Attachment 4 - DD Form 254.pdf

Please wait...

If this message is not eventually replaced by the proper contents of the document, your PDF viewer may not be able to display this type of document.

You can upgrade to the latest version of Adobe Reader for Windows®, Mac, or Linux® by visiting http://www.adobe.com/go/reader_download.

For more assistance with Adobe Reader visit http://www.adobe.com/go/acrreader.

Windows is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Mac is a trademark of Apple Inc., registered in the United States and other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.

Attachment 1

RELEASE OF SENSITIVE COMPARTMENTED INFORMATION (SCI) INTELLIGENCE

INFORMATION TO US CONTRACTORS

ATTACHMENT TO DD FORM 254 FOR CONTRACT NO:

The Director, USCENTCOM, and Defense Intelligence Agency have exclusive security responsibility for all Sensitive Compartmented Information (SCI); classified material released to or developed under the contract and held within the Contractor SCI Facility (SCIF). DoDM 5105.21-V1, (Sensitive Compartmented Information (SCI) Administrative Security Manual: Administration of Information and Information Systems Security), DoDM 5105.21-V2, (Sensitive Compartmented Information (SCI) Administrative Security Manual: Administration of Physical Security, Visitor Control, and Technical Security), DoDM 5105.21-V3, (Sensitive Compartmented Information (SCI) Administrative Security Manual: Administration of Personnel Security, Industrial Security, and Special Activities), ICDs 403, 503, 700, 703, 704, and 705, National Industrial Security Program Operating Manual (NISPOM), DoD 5220.22-R (Department of Defense Industrial Security Program), CCR 380-12 and will comply with all regulations/manuals/directives stated therein which provide the necessary security & classification guidance for personnel, information, physical, AIS, and technical security measures and is a part of the SCI security specifications for the contract. Inquiries pertaining to SCI classification guidance determination or interpretations shall be directed to the Contracting Officer /Contracting Officer Representative (CO/COR) identified in Block 12 of the attached DD254.

1. Requirements for access to SCI:

a. SCI will be handled in accordance with special security requirements, which will be furnished by USCENTCOM Special Security Office.

b. SCI will not be released to contractor employees without specific release approval of the originator of the material as outlined in governing directives; based on prior approval and certification of "need-to-know" by the designated contractor.

c. Names of contractor personnel requiring access to SCI will be submitted to the contracting officer's representative (COR) for approval. Upon receipt of written approval from the COR, the company security officer will submit request(s) for special background investigations in accordance with the NISPOM, to the Defense Security Service (DSS).

d. Inquiries pertaining to classification guidance on SCI will be directed through the CSSO to the responsible COR as indicated on the DD Form 254.

e. SCI furnished in support of this contract remains the property of the Department of Defense (DoD) department, agency, or command originator. Upon completion or cancellation of the contract, SCI furnished will be returned to the direct custody of the supporting SSO, or destroyed IAW instructions outlined by the COR.

f. SCI will be stored and maintained only in accredited facilities.

g. At contract expiration, USCENTCOM SSO will initiate action to debrief contractor personnel with access to this contract unless extensions or modifications to the contract are received no later than 30 days after the established completion date.

h. The contractor is governed by ICD 704, 'Personnel Security Standards and Procedures Governing Eligibility for Access to Sensitive Compartmented Information (SCI) And Other Controlled Access Program Information ' and as may be supplemented by USCENTCOM SSO.

i. Electronic processing of SCI must be accomplished on equipment accredited in accordance with DoDM 5105.21-V1 and ICD 503.

2. The contracting officer's representative (COR) will:

a. Review the SCI product for contract applicability and determine the product is required by the contractor to complete contractual obligations. After the COR has reviewed the SCI product(s) for contract applicability and determined the product is required by the contractor to complete obligations, the COR must request release from the originator through the Intelligence Division. Originator release authority is required on the product types below:

i. Documents bearing the control markings of ORCON, PROPIN.

ii. NSA/SPECIAL marked product.

iii. All categories as listed in DoDM 5105.21-VI.

b. Prepare or review contractor billet/access requests to insure satisfactory justification (need-to-know) and completeness of required information.

c. Approve and coordinate visits by contractor employees when such visits are conducted as part of the contract effort.

d. Maintain records of SCI material provided in support of the contract effort.

e. Determine dissemination of SCI studies or materials originated or developed by the contractor.

f. Within 30 days after completion of the contract, provide written disposition instructions for SCI material furnished to, or generated by, the contractor with an information copy to the USCENTCOM SSO.

