Attachment J.1-BIDDING DD254_OPSEC_CUI.pdf

CLASSIFICATION (When filled in): Unclassified

PREVIOUS EDITION IS OBSOLETE. Page 1 of 6DD FORM 254, APR 2018

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the National Industrial Security Program (NISP) apply to all security aspects of this effort involving classified information.)

OMB No. 0704-0567 OMB approval expires:

June 30, 2025

The public reporting burden for this collection of information, 0704-0567, is estimated to average 70 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, at whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

RETURN COMPLETED FORM AS DIRECTED IN THE INSTRUCTIONS.

1. CLEARANCE AND SAFEGUARDING

a. LEVEL OF FACILITY SECURITY CLEARANCE (FCL) REQUIRED

(See Instructions)

Top Secret

b. LEVEL OF SAFEGUARDING FOR CLASSIFIED INFORMATION/

MATERIAL REQUIRED AT CONTRACTOR FACILITY

None (See instructions)

2. THIS SPECIFICATION IS FOR: (X and complete as applicable.)

a. PRIME CONTRACT NUMBER (See instructions.)

b. SUBCONTRACT NUMBER

c. SOLICITATION OR OTHER NUMBER

BIDDING 023-22

DUE DATE (YYYYMMDD)

3. THIS SPECIFICATION IS: (X and complete as applicable.)

a. ORIGINAL (Complete date in all cases.)

DATE (YYYYMMDD)

20230731

b. REVISED (Supersedes all previous specifications.)

REVISION NO. DATE (YYYYMMDD)

c. FINAL (Complete Item 5 in all cases.) DATE (YYYYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT? No Yes If yes, complete the following:

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract.See block 13

5. IS THIS A FINAL DD FORM 254? No Yes If yes, complete the following:

In response to the contractor's request dated , retention of the classified material is authorized for the period of:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE(S) (CSO) (Name, Address, ZIP Code, Telephone required; Email Address optional)

7. SUBCONTRACTOR(S) (Click button if you choose to add or list the subcontractors -- but will still require a separate DD Form 254 issued by a prime contractor to each subcontractor) Add Row Remove Last Row Delete All Rows

a. NAME, ADDRESS, AND ZIP CODE

THIS DD-254 IS FOR BIDDING PURPOSES ONLY.

b. CAGE CODE c. COGNIZANT SECURITY OFFICE(S) (CSO) (Name, Address, ZIP Code, Telephone required; Email Address optional)

THIS DD-254 IS A GUIDE FOR BIDDING PURPOSES

ONLY. AN ORIGINAL DD-254 WILL BE ISSUED

UPON AWARD OF THE CONTRACT.

8. ACTUAL PERFORMANCE (Click button to add more locations.) Add Row Remove Last Row Delete All Rows

a. LOCATION(S) (For actual performance, see instructions.)

Naval Surface Warfare Center, Dahlgren Division 6149 Welsh Road Dahlgren, VA 22448

b. CAGE CODE (If applicable, see Instructions.)

c. COGNIZANT SECURITY OFFICE(S) (CSO) (Name, Address, ZIP Code, Telephone required; Email Address optional)

a. LOCATION(S) (For actual performance, see instructions.)

NSWC Dahlgren Division Dam Neck Activity 1922 Regulus Avenue Virginia Beach VA 23461

b. CAGE CODE (If applicable, see Instructions.)

c. COGNIZANT SECURITY OFFICE(S) (CSO) (Name, Address, ZIP Code, Telephone required; Email Address optional)

9. GENERAL UNCLASSIFIED DESCRIPTION OF THIS PROCUREMENT

Contractor support of security administration, access control and escorting support for the Naval Surface Warfare Center, Dahlgren Division.

PREVIOUS EDITION IS OBSOLETE. Page 2 of 6DD FORM 254, APR 2018

10. CONTRACTOR WILL REQUIRE ACCESS TO: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION f. SPECIAL ACCESS PROGRAM (SAP) INFORMATION

b. RESTRICTED DATA g. NORTH ATLANTIC TREATY ORGANIZATION

(NATO) INFORMATION

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION (CNWDI) (If CNWDI applies, RESTRICTED DATA must also be marked.) h. FOREIGN GOVERMENT INFORMATION

d. FORMERLY RESTRICTED DATA i. ALTERNATIVE COMPENSATORY CONTROL MEASURES

(ACCM) INFORMATION

e. NATIONAL INTELLIGENCE INFORMATION:

(1) Sensitive Compartmented Information (SCI)

(2) Non-SCI

j. CONTROLLED UNCLASSIFIED INFORMATION (CUI) (See instructions.)

k. OTHER (Specify) (See instructions.)

(1) SIPRNET (2) JWICS (3) U-NNPI

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. See instructions. Provide details in Blocks 13 or 14 as set forth in the instructions.)

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT

ANOTHER CONTRACTOR'S FACILITY OR A GOVERNMENT

ACTIVITY

(Applicable only if there is no access or storage required at contractor facility.

See instructions.)

b. RECEIVE AND STORE CLASSIFIED DOCUMENTS ONLY

c. RECEIVE, STORE, AND GENERATE CLASSIFIED

INFORMATION OR MATERIAL

d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. PERFORM SERVICES ONLY

f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE

THE U.S.,PUERTO RICO, U.S. POSSESSIONS AND TRUST

TERRITORIES

g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE

TECHNICAL INFORMATION CENTER (DTIC) OR OTHER

SECONDARY DISTRIBUTION CENTER

h. REQUIRE A COMSEC ACCOUNT

i. HAVE A TEMPEST REQUIREMENT

j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

k. BE AUTHORIZED TO USE DEFENSE COURIER SERVICE

l. RECEIVE, STORE, OR GENERATE CONTROLLED UNCLASSIFIED

INFORMATION (CUI).

