Attachment 1 - DD254.pdf

CLASSIFICATION (When filled in): CUI

PREVIOUS EDITION IS OBSOLETE. Page 1 of 6DD FORM 254, APR 2018

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the National Industrial Security Program (NISP) apply to all security aspects of this effort involving classified information.)

OMB No. 0704-0567 OMB approval expires:

May 31, 2022

The public reporting burden for this collection of information, 0704-0567, is estimated to average 70 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, at whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

RETURN COMPLETED FORM AS DIRECTED IN THE INSTRUCTIONS.

1. CLEARANCE AND SAFEGUARDING

a. LEVEL OF FACILITY SECURITY CLEARANCE (FCL) REQUIRED (See Instructions)

Secret

b. LEVEL OF SAFEGUARDING FOR CLASSIFIED INFORMATION/

MATERIAL REQUIRED AT CONTRACTOR FACILITY

Secret

2. THIS SPECIFICATION IS FOR: (X and complete as applicable.)

a. PRIME CONTRACT NUMBER (See instructions.)

TBD

b. SUBCONTRACT NUMBER

c. SOLICITATION OR OTHER NUMBER DUE DATE (YYYYMMDD)

3. THIS SPECIFICATION IS: (X and complete as applicable.)

a. ORIGINAL (Complete date in all cases.)

DATE (YYYYMMDD)

20170824

b. REVISED (Supersedes all previous specifications.)

REVISION NO. DATE (YYYYMMDD)

c. FINAL (Complete Item 5 in all cases.) DATE (YYYYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT? No Yes If yes, complete the following:

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? No Yes If yes, complete the following:

In response to the contractor's request dated , retention of the classified material is authorized for the period of:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE

TBD

b. CAGE CODE c. COGNIZANT SECURITY OFFICE(S) (CSO)

(Name, Address, ZIP Code, Telephone required; Email Address optional)

7. SUBCONTRACTOR(S) (Click button if you choose to add or list the subcontractors -- but will still require a separate DD Form 254 issued by a prime contractor to each subcontractor)

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE(S) (CSO) (Name, Address, ZIP Code, Telephone required; Email Address optional)

8. ACTUAL PERFORMANCE (Click button to add more locations.)

a. LOCATION(S) (For actual performance, see instructions.)

5701 21st Street Building 216 Fort Belvoir, VA 22060

b. CAGE CODE (If applicable, see Instructions.)

CRB

c. COGNIZANT SECURITY OFFICE(S) (CSO) (Name, Address, ZIP Code, Telephone required; Email Address optional)

Suzanne M. DeNeal 700 Army Pentagon Washington, DC 20310 703-545-1803 Suzanne.M.DeNeal.civ@army.mil

9. GENERAL UNCLASSIFIED DESCRIPTION OF THIS PROCUREMENT

Provide non-personal technical support services to DASA in the areas of cost of operations of TOE units and cost of contingency operations.

PREVIOUS EDITION IS OBSOLETE. Page 2 of 6DD FORM 254, APR 2018

10. CONTRACTOR WILL REQUIRE ACCESS TO: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION f. SPECIAL ACCESS PROGRAM (SAP) INFORMATION

b. RESTRICTED DATA

g. NORTH ATLANTIC TREATY ORGANIZATION

(NATO) INFORMATION

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION (CNWDI) (If CNWDI applies, RESTRICTED DATA must also be marked.)

h. FOREIGN GOVERMENT INFORMATION

d. FORMERLY RESTRICTED DATA

i. ALTERNATIVE COMPENSATORY CONTROL MEASURES

(ACCM) INFORMATION

e. NATIONAL INTELLIGENCE INFORMATION:

(1) Sensitive Compartmented Information (SCI)

(2) Non-SCI

j. CONTROLLED UNCLASSIFIED INFORMATION (CUI) (See instructions.)

k. OTHER (Specify) (See instructions.)

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. See instructions. Provide details in Blocks 13 or 14 as set forth in the instructions.)

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT

ANOTHER CONTRACTOR'S FACILITY OR A GOVERNMENT

ACTIVITY

(Applicable only if there is no access or storage required at contractor facility.

See instructions.)

b. RECEIVE AND STORE CLASSIFIED DOCUMENTS ONLY

c. RECEIVE, STORE, AND GENERATE CLASSIFIED

INFORMATION OR MATERIAL

d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. PERFORM SERVICES ONLY

f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE

THE U.S.,PUERTO RICO, U.S. POSSESSIONS AND TRUST

TERRITORIES

g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE

TECHNICAL INFORMATION CENTER (DTIC) OR OTHER

SECONDARY DISTRIBUTION CENTER

h. REQUIRE A COMSEC ACCOUNT

i. HAVE A TEMPEST REQUIREMENT

j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

k. BE AUTHORIZED TO USE DEFENSE COURIER SERVICE

l. RECEIVE, STORE, OR GENERATE CONTROLLED UNCLASSIFIED

INFORMATION (CUI).

(DoD Components: refer to DoDI 5200.48, only for specific CUI protection requirements. Non-DoD Components: see instructions.)

m. OTHER (Specify) (See instructions.)

12. PUBLIC RELEASE

Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the National Industrial Security Program Operating Manual (NISPOM) or unless it has been approved for public release by appropriate U.S. Government authority.

Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified here with at least office and phone contact information and if available, an e-mail address. (See instructions)

DIRECT THROUGH (Specify below)

Alexandra C. Bryrant, 410-278-5017 Alexandra.C.Bryrant.civ@army.mil

Public Release Authority:

13. SECURITY GUIDANCE

The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract;

and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended.

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. The field will expand as text is added. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. Also allows for up to 6 internal reviewers to digitally sign. See instructions for additional guidance or use of the fillable PDF.)

1.6 Security Requirements: Contractor personnel performing work under this contract must have a SECRET security clearance at time of the proposal submission, and must maintain the level of security required for the life of the contract. The security requirements are in accordance with the attached DD254.

1.6.1 Antiterrorism Operations Security (AT/OPSEC): Contractor shall fulfill all AT/OPSEC requirements included herein, and any applicable source selection evaluation criteria for antiterrorism (AT) and other related protection matters to include, but not limited to: AT, operations security (OPSEC), information assurance (IA), physical security, law enforcement, intelligence, foreign disclosure.

1.6.2 AT Level I training: All contractor employees, to include subcontractor employees, requiring access Army installations, facilities and controlled access areas shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR or to the contracting officer, if a COR is not assigned, within 30

PREVIOUS EDITION IS OBSOLETE. Page 3 of 6DD FORM 254, APR 2018 calendar days after completion of training by all employees and subcontractor personnel. AT level I awareness training is available at the following website: https://jkodirect.jten.mil.

1.6.3 Access and general protection/security policy and procedures: Contractor and all associated sub-contractors employees shall provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements (FAR clause 52.204-9, Personal Identity Verification of Contractor Personnel) as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

1.6.4 iWATCH Training: The contractor and all associated sub-contractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity ATO). This local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 calendar days of contract award and within 30 calendar days of new employees commencing performance with the results reported to the COR NLT 45calendar days after contract award.

1.6.5 Army Training Certification Tracking System (ATCTS) registration for contractor employees who require access to government information systems: All contractor employees with access to a government info system must be registered in the ATCTS (Army Training Certification Tracking System) at commencement of services, and must successfully complete the DOD Information Assurance Awareness prior to access to the IS and then annually thereafter.

1.7 Key Personnel:

1.7.1 Project Manager: Minimum/General Experience: Fifteen years of DoD/Federal program management experience and contract oversight. The name of this person and an alternate who shall act for the contractor when the Project Manager is absent shall be designated in writing to the COR. Functional Responsibility: The Project Manager and alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. Education: Bachelor's degree business field or technology discipline.

1.7.2 Senior Consultant: Minimum/General Experience: Ten years of relevant progressive experience in quantitative analysis, computer modeling, forecasting, management consulting, and the ability to effectively use applicable tools and techniques. Functional Responsibility:

Provide consulting to Division Chiefs and Senior Analysts for cost models, data bases, cost factors and analyses. Designs, organizes, leads, and conducts maintenance and improvements of cost estimating models, tools and data development. Provides cost estimates. Manage a team of consultants and analysts. Education: Bachelor's degree in Information Systems, Engineering, Business, or a Quantitative discipline such as statistics or economics or other related discipline.

1.7.3 Senior Management Consultant: Minimum/General Experience: Twenty years relevant professional experience, five years management of relevant study types. Functional Responsibility: Provides expert guidance on study-related policy and procedural issues.

Acts as Team Lead reporting to a Principal and is responsible for a specific study area on large, complex projects. Directs and performs data collection, analysis, and report preparation. Education: Master's degree in Operations Research, business or technology discipline

1.7.4 Senior Systems Programmer: Minimum/General Experience: Four years' experience in transfer, sustainment, modernization, and continuous improvement of automated data processing activities. Functional Responsibility: Performs complex assignments on operating systems and application programs; Performs work on moderately complex applications programs; Codes, tests, and debugs applications;

Analyzes a variety of systems, programs, and develops documentation, and design specifications; Analyzes system specifications and develops methods for problem solution; May perform system test and integration and select computer systems, languages and equipment;

Defines nature of data contained in the database. Education: Bachelor's in engineering, information technology, computer science, or programming or similar technology field.

1.8 Non-Key Personnel:

1.8.1 Principal Information Engineer: Minimum/General Experience: Eight years' experience in information engineering with knowledge of functional and data requirements analysis, activity-based costing, modeling, functional economic analysis, process improvement, and performance measurement; Knowledge of information engineering methodologies, tools, and techniques for application across project, functional area, and organizational boundaries. Functional Responsibility: Develops and refines new engineering techniques to enhance quality and productivity; Develops and recommends standards for information systems procedures; Develops and recommends cost effective information engineering methodologies and tools for application across functional and project boundaries; Develops and applies organization-wide information models for use in designing and building integrated, shared software and database measurement systems;

Develops and assists in development of activity and data models in both the "as-is" and "to-be" environments, identifies targets of opportunity for improvement; Develops and leads development of simulation models for "what-if" analyses of identified core and business processes targeted for re-engineering and improvement. Education: Bachelor of Science degree in Computer Science, Information Systems, PREVIOUS EDITION IS OBSOLETE. Page 4 of 6DD FORM 254, APR 2018

Business, Engineering, or related technical discipline.

1.8.2 Senior Program Analyst: Minimum/General Experience: Three years' experience may include design, installation, maintenance, and requirements development; Knowledge of systems applications, equipment processes, capabilities and limitations. Functional Responsibility: Assists or directs the analysis and design of management systems; Identifies key users, their needs, and determines disconnects between data and information; Identifies data storage or handling of information and provides solutions; Devises improved methods of data descriptions, data outputs, and data feeds to support a variety of users; Responsibilities may include analysis of technical, financial, and program data. Education: Bachelor of Science degree in Computer Science, Information Systems, Business, Engineering, or related technical discipline.

1.8.3 Senior Database Administrator: Minimum/General Experience: Seven years of experience with complex databases is required;

Possess knowledge of standards and procedures, able to maintain database dictionaries, and competent in the database management.

Functional Responsibility: Works at the highest level of database management; May be responsible for design, implementation, and maintenance of complex databases with respect to JCL, access methods, access time, device allocation, validation, organization, and statistical methods; Duties may include protection and security of physical information; Provides advice to database administrators on design and development of large scale or complex database applications; May monitor the performance of subordinates and provide guidance and instruction to project/task team members. Education: Bachelor of Science degree in Computer Science, Information Systems, Business, Engineering, or related technical discipline.

1.8.4 Principal: Minimum/General Experience: Twenty years federal consulting experience, 10 years management of relevant studies Functional Responsibility: Provides corporate-level project oversight, and project management of large, complex projects. Provides high-level technical expertise and executive briefings and training. Education: Master's degree in business or technology discipline.

1.8.5 Consultant: Minimum/General Experience: Eight years of progressive experience in quantitative analysis, computer modeling, forecasting, management consulting. Functional Responsibility: Provides technical consulting support to Division Chiefs and Senior Analysts for cost models, data bases, cost factors and analyses. Designs, organizes, leads, and conducts maintenance and improvements of cost estimating models, tools and/or data development. Provides cost estimates. Education: Bachelor's degree in Information Systems, Engineering, Business, or a Quantitative discipline such as statistics or economics or other related discipline.

1.9 Post Award Conference/Periodic Progress Meetings: The Contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation Subpart 42.5. The contracting officer, Contracting Officer’s Representative (COR), and other Government personnel, as appropriate, may meet periodically with the contractor to review the contractor's performance. At these meetings the contracting officer will apprise the contractor of how the government views the contractor's performance and the contractor will apprise the Government of problems, if any, being experienced.

Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the government.

1.10 Contracting Officer Representative (COR): The (COR) will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract; perform inspections necessary in connection with contract performance: maintain written and oral communications with the Contractor concerning technical aspects of the contract; issue written interpretations of technical requirements, including Government drawings, designs, specifications: monitor Contractor's performance and notifies both the Contracting Officer and Contractor of any deficiencies; coordinate availability of government furnished property, and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.11 Contractor Travel: Contractor will be required to travel OCONUS and CONUS within the performance of this contract to attend meetings, conferences, and training. The contractor may be required to travel to off-site training locations and to ship training aids to these locations in support of this PWS. The Contractor may be authorized travel expenses at rates no higher than the substantive provisions of the Joint Travel Regulation (JTR), IAW FAR Part 31.205-46, and the limitation of funds specified in this contract. All travel requires Government approval/authorization and notification to the COR.

1.12 Other Direct Costs: This category includes travel, reproduction, and shipping expenses associated with training activities as well as visits to contractor facilities. It could also entail the renting of suitable training venues.

1.13 Organizational Conflict of Interest: Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The Contractor shall notify the Contracting Officer immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to

PREVIOUS EDITION IS OBSOLETE. Page 5 of 6DD FORM 254, APR 2018 the Contracting Officer to avoid or mitigate any such OCI. The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the Contracting Officer and in the event the Contracting Officer unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the Contracting Officer may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.14 Contractor Manpower Reporting (CMR): The contractor shall report all contractor and subcontractor labor hours required for performance of services provided under this contract via a secure data collection site. The contractor is required to complete all required data fields using the following web address: https://www.sam.gov, and then click on “Department of the Army CMRA” or the icon of the DoD organization that is receiving or benefitting from the contracted services. Reporting inputs will be for the labor executed during the period of performance by each Government fiscal year (FY), which runs 01 October through 30 September. While inputs may be reported anytime during the FY, all data shall be reported no later than 31 October of each calendar year. Contractors may direct questions to the help desk by clicking on “Send an email” which is located under the Help Resources ribbon on the right side of the login page of the applicable Service/Component’s Contractor Manpower Reporting website.

1.15 CAC Access to Government Computers/Systems: All Contractor personnel are required to acquire and maintain a Common Access Card (CAC). CACs will be used for building access and DoD/Army network access. The Trusted Agent is responsible for validating CAC issuance using the Contractor Verification System.

Contractor eligibility remains in force during employment under the contract for those employees who have a valid and recurring requirement for access to Army facilities or automation systems to perform those duties stipulated in the contract. CACs shall be returned to the Trusted Agent when the Contractor employee’s employment is terminated or upon expiration of the contract. The CACs expire when Contractor eligibility terminates or three years from the issuance date, whichever occurs first.

1.16 PHASE IN /PHASE OUT PERIOD: To minimize any decreases in productivity and to prevent possible negative impacts on additional services, the Contractor shall have personnel on board, during the 30-day phase in/phase out periods. During the phase in period, the Contractor shall become familiar with performance requirements in order to commence full performance of services on the contract start date.

List of Attachments (All Files Must be attached Prior to Signing, i.e., for any digital signature on the form)

NAME & TITLE OF REVIEWING OFFICIAL

Suzanne DeNeal, Chief Support Branch Executive Services Division

SIGNATURE

14. ADDITIONAL SECURITY REQUIREMENTS

Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

No Yes If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the CSO. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted.

(See instructions for additional guidance or use of the fillable PDF.)

15. INSPECTIONS

Elements of this contract are outside the inspection responsibility of the CSO.

No Yes If Yes, explain and identify specific areas and government activity responsible for inspections. The field will expand as text is added or you can also use item

13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted.

(See instructions for additional guidance or use of the fillable PDF.)

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

a. GCA NAME

Alexandra C. Bryant

b. ACTIVITY ADDRESS CODE (AAC) OF THE CONTRACTING OFFICE (See Instructions)

CRB

c. ADDRESS (Include ZIP Code)

ACC APC Division D Branch B Bldg 4310 6515 Integrity Court Bldg 4310

APG, MD 21005-30113

410-278-5017

d. POC NAME

Alexandra C. Bryant

e. POC TELEPHONE (Include Area Code)

+1 (410) 278-5017

f. EMAIL ADDRESS (See Instructions) alexandra.c.bryant.civ@army.mil

17. CERTIFICATION AND SIGNATURES

Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. Upon digitally signing Item 17h, no changes can be made as the form will be locked.

a. TYPED NAME OF CERTIFYING OFFICIAL (Last, First, Middle Initial) (See Instructions)

DeNeal, Suzanne, M.

b. TITLE

Chief Support Branch Executive Services Division

DENEAL.SUZANNE

.MARIE.1173587887

Digitally signed by

DENEAL.SUZANNE.MARIE.11

73587887 Date: 2023.07.19 08:05:05 -04'00'

PREVIOUS EDITION IS OBSOLETE. Page 6 of 6DD FORM 254, APR 2018

c. ADDRESS (Include ZIP Code)

700 Army Pentagon Washington, DC 20310

d. AAC OF THE CONTRACTING OFFICE (See Instructions)

CRB

e. CAGE CODE OF THE PRIME CONTRACTOR (See Instructions.)

TBD

f. TELEPHONE (Include Area Code)

+1 (703) 545-1803

g. EMAIL ADDRESS (See Instructions) suzanne.m.deneal.civ@army.mil

h. SIGNATURE

i. DATE SIGNED (See Instructions)

20230719

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICIAL

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND

SUBCONTRACTOR

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY

ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER

f. OTHER AS NECESSARY (If more room is needed, continue in Item 13 or on additional page if necessary.)

DENEAL.

SUZANNE

.MARIE.11

73587887

Digitally signed by

DENEAL.SUZA

NNE.MARIE.11

73587887 Date: 2023.07.19 08:05:34 -04'00'