3. The contractor will inform the CO/COR and USCENTCOM SSO in advance of visits which involve the passing of access from one location to another. (Note: Emergency exceptions will be handled on a case-by-case basis)

4. SCI with restrictive caveats will be released to the contractor only when the originator's approval has been obtained. The contractor will not release SCI to any person without prior approval from the CO/COR.

5. Transporting of SCI on commercial aircraft must be authorized by the USCENTCOM SSO.

6. The contractor is authorized direct communications with the designated CO/COR and USCENTCOM Office of Security on all matters pertaining to SCI requirements. The CO/COR identified in Block 12 will receive a copy of any correspondence, which may have an impact upon the contractor's ability to perform under this contract.

7. On receipt of impacts to the contract, the contractor will inform the COR, who, in turn, will notify the Contracting Officer/ Activity prior to expending additional funds.

8. Contractors who have TOP SECRET/SCI access may have unescorted access to a government facility, including Government Owned/Contractor Operated (GO/CO) facilities, and may be permitted to work alone inside the facility without the requirement for the presence of a U.S. Government employed representative provided PROPIN, ORCON, SlOP, CNWDI, Law Enforcement Sensitive (LES) and other special program materials are secured to preclude contractor access to this material, or a non-disclosure form is signed by the contractor(s) w/ written approval of the originating agency, or if a U.S. Government employee (military or civilian) is on-site at the time.

9. Electronic processing of SCI must be accomplished on equipment accredited in accordance with DoDM 5105.21 V1, and ICD 503.

Attachment 2

RELEASE OF NON-SENSITIVE COMPARTMENTED INFORMATION (SCI) INTELLIGENCE

INFORMATION TO DoD CONTRACTORS

ATTACHMENT TO DD FORM 254 FOR CONTRACT NO: TBD

1. Requirements for access to non-SCI:

a. Any collateral classified and/or proprietary sensitive information obtained by contractors on behalf of USCENTCOM’s mission, will only be discussed or processed in facilities approved by USCENTCOM leadership. At no time, will such information be discussed or shared with unauthorized contractors. USCENTCOM contractor employees will be required to sign a Non-Disclosure Agreement stating the same.

b. All intelligence material released to the contractor remains the property of the US Government and may be withdrawn at any time. Contractors must maintain accountability for classified intelligence released into their custody.

c. The contractor must not destroy intelligence material without advance approval or as specified by the contracting officer's representative (COR). (EXCEPTION: Classified waste shall be destroyed as soon as practicable in accordance with the provisions of the Industrial Security Program).

d. The contractor must restrict access to those individuals who possess the necessary security clearance and who are providing services under the contract with a valid need to know. Further dissemination to other contractors, subcontractors, other government agencies, private individuals or organizations is prohibited unless authorized in writing by the originating agency through the COR.

e. The contractor must ensure each employee having access to intelligence material is fully aware of the special security requirements for this material and maintain records in a manner which permit the contractor to furnish, on demand, the names of individuals who have had access to this material in their custody.

f. Intelligence material must not be released to foreign nationals or immigrant aliens whether they are consultants, US contractors, or employees of the contractor and regardless of the level of their security clearance, except with advance written permission from the originator. Requests for release to foreign nationals shall be initially forwarded to the contracting officer's representative and shall include:

i. A copy of the proposed disclosure.

ii. Full justification reflecting the benefits to US interests.

iii. Name, nationality, particulars of clearance, and current access authorization of each proposed foreign national recipient.

g. Upon completion or termination of the classified contract, or sooner when the purpose of the release has been served, the contractor will return all classified intelligence (furnished or generated) to the source from which received unless retention or other disposition instructions (see DCID 6/1) are authorized in writing by the COR, and a Final DD254 is generated.

i. The contractor must designate an individual who is working on the contract as custodian. The designated custodian shall be responsible for receipting and accounting for classified intelligence material received under this contract. This does not mean the custodian must personally sign for all classified material. The inner wrapper of classified material dispatched should be marked for the attention of a designated custodian and must not be opened by anyone not working directly on the contract.