(DoD Components: refer to DoDI 5200.48, only for specific CUI protection requirements. Non-DoD Components: see instructions.)

m. OTHER (Specify) (See instructions.)

12. PUBLIC RELEASE

Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the National Industrial Security Program Operating Manual (NISPOM) or unless it has been approved for public release by appropriate U.S. Government authority.

Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified here with at least office and phone contact information and if available, an e-mail address. (See instructions)

DIRECT THROUGH (Specify below) Public Release Authority:

NO PUBLIC RELEASE IS AUTHORIZED

13. SECURITY GUIDANCE Add Signature Remove Last Signature Delete All Signatures

The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract;

and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended.

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. The field will expand as text is added. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. Also allows for up to 6 internal reviewers to digitally sign. See instructions for additional guidance or use of the fillable PDF.)

1. NISPOM, 32 Code of Federal Regulation Part 117, published 12 December 2020, effective 24 February 2021, applies to this contract.

2. The Contractor is not authorized to release any data to foreign representatives without an approved export license.

3. Block 4: This contract will be a follow-on to N00178-16-D-9063/N0017819F3009.

4. Block 10a: COMSEC information/material will be processed IAW National Industrial Security Program (NISPOM) 32 Code of Federal Regulations (CFR) Part 117.21, and OPNAVINST 2221.5D dtd 8/15/16, and any additional security guidelines. Contractor personnel requiring COMSEC access must be U.S. Citizens and possess a final clearance at the appropriate level. All contractors shall be briefed

PREVIOUS EDITION IS OBSOLETE. Page 3 of 6DD FORM 254, APR 2018 before access to COMSEC is granted. Further disclosure of COMSEC information by a contractor, to include subcontracting, requires prior approval by GCA.

5. Block 10b: Access to RESTRICTED DATA requires a final U.S. Government clearance at the appropriate level. GCA approval is required prior to granting RESTRICTED DATA access to a subcontractor.

6. Block 10c: GCA approval is required prior to granting CNWDI access to a subcontractor. Special briefings and procedures are also required. Access to CNWDI requires a final U.S. Government clearance at the appropriate level.

7. Block 10d: See attached addendum for additional security guidance. GCA approval is required prior to granting FORMERLY RESTRICTED DATA access to a subcontractor.

8. Block 10e (1): SCI requirements are hereby authorized. Questions regarding Block 10e (1) and requests for retention or release of intelligence shall be through the NSWCDD SSO, Christopher Cabaniss, (540) 284-0419, email: christophe.w.cabaniss.civ@us.navy.mil.

All SCI work on this contract will be performed at the government locations listed in block 8a.

9. Block 10e (2): Non-SCI intelligence requirements are hereby authorized by NSWCDD SSO. Questions regarding Block 10e (2) and requests for retention or release of intelligence shall be through the NSWCDD SSO, Christopher Cabaniss, (540) 284-0419, email:

christophe.w.cabaniss.civ@us.navy.mil.

10. Block 10g: Access up to NATO SECRET is authorized for this contract. Protection of NATO information shall be in accordance with USAAN 01-07 and it applicable enclosures. Access to NATO requires a final U.S. Government Nation Security Clearance and must have a NATO security briefing from the Facility Security Officer (FSO). The prime contractor must receive approval from the individual identified in Block 17(a) of this DD-254 to impose NATO requirements or grant NATO access to a sub-contractor. Requests shall be submitted in writing.

11. Block 10j: Controlled Unclassified Information (CUI) (formerly For Official Use Only (FOUO) and Personally Identifiable Information (PII) generated and/or provided under this contract shall be safeguarded and marked as specified in DODI 5200.48, Controlled Unclassified Information (CUI), March 6, 2020.

12. Block 10k: Contractors requiring access to SIPRNET are to receive a NATO awareness briefing prior to being provided access.

13. Block 10k: Prior to acquiring a JWICS account by NSWCDD specific training is required. This local training requirement will be provided by the SSO Office or COR on an as-required basis. A final TOP SECRET clearance with SCI access is required prior to being eligible for a JWICS account.

14. Block 10k: (U) Security Controls on the Dissemination of NNPI Received or Generated Under NAVSEA Contracts 12/1/2011.

15. Block 10k: (U) OPNAVINST, N9210.3 Safeguarding of Naval Nuclear Propulsion Information (NNPI) 6/7/2010.

16. Block 10k: (C-RD) CG-RN-1, REV.3, CHANGES 1-20, DOE-DOD SCG for the NNPI which includes Interpretive Guidance Bulletins 1-19; applicable non-RD sections only.

17. Block 10k: Processing of NNPI on non-federal IT systems requires NAVSEA 08 authorization per OPNAVINST N9210.3, using the procedures identified in NAVSEA ltr 08B/19-03823, dated 2 August 2019.

18. Block 10k: The contractor must maintain a current Certification of eligibility from the Defense Logistics Agency, Joint Certification Office for access to export-controlled Controlled Unclassified Information (CUI), which includes U-NNPI. DD Form 2345, Militarily Critical Technical Data Agreement, applies.

19. Block 10k: The contractor must provide a copy of subcontractor DD254s issued under this contract, where NNPI is shared, to NAVSEA 08 Security, via the official shown in Block 17 of this DD-254.

20. Block 11a: Contract Performance is restricted to: Naval Surface Warfare Center Dahlgren Division, Dahlgren VA and NSWC Dam Neck Activity, Virginia Beach, VA.

21. Block 11j: The Contractor shall utilize the NSWCDD Critical Information and Indicators List, of September 2022 to help identify and protect critical information associated with this contract.

22. Block 11j: Continued: During the period of this contract, the Contractor may be exposed to, use, or produce, NSWCDD Critical Information (CI) and/or observables and indicators which may lead to discovery of CI. NSWCDD’s CI will not be distributed to unauthorized third parties, including foreign governments, or companies under Foreign Ownership, Control, or Influence (FOCI).

