Attachment 7 - DD254.pdf

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort.)

1. AND SAFEGUARDING

a. CLEARANCE REQUIRED

b. LEVEL OF SAFEGUARDING REQUIRED

2. IS FOR: (X and complete as applicable)

a. CONTRACT NUMBER

b. SUBCONTRACT NUMBER

c. DUE DATE (YYYYMMDD)

3. IS: (X and complete as applicable)

a. (Complete date in all cases)

REVISION NO.

c. (Complete Item 5 in all cases)

DATE (YYYYMMDD)

b. REVISED (Supersedes all previous specs)

DATE (YYYYMMDD)

DATE (YYYYMMDD)

4. THIS A FOLLOW-ON CONTRACT? YES NO. Yes, complete the following:

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract.

5. THIS A FINAL DD FORM 254? YES NO. Yes, complete the following:

In response to the contractor's request dated , retention of the classified material is authorized for the period of

6. (Include Commercial and Government Entity (CAGE) Code)

a. ADDRESS, AND ZIP CODE b. CAGE CODE c. SECURITY OFFICE (Name, Address, and Zip Code)

7.

a. ADDRESS, AND ZIP CODE b. CAGE CODE c. SECURITY OFFICE (Name, Address, and Zip Code)

8. PERFORMANCE

a. b. CAGE CODE c. SECURITY OFFICE (Name, Address, and Zip Code)

9. IDENTIFICATION OF THIS PROCUREMENT

10. CONTRACTOR WILL REQUIRE ACCESS TO: 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL:YES NO YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION

b. RESTRICTED DATA

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION

d. FORMERLY RESTRICTED DATA

e. INTELLIGENCE INFORMATION

(1) Sensitive Compartmented Information (SCI)

(2) Non-SCI f.

g. NATO INFORMATION

h. FOREIGN GOVERNMENT INFORMATION

i. LIMITED DISSEMINATION INFORMATION

j. FOR OFFICIAL USE ONLY INFORMATION

k. (Specify)

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER

CONTRACTOR'S FACILITY OR A GOVERNMENT ACTIVITY

b. RECEIVE CLASSIFIED DOCUMENTS ONLY

c. RECEIVE AND GENERATE CLASSIFIED MATERIAL

d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. PERFORM SERVICES ONLY

f. ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES

g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL INFORMATION

CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER

h. REQUIRE A COMSEC ACCOUNT

i. HAVE TEMPEST REQUIREMENTS

j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

l. (Specify)

CLEARANCE

FACILITY

THIS SPECIFICATION

PRIME

SOLICITATION OR OTHER NUMBER

THIS SPECIFICATION

ORIGINAL

FINAL

IS If

IS If

CONTRACTOR

NAME, COGNIZANT

SUBCONTRACTOR

NAME, COGNIZANT

ACTUAL

LOCATION COGNIZANT

GENERAL

SPECIAL ACCESS INFORMATION

OTHER

HAVE

OTHER

DD FORM 254, DEC 1999 PREVIOUS EDITION IS OBSOLETE.

12. RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release a.

Direct Through (Specify)

d. ADDRESS (Include Zip Code)

Yes No to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. The security classifiection guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract;

and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

14. Requirements, in addition to ISM requirements, are established for this contract.

(If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

Yes No15. Elements of this contract are outside the inspection responsibility of the cognizant security office.

(If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. questions shall be referred to the official named below.

b. TITLE c. (Include Area Code) e.

17. DISTRIBUTION

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER f.

PUBLIC

TYPED NAME OF CERTIFYING OFFICIAL

SECURITY GUIDANCE.

ADDITIONAL SECURITY REQUIREMENTS.

INSPECTIONS.

All

TELEPHONE

SIGNATURE

REQUIRED

OTHERS AS NECESSARY

DD FORM 254 (BACK), DEC 1999

Copelanm Note Unmarked set by Copelanm

Block #13 Continuation ADDENUM TO DD 254

FOR OFFICIAL USE ONLY (FOUO)

Contract Number (TBD)

13. ADDITIONAL SECURITY GUIDANCE:

Facility Clearance:

The Contractor shall possess or obtain a Facility Clearance Level at the “SECRET” level prior to contract start date.

Conduct of Personnel:

The Contractor’s personnel must comply with the rules and regulations of individual sites where work is performed. Failure to do so will result in the Government requiring the Contractor to remove the employee from the job site. The reasons for removal are misconduct; security violations; or being under the influence of alcohol, drugs, or other incapacitating agents. Upon determination by the Government, Contractor employees shall be subject to dismissal from the premises. Such action is necessary in the interests of the Government. The removal from the job site or dismissal from the premises shall not relieve the Contractor of the requirement to provide sufficient personnel to do the services as required by this work statement. Incumbent must obtain & maintain a secret clearance while employed in this duty position.

Personnel Security Clearances:

All contract personnel must posses, at minimum a SECRET security clearance. The Contractor shall identify appropriate individual’s performing work under this contract that will require access to classified information and shall submit them for "SECRET” security clearances 10 work days after contract award if the Contractor already possesses a facility clearance. Application for personnel security clearances shall be made in accordance with DoD Directive 5220.22M., Section 2. Applications for new personnel requiring security clearances shall be submitted within 10 workdays of hire by the Contractor. The Government reserves the right to have the contractor provide documentation to verify compliance with these security requirements. WHS/FSD/FFD will provide security classification guidance for the performance of this contract.

a. In compliance with instructions contained in 48 CFR, Part 52, Federal Acquisition Regulation (FAR), Common Identification Standard for Contractor Personnel, the contractor shall comply with DoD personal identity verification procedures identified in the contract that implement Homeland Security Presidential Directives-12 (HSPD-12), Office of Management and Budget (OMB) Guidance M-05-24, Federal Information Processing Standards Publication (FIPS PUB) number 201) and GSA HSPD-12, Standard Operating Procedure (SOP), Personnel Security Process, dated November 18, 2005. The Contractor shall insert this clause in all subcontracts that the subcontractor is required to have physical access to a federal controlled facility or access to a Federal information system.

b. DoD consultants, and support contractor personnel performing work on sensitive automated information systems (AIS) are to be assigned to positions which are designated at one of 3 sensitivity levels (IT – I, IT – II, or IT – III). These designations equate to Critical Sensitive and Non- Critical Sensitive positions. The employing contractor will ensure individuals assigned to these sensitive positions have completed the appropriate access request forms.

(1) IT Level – I: Individuals assigned to positions where damage to DoD networks and development systems can be accomplished and no checks are in place to determine potential destruction of sensitive information. The investigation requirement for these positions is completion of a Special Security Background Investigation (SSBI) with favorable results.

(2) IT Level – II and III: Individuals assigned to positions where daily unsupervised access to DoD networks and information systems containing Sensitive-but-Unclassified or Sensitive Classified up to and including Collateral Secret information is a portion of their duties.

The investigation requirement for these positions is set in DoD policy.

(3) WHS/FSD/FFD retains the right to have cont ractors removed through the contracting officer, regardless of prior clearance or adjudicati on status, whose actions, while assigned to this contract, conflict with the interests of the Government.

(4) All employees performing work under this contract must possess the appropriate clearance commensurate with the level of facility/material to which the employee requires access, up to Secret. The data to be utilized within the proposed system requires at least the investigation noted above.

(5) Privacy. Data processed at WHS/FSD/FFD may contain Privacy Act information which requires the reading, signing, and adherence to appropriate nondisclosure documents.

(6) The contractor is not authorized to release information, orally, visually, or documentary to anyone not associated with this contract.

10j. FOR OFFICIAL USE ONLY (FOUO): The DD Form 254, block 10J is marked YES (For Official Use Only Information (FOUO), therefore, the contractor must comply with the following FOUO handling instructions.

1. GENERAL: The following FOUO instructions comply with guidance provided in the Freedom of Information Act, DoD 5400.7-R; and the Privacy Act.

a. The FOUO marking is assigned to information at the time of its creation in a DoD Agency. It is not authorized as a substitute for a security classification marking but is used on official government information that may be withheld from the public under exemptions 2 through 9 of the Freedom of Information Act.

b. Use of the FOUO marking does not mean that the information cannot be released to the public, only that it must be reviewed by the Government prior to its release to determine whether a significant and legitimate government purpose is served by withholding the information or portions of it

2. IDENTIFICATION MARKINGS:

a. An unclassified document containing FOUO Information will be marked “For Official Use Only” at the bottom of the front cover (if any), on the first page, on each page containing FOUO information but no classified information, the portion will be marked, “FOUO.”

b. In a classified document, an individual page that contains both

FOUO and classified information will be marked at the top and bottom with the highest security classification of information appearing on the page. If an individual portion contains FOUO information but no classified information, the portion will be marked, “FOUO.”

c. Any “For Official Use Only” information released to a contractor by a DoD User Agency is required to be marked with the following statement prior to transfer:

This document contains information EXEMPT FROM MANDATORY DISCLOSURE under the FOIA. Exemptions 2 – 9 apply.

d. Removal of the “For Official Use Only” marking can only be accomplished by the originator or other competent authority. When the “For Official Use Only” status is terminated, all known holders will be notified to the extent practical.

3. DISSEMINATION: Contractors may disseminate “For Official Use Only” information to their employees and subcontractors who have a need for the information in connection with a classified contract only.

4. STORAGE: During working hours, “For Official Use Only” information shall be placed in an out-of-sight location if the work area is accessible to persons who do not have a need for the information. During non-working hours, the information shall be stored to preclude unauthorized access.

Filing such material with other unclassified records in unlocked files or desk is adequate when internal building security is provided during non-working hours. When such internal security control is not exercised, locked buildings or rooms will provide adequate after-hours protection or the material can be stored in locked receptacles such as file cabinets, desks, or bookcases.

5. TRANSMISSION: “For Official Use Only” information may be sent via first –class mail or parcel post. Bulky shipments may be sent by fourth-class mail.

6. DISPOSITION: When no longer needed, FOUO information may be disposed of by shredding or tearing each copy into pieces to preclude reconstructing, and placing it in a regular trash container or as directed by the User Agency.

7. UNAUTHORIZED DISCLOSURE: The unauthorized disclosure of “For

Official Use Only” information does not constitute a security violation but the releasing agency should be informed of any unauthorized disclosure.

The unauthorized disclosure of FOUO information protected by the Privacy Act may result in criminal sanctions.

Contract Number (TBD)

Washington Headquarters Services/Facilities Services Directorate/Federal Facilities Division

Washington Headquarters Services/Facilities Services Directorate Security Manager

Alexandria, VA 22350-2900

1155 Defense Pentagon Washington, DC 20301-1155 security: 8a/11a: Contract performance shall occur at Washington Headquarters Services/Facilities Services Directorate/Federal Facilities Division, WHS/FSD/FFD) 1155 Defense Pentagon, Washington, DC., 20301-1155 and other WHS/FSD/FFD locations in the National Capital Region (NCR) . All provisions of DoD 5220.22M and its supplements apply.

10j. FOR OFFICIAL USE ONLY (FOUO): FOUO information provided under this contract shall be safeguarded as specified in DOD 5400.7-R, “Protecting for Official Use Only (FOUO) Information.” See enclosed For Official Use Only” Addendum.”

10k. OTHER/SIPRNET: All prime and subcontractors under this task shall obtain/maintain a Secret clearance. A interim Secret clearance granted by DISCO will be accepted for basic access. WHS/FSD/FFD will provide security classification guidance for the performance of this contract. Contractor will require SIPRNET access at government location(s)

11e: The contractor will provide on-site support for WHS/FFD. Cleared personnel are required to perform this service because access to classified information cannot be precluded. The contractor is not authorized to release classified or unclassified information to any activity or person outside of WHS/FSD/FFD, including sub-contractors, without the Government Contracting Officer’s Representative written approval. Only with the expressed permission of the Government’s Contracting Officer Representative may the contractor reproduce any classified information/material. All requirements for control and accounting for original documentation and copies apply. "See Block #13 Continuation Page"