h. Within 30 days after the final product is received and accepted by the procuring agency, classified intelligence materials released to or generated by the contractor, must be returned to the originating agency through the contracting officer's representative unless written instructions authorizing destruction or retention are issued. Requests to retain material shall be directed to the COR for this contract in writing and must clearly indicate the justification for retention and identity of the specific document to be retained.

i. Classification, regarding, or declassification markings of documentation produced by the contractor shall be consistent to the information or documentation from which the new document was prepared. If a compilation of information or a complete analysis of a subject appears to require a security classification other than the source documentation, the contractor shall assign the tentative security classification and request instructions from the contracting officer's representative. Pending final determination, the material shall be safeguarded as required for its assigned or proposed classification, whichever is higher, until the classification is changed or otherwise verified.

2. Intelligence material carries special markings. The following is a list of the authorized control markings of intelligence material:

a. “Dissemination and Extraction of Information Controlled by Originator (ORCON).” This marking is used, with a security classification, to enable a continuing knowledge and supervision by the originator of the use made of the information involved. This marking may be used on intelligence, which clearly identifies, or would reasonably permit ready identification of an intelligence source or method, which is particularly susceptible to countermeasures that would nullify or measurably reduce its effectiveness. This marking may not be used when an item or information will reasonably be protected by use of other markings specified herein, or by the application of the “need-to-know” principle and the safeguarding procedures of the security classification system.

b. “Authorized for Release to (Name of Country (ies)/International Organization.” The above is abbreviated “REL ________.” This marking must be used when it is necessary to identify classified intelligence material the US government originator has predetermined to be releasable or has been released through established foreign disclosure channels to the indicated country (ies) or organization.

3. The following procedures govern the use of control markings.

a. Any recipient desiring to use intelligence in a manner contrary to restrictions established by the control marking set forth above shall obtain the advance permission of the originating agency through the COR. Such permission applies only to the specific purposes agreed to by the originator and does not automatically apply to all recipients. Originators shall ensure prompt consideration is given to recipients’ requests in these regards, with particular attention to reviewing and editing, if necessary, sanitized or paraphrased versions to derive a text suitable for release subject to lesser or no control markings.

b. The control marking authorized above shall be shown on the title page, front cover, and other applicable pages of documents, incorporated in the text of electrical communications, shown on graphics, and associated (in full or abbreviated form) with data stored or processed in automatic data processing systems. The control marking also shall be indicated by parenthetical use of the marking abbreviations at the beginning or end of the appropriate portions. If the control marking applies to several or all portions, the document must be marked with a statement to this effect rather than marking each portion individually.

c. The control markings shall be individually assigned at the time of preparation of intelligence products and used in conjunction with security classifications and other marking specified by E.O. 13526 and its implementing security directives. The marking shall be carried forward to any new format in which the same information is incorporated including oral and visual presentations.

Attachment 3

Security Addendum-Standard

As Applied to Contract

XXXXXXXX

1. The name and telephone number of the CO/COR for this contract is: See DD-254, Block 12.

2. The private use of classified information is not permitted except in furtherance of a lawful and authorized Government purpose.

3. Security briefings will be in accordance with the NISPOM, and/or other appropriate directives, (DoDM 5105.21-V1, and Enclosure 5 to DoDM 5200.01-V3). In all cases, the employee will be briefed on his/her obligation to safeguard the information. The employee/contractor will be debriefed according to the applicable regulations when the access is terminated and/or no longer has the need-to-know.

4. The Facility Security Officer/Contractor Special Security Officer, (CSSO) will maintain records, by name and title, of all employees and authorized visitors who have access to the classified and/or intelligence material. The CSSO will confirm employees/visitors are appropriately cleared and authorized, prior to gaining access to the material. FSO/CSS will provide list of employees working on the contract to include sub-contractors at least quarterly to the SSO.

5. ALL MATERIALS GENERATED BY THE CONTRACTOR (including but not limited to correspondence, drawings, models, mockups, photographs, schematics, status, progress, and special reports) will be classified according to its own content and/or by special instructions issued by the CSA, Contracting Officer or his/her duly appointed representative.