23. Block 11j: Continued: Assembled large components/systems being transported to and from testing areas, other production or government facilities (whether or not on public roadways) shall be in an enclosed van trailer or covered flatbed trailer. Component/ System outside storage, staging, and test areas shall be shielded/obscured from public view wherever physically possible.

24. Block 11j: Continued: NSWCDD’s CI shall not be publicized in corporate wide newsletters, trade magazines, displays, intranet pages or public facing websites. Media requests related to this project shall be directed to NSWCDD Public Release Authority listed in Item 12 of this DD Form 254.

25. Block 11j: Continued: Any attempt by unauthorized third parties to solicit, obtain, photograph, or record, or; incidents of loss/ compromise of government Classified or CI, Business Sensitive and Company Proprietary information related to this contract or other programs must be immediately reported to the Facility Security Officer, DCSA and/or the Naval Criminal Investigative Service, and the NSWCDD Security Office. Questions concerning these requirements shall be directed to the NSWCDD Security Office.

26. Block 11j: Continued: Performance under this contract requires the contractor to adhere to OPSEC requirements. OPSEC requirements are additional to the requirements of NISPOM, 32 CFR Part 117, therefore, the Contractor may not impose OPSEC requirements on its subcontractors unless NSWCDD approves the OPSEC requirements.

27. Block 11l: Controlled Unclassified Information (CUI) (formerly For Official Use Only (FOUO) and Personally Identifiable Information (PII) generated and/or provided under this contract shall be safeguarded and marked as specified in DODI 5200.48, Controlled Unclassified Information (CUI), March 6, 2020.

PREVIOUS EDITION IS OBSOLETE. Page 4 of 6DD FORM 254, APR 2018

28. Block 11l: U-NNPI CUI must be protected in accordance with OPNAVINST N9210.3 and may not be stored or processed on Non-federal AIS without written authorization of NAVSEA 08, Naval Reactors.

29. Contractor performance shall be in accordance with the NISPOM, 32 CFR Part 117 and DFARS 252.204-7012 - Safeguarding Covered Defense Information and Cyber Incident Reporting, 48 CFR 52.204-2 - Security Requirements and NIST Special Publication 800-171. The contractor shall limit requests for Personnel (Security) Clearances (PCL) to the minimal number of personnel for operational efficiency, consistent with contractual obligations and other requirements of the NISPOM.

This DD254 and the 32 CFR Part 117, National Security Program Operating Manual (NISPOM) are part of the contract. The contractor agrees to provide and maintain a system of security controls within its own organization according to the NISPOM. All contractor personnel will obtain and maintain the appropriate level of security clearance eligibility or access as required to perform on the level of tasking assigned. Access to classified information will be limited by the access level showing in Defense Information Security System (DISS) or subsequent system of record and need to know. All classified information shall be handled in accordance with approved security practices and procedures. Contractor personnel in contact with classified documentation, information and/or equipment shall have the proper level of access showing in DISS or the subsequent system of record and have a need to know.

Per the DFARS clause 252.204-7000:

a) The Contractor shall not release to anyone outside the Contractor's organization any unclassified information, regardless of medium (e.g., film, tape, document), pertaining to any part of this contract or any program related to this contract, unless—

(1) The Contracting Officer has given prior written approval;

(2) The information is otherwise in the public domain before the date of release; or

(3) The information results from or arises during the performance of a project that involves no covered defense information (as defined in the clause at DFARS 252.204-7012) and has been scoped and negotiated by the contracting activity with the contractor and research performer and determined in writing by the contracting officer to be fundamental research (which by definition cannot involve any covered defense information), in accordance with National Security Decision Directive 189, National Policy on the Transfer of Scientific, Technical and Engineering Information, in effect on the date of contract award and the Under Secretary of Defense (Acquisition, Technology, and Logistics) memoranda on Fundamental Research, dated May 24, 2010, and on Contracted Fundamental Research, dated June 26, 2008 (available at DFARS PGI 204.4 (DFARS/PGI view)).

(b) Requests for approval under paragraph (a)(1) shall identify the specific information to be released, the medium to be used, and the purpose for the release. The Contractor shall submit its request to the Contracting Officer at least 10 business days before the proposed date for release.

(c) The Contractor agrees to include a similar requirement, including this paragraph (c), in each subcontract under this contract.

Subcontractors shall submit requests for authorization to release through the prime contractor to the Contracting Officer.

This clause shall also be made available to Subcontractors.

All classified information received is the property of the US Government. Any classified information generated in the performance of this contract shall be classified according to the markings shown on the source material as well as the applicable security classification guide (SCG). In the event of a discrepancy between source material and the SCG, the SCG shall prevail. Classified information shall be processed for appropriate disposition per 32 CFR Part 117 (NISPOM), 117.15 (i).

FAR CLAUSE - 52.204-2 -- Security Requirements

(a) This clause applies to the extent that this contract involves access to information classified “Confidential,” “Secret,” or “Top Secret.”

(b) The Contractor shall comply with --

(1) The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (32 CFR Part 117);

and

(2) Any revisions to that manual, notice of which has been furnished to the Contractor.

(c) If, subsequent to the date of this contract, the security classification or security requirements under this contract are changed by the Government and if the changes cause an increase or decrease in security costs or otherwise affect any other term or condition of this contract, the contract shall be subject to an equitable adjustment as if the changes were directed under the Changes clause of this contract.

(d) The Contractor agrees to insert terms that conform substantially to the language of this clause, including this paragraph.

The Security Classification Guide listed in Block 13 or subsequent revisions apply to this contract. Subsequent revisions shall be provided by the Government Contracting Activity as Government Furnished Information and shall be executed by the Contractor at no additional cost to the government.

