of .

6. CONTRACTOR (Include Commercial and Government Entity ( CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

TBD TBD

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICES ( Name, Address, and Zip Code)

N/A N/A N/A

8. ACTUAL PERFORMANCE

a. LOCATION b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

Primary place of performance for this contract shall be at Fort Lee, VA and/or Army installations/facilities

CONUS and OCONUS. See PWS for locations where work is to be performed.

Defense Security Service Office Alexandria Field Office

2331 Mill Rd

Alexandria, VA 22314

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

To provide HSIF warehouse operations and software integration services in support of GCSS-Army.

10. THIS CONTRACT WILL REQUIRE ACCESS TO: YES NO 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (COMSEC)

INFORMATION

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER

CONTRACTOR’S FACILITY OR A GOVERNMENT ACTIVITY

b. RESTRICTED DATA b. RECEIVE CLASSIFIED DOCUMENTS ONLY

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION c. RECEIVE AND GENERATE CLASSIFIED MATERIAL

d. FORMERLY RESTRICTED DATA: d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. INTELLIGENCE INFORMATION: e. PERFORM SERVICES ONLY

(1) Sensitive Compartmented Information (SCI) f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO

RICO, U.S. POSSESSIONS AND TRUST TERRITORIES

(2) Non-SCI g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL

INFORMATION CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER

f. SPECIAL ACCESS INFORMATION h. REQUIRE A COMSEC ACCOUNT

g. NATO INFORMATION i. HAVE A TEMPEST REQUIREMENT

h. FOREIGN GOVERNMENT INFORMATION j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

i. LIMITED DISSEMINATION INFORMATION k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

j. FOR OFFICIAL USE ONLY INFORMATION l. OTHER (Specify). IT Sensitive Duties Required (See Block 13)

k. OTHER Specify)

DD Form 254, DEC 1999 Previous editions are obsolete

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the industrial

Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public release shall be submitted for approval prior to release

Direct

Through (Specify):

All requests for public release shall be submitted to the GCSS-Army Contracting Officer’s Representative.

to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes: to challenge the guidance or classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any document/guides/extracts referenced herein.

Add additional pages as needed to provide complete guidance.

The highest level of facility clearance required for the Contractor to perform on this contract is: None. The Contractor will not be required to safeguard any classified material at its own facility. A National Agency Background Check with

Inquiries (NACI)/Tier 1 (T1) will be required for all Contractor personnel. The contractor will ensure that all employees requiring access to government computer systems, communications networks will have a valid and appropriate security clearance (minimum of a NACI/T1).

Government Issued Common Access Card (CAC): Proof of employment and security clearance/favorable background check is required before a CAC will be issued authorizing access to the Installation and Government computer systems.

CACs may not be issued to contractors unless a data record authorizing CAC issuance is resident in the Defense

Enrollment Eligibility Reporting System (DEERS). The trusted Associate Sponsorship System (TASS) was developed to secure and authorized means of entering Contractor data into DEERS in addition to automating the CAC application and approval process. In order to enter Contractor data into CVS, the contractor data must be resident in an authorized source database. The Joint Personnel Adjudication System (JPAS) is that authoritative source. The Contractor’s Facility

Security Office (FSO) shall ensure its employee(s) has a record in JPAS prior to its employee(s) requesting a CAC be issued.

(See Continuation Sheet)

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract. (If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

Yes No

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. (If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.