6. Special instructions and controls for the handling, processing, storing, and transmission of classified information and material are provided in the appropriate regulations, manuals, or directive.

7. The contractors will not release classified and/or intelligence material to any activity, employee, or other person not directly engaged in providing under this contract unless specific written authorization for such release is received from the CO/COR. This prohibition precludes release without written authority to another contractor or subcontractor, Government agency, private individual, or organization.

8. Unclassified information released or generated under this contract will be restricted in its dissemination to contractor and Government personnel involved in the contract. Release in open literature or exhibition of such information is strictly prohibited without permission of the CO/COR.

9. Intelligence material, whether or not bearing control markings, will not be released to foreign visitors, foreign nationals, or immigrant aliens regardless of their position or level of security clearance, except with the specific permission of the originating agency.

10. If the contractor is required to utilize wireless transmitter devices, to include radio frequency (RF) or infrared (IR) to support this contract, the contractor must contact USCENTCOM SSO and identify the device(s), planned use purpose or scope of the device(s), respond to requests for additional information concerning such device(s), and comply with TEMPEST guidelines.

11. The contractor will comply with USCENTCOM policy, and revisions, regarding the use of Portable Electronic Devices (PED) within USCENTCOM spaces. Should the contractor be within spaces belonging to another agency (Host), the contractor will comply with the host requirement. A PED is any electronic device that receives, transmits, stores, processes, records audio/visual, scans, or otherwise is capable of manipulating information in any form. A PED includes but is not limited to cellular telephones, cameras, pocket scanners, voice recorders, pagers, and computers.

12. Classified and/or intelligence related material released to or generated by the contractor may be destroyed locally by the contractor. Such destruction will be in accordance with applicable regulations: DoDM 5105.21-V1 or Chapter 5, Section 7, NISPOM, utilizing destruction procedures, devices, methods, or equipment approved by the National Security Agency.

13. By virtue of access to SCI and/or intelligence material, contractor employees may have restrictions placed on them for foreign travel in or through designated countries or geographic areas. The contractor shall be responsible for exercising adequate supervision to assure employees are willing to comply with notification requirements for anticipated and completed foreign travel.

14. Subcontracting this contract or any portion thereof requires the contractor to sponsor the subcontractor and be approved by the CO/COR and SSO. The prime contractor must complete a separate DD 254. Additionally the subcontractor must have a final facility clearance issued by Defense Security Service (DSS) or other U.S. Government agency authorized to issue equivalent clearances.

15. Contractors are prohibited from having access to "PROPRIETARY INFORMATION" (abbreviated PROPIN), and "DISSEMINATION AND EXTRACTION OF INFORMATION CONTROLLED BY ORIGINATOR" (abbreviated ORCON) unless in compliance with one of the following:

a. The originating agency of the PROPIN and ORCON provides written consent to the accessing contractor, and the accessing contractor agrees in writing with the originating agency not to divulge, use, or otherwise release PROPIN and ORCON. The originating agency of the PROPIN and ORCON is responsible for identifying and marking PROPIN and ORCON material. The CO/COR is responsible for identifying marked PROPIN and ORCON information within their control and initiating the request and release documentation between the originating agency owning the PROPIN and ORCON and the accessing contractor. If the originating agency of the PROPIN and ORCON fails to or denies access to the accessing contractor, or if the accessing contractor fails to or does not agree to not divulge, use, or otherwise release the PROPIN and ORCON, then the CO/COR is responsible for denying PROPIN and ORCON access until the appropriate documentation has been completed. Contractors, who intentionally obtain access to PROPIN and ORCON without the required documentation, may be subject to civil and criminal liabilities and penalties as provided by law. US Government employees who release PROPIN and ORCON, whether intentionally or accidentally to unauthorized contractors, are subject to civil and criminal liabilities and penalties as provided by law;

b. A US Government employee (military or civilian) is on-site, when contractor access to PROPIN or ORCON is possible or available.

16. The contractor must comply with Foreign Ownership, Control or Influence (FOCI) restrictions and notifications as outlined in the NISPOM.

17. If the contractor identified in Block 6a, Block 7a or Block 8a. is identified as a contractor with FOCI by Defense Security Service (DSS), a favorable National Interest Determination (NID) must be completed as outlined within the NISPOM prior to the contractor being awarded the contract and having access to PROSCRIBED INFORMATION. PROSCRIBED INFORMATION includes COMSEC, Sensitive Compartmented Information, Critical Nuclear Weapons Design Information, Restricted Data, Formerly Restricted Data, TOP SECRET, Special Access Programs, other classified information, and other Executive Branch Departments and Agencies for classified information under the cognizance of such.

18. The contractor may not introduce, activate or use any wireless transmission devices within USCENTCOM facilities without first receiving written permission from USCENTCOM SSO. Military Departments, Major Commands, Combatant Commands, Senior Intelligence Officers, and local Special Security Officers or Contractor Special Security Officers may require more stringent standards which must be complied with. If the contractor is located within another agency's facility or accredited facility, the contractor will comply with the other agency's policies regarding the introduction, activation or use of any such device. The Director, National Intelligence (DNI) may by policy, directive or other means, bar the introduction of any wireless transmission device into any SCIF area after the date of this contract. Should this occur the DNI policy will automatically supersede this paragraph and if the wireless device is still required to be introduced into the SCIF area, justification and a waiver request must be submitted to USCENTCOM SSO for approval.

19. Contractors who anticipate a change of name and/or ownership, must notify the CO/COR in writing upon consideration of the proposed change. Changes may affect facility clearances which affects continuance of the contract.

20. A security review of this DD Form 254 is required during different stages of the contract or any revision of this contract. The CO/COR will provide the contractor with applicable changes in security requirement(s) by issuing a revised DD Form 254.

DRAFT

SAMPLE

PREVIOUS EDITION IS OBSOLETE.

Page of AEM LiveCycle Designer

DD FORM 254, APR 2018

NEEDS DD67

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the National Industrial Security Program (NISP) apply to all security aspects of this effort involving classified information.)

OMB No. 0704-0567 OMB approval expires:

May 31, 2022 The public reporting burden for this collection of information, 0704-0567, is estimated to average 70 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, at whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

RETURN COMPLETED FORM AS DIRECTED IN THE INSTRUCTIONS.

1. CLEARANCE AND SAFEGUARDING

2. THIS SPECIFICATION IS FOR: (X and complete as applicable.)

3. THIS SPECIFICATION IS: (X and complete as applicable.)

a. ORIGINAL (Complete date in all cases.)

b. REVISED (Supersedes all previous specifications.)

4. IS THIS A FOLLOW-ON CONTRACT?

If yes, complete the following:

Classified material received or generated under

5. IS THIS A FINAL DD FORM 254?

If yes, complete the following:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

7. SUBCONTRACTOR(S) (Click button if you choose to add or list the subcontractors -- but will still require a separate DD Form 254 issued by a prime contractor to each subcontractor)

8. ACTUAL PERFORMANCE (Click button to add more locations.)

10. CONTRACTOR WILL REQUIRE ACCESS TO: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

e. NATIONAL INTELLIGENCE INFORMATION:

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. See instructions. Provide details in Blocks 13 or 14 as set forth in the instructions.)

12. PUBLIC RELEASE

Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the National Industrial Security Program Operating Manual (NISPOM) or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified here with at least office and phone contact information and if available, an e-mail address. (See instructions)

13. SECURITY GUIDANCE

The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended.

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. The field will expand as text is added. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. Also allows for up to 6 internal reviewers to digitally sign. See instructions for additional guidance or use of the fillable PDF.)

List of Attachments (All Files Must be attached Prior to Signing, i.e., for any digital signature on the form)

14. ADDITIONAL SECURITY REQUIREMENTS

Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the CSO. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

15. INSPECTIONS

Elements of this contract are outside the inspection responsibility of the CSO.

If Yes, explain and identify specific areas and government activity responsible for inspections. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

17. CERTIFICATION AND SIGNATURES

Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. Upon digitally signing Item 17h, no changes can be made as the form will be locked.