Contractor employees occupying sensitive positions requiring access to classified information or CUI, whether embedded within the command or working from another location, require, at a minimum, a favorably-adjudicated T3 background investigation providing national security eligibility or an interim (temporary) national security eligibility, commensurate with contract requirements, prior to being afforded access to classified information or CUI.

30. See attachments for additional security guidance.

List of Attachments (All Files Must be attached Prior to Signing, i.e., for any digital signature on the form) Show Attachment Bar

Authorized access to COMSEC in accordance with the attached Statement of Work.

NAME & TITLE OF REVIEWING OFFICIAL

Dana R. Dixon, Code 1051 Alternate COMSEC Manager

SIGNATURE

PREVIOUS EDITION IS OBSOLETE. Page 5 of 6DD FORM 254, APR 2018

Operations Security (OPSEC) requirements for this contract are reflected in Item 13 of this DD Form 254 under section 11(j).

NAME & TITLE OF REVIEWING OFFICIAL

Dana R. Dixon, Code 1051 OPSEC Coordinator

SIGNATURE

NAME & TITLE OF REVIEWING OFFICIAL

Jeffrey S. White, 10B1 Contracting Officer's Representative (COR)

SIGNATURE

NAME & TITLE OF REVIEWING OFFICIAL

Christopher Cabaniss, H36 Special Security Officer (SSO)

SIGNATURE

10(k): Access to NNPI (UNNPI and NNPI NSI) is authorized for this contract. Processing of NNPI on IT systems requires authorization of SEA08.

NAME & TITLE OF REVIEWING OFFICIAL

Bonnie R. Hilton

COMNAVSEASYSCOM

SIGNATURE

14. ADDITIONAL SECURITY REQUIREMENTS

Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

No Yes If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the CSO. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted.

(See instructions for additional guidance or use of the fillable PDF.)

DoD 5105.21, Volumes 1-3

10k NNPI: Access to NNPI is required for this contract; (U) OPNAVINST, N9210.3 Safeguarding of Naval Nuclear Propulsion Information (NNPI) 6/7/2010 applies.

OPSEC requirements are imposed on this task. Refer to Item: 13 of this DD Form 254 for applicable guidance. These OPSEC requirements cannot be imposed on subcontractors without written consent from the NSWCDD OPSEC Program Manager. These requirements shall not be imposed at an additional cost to the government.

15. INSPECTIONS

Elements of this contract are outside the inspection responsibility of the CSO.

No Yes If Yes, explain and identify specific areas and government activity responsible for inspections. The field will expand as text is added or you can also use item

13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted.

(See instructions for additional guidance or use of the fillable PDF.)

NSWCDD SIO/SSO has exclusive security responsibility for SCI classified material released or developed under this contract. DCSA is relieved of security inspection responsibility for all SCI material. DCSA retains oversight/inspection responsibilities for facility clearance requirements and collateral information outside of Navy facilities.

10k NNPI: NAVSEA 08 maintains authority to inspect for protection of NNPI (Unclassified, NSI and RD).

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

a. GCA NAME

Naval Surface Warfare Center Dahlgren Div

b. ACTIVITY ADDRESS CODE (AAC) OF THE CONTRACTING OFFICE (See Instructions)

N00178

c. ADDRESS (Include ZIP Code) 17499 Dahlgren Road Building 121 Dahlgren VA 22448-5119

d. POC NAME

Jeffrey S. White

e. POC TELEPHONE (Include Area Code)

+1 (540) 653-8696

f. EMAIL ADDRESS (See Instructions) jeffrey.s.white95.civ@us.navy.mil

17. CERTIFICATION AND SIGNATURES

Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. Upon digitally signing Item 17h, no changes can be made as the form will be locked.

a. TYPED NAME OF CERTIFYING OFFICIAL (Last, First, Middle Initial) (See Instructions)

Dixon, Dana, R.

b. TITLE

Security Contracting Officer

PREVIOUS EDITION IS OBSOLETE. Page 6 of 6DD FORM 254, APR 2018

c. ADDRESS (Include ZIP Code) Naval Surface Warfare Center Dahlgren Division 6146 Tisdale Road, Suite 237, Bldg. 492 Dahlgren VA 22448-5158

d. AAC OF THE CONTRACTING OFFICE (See Instructions)

N00178

e. CAGE CODE OF THE PRIME CONTRACTOR

(See Instructions.)

N/A

f. TELEPHONE (Include Area Code)

+1 (540) 653-8790

g. EMAIL ADDRESS (See Instructions) dana.r.dixon.civ@us.navy.mil

h. SIGNATURE

i. DATE SIGNED (See Instructions)

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICIAL

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND

SUBCONTRACTOR

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY

ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER

f. OTHER AS NECESSARY (If more room is needed, continue in Item 13 or on additional page if necessary.)

NSWCDD COR

UNCLASSIFIED

BIDDING 023-22

CONTINUATION – DD FORM 254 ITEM 13

DODI 5210.02

3 JUN 2011

RESTRICTED DATA (RD)/ FORMERLY RESTRICTED (FRD)/ CRITICAL NUCLEAR WEAPONS

DESIGN INFORMATION (CNWDI)

1. DEFINITION: RESTRICTED DATA (RD) is defined as all data concerning;

a) Design, Manufacture, or Utilization of Atomic Weapons

b) Production of Special Nuclear Material

c) Use of Special Nuclear Material in the production of energy

This shall not include data declassified or removed from the Restricted Data category (Formerly Restricted Data and Transclassified Foreign Nuclear Information.

Major areas of Restricted Data:

a) Nuclear Weapons Design

b) Nuclear Material Production

c) Isotope Separation

d) Naval Reactors

2. ACCESS: Access to RD information within and between DoD Components, including contractor activities, will be governed by the same procedures and criteria that govern the access to other classified information in accordance with DoD Manual 5200.01, Volume 1, “Information Security Program: Overview, Classification, and Declassification,” February 24, 2010 and DoD 5200.02, “Procedures for the DoD Personnel Security Program (PSP),” April 3, 2017.and DoD 5220.22-R, “Industrial Security Regulation,” December 4, 1985. Individuals granted access shall:

(1) Require access in the performance of official duties (also known as “need to know”).

(2) Have a valid DoD security clearance at a level commensurate with the information concerned.

3. ACCOUNTABILITY: All CNWDI materials will be accounted for through the Classified Control Center in accordance with National Security Information Manual and the National Industrial Security Operating Manual.

4. MARKING: The following notation is placed on all classified data containing Restricted Data designated CNWDI. The notation is placed at the bottom of document covers (front and back), cover sheets, title page, first page of the data and reverse side of the back page. This notation is always accompanied by and is placed next to the preceding Restricted Data. For marking slides and other materials refer questions to the Office of Security or Regional Security Office.

CNWDI is an acronym and should not be mistaken for the portion/paragraph-marking symbol with is (N).

CRITICAL NUCLEAR WEAPON DESIGN INFORMATION

DOD INSTRUCTION 5210.02 APPLIES

FORMERLY RESTRICTED DATA

Unauthorized disclosure subject to administrative and criminal sanctions. Handle as Restricted Data in foreign dissemination, Section 144b, Atomic Energy Act, 1954.

Classified by:

5. STORAGE AND LOCK COMBINATIONS: CNWDI material will be stored in approved Security containers in the same manner as other classified material; however, knowledge of the lock combination for these containers will be limited to personnel who possess a current CNWDI Access Briefing and have established a need-to-know.

6. REPRODUCTION: CNWDI information WILL NOT be reproduced without prior authorization from the User Agency Contracting Officer or Government representative specified in the contract or DD254 for contractor personnel.

7. TRANSMISSION: CNWDI may be transmitted outside of our facility only to the Government Contracting Authority (GCA) or prime or subcontractor approved for access by the GCA. Prior to transmission to another facility, we must verify from the Cognizant Security Authority that the facility has been authorized access to CNWDI. The inner wrapping of CNWDI materials to be transmitted will contain the marking, “Critical Nuclear Weapons Design Information – DoD Directive 5210.2 Applies” in addition to the other prescribed security markings. When CNWDI is transmitted to another facility, the inner wrapper shall be addressed to the personal attention of the Facility Security Officer (FSO) or his/her alternate.

8. DESTRUCTION: CNWDI material will be destroyed in the same manner as other material with the same classification.

See DODI 5210.02 for additional handling instructions of CNWDI information.

ADDITIONAL SECURITY GUIDELINES FOR COMSEC

Contractor Generated COMSEC Material: Any material generated by the contractor (including but not limited to: correspondence, drawings, models, mockups, photograph, schematics, status programs and special inspection reports, engineering notes, computation and training aids) will be classified according to its own content. Classification guidance will be taken from other elements of this Contract Security Classification Specification, DD Form 254, Government furnished equipment or data, or special instructions issued by the Contracting Officer, or his/her duly appointed representative.

REQUIREMENTS

1. Contractor employees or cleared commercial carriers shall not carry classified COMSEC material on commercial passenger aircraft anywhere in the world without the approval of the procuring contracting officer.

2. No contractor generated or government furnished material may be provided to the Defense Technical Information Center (DTIC).

Contractor generated technical reports will bear the statement “Not Releasable to the Defense Technical Information Center per DOD Directive 5100-38.”

3. Classified paper COMSEC material may be destroyed by burning, pulping or pulverizing. When a method other than burning is used, all residues must be reduced to pieces 5 mm or smaller in any dimension. When classified COMSEC material other than paper is to be destroyed, specific guidance must be obtained from the User Agency.

4. The following Downgrading and Declassification notation applies to all classified COMSEC information provided to and generated by the contractor:

DERIVED FROM: NSA/CSS Classification Guide, dated 30 Sep 2013, revised 23 May 2014 DECLASSIFY ON: (calculate declassification date that is 25 years from the date of the source) DATE OF SOURCE: (Date of document from which information is derived)

5. All contractor personnel to be granted access to classified COMSEC information must be U.S. citizens granted FINAL clearance by the government prior to being given access. Immigrant aliens, interim cleared personnel, or personnel holding a contractor granted CONFIDENTIAL clearance are not eligible for access to classified COMSEC information released or generated under this contract without the express permission of the Director, NSA.

6. Unclassified COMSEC information released or generated under this contract shall be restricted in its dissemination to personnel involved in the contract. Release in open literature or exhibition of such information without the express written permission of the Director, NSA, is strictly prohibited.

7. Recipients of COMSEC information under this contract may not release information to subcontractors without permission of the User Agency.

8. The requirements of NSA/CSS Policy Manual 3-16, dated 23 January 2015 are applicable to this effort.

9. Additional notices to be affixed to the cover and title or first page of contractor generated COMSEC documents:

a. “COMSEC MATERIAL – ACCESS BY CONTRACTOR PERSONNEL RESTRICTED TO U.S. CITIZENS HOLDING A FINAL

GOVERNMENT CLEARANCE.”

b. “THIS PUBLICATION OR INFORMATION IT CONTAINS MAY NOT BE RELEASED TO FOREIGN NATIONALS WITHOUT PRIOR SPECIFIC APPROVAL FROM THE DIRECTOR, NSA. ALL APPROVALS WILL IDENTIFY THE SPECIFIC INFORMATION AND COPIES OF THIS PUBLICATION AUTHORIZED FOR RELEASE TO SPECIFIC FOREIGN HOLDERS. ALL REQUESTS FOR ADDITIONAL

ISSUANCES MUST RECEIVE PRIOR SPECIFIC APPROVAL FROM THE DIRECTOR, NSA.”

