Attachment 5 - DD 254.pdf

Please wait...

If this message is not eventually replaced by the proper contents of the document, your PDF viewer may not be able to display this type of document.

You can upgrade to the latest version of Adobe Reader for Windows®, Mac, or Linux® by visiting http://www.adobe.com/go/reader_download.

For more assistance with Adobe Reader visit http://www.adobe.com/go/acrreader.

Windows is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Mac is a trademark of Apple Inc., registered in the United States and other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.

ATTACHMENT 2

NORAD and USNORTHCOM SPECIAL SECURITY OFFICE (SSO) - SCI SUPPLEMENT

ITEM 13a: Contract Expiration date: See PWS

ITEM 13b: The SCIFs at HQ NORAD-USNORTHCOM will be used to perform SCI contractual requirements.

SCI material released to the contractor under this contract will be separately stored and maintained only in such properly accredited facilities. Non NORAD-USNORTHCOM SCIFs will be used only when covered by a co-utilization Memorandum of Agreement (MOA) between HQ NORAD-USNORTHCOM and the sponsor of the facility. The supporting SSO is HQ NORAD-USNORTHCOM SSO.

ITEM 13c: The following documents with subsequent revisions or changes will be used for specific SCI security classification guidance on this contract:

AFMAN 14-304

DoD 5105.21-M-1 Signals Intelligence Security Regulation (SISR). DCID 6/9, DCID 6/3, DCID 6/4 Joint DoDIIS / Cryptologic SCI Information Systems Security Standards (JDCSISSS)

ITEM 13d: Inquires pertaining to classification guidance on SCI will be directed to the Contract Monitor.

ITEM 13e: SCI data furnished to or generated by the contractor will require security handling and controls beyond those in the National Industrial Security Program Operating Manual (NISPOM). These supplemental instructions will be furnished and/or made available to the contractor through the Contract Monitor by the User Agency Special Security Office, HQ NORAD and USNORTHCOM SSO.

ITEM 13f: Names of contractor personnel requiring access to SCI will be submitted to the SCI Control Monitor (CM). The contractor will provide HQ NORAD and USNORTHCOM SSO an SCI manpower list showing job description of each SCI position, levels of access required per position, and statement of work justifying SCI-level clearances through the COR.

ITEM 13g: The contractor will establish and maintain a current access list of those employees (by position) working on this contract. A copy of this list will be provided to the SCI Contract Monitor (CM).

ITEM 13h: The contractor will advise the SCI Contract Monitor (CM) immediately upon reassignment of personnel to other duties not associated with this contract. The COR and unit Security Manager will ensure that HQ NORAD and USNORTHCOM SSO is notified and the individual is debriefed from SCI access by HQ NORAD and USNORTHCOM SSO.

ITEM 13i: Release of Information. SCI with restrictive caveats (e.g. ORCON, PROPIN, etc) will be released to contractors only when originator approval has been obtained. The contractor will control SCI which has been originated or obtained under this contract as follows: The contractor may release such material to any contractor employee working against a position under this contract only when need-to-know exists. The contractor will release such material to any Special Security Office personnel assigned to HQ NORAD and USNORTHCOM or DIA upon demand by such personnel. The contractor may release such material to any other personnel, including contractor and subcontractor employees, and employees of any Federal Government agency, only upon prior written approval from the SCI Contract

Monitor. An access certification to a NORAD and USNORTHCOM contractor-occupied SCIF does not constitute approval to release NORAD and USNORTHCOM contractual material to these other personnel; Contract Monitor approval is nevertheless required. Contract Monitor approval of a NORAD and USNORTHCOM contractor visit certification or permanent certification to another facility will constitute approval to discuss contractual material at the facility to be visited.

ITEM 13j: Any SCI release to the contractor in support of this contract remains the property of the DoD department, agency, or command that releases it. The contractor will maintain active accountability of all SCI released to his custody, regardless of whether the release is within a contractor or US Government SCIF. Upon completion/cancellation of the contract, the contractor must return all such material to HQ NORAD and USNORTHCOM SSO unless a follow-on contract specifies that material will be transferred to a subsequent contract. SCI inventories will be conducted IAW DIA Manual 50-14.