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICIAL

9.0.0.2.20120627.2.874785 DD 254, DoD Contract Security Classification Specification Hide Attachment Bar

7115 S. Boundary Blvd.

MacDill AFB, FL 3362-5101

7115 S. Boundary Blvd. MacDill AFB, FL 3362-5101

Item 10a. Contractor must forward request for COMSEC material/information through the Contracting Officers Representative (COR). The contractor is governed by DoD 5220.22-M, Chapter 9, Section 4 “Communications Security (COMSEC)” and NSA/CSS Policy Manual 3-16. Access to COMSEC material is restricted to US citizens holding a final US Government security clearance. Such information is not releasable to personnel holding only reciprocal clearance. Prior approval from the Government Contracting Agency is required in order for a Prime Contractor to grant COMSEC access to a Subcontractor. Contractor must comply with USCENTCOM guidelines. The NSA Central Office of Record has primary responsibility for the auditing of all COMSEC material governed by DoD 5220.22-M.

Item 10b. Access to Restricted Data requires a final U.S. Government Secret or Top Secret clearance, depending upon material to be accessed. Contractor must follow the guidelines as outlined in DoD Instruction 5210.02 and DoD 5220.22-M.

Item 10c. Access requires a final U.S. government at the appropriate level and must be coordinated through USCENTCOM SSO. GCA approval is required prior to granting CNWDI access to subcontractor(s).

Item 10d. Access to Formerly Restricted Data requires a final U.S. government Secret or Top Secret clearance, depending upon material to be accessed. Contractor must follow the guidelines as outlined in DoD Directive 5210.02 and DoD 5220.22-M.

Item 10e. (1) See attached SCI Release of Intelligence Information for additional security requirements. Access to intelligence information requires SCI indoctrination and a Top Secret U.S. Government clearance. Contractor will require access to ICD 703 “Protection of Classified National Intelligence Including Sensitive Compartmented Information” for SCI requirements. The contract must provide individuals who are able to achieve and maintain the adjudicative standards set forth in the Intelligence Community Directive (ICD) Number 704 “Personnel Security Standards and Procedures Governing Eligibility For Access to Sensitive Compartmented Information and Other Controlled Access Program Information” for continued employment. SCI access by contractor personnel must be approved in writing by the COR via nomination letter. The COR will ensure access is granted to the minimum number of employees required on the strictest need-to-know basis.

Item 10e. (2) See attached Non-SCI Release of Intelligence Information for additional security requirements. Contractor will require access to ICD 710 “Classification and Control Markings System” (11 SEP 2009). All contractor personnel assigned under this contract must possess a current U.S. Government clearance. Personnel are required to sign a non-disclosure statement. USCENTCOM SSO will provide personnel security guidance for the performance of this contract.

Item 10f. The USCENTCOM Special Access Program (SAP) Program Manager (or appropriate User Activity) is responsible for contractor access for USCENTCOM SAP material. Access to SAP information requires a final U.S. Government clearance at the appropriate level or as identified by the SAP Manager for each appropriate SAP. The contractor must coordinate with the SAP Program Manager, through the CO/COR, prior to access. They must adhere to the special access requirements/procedures developed by the SAP Office of Primary Responsibility. SAP information/material will be processed IAW DoDM 5205.07 (series) Volume 1-4, and affiliated Service/Agency Regulations. SAP Program Manager must approval all such accesses. If a SAP sub-contract is awarded, it is the prime contractor’s responsibility to incorporate the additional security requirements in the sub-contract. Authority for access must be obtained from the USCENTCOM SAP Program Manager when the Need-to-Know is established and required to accomplish the required efforts under this contract. All SAP material remains the property of the releasing Government User Agency. Upon completion or cancellation of this contract, SAP material previously furnished will be returned to the direct custody of the appropriate Special Access Program Central Office (SAPCO), to include final reports produced at the SAP level. The SAP Program Manager will provide security classification guidance for the performance of the contract. Contractor personnel must adhere to the special access requirements/procedures developed by the SAP Program Manager.

Item 10g. Access to NATO material will be required for reference at the Government, or appropriately cleared contractor’s facility. Access requires a final U.S. Government security clearance at the appropriate level. Contractor personnel who require access to NATO material will be briefed by the Government Contracting Agency. The Prime Contractor must receive approval from the Government Contracting Agency to grant NATO access to a subcontractor. Contractor personnel shall be debriefed by the Government Cognizant Agency prior to departure from this contract.