CONTINUATION – DD FORM 254 BLOCK 13

BLOCK 13 CONTINUATION STATEMENTS:

1. CLASSIFIED OR UNCLASSIFIED TECHNICAL PAPERS TO BE PRESENTED AT A

CLASSIFIED SYMPOSIUM MUST BE APPROVED BY THE NSWCDD CONTRACTING

OFFICER'S REPRESENTATIVE PRIOR TO THE PRESENTATION.

2. SECURITY CLASSIFICATION GUIDES (SCG’s) AND UNCLASSIFIED LIMITED DOCUMENTS

(E.G., C U I , DISTRIBUTION STATEMENT CONTROLLED) ARE NOT AUTHORIZED

FOR PUBLIC RELEASE; THEREFORE, THEY CANNOT BE POSTED ON A PUBLICLY

ACCESSIBLE WEB SERVER OR TRANSMITTED OVER THE INTERNET UNLESS

APPROPRIATELY ENCRYPTED. REQUEST FOR PUBLIC RELEASE CANNOT BE

TRANSMITTED VIA THE INTERNET UNTIL THE CONTRACTOR RECEIVES FINAL

APPROVAL FROM THE COR.

3. ALL CONTRACTOR REQUESTS FOR SHARING OF CLASSIFIED AND OTHER

SENSITIVE INFORMATION BETWEEN PRIME CONTRACTS MUST BE FORWARDED IN

WRITING TO THE NSWCDD SECURITY OFFICE POC IDENTIFIED IN BLOCK 17 OF THIS

FORM FOR APPROVAL. SUBCONTRACTORS MUST SUBMIT REQUESTS FOR PUBLIC

RELEASE THROUGH THE PRIME CONTRACTOR. THE PRIME CONTRACTOR IS

REPSONSIBLE FOR SUBMITTING THE SUBCONTRACTOR’S REQUEST FOR PUBLIC

RELEASE TO THE GCA PUBLIC RELEASE AUTHORITY IDENTIFIED IN BLOCK 12.

4. PERSONNEL DESIGNATED AS DERIVATIVE CLASSIFIERS SHALL RECEIVE DERIVATIVE

CLASSIFICATION TRAINING PRIOR TO ACCESS FROM THE CONTRACTOR'S FACILITY

SECURITY OFFICER (FSO). THE FSO SHALL ENSURE PERSONNEL RECEIVE INITIAL AND

BIENNIAL TRAINING DURING THE LIFE OF THIS CONTRACT. EVIDENCE OF COMPLETION,

TRAINING CERTIFICATES OR EQUIVALENT, SHALL BE PROVIDED TO THE INFORMATION

ASSURANCE MANAGER NO LATER THAN THE INDIVIDUAL'S DUE DATE.

5. ALL CLASSIFIED DOCUMENTS MUST BE DESTROYED USING A NATIONAL SECURITY

AGENCY (NSA) APPROVED HIGH SECURITY CROSSCUT SHREDDER LISTED ON THE

NSA/CSS EVALUATED PRODUCTS LIST(EPL) FOR HIGH SECURITY CROSSCUT PAPER

SHREDDERS, OR OTHER APPROVED METHOD FOR DESTROYING CLASSIFIED

INFORMATION.

6. ALL CLASSIFIED INFORMATION INVOLVED IN SECURITY INCIDENTS SHALL BE RETAINED

AND PROVIDED TO THE CERTIFYING OFFICIAL IN ITEM 17 OF THIS DD 254 FOR

CLASSIFICATION REVIEW.

7. ALL SECURITY RELATED ISSUES, INCIDENTS, OR REQUESTS PERTAINING TO THIS

CONTRACT SHALL BE PRESENTED IN WRITING BY THE CONTRACTOR'S FACILITY

SECURITY OFFICER (FSO) TO THE INDIVIDUAL IDENTIFIED IN BLOCK 16(A) OF THIS

DD254. THE CONTRACTOR SHALL ABIDE BY OTHER REPORTING REQUIREMENTS

OUTLINED IN THE 32 CFR PART 117.

8. FORWARD A COPY OF SUBCONTRACTOR DD 254S ISSUED UNDER THIS CONTRACT TO

THE OFFICIAL SHOWN IN ITEM 16 OF THIS DD254.

DODI 5200.48

SEPT 2021

CONTROLLED UNCLASSIFIED INFORMATION (CUI)

1. DEFINITION. CUI is defined as information that Government creates or possesses, or that an entity creates or possesses for or on behalf of the Government, that a law, regulation, or Government-wide policy requires or permits an agency to handle using safeguarding or dissemination controls. CUI does not include classified information.

2. ORGANIZATIONAL INDEX GROUPINGS (OIG) and CUI CATEGORIES: CUI consists of OIGs and their categories with marking guidance. Categories have definitions and legal authorities to help determine if information meets the criteria to be marked as CUI. A complete list of OIGs and categories are located at the National Archives and Records Administration (NARA) website https://www.archives.gov/cui/registry/category-list.

3. GENERAL GUIDANCE: Security Classification Guides (SCG) and documents marked as Controlled Unclassified Information (CUI), legacy For Official Use Only (FOUO), or Distribution Statements B thru F are not authorized for public release and cannot be placed on a publicly accessible web site or web server.

a. All contractors supporting an NSWCDD contract will comply with the crawl, walk, run CUI implementation stages as determined by DUSN (I&S). NSWCDD is currently in the crawl phase of CUI implementation.

The crawl phase consist of the following marking requirements:

Mark emails containing CUI with CUI banner at the TOP and BOTTOM of the email.