ITEM 13k: A SCIF must be established and maintained by the contractor. SCI material released to the contractor under this contract will be separately stored and worked on only in facilities either accredited through HQ NORAD and USNORTHCOM, or another accredited agency or properly covered by a co-utilization Memorandum of Agreement (MOA) between HQ NORAD and USNORTHCOM and the sponsor of the facility. HQ NORAD and USNORTHCOM sponsored SCIFs will not be co-utilized for other Government agency contracts unless properly covered by a MOA. The supporting SSO is HQ NORAD and

USNORTHCOM SSO.

ITEM 13l: Defense Courier Service is not required under this contract.

ITEM 13m: Electronic processing of SCI is not permitted.

ITEM 13n: Contractor Special Security Officers (CSSOs) must coordinate with the SCI Contract Monitor, and obtain the concurrence of HQ NORAD-USNORTHCOM SSO prior to subcontracting any portion of SCI efforts involved in this contract.

ITEM 13o: No contractor personnel will be granted access to SCI material under this contract unless they are filling a DoD SCI position. The contractor will coordinate with the SCI Contract Monitor to ensure adequate positions are requested under this contract. Multiple contract employees sponsored by organizations other than HQ NORAD and USNORTHCOM must be certified to HQ NORAD and USNORTHCOM for use on this contract.

ITEM 13p: The contractor will nominate a CSSO to HQ NORAD and USNORTHCOM SSO. HQ NORAD and USNORTHCOM SSO will submit nominations for appointment by HQ NORAD and USNORTHCOM. The contractor will designate a Special Security Point of Contact (POC) to HQ NORAD and USNORTHCOM SSO. The POC will be responsible for all personnel and information security transactions between the contractor and HQ NORAD and USNORTHCOM SSO.

ITEM 13q: Contractor will not use references to SCI accesses, even by unclassified acronyms, in advertising, promotional efforts, or recruitment for employees.

ITEM 13r: The following activity is designated as the User Agency SSO for SCI requirements IAW DIA

Manual 50-14: HQ NORAD and USNORTHCOM, Special Security Office, Peterson SFB, CO 80914.

ATTACHMENT 3

NORAD and USNORTHCOM – OPSEC

Addendum to DD Form 254 – Item 11j

GENERAL:

1.PURPOSE: This section outlines the requirements and procedures necessary to protect Critical Information for Operations Security (OPSEC).

2.MISSION: To maintain a continuing awareness of adversary interest in center actions and adversary intelligence collection capabilities. To understand the need to identify and protect classified and unclassified indicators, which occur, reveal sensitive information. To evaluate the effectiveness of OPSEC measures taken to preclude or reduce adversary acquisition and exploitation of sensitive information.

3.DEFINITION: OPSEC is the process of analyzing friendly actions attendant to military operations and other activities to:

a. Identify those actions that can be observed by adversary intelligence systems.

b. Determine indicators hostile intelligence systems might obtain that could be interpreted or pieced together to derive critical information in time to be useful to adversaries.

c. Select and execute measures that eliminate or reduce to an acceptable level the vulnerabilities of friendly actions to adversary exploitation.

4.OBJECTIVES:

a. To protect planned operational center activities by preventing the inadvertent disclosure of unclassified information relating to or revealing a possible classified operation.

b. To preserve secrecy concerning specific scenario events and a NORAD response to these events.

c. To identify OPSEC vulnerabilities and recommend protective measures which will serve to enhance the security of future operations.

5.TASKS: Task requirements are outlined in the Statement of Work for this effort and at minimum must include:

a. Release of the organizations Critical Information List to the contractor.

b. Threat information available (Threat Working Group Minutes).

c. Contractor receiving OPSEC training from the sponsoring organization.

d. Specific OPSEC countermeasures as needed.

SPECIAL SECURITY OFFICE

CONTRACT MONITOR SUPPLEMENT SECURITY INSTRUCTIONS

SCI ADDENDUM FOR DD FORM 254 FOR CONTRACT # FA251724Q0018

DATE of DD 254 (02/07/2024)

ITEM 13a: ENTER THE CONTRACT EXPIRATION DATE. 14 March 2029.