Item 10h. Prior approval from the Contracting Officer Representative is required for access to foreign government information for the performance of this contract. Foreign government information must be protected at the equivalent level provided to similar categories of U.S. government information or as specified by the Foreign Government in written government to-government agreements.

Item 10i. Alternative Compensatory Control Measures (ACCM): During the course of the execution of duties while assigned to USCENTCOM, individuals assigned to this contract may require access onsite to ACCM information as determined by the COR and local ACCM control officer. Individuals shall handle the information in accordance with DoDM 5200.01(series), Volumes 1-4; CJCSM 3213.02(series) and applicable program security plans and security classification guidance.

Item 10j. Controlled Unclassified Information (CUI): The contractor is authorized and may have access to UNCLASSIFIED information/material identified as “For Official Use Only” (CUI). The contractor is prohibited from further disclosure/dissemination of this information without the expressed written authorization of USCENTCOM. FOUO information provided under this contact shall be safeguarded as specified in DoDM 5200.01, Volume 4, Incorporating Change 1, May 4, 2018 and may be supplemented by USCENTCOM. In addition, contractors or subcontractors must obtain written approval from USCENTCOM CO/COR/COTR or USCENTCOM Public Affairs prior to posting any unclassified information on any web site or the internet.

Item 10k. OTHER INFORMATION.

All unclassified DOD Information in the possession of non-DOD entities on non-DOD information systems shall be protected in accordance with DODI 8582.01.

Contractors will require access to NIPRNET, SIPRNET, JWICS at Government locations.

Item 11f. Personnel must report foreign travel to the USCENTCOM SSO at least 30 days prior to projected departure date. Overseas places of performance are expected to include: Various locations throughout the USCENTCOM AOR and other locations as directed by the COR.

The Following FARS and DFARS Clauses apply: Far Clause 52.204-2, FAR Clause 52.204-21, DFARS Clause 252.204-7012, DFARS 252.204-7000, DFARS 252.204-7008 and DFARS 252.204-7009.

If the Prime Contractor has teaming partners or subcontractors, the Prime Contractor is required to issue a separate DD Form 254 to these companies. The form will be provided to the PM, Security Assistant and our office within 30 days.

All provisions of lCD (Intelligence Community Directive) 503 "Policy for Information Technology Systems Security Risk Management, Certification and Accreditation" and DOD Information Technology Security Certifications and Accreditation Process apply.

Contractors shall provide all cleared employees with security training and briefings commensurate with their involvement with classified information. The contractor shall provide all cleared employees with some form of security education and training at least annually. Refresher training shall reinforce the information provided during the initial security briefing and shall keep cleared employees informed of appropriate changes in security regulations. Contractors shall maintain records about the programs offered and employee participation in them. Contractors may obtain defensive security, threat awareness, and other education and training information and material from their CSA or other sources.

Only contractor/subcontractors/consultant personnel properly nominated by the contractor and approved by the USCENTCOM SSO are authorized to perform on this contract and have access to classified information/material

General Information:

1. A Collateral or SCI Access Request letter must be submitted to the USCENTCOM SSO prior to contractor gaining access to USCENTCOM facilities. Signatures are required from COR, FSO, and sub-contractor’s FSO, if applicable.

2. Company or COR will notify the USCENTCOM SSO, Industrial Security, 813-529-2121, of all contractors who have departed or are no longer performing on the contract.

3. The contractor must relinquish government issued credentials consisting of USCENTCOM badge, common Access Card (CAC), and Courier Card, when applicable, and any other government issued badges or system access cards upon resignation, termination from contract, and termination from company, suspension or revocation of security clearance or end of period of performance of contract.

4. Departure without Debrief: The CSSO/FSO accesses JPAS to ensure contractor completed SCI debrief with the USCENTCOM SSO. If JPAS reflects SCI access associated with the respective contract company’s Security Management Office Code, the CSSO/FSO will contact the COR advising the contractor did not out-process through the USCENTCOM SSO to initiate administrative debrief and that the CSSO/FSO will take possession of government issued credentials from contract personnel upon discontinuing contract support with USCENTOM to ensure the SSO takes immediate action to facilitate deactivation and revocation of credentials and administrative SCI debriefing within JPAS.

