B08 Attachment 0001 DD 254_AMMSS.pdf

Please wait...

If this message is not eventually replaced by the proper contents of the document, your PDF viewer may not be able to display this type of document.

You can upgrade to the latest version of Adobe Reader for Windows®, Mac, or Linux® by visiting http://www.adobe.com/go/reader_download.

For more assistance with Adobe Reader visit http://www.adobe.com/go/acrreader.

Windows is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Mac is a trademark of Apple Inc., registered in the United States and other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.

DRAFT

SAMPLE

PREVIOUS EDITION IS OBSOLETE.

Page of

DD FORM 254, MAY 2019

NEEDS DD67

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the National Industrial Security Program (NISP) apply to all security aspects of this effort involving classified information.)

OMB No. 0704-0567 OMB approval expires:

20220531 The public reporting burden for this collection of information, 0704-0567, is estimated to average 70 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, at whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

RETURN COMPLETED FORM AS DIRECTED IN THE INSTRUCTIONS.

1. CLEARANCE AND SAFEGUARDING

2. THIS SPECIFICATION IS FOR: (X and complete as applicable.)

3. THIS SPECIFICATION IS: (X and complete as applicable.)

a. ORIGINAL (Complete date in all cases.)

b. REVISED (Supersedes all previous specifications.)

4. IS THIS A FOLLOW-ON CONTRACT?

If yes, complete the following:

Classified material received or generated under

5. IS THIS A FINAL DD FORM 254?

If yes, complete the following:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

7. SUBCONTRACTOR(S) (Click button if you choose to add or list the subcontractors -- but will still require a separate DD Form 254 issued by a prime contractor to each subcontractor)

8. ACTUAL PERFORMANCE (Click button to add more locations.)

10. CONTRACTOR WILL REQUIRE ACCESS TO: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

e. NATIONAL INTELLIGENCE INFORMATION:

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. See instructions. Provide details in Blocks 13 or 14 as set forth in the instructions.)

12. PUBLIC RELEASE

Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the National Industrial Security Program Operating Manual (NISPOM) or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified here with at least office and phone contact information and if available, an e-mail address. (See instructions)

13. SECURITY GUIDANCE

The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended.

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. The field will expand as text is added. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. Also allows for up to 6 internal reviewers to digitally sign. See instructions for additional guidance or use of the fillable PDF.)

14. ADDITIONAL SECURITY REQUIREMENTS

Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the CSO. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

15. INSPECTIONS

Elements of this contract are outside the inspection responsibility of the CSO.

If Yes, explain and identify specific areas and government activity responsible for inspections. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

17. CERTIFICATION AND SIGNATURES

Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. Upon digitally signing Item 17h, no changes can be made as the form will be locked.

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICIAL

9.0.0.2.20120627.2.874785 DD 254, DoD Contract Security Classification Specification whs.mc-alex.esd.mbx.formswebmaster@mail.mil

WHS

List of Attachments (All Files Must be Attached Prior to Signing, i.e., for any digital signature on the form)

JB MDLBLDG 307 AND 706

Lakehurst, NJ 08733

Bldg 26, Landsdowne Rd., JBMDL, Lakehurst, NJ 08733 PublicAuthority: COR: Stephen D. Vile Jr.

(732)323-2113, stephen.d.vile.civ@army.mil

On Site: This requirement is for Government Sites Only: Contractor’s may have access to COMSEC material/equipment which shall be required in the performance of this contract. Contractors requiring access to Classified COMSEC Material within a Government facility are subject to the Department of the Army Cryptographic Access Program (DACAP) IAW, AR 380-40. Approval by the Government Task Leader, Government Contracting Activity or Contracting Officer Representative (GTL/GCA/COR) is required prior to granting COMSEC access to a subcontractor. A COMSEC briefing must be provided by their Facility Security Officer (FSO).

10e (1). SCI Addendum. See attached SCI Addendum, and Protection of Classified National Intelligence, Including Sensitive Compartmented Information, ICDD 703. Approval by the Government Task Leader, Government Contracting Activity or Contracting Officer Representative (GTL/GCA/COR/CM) is required prior to granting SCI access to a subcontractor.

10e (2). Intelligence Information. Non-SCI Information is not releasable to contractor employees who have not received a final U.S. Government clearance at the appropriate level. Written concurrence of the KO is required prior to subcontracting. Access to Intelligence information required for performance. Approval by the GTL/GCA/COR is required prior to granting access to a subcontractor.