Use Designation Indicator Block along with signature block or in place of signature block.

CUI contains Non-technical Information

CUI attachments in emails must have CUI) the filename: Filename_CUI.

All emails containing CUI must be digitally signed and encrypted.

FOR OFFICIAL USE ONLY (FOUO) is no longer an authorized marking for new documents and materials in the DOD.

During the crawl phase, paragraph or portion markings are optional but highly encouraged.

Controlled by: Department of the Navy

Controlled by: NSWCDD, Code, Branch, Dept

CUI Category: OPSEC (example category)

Limited Dissemination Control: FEDCON

POC: Name & office phone of CONTRACTOR who authored

CUI contains Technical Information

Controlled by: NSWCDD, Code, Branch, Dept

CUI Category: CTI

Distribution Statement::D

POC: Name & office phone of CONTRACTOR who authored https://www.archives.gov/cui/registry/category-list

b. Controlled Technical Information (CTI): Dissemination of CTI will be controlled with Distribution Statement (B-F) in the Distribution/Dissemination Control line with CTI as the CUI Category.

i. All controlled technical data provided to the contractor by the government will be protected from public disclosure in accordance with the markings contained therein.

ii. Follow guidance for marking CTI in accordance with DODI 5230.24, Distribution Statements for Technical Documents.

c. Marking guidance for deliverables shall be provided by the owning government office in the form of:

iii. Security Classification Guidance

iv. Properly marked source document in the form of a:

i. Memorandum,

ii. Plan,

iii. Message document (Any physical medium in or on which information is recorded or stored, to include written or printed matter, audiovisual materials, and electromagnetic storage material.)

iv. Letter, or

v. Publication.

4. TRANSMITTAL. All emails containing such information or attachments must be appropriately marked, and digitally signed and encrypted if being transmitted within Navy networks, or outside a Navy network to an approved contractor email address. All transmissions to personal email accounts (AOL, Yahoo, Hotmail, Comcast, etc.) are prohibited.

5. OFFSITE HANDLING. The contractor shall provide adequate physical protection to such information as to preclude access by any person or entity not authorized such access by the government.

6. DISCLOSURE POLICY: All other information relating to the items to be delivered or services to be performed under this contract may not be disclosed by any means without prior approval of the authorized representative of the contracting officer. Dissemination or public disclosure includes, but is not limited to, permitting access to such information by foreign nationals or by any other person or entity; publication of technical or scientific papers; advertising; or any other proposed public release. Due to the sensitivity of this program, no classified or CUI material received or generated under this contract will be transferred to any other contractor or agency without the approval of the Contracting Officer or Contracting Officer’s Representative (COR).

Additional guidance can be found at DODI 5200.48.

USSAN 1-07

NORTH ATLANTIC TREATY ORGANIZATION

NATO “access” is not required for a contractor SIPRnet account, but contractor employees are required to have a NATO “brief” by their respective FSO, and the Contractor NATO/SIPRnet Request Form signed and approved by the FSO, COR and the NSWC MAC initiator. This document is kept on file at the NSWCDD Command Security Office and the respective contractor Facility Security Office.

1. NATO: The acronym is applied to classified information that represents military, political, and economic data, circulated with NATO and by NATO, regardless if the information originates within the organization itself, or is received from a member nation(s).

2. MARKING: NATO classified material is conspicuously identified by marking “NATO” on the top and bottom of the material in addition to the overall classification of the document (e.g., SECRET//NATO). This signifies that the document is the property of NATO. A TOP SECRET document that is NATO is marked and identified as “TOP SECRET//COSMIC.” When NATO information is considered “UNCLASSIFIED,” the document is marked “NATO//UNCLASSIFIED”.

3. PREPARATION: Except for COSMIC TOP SECRET material, permission is not required for inclusion of references, extracts, or paraphrases taken from other NATO classified documents, when necessary for contractor generated documents in the performance of a NATO contract. When NATO classified information is included in other documents, the NATO classified information must be identified within the document by marking each paragraph with the appropriate NATO marking, such as “S-NATO.” In addition, a statement will be included on the cover or first page that reads, “THIS DOCUMENT CONTAINS NATO (insert classification level) INFORMATION.”

4. REPRODUCTION: Reproduction of NATO material is authorized in accordance with present procedures. In the case of COSMIC TOP SECRET information, the contractor shall forward reproduction requests to the Central U.S. Registry (CUSR) for approval.

5. ACCESS: Access to NATO classified information is granted to U.S. citizens having a need-to-know and a final government security clearance. Access is not granted to immigrant aliens, regardless of clearance. An interim TOP SECRET clearance is valid for access at the SECRET and CONFIDENTIAL level only. U.S.

citizens who require access to NATO RESTRICTED information must have a need-to-know for the information, but a security clearance is not required.

6. STORAGE: All NATO material, regardless of classification, must be stored in a container approved for the storage of TOP SECRET, SECRET or CONFIDENTIAL information, as applicable. All NATO material shall be stored separately (to the extent possible) within an approved container. The combination to the container or storage facility must be changed annually or earlier if an individual having knowledge of the combination transfers or terminates employment.

7. TRANSMISSION: When SECRET or CONFIDENTIAL NATO classified information is prepared for transmission, the inner container must be marked “NATO,” in addition to the overall classification. TOP SECRET information is marked “COSMIC” in addition to being marked TOP SECRET. Transmission of

NATO SECRET or NATO CONFIDENTIAL material within the U.S. and its territories must be mailed via U.S. Registered Mail. Documents classified NATO RESTRICTED shall be packaged and mailed as U.S. First Class Mail, and may be single wrapped.

8. DESTRUCTION: NATO documentation may be destroyed in accordance with existing procedures, unless otherwise indicated by the releasing agency.