5. All classified visit requests by contractors shall be forwarded to the COR for approval and need-to-know certification before being sent to the facility to be visited.

6. All classified information received and/or generated under this contract is the property of the U.S. Government regardless of proprietary claims. Upon completion or termination of this contract, the U.S. Government will be contacted for destruction or disposition instructions.

7. All contract personnel providing support to the referenced contract are required to adhere to all requirements identified in the SOW/PWS, DD254, applicable Federal, DOD, and USCENTCOM directives, instructions and standard operating procedures that includes proper handling and safeguarding classified and unclassified information. Sponsor rules, regulations, direction, and requirements issued by COR or other authorized personnel for good order, administration, and security will apply to all Contractor personnel who enter the Government’s facilities. The Contractor shall comply with established security procedures for entering a facility and/or any special procedures that may be established for certain restricted areas. All persons granted access to premises in connection with the performance of this contract will be subject to the provisions of criminal or other laws protecting classified or intelligence information, including provisions of the espionage laws (sections 793, 794 and 798 of Title 18, USC) provisions of the Intelligence Identities Protection Act of 1982 (P.L. 97-200, 50 U.S.C.421, 601) and Section 1903 of Title 32, Code of Federal Regulations (CFR).

8. Performance under the contract may require that the Contractor access data and information sensitive to another government agency, another government contractor, or of such nature that its dissemination or use other than as specified in this contract would be averse to the interests of the government or other. Neither the Contractor, nor its contractor employees, shall divulge or release any information developed or obtained in the course of contract performance, except to specifically authorized Government personnel or upon written approval of the Contract Officer. The contractor shall not use, disclose or reproduce any sensitive contract information that bears a restrictive legend, other than as specified in this contract.

9. Safeguarding: Contract facility must possess and retain the safeguarding clearance level granted by the Defense Security Service that is equal to or higher identified by contract.

10. Courier Authorization: Contract personnel shall not courier classified information outside any of the locations in 8a without receiving the required training/briefings and Courier Authorization Card. Hand carrying classified material OCONUS must be approved by USCENTCOM SSO.

11. Foreign Travel: Individuals anticipating official or unofficial foreign travel must notify their supervisory chain of command and submit USCENTCOM SSO Foreign Travel Report NLT 30 days prior to the projected departure date. All personnel conducting travel must review the Electronic Foreign Clearance Guide for country specific guidance and training. Personnel must complete USCENTCOM SSO Foreign travel and Contact Questionnaires within 72 hours of return.

12. Security Infraction/Violations: It is the responsibility of all cleared personnel to report any security incident to the appropriate SSO or local security official. In the event of a suspected or verified security violation associated with this contract or pre-award effort, the Facility Security Officer (FSO) or appropriate program security officer must notify their COR within 24-hours of their knowledge of the incident. The COR will advise USCENTCOM SSO, (813) 529-2121/2126, immediately upon notification from the contractor.DoDM 5105.21-V3 and CCR 380-1.

13. The SSO must be notified within 24 hours of any lost or stolen badges.

In the event that no government employee or military service member is otherwise available, the contractor may be required to conduct security-related functions such as opening/closing of security containers, conducting end-of-day security checks, and arming/de-arming alarm security systems within open/non-open Collateral storage areas and Sensitive Compartmented Information Facilities (SCIFs) used for the safeguarding of classified information/material. In support of this, the contractor is approved to conduct the above actions for the following facilities and rooms/suites.

In the event that the contractor fails to properly conduct these responsibilities and a security violation/incident occurs, the government will have the option to take action against the company IAW U.S. law. In addition, the company will be responsible for reviewing preliminary inquiry reports for any security violation/incident for which an employee is found culpable and provide a written response to the Government Contracting Agency (GCA) and the responsible Industrial Security Program Manager for actions taken against the employee.

All security violations/incidents will be reported to the responsible Cognizant Security Office, Facility Security Officer, Contracting Officer, and contract officer representative (COR) for the contract.

Foreign nationals are prohibited from access to any classified information unless sanctioned by an international or cooperative program agreement.

2610 Pink flamingo Ave MacDill AFB, FL 33621 Address: 6th Contracting Squadron 2610 Pink Flamingo Ave MacDill AFB, FL 33621