10g. Access to NATO information requires a final requires final U.S. Government clearance at the appropriate level and special briefings. The contractor only requires access to secure internet protocol router network and not North Atlantic Treaty Organization documents. Approval by the GTL/GCA/COR is required prior to granting access to a subcontractor. USAREUR IAW AR 380-15. Approval by the GCA/COR is required prior to granting access to a subcontractor.

10h. Access to classified foreign government information requires final U.S. Government clearance at the appropriate level. IAW AR 380-5. Approval by the GCA/COR is required prior to granting access to a subcontractor.

10j. Controlled Unclassified Information (CUI): refer to DoDI 5200.48: Controlled Unclassified Information (CUI), available at https://www.esd.whs.mil/Directives/issuances/dodi/, when considering protection for CUI. DoD contracts shall require contractors to report the potential classification of aggregated or compiled CUI to a DoD representative.

New employees must be complete CUI trained within 30 calendar days of their reporting for duty and annually thereafter. Current employees must also take this training. CUI training site can be found at https://securityhub.usalearning.gov/index.html Completed certificates will be sent to the COR for tracking purposes. Refer to the PWS for additional information.

10k. Contractor may be required to access Secret Internet Protocol Router Network (SIPRnet) may be required at Government installations. Contractor must have a final Secret clearance. COMSEC and NATO briefing must only be given by the FSO.

11c. Contractor shall follow the guidelines of the NISPOM 32 CFR Part 117 – 117.15 for the proper handling of classified information. Contractor shall also follow guidance set forth within Security Classification Guide (SCG), (Title of SCG) may be found at https://www.dtic.mil It is the responsibility of the TPOC and/or Government Task Lead, in conjunction with the Contractor, to ensure all required SCGs are utilized including those that may be released, updated, and implemented during the life of the contract.

11d. Contractor shall be required to store hardware and software for classified Automatic Information System (AIS) processing.

11f. Contractor may be required to have access to classified information outside U.S. Locations include but not limited to ogota, Columbia, Costa Rica, Mexico, Honduras, Korea, United Arab Emirates, Saudi Arabia, Germany, Afghanistan and England. upon approval from GTL/GCA/COR. Personnel Recovery Program for Contractor Personnel Traveling Overseas: US based contractor employees and associated sub-contractor employees shall submit an Isolated Personnel Report (ISOPREP) prior to deployment, IAW AR 525-28, Personnel Recovery. The contractor is required to fill out the survey on the Personnel Recovery Mission Software (PRMS) via NIPRNET at https://prmsglobal.prms.af.mil/prmsconv/Profile/Survey/start.aspx prior to deployment. Once submitted, it must be validated by a PRMS manager prior to OCONUS travel.

11g. Access to Government regulations or documentation, the contractor may go to the following website for the Defense Technical Information Center (DTIC). https://www.dtic.mil for security classification guides.

11i. Contractor shall follow TEMPEST requirements IAW, AR 380-27. Refer to TEMPEST attachment. Refer to PWS for additional information.

11j. The contractor shall coordinate OPSEC training requirements with the Government OPSEC Officers and comply with the government’s OPSEC Plan provided under separate cover. The contractor shall allow new contractor employees the time required to complete Level 1 OPSEC Awareness training. Contractors working OCONUS under C5ISR Center contracts will receive Level 1 OPSEC Awareness training as directed or at the discretion of the appropriate military commander in theater. Per AR 530-1 Operations Security, the contractor employees must complete Level I OPSEC Awareness training. New employees must be trained within 30 calendar days of their reporting for duty and annually thereafter. Level I OPSEC training is available at the following website: http://cdse.edu/catalog/elearning/GS130.html (Duration: 45 minutes). The contracting company shall be required to initiate and maintain copies of the completed OPSEC training, while also proving the COR a copy of said training.

11l. Controlled Unclassified Information (CUI): refer to DoDI 5200.48: Controlled Unclassified Information (CUI), available at https://www.esd.whs.mil/Directives/issuances/dodi, when considering protection for CUI. DoD contracts shall require contractors to report the potential classification of aggregated or compiled CUI to a DoD representative.

11m.IT Sensitive Duties may be required 13a. FSO shall receive a copy of PWS and DD 254 for use thru life of contract. PWS will have additional security guidance to assist FSO. Facility Security Officer (FSO): FSO shall send a signed copy of DD 254 for all sub contracts to the C5ISR Center Industrial Security Office. All FSO’s shall submit for a CAC request for themselