Attachment 11 MSS2 DD254 Draft.pdf

CLASSIFICATION (l'.lhen filled m): lJndassifil-tl

10. CONTRACTOR WILL REQUIRE ACCESS TO: /X an that •pply Provide de/8//s in 8/oc�s IJ or 14 as set forlh In the lnstrvct,ons J

181 a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION

181 b. RESTRICTED DATA

Iv! c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION (CNWOI) le.I (II CNWDI nppl,es, RESTRICTED DATA must also be man.eel)

18) d. FORMERLY RESTRICTED DATA

o. NATIONAL INTELLIGENCE INFORMATION:

[81 {1) Sonslllvo Compartmontcd lnfonnallon (SCI)

[8l {2) Non-SCI

0 f. SPECIAL ACCESS PROGRAM (SAP) INFORMATION

(8] g. NORTH ATLANTIC TREATY ORGANIZATION

(NATO) INFORMATION

181 h. FOREIGN GOVERMENT INFORMATION

D I. ALTERNATIVE COMPENSATORY CONTROL MEASURES

(ACCM) INFORMATION

[8j J. CONTROLLED UNCLASSIFIED INFORMATION (CUI) (See lnsl111chons /

[gj k. OTHER (Specify) (Seo lnsl111chons /

Sl'\.:rcl & Top Sccn.:I SCI slantl-alonc /\IS. Sccrcl & Top Snn:t connccIiviIy. and VC,S/\.

11. IN PERFORMING THIS CONTRACT. THE CONTRACTOR WlLL: (X •" tnat spply See inslrUCo·ons Provide details ,n Bloc�s 13 or 14 os sel forlh In tho lnslruc�ons I

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT

ANOTHER CONTRACTOR'S FACILITY OR A GOVERNMENT

D ACTIVITY

(Applicable only If there is no access or storage re<;ur,t;d at contrac:tor lacdtty See lnslfUCOons)

0 b. RECEIVE ANO STORE CLASSIFIED DOCUMENTS ONLY

Iv! c. RECEIVE, STORE, ANO GENERATE CLASSIFIED le.I INFORMATION OR MATERIAL

[8I d. FABRICATE. MODIFY. OR STORE CLASSIFIED HARDWARE

D o. PERFORM SERVICES ONL y

f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE

0 THE U.S .. PUERTO RICO, U.S. POSSESSIONS ANO TRUST

TERRITORIES

12. PUBLIC RELEASE

g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE

[8) TECHNICAL INFORMATION CENTER (OTIC) OR OTHER

SECONDARY DISTRIBUTION CENTER

[8j h. REQUIRE A COMSEC ACCOUNT

[811. HAVE A TEMPEST REQUIREMENT

0 J. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

0 k. BE AUTHORIZED TO USE DEFENSE COURIER SERVICE

I. RECEIVE, STORE. OR GENERATE CONTROLLED UNCLASSIFIED

INFORMATION (CUI).

(DoD ComponM/s refer to DoDM 5200 0 I. Volume 4 only IOI spec,�c CUI prote<bon rcqu;rements Non-00O Components sec mstrvcbons }

[81 m. OTHER (Specify) (See insrrucoons /

Sl'\.Td & rop SccrcI SCI sI:111d-alonc /\IS. Sc-1.Tl'l & ·1 op Sl·ncI rnnnc,livily. aml VtiS/\.

Any information (classified or unclassified) pertaining fo this contracl shall nol be released for public disseminalion excepl as provided by lhe Nalional lnduslrial Serurity Program Operaling Manual (NISPOM) or unless ii has been approved for public release by appropriale U.S. Governmenl aulhorily.

Proposed public releases shall be submilled for review and approval prior lo release lo lhe appropriale govcmmenl approval aulhorily Identified here wilh al leasl office and phone contact informalion and ii available, an e-mail address. (See insrruc&onsJ

0 DIRECT [8'J THROUGH (Specify below) Public Roloaso Authority:

/\ I-T/\C/Ol'SIT. I 020 S111.11h l'alrick Dri\'C l'a1rick. /\FIi Fl. Contractor is lo suhmit rc4uc�ts through the ConIr,1,Iing Ollk<:r for 32925-3516 OPSEC Program manager review and puhlic n:kasc auIhori✓ali11n.

13. SECURITY GUIDANCE

The serunly classificalion guidance for classified information needed for lhls effort is Identified below. If any diffirully is encounlered in applying this guidance or if any other conlribuling factor lndicalcs a need for changes in lhis guidance. lhe conlraclor is aulhorized and encouraged lo provide recommended changes; lo challenge the guidance or lhe classificalion assigned lo any informalion or malerial furnished or generaled unde1 lhls conlracl.

and lo submil any questions for interpretalion of lhis guidance lo the official ldenlified below Pending final decision. lhe informalion Involved shall be .

handled and protected al lhe highest level of dassificalion assigned or recommended.

(F,n mas opproprlotc IOI the c/ass,ned effort Attach. or forward under separate correspondence. any documenlslgurdesle,rrocls "''""'need hert;in Tl>e teld w,n e,pand ss te,t Is added 1'\17}Cn removtng any e,pand� te,t area. use delete key or backspace A.ey, lhen dsck out of thtt teAt field for it to shnnk sntr rh� text has befn dNeled Also allows tor up to 6 lntemst reviewers ro c/lgotally sign See mst111cbons f0t add,rionst guidance 0t uso of me Mable PDF J

/\IT/\C SCG DaIcd 12 /\pr 2017. and nil revisions l.c\'cl of Access llcquin:tl: Slfflv(i(j/1 ICS Number ol'hilkls:30

Lisi of Attachmenls (4) (All Files Must be Attached Prior to Signing. i.e .. for any digital signalure on lhe lorm)

ACCESS TO SENSITIVE COMP/\l{TMENTED INFOl{M/\TION INSTRUCTIONS AIT1\CI IMENT.PDF PROTECTING FOR CONTIWLI.ED UNCLASSIFIED INFORM/\TION.ptlf RELE,\SE OF NON-SENSITIVE COMP/\lffl\lENTED INFORMATION ( NON-S{'I) IN l'EI.I.IGENl'.. .. ptlf Bloclt 13 DD Form 254 (MUSTHAVE).docx

DD FORM 254, APR 2018 PREVIOUS EDITION IS OBSOLETE.

CLASSIFICATION (IMien f,l(e<J m): 1 lndassilicd

CLASSIFICATION (\M>en "1/ed in): Unclas�ilicd

SSO Patrick

ISPM

lnfonnation /\ssur.incc

14. ADDITIONAL SECURITY REQUIREMENTS

NAME & TITLE OF REVIEW1NG OFFICIAL

URE,/.'

Tlk l<I?/71Cf/vl"t 'ljj-$

( li,'1 r, 5 t> 1/�t(

NAME & TITLE OF REVIEWING OFFICIAL SIG TURE

�SfM(AffA<:\ � ��

NAME & TITLE OF REVIEW1NG OFFICIAL SIGNATURE

N�.\A m1Les I uso l_Rli¼-�0

Requiremenls. in addilion to NISPOM requirements for dassified information. are established for lhis contract.

0 No � Yes If Yes. iden&ly the pert,nenl contractual clauses in the con/fact document ,tself. or provide an appropnate sratement which idenMes /he add1&onat requirements Provide a copy of the requirements to the CSO The ffeld ml/ e,pand as led ,s added"' )'OU can also use ,rem 13 When removing any expanded text a111a. use delete key or backspace key, then click out of the tell neld for it to shnnk aner the text has been deleted (See /ns/rlJCO'ons for add,honal guidance or use of the ftllable PDF /

Sec atlachmcnt for Release of SCI lntclligcncdNon-ln1dlig1:ncc I nlonnation ( 10.c. I .2) for :idditit,nal sccurity n:quin:mcnts. Prior arrnn al of the contr.icting activity is rcquirc<l for subcontracting. /\II DD Fl\1s 25-t prepared for :i sulx-nnlract by the prime co111r.1L·t "ill Ix- li)rnardcd to the government contracting monitor and SSO Patrick ft)r review and c11ncurrencc priur to ,I\\ ard of tl11.; �uhcontr.KI. /\n:css to intelligence infomwtion \\'ill require srccial briefings and linal lJ.S. (in\'Crnmc:nt Top Secret do.:ar:rnc:c with ICD 70-t cligihili1y.

( IF CONTRi\CTORS WORK IN /\FT/\C FOR 90 CONSECUTIVE DJ\ YS. A VISITOI{ (iROl 11' SEClJf{fTY /\(il{El:i\lEN I ( VtiS1\ l MUST BE /\DDED TO CONTRACT. \IC.SJ\ IS I.OC/\TED IN Tl Iii SI{ 1.1ll/\RY)

15. INSPECTIONS

Elements of this contrac1 are outside the inspection responsibility of the CSO.

lgj Yes If Yes. ei,:lam and idonbfy spec,f,c areas and 9ovemment acCJv,ty responsible tor mspect1ons 1"ha �Nd \vrll e•pand as tetl ,s added or you can also use ,tem 13 Vw'hcn removrn9 any expanded led arra, use dele10 key or backspace A.ey. then cl,d. out of the te.t.l field far ,t to 5tmnlr. aner the te,t hns been d�lete-d /See lnstflJcnons for add11,onal guidance or use of the fillable PDF J

SSO Patrick h:is e.xclusi\'C so.:curity responsibility for all SCI classified material rel cased tn or (.k\'clopo.:J undcr this wntract and hdd at thl· go\'crnmcnt.SCI faciliiy and/or the contractor's SCI fadfity. D.:fcnsc Security Scr\'ice rc:tains cogni,a1Kl' only cl\'cr mm-St'I material rckascd to or developed under the contract and held within 1hc contr.ictor·s SCI focility or ckarc:d fru:ifity.

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

a. GCA NAME

b. ACTIVITY ADDRESS CODE (AAC) OF THE CONTRACTING OFFICE (See lnslrucbons/

F /\ 7022

17. CERTIFICATION AND SIGNATURES

C. ADDRESS (lndude ZIP Cede)

/\f·TJ\C/SD/\11 I 020 South Patrick Dri\'c Patrick ,\FIi. Fl. 32925-3002

d. POC NAME

o. POC TELEPHONE (lnc!vde Area Code)

p. EMAIL ADDRESS (See lnslrucllons/

Security requirements stated herein are complete and adequate for safeguarding the dassified infonnation to be released or generated under this dassificd effort. All questions shall be referred to the official named below. Upon digitally signing Hem 17h, no d)anges can be made as the form will be lod\ed.

a. TYPED NAME OF CERTIFYING OFFICIAL (Last. First, Middle /n,t,a/} d. AAC OF THE CONTRACTING OFFICE h. SIGNATURE (See Instructions/

b. TITLE

Contracting Officer

c. ADDRESS (lndude ZIP Cede}

/\MIC Oct 2 01./l'K/\ (Patrick /\Fil. Fl.)

I 020 South Patrick Orive.

Patrick /\Fil. Fl. 32925-3002

/See lnstflJct,ons) Fi\ 7022

o. CAGE CODE OF THE PRIME CONTRACTOR (See lnstflJCDons /

f. TELEPHONE (lt>Ciude Area Code)

g. EMAIL ADDRESS (See lnSlflJChons/

DD FORM 254, APR 2018 PREVIOUS EDITION IS OBSOLETE.

CLASSIFICATION (\M>en filled in): lJnclassilied

I. DATE SIGNED

(See 1nsrruct1ons/

PROTECTING CONTROLLED UNCLASSIFIED INFORMATION

EXTRACTED FROM DODM 5400.07_AFMAN 33-302 AND DODI 5200.48

1. CONTROLLED UNCLASSIFIED INFORMATION (CUI):

In addition to classified information, certain types of unclassified information also require application of access and distribution controls and protective measures for a variety of reasons.

In accordance with Reference DoDI 5200.48, such information is referred to collectively as CUI.

DoDI 5200.48 identifies the controls and protective measures developed for DoD CUI, Law

Enforcement Sensitive (LES), DoD Unclassified Nuclear Information (DoD UCNI), and Limited

Distribution) as well as some of those developed by other Executive Branch agencies.

2. CUI MARKINGS:

a. The CUI marking is assigned to information at the time of its creation by a DoD User

Agency. It is not authorized as a substitute for a security classification marking, but is used on official government information that may be withheld from the public under exemptions

2 through 9 of the Freedom of Information Act (FOIA) and an agency's Critical Information

Indicators List (CIIL) referred to as OPSEC information.

b. Use of the above markings does not mean that the information cannot be released to the public, only that it must be reviewed by the Government prior to its release to determine whether a significant and legitimate government purpose is served by withholding the information or portions of it.

3. IDENTIFICATION MARKINGS:

a. An unclassified document containing CUI will be marked "CUI" at the top and bottom of the front cover (if any), on the first page, on each page containing CUI, on the back page, and on the outside of the back cover (if any).

b. All DAF material containing CUI, including a document with comingled classified information, will include a CUI designation indicator IAW DoDI 5200.48, Figure 2. (Note:

place in bottom right-hand corner of first page).

c. Within a classified document, an individual page that contains CUI and classified information will be marked at the top and bottom with the highest security classification of information appearing on the page. If an individual portion contains CUI, but no classified information, the portion will be marked CUI.

Controlled by: [Name of DoD Component] (Only if not on letterhead)

Controlled by: [Name of Office]

CUI Category: [List category or categories of CUI]

Distribution/Dissemination Control:

d. Within a classified document, an individual page that contains CUI, but no classified information will be marked CUI at the top and bottom of the page, as well as each paragraph that contains CUI.

e. A warning box must be added to the first page of multi-page documents to alert readers to the presence of CUI in a classified DoD document.

f. Any CUI released to a contractor by a DoD User Agency is required to be marked with the following statement prior to transfer:

g. Removal of the CUI marking can only be accomplished by the originator or other competent authority. When the CUI status is terminated, all known holders will be notified to the extent practical.

4. DISSEMINATION: Contractors may disseminate CUI to their employees and subcontractors who have a need for the information in connection with a classified contract.

Recipients shall be made aware of the status of such information, and transmission will be by means that preclude unauthorized public disclosure. Transmittal documents will call attention to the presence of CUI attachments.

5. STORAGE: During working hours, CUI shall be placed in an out-of-sight location if the work area is accessible to persons who do not have a need for the information. During non-working hours, the information shall be stored to preclude unauthorized access. Filing such material with other unclassified records in unlocked files or desks is adequate when internal building security is provided during non-working hours. When such internal security control is not exercised, locked buildings or rooms will provide adequate after-hours protection of the material; can be stored in locked receptacles such as file cabinets, desks, or bookcases.

This content is classified at the [insert highest classification level of the source data] level and may contain elements of controlled unclassified information (CUI), unclassified, or information classified at a lower level than the overall classification displayed. This content shall not be used as a source of derivative classification; refer instead to [cite specific reference, where possible, or state “the applicable classification guide(s)”]. This content must be reviewed for both Classified National Security Information (CNSI) and CUI in accordance with DODI 5230.09 prior to public release. [Add a point of contact when needed.]

This document contains information EXEMPT FROM MANDATORY DISCLOSURE under the FOIA. Exemption(s) __________ applies/apply.

6. TRANSPORTATION: CUI may be sent via first-class mail or parcel post. Bulky shipments may be sent by fourth-class mail.

7. DISPOSITION & DISCLOSURE: When no longer needed, record copies of CUI may be disposed of by shredding. Unauthorized disclosure of CUI does not constitute a security violation, but the releasing agency must be informed of any unauthorized disclosure. Appropriate administrative action will be taken to fix responsibility for unauthorized disclosure whenever feasible, and appropriate disciplinary action will be taken against those responsible. The unauthorized disclosure of CUI protected by the Privacy Act may also result in civil and criminal sanctions.

a. The CUI marking is assigned to information at the time of its creation by a DoD User

Agency. It is not authorized as a substitute for a security classification marking, but is used on official government information that may be withheld from the public under exemptions 2 through 9 of the Freedom of Information Act (FOIA).

b. Use of the above markings does not mean that the information cannot be released to the public, only that it must be reviewed by the Government prior to its release to determine whether a significant and legitimate purpose is served by withholding the information or portions of it.