9. Only individuals who have been given a NATO briefing are authorized to have access to NATO classified information, to include the combination of containers where the material is stored.

See USSAN 1-07 for additional handling instructions of NATO information.

OPNAVINST N9210.3

7 Jun 2010

CONTINUATION- DD FORM 254 BLOCK 13

NAVAL NUCLEAR PROPULSION INFORMATION OVERVIEW (NNPI)

1. DEFINITION. NNPI is defined as: Classified or unclassified information concerning the design, arrangement, development, testing, operation, administration, training, maintenance, and repair of the propulsion plants of naval nuclear-powered ships and prototypes, including the associated nuclear support facilities.

2. CLASSIFIED NNPI. Classified NNPI consists of two types of information--RD and national security information (NSI). Authority to classify NNPI comes from two sources: (1) the Atomic Energy Act of 1954 (as amended), which governs RD; and (2) Presidential Executive Order (EO) 13526 of December 2009 (as amended), which governs NSI. RD and NSI involving NNPI are usually at the CONFIDENTIAL level. However, there are instances of SECRET restricted data (SRD) and SECRET national security information (SNSI) involving NNPI.

a. NNPI that is classified NSI must be protected from disclosure to foreign nationals.

Consequently, classified NNPI that is NSI is also marked and handled as NOFORN to require access only by cleared U.S. citizens with an NTK unless specifically authorized by CNO (N00N).

b. Personnel with an interim or final Government security clearance may access classified NNPI that is NSI.

3. U-NNPI. U-NNPI is controlled and protected under one or more of the following: (1) the Atomic Energy Act of 1954 (as amended), (2) the 1984 Defense Authorization Act, (3) Export Control Act Regulations of the Commerce Department, (4) Arms Export Control Act Regulations (i.e., International Traffic in Arms Regulations (ITAR); Munitions List), (5) Export of Sensitive Nuclear Information for Foreign Atomic Energy Regulations of the Energy Department. U-NNPI is information related to sensitive military technology (i.e., naval nuclear propulsion technology).Access to U-NNPI is limited to U.S. citizens with an NTK. No clearance is required for access to U-NNPI.

4. GENERAL GUIDANCE: Classified NNPI shall be controlled per reference (b). U-NNPI shall be controlled so that those without an NTK cannot obtain visual or physical access that would permit detailed examination. U-NNPI documents are the custody of the authorized individual using them.

This individual must prevent detailed visual or physical access by those who do not have an NTK.

Whenever unauthorized personnel could gain access to U-NNPI, it should be locked up (e.g., key lock).

5. TRANSMITTAL: Documents containing U-NNPI shall be transmitted in a single opaque envelope or wrapping, as a minimum. The envelope or wrapping shall not be marked so as to reveal its contents to unauthorized personnel.

N00178-04-D-4031-0003REV6

6. OFFSITE HANDLING: U-NNPI may be taken offsite, subject to local controls approved by the cognizant Government office, which shall ensure that the U-NNPI is protected under the disclosure requirements of this instruction and that the U-NNPI is promptly returned when no longer needed offsite.

7. FACILITY VISITS: Requirements for visits to naval and commercial facilities performing naval nuclear propulsion work are addressed in chapter 8 of OPNAVINST N9210.3 dtd 07 June 2010.

8. ELECTRONIC PROCESSING: Protection requirements for NNPI on IT systems, which for this instruction include telecommunication systems and other electronic equipment, are addressed in chapters 9 through 13 of OPNAVINST N9210.3 dtd 07 June 2010. The protection requirements for

IT media containing NNPI are addressed in chapters 2, 6, 9 and table 3 of the same reference.

9. DISCLOSURE POLICY: Access to classified NNPI shall be limited only to those individuals with an NTK and an appropriate security clearance. For classified NNPI that is also restricted data (RD), a final Government clearance is required for access. Access to U-NNPI requires an NTK (as determined by local cognizant authority) for the performance of assigned work. CNO (N00N) must approve in writing any exception to this policy. Any changes in access policy from past actions should be identified to CNO (N00N).

10. U-NNPI is marked and handled as NOFORN.

See Appendix C of OPNAVINST N9210.3 dtd 07 June 2010 for additional handling instructions of NNPI and a “Sample Security Agreement for Protection of U-NNPI”.

NON-SCI

1. DEFINITION: Foreign Intelligence information is defined in SECNAVINST 5510.36 as the product from the collection, evaluation, analysis, integration, and interpretation of all available information which concerns one or more aspects of foreign nations or of areas of foreign operations which is immediately or potentially significant to military planning and operations.

2. MARKING: Distribution statements for classified documents will be determined by the Security Classification Guide used to mark the document.

a. Intelligence data reports and/or documents utilizing data derived from intelligence sources - distribution statement a follows: “FURTHER DISSEMINATION ONLY AS DIRECTED BY COMMANDER, DAHLGREN DIVISION, NAVAL SURFACE WARFARE CENTER (CODE 105), DAHLGREN, VA 22448-5100 OR THE OFFICE

OF NAVAL INTELLIGENCE (ONI-52)”

3. DISCLOSURE POLICY: All technical data provided to the contractor by the Government will be protected from public disclosure in accordance with the markings contained therein. All other information relating to the items to be delivered or services to be performed under this contract may not be disclosed by any means without written approval of the Contracting Officer.

a. Dissemination or public disclosure includes, but is not limited to permitting access to such material by foreign nationals or any other person or entity; publication scientific or technical papers; advertising; or any other proposed public release. The contractor shall provide adequate physical protection to such information as to preclude access by any person or entity not authorized such access by the Government.

b. Due to the sensitivity of this program, classified material received or generated under this contract will not be transferred to any other contractor or agency without the written approval of the Contracting Officer or Contracting Officer’s Representative (COR). For intelligence data reports see the intelligence supplement.

c.…