This task order dates are 15 March 2024 – 14 March 2029. This date reflects, among others things, when the SCI-indoctrinated contractor personnel will be debriefed if there are no option years exercised or a follow on contract. Ensure revisions are issued if this date will be exceeded, or ensure the date is an accurate estimate of the contract completion date. Contract extension letters must be received NLT 3 duty days before expiration date or all contractor personnel will be de-briefed.

ITEM 13b: The SCIF at HQ NORAD-USNORTHCOM will be used to perform SCI contractual requirements. SCI material released to the contractor under this contract will be separately stored and maintained only in such properly accredited facilities. Non NORAD-USNORTHCOM SCIFs will be used only when covered by a co-utilization Memorandum of Agreement (MOA) between HQ NORAD-USNORTHCOM and the sponsor or the facility. The supporting SSO is HQ NORAD-USNORTHCOM SSO.

ITEM 13c: The following documents with subsequent revision or changes will be used for specific security classification guidance on this contract.

ICD 705, ICD 703, ICD 704, DoDM 5105.21 Vol 1-3 and JDCSISSS; and any other documents that apply to your specific contract.

ITEM 13d: Inquiries pertaining to classification guidance on SCI will be directed to the Contract Monitor.

ITEM 13e: SCI data furnished to or generated by the contractor will require security handling and controls beyond those in the National Industrial Security Program Operating Manual (NISPOM). These supplemental instructions will be furnished and/or made available to the contractor thru the Contract Monitor by the User Agency Special Security Office, HQ NORAD-USNORTHCOM SSO.

ITEM 13f: Names of contractor personnel requiring access to SCI will be submitted to the SCI Contract Monitor (QAP). Provide HQ NORAD-USNORTHCOM SSO an SCI manpower list showing job description of each SCI position, levels of access required per position, and the statement of work justifying SCI-level clearances. An example letter can be obtained from the HQ NORAD-USNORTHCOM SSO by the COR. The personnel working on the TS//SCI contractor requirement for this contract requires final adjudicated

TS//SCI ICD 704 eligibility by the DOD CAF prior to performing TS//SCI work. Interim TS//SCI clearances will not be available for Contractor personnel on this effort.

ITEM 13g: The contractor will establish and maintain a current access list of those employees (by position) working on this contract. A copy of this list will be furnished to the SCI Contract Monitor (QAP).

ITEM 13h: The contractor will advise the SCI Contract Monitor (QAP) immediately upon reassignment of personnel to other duties not associated with this contract. The QAE and unit Security Manager will ensure that HQ NORAD-USNORTHCOM SSO is notified and that the individual is debriefed in person from SCI access by HQ NORAD-

USNORTHCOM SSO.

ITEM 13i: Release of Information. SCI with restrictive caveats (e.g. ORCON, PROPIN, etc) will be released to contractors only when originator approval has been obtained. The contractor will control SCI that has been originated or obtained under this contract as follows: The contractor may release such material to any contractor employee working on a position under this contract only when need-to-know exists. The contractor will release such material to any Special Security Office personnel assigned to HQ NORAD-USNORTHCOM or DIA upon demand by such personnel. The contractor may release such material to any other personnel, including contractor and subcontractor employees, and employees of any Federal Government agency, only upon prior written approval from the SCI Contract Monitor. An access certification to a NORAD- USNORTHCOM contractor-occupied SCIF does not constitute approval to release NORAD-USNORTHCOM contractual material to these other personnel; Contract Monitor approval is nevertheless required. Contract Monitor approval of a NORAD- USNORTHCOM contractor visit certification or permanent certification to another facility will constitute approval to discuss contractual material at the facility to be visited”.

ITEM 13j: Any SCI release to the contractor in support of this contract remains the property of the DoD department, agency, or command that releases it. The contractor will maintain active accountability of all SCI released to his custody, regardless of whether the release is within a contractor or US Government SCIF. Upon completion/cancellation of the contract, the contractor must return all such material to HQ NORAD-USNORTHCOM SSO unless a follow-on contract specifies that material will be transferred to a subsequent contract. SCI inventories will be conducted IAW DoDM 5105.21 Vol 1-3, ICD 703, ICD 705

ITEM 13k: A SCIF at the contractor facility is not required for this NORAD- USNORTHCOM contract. NORAD-USNORTHCOM sponsored SCIFs will not be co-utilized for other Government agency contracts unless properly covered by a MOA. The supporting SSO is HQ NORAD-USNORTHCOM SSO.

ITEM 13l: Defense courier support is not required on this task order.

ITEM 13m: SCI Electronic processing of classified information is not required on this task order.

ITEM 13n: Contractor Special Security Officers (CSSOs) must coordinate with the SCI Contract Monitor, and obtain the concurrence of HQ NORAD-USNORTHCOM SSO prior to subcontracting any portion of SCI efforts involved in this contract.

ITEM 13o: No contractor personnel will be granted access to SCI material under this contract unless they are filling a DoD SCI position. The contractor will coordinate with the SCI Contract Monitor to ensure adequate positions are requested under this contract.

ITEM 13p: The contractor will designate a Special Security Point of Contact (POC) to HQ NORAD-USNORTHCOM SSO. The POC will be responsible for all personnel and information security transactions between the contractor and HQ NORAD-

USNORTHCOM SSO.

ITEM 13q: Contractor will not use references to SCI accesses, even by unclassified acronyms, in advertising, promotional efforts, or recruitment for employees.

ITEM 13r: The following activity is designated as the User Agency SS for SCI requirements IAW DoDM 5105.21 Vol 1-3; HQ NORAD-USNORTHCOM, Special Security Office, PETERSON AFB, CO 80914.

Signature blocks:

SSO: __________________________ Contract Monitor: ______________________

CHRISTIAN S. CORNELIUS ANDREW M. LAVALLEY GS-13

Industrial Security Chief COR/Senior Program Manager

NORAD-USNORTHCOM NORAD-USNORTHCOM/J68

2024-02-07T08:55:12-0700

LAVALLEY.ANDREW.M.1098966923

DRAFT

SAMPLE

PREVIOUS EDITION IS OBSOLETE.

Page of AEM LiveCycle Designer

DD FORM 254, APR 2018

NEEDS DD67

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the National Industrial Security Program (NISP) apply to all security aspects of this effort involving classified information.)

OMB No. 0704-0567 OMB approval expires:

October 31, 2020 The public reporting burden for this collection of information, 0704-0567, is estimated to average 70 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, at whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

RETURN COMPLETED FORM AS DIRECTED IN THE INSTRUCTIONS.

1. CLEARANCE AND SAFEGUARDING

2. THIS SPECIFICATION IS FOR: (X and complete as applicable.)

3. THIS SPECIFICATION IS: (X and complete as applicable.)

a. ORIGINAL (Complete date in all cases.)

b. REVISED (Supersedes all previous specifications.)

4. IS THIS A FOLLOW-ON CONTRACT?

If yes, complete the following:

Classified material received or generated under

5. IS THIS A FINAL DD FORM 254?

If yes, complete the following:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

7. SUBCONTRACTOR(S) (Click button if you choose to add or list the subcontractors -- but will still require a separate DD Form 254 issued by a prime contractor to each subcontractor)

8. ACTUAL PERFORMANCE (Click button to add more locations.)

10. CONTRACTOR WILL REQUIRE ACCESS TO: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

e. NATIONAL INTELLIGENCE INFORMATION:

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. See instructions. Provide details in Blocks 13 or 14 as set forth in the instructions.)

12. PUBLIC RELEASE

Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the National Industrial Security Program Operating Manual (NISPOM) or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified here with at least office and phone contact information and if available, an e-mail address. (See instructions)

13. SECURITY GUIDANCE

The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended.

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. The field will expand as text is added. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. Also allows for up to 6 internal reviewers to digitally sign. See instructions for additional guidance or use of the fillable PDF.)

14. ADDITIONAL SECURITY REQUIREMENTS

Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the CSO. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

15. INSPECTIONS

Elements of this contract are outside the inspection responsibility of the CSO.