Yes No

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL

STACY L. COUTRY

b. TITLE

Security Officer

c. TELEPHONE (Include Area Code)

703-806-3715

d. ADDRESS (Include ZIP Code) 17. REQUIRED DISTRIBUTION

Program Executive Officer, Enterprise Information Systems (PEO EIS)

ATTN: SFAE-PS-O

9350 Hall Road, Building 1445 Fort Belvoir, VA 22060

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

e. SIGNATURE

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER

f. OTHERS AS NECESSARY

DD Form 254 Reverse, DEC 1999

DD Form 254, Continuation

Contract #: W52P1J-17-C-0014

10a. Classified COMSEC material is not releasable to contractor employees who have not received a FINAL clearance at the appropriate security level. COMSEC access shall be IAW DoD 5220.22-M, Chapter 9, Section

4, AR 380-40 and Additional Security Guidelines for COMSEC, Appendix A. When access is required at

Government facilities, contractor personnel will adhere to COMSEC rules and regulations as mandated by

Command policy and procedures. Concurrence of the KO is required prior to subcontractors working on the program. Copies of the subcontract DD254 will be forwarded to the KO for the Contract file and to CECOM

G2 for DD254 tracker information.

Per AR 380-40, Chapter 4: Contractor personnel are subject to the Department of Army Cryptographic Access

Program (DACAP).

10j. Safeguarding "For Official Use Only” (FOUO) information, Appendix D. FOUO Information generated and/or provided under this contract shall be safeguarded and marked as specified in AR 25-55 and DoD 5200.1-

M (Marking is in Volume 2)

11a. Contractor performance is restricted to Government facility(ies). Government agency or activity will provide security classification guidance for performance of this contract. Submit visit request to the KO and/or

Security Management Office for need-to-know verification.

11l. IT Sensitive Duties Required

13a. Contractor personnel performing IT sensitive duties are subject to investigative and assignment requirements IAW AR 25-2, AR 380-67, DoD 8570.0 and affiliated regulations. Army regulation available at www.apd.army.mil

13b. Foreign subcontractors, foreign vendors and/or visitors that are not cleared US Companies, participating in Army foreign disclosure issues will be handled in accordance with AR 380-10, Appendix G, para G-4.

Foreign subcontractor participation will be handled in accordance with AR 380-10 (Technology Transfer, Disclosure of Information & Contacts with Foreign Representatives), (DTM) 09-019 - “Policy Guidance for

Foreign Ownership, Control, or Influence (FOCI)”, September 2, 2009, National Disclosure Policy, and affiliated regulations and/or supplements.

All disclosures (i.e. oral, visual, briefing, documents) to foreign nationals require prior approval by the foreign disclosure officer.

All requests for non-US cleared Foreign subcontractor and/or Foreign own companies to perform on this contract must be requested from the Prime Contract to the KO through Program Office and approved by Foreign Disclosure Officer.

13c. Classified information will be protected IAW the NISPOM, Chapter 5. All security incidents involving classified information will be reported to the CECOM G2 Industrial Security Office, and DSS Industrial

Security Representative. Information will be forwarded to KO and the PM for a program damage assessment to be conducted IAW AR 380-49.

http://www.apd.army.mil/

DD Form 254, Continuation

Contract #: W52P1J-17-C-0014

13d. All subcontractor DD254s and subcontractor tier DD254s will be sent to the KO. Any

Contractors/subcontractors owned by Foreign Companies and that have a clearance issued by the Defense

Security Service under a Special Security Agreement need to have a National Interest Determination (NID) approved if access is required to: Top Secret; COMSEC; Restricted Data; SCI and/or SAP. NID requirements and justification must be sent through CECOM G2 to be forwarded to the approving agencies. Only after a NID approval is received will a FOCI contracting firm be authorized to work on the program.

13e. The contractor FSO will include Threat Awareness and Reporting Program (TARP) requirements in their initial and refresher training IAW AR 381-12, paragraph 1-14 and Chapter 2.

13f. The contractor must submit subcontracts to DD254’s to the KO for the contract file and forward to

CECOM G2 for review to insure Army requirements flow down to the subcontractor.

13g. All Facility Clearance sponsorships for subcontractors must have Government approval and certification on the subcontractor’s DD 254. Submit all requests to the CECOM G2 Industrial Security.

13h. AR 380-49 requires a record of security related training of contractors and imbedded contractors be available for review.