If Yes, explain and identify specific areas and government activity responsible for inspections. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

17. CERTIFICATION AND SIGNATURES

Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. Upon digitally signing Item 17h, no changes can be made as the form will be locked.

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICIAL

9.0.0.2.20120627.2.874785 DD 254, DoD Contract Security Classification Specification List of Attachments [3] (All Files Must be Attached Prior to Signing, i.e., for any digital signature on the form) DD254_ATTACHMENT 2_SCI Supplement_Finalv1.pdf DD254_ATTACHMENT 3_OPSEC_Final.pdf

1.6.1.1 DD254_ATTACHMENT 1 SCI Supplement DD Form 254 C2VTC 02072024_PDF_signbox.pdf

250 Vandenberg Street, Suite B016 Peterson SFB, CO 80914-3819 CSO: Headquarters NORAD and USNORTHCOM/CSMS 250 Vandenberg Street, Suite B016 Peterson SFB, CO 80914-3819

250 Vandenberg Street, Suite B016 Peterson SFB, CO 80914-3819 Location: Cheyenne Mountain Space Force Station 1 NORAD Rd. Colorado Springs, CO 80914

1. Primary support location: Headquarters (HQ) NORAD and USNORTHCOM, Bldg. 2, Peterson SFB Colorado 80914

2. The contract also requires access to the General Officer and Field Grade Officer Quarters (GO/FO) on Peterson SFB CO 80914.

3. The contract also requires access to Cheyenne Mountain Space Force Station (CMSFS), 1 NORAD Rd. Colorado Springs, CO 80914

Ref 10e(1).: All contractor SCI work and access will be at a designated SCI Facility (SCIF) at the TO level. (SEE SECTION 15 - INSPECTIONS)

Ref 10e(2).: This contract requires access to Sensitive Compartmented Information (SCI) and non-SCI intelligence information:

a. The number of personnel required to have access to SCI is determined by the COR/TM and the NORAD & USNORTHCOM at the task order level.

b. The Director, Defense Intelligence Agency (DIA) and Director, Department of Defense (DoD) agency identified at the task order level, as the executive agent for DIA, have exclusive security responsibility for SCI released to the contractor or developed under this contract.

c. Contractor generated or Government furnished material may not be provided to the Defense Technical Information Center. Contract generated technical reports will bear the statement ‘Not Releasable to the Defense Technical Information Center per DoD Instruction 5230.24.

d. All contractor personnel requiring access to SCI information must: be U.S. citizens, have been granted a final ICD 704 security clearance by the U.S. Government, and have been indoctrinated for the applicable compartments of SCI access prior to being given any access to such information released or generated under this contract, determined at the task order level.

e. Classified material released or generated under this contract is not releasable to foreign nationals without the expressed written permission of the Director, DoD (through the NORAD & USNORTHCOM SSO) and Director, DIA, determined at the task order level.

f. SCI received under this contract may not be released to subcontractors.

g. The contractor and COR/TM will revalidate all SCI billets under this contract with the NORAD & USNORTHCOM SSO annually or when a revised DD Form 254 issued, whichever is sooner, determined at the task order level.

h. All SCI visit requests by contractors shall be forwarded to the COR/TM for approval and need-to-know certification before being sent through the NORAD & USNORTHCOM to the facility to be visited, determined at the task order level.

Ref 10j: Controlled Unclassified Information (CUI) generated and/or provided under this contract shall be safeguarded and marked as specified in DoD Instruction 5200.48.

Ref 11a: Contractor performance is restricted to locations identified in Block 13.

Government agency or activity will provide security classification guidance for performance of this contract.

Ref 11e: Contractor is not allowed to Fabricate, Modify, or Store Classified Hardware. Perform services only.

Ref 11j : Ref 11j: See OPSEC Addendum, to outline the requirements and procedures necessary to protect Critical Information for OPSEC.

Industrial Security Specialist

N&NC/J2, SSO

rep: Mr. Andrew LaValley, GS-13 N&NC Acquisition Program Manager

Peterson SFB, CO 80919 Address: 21st Contracting Squadron/PKB 135 Dover St, Ste 2225 Peterson SFB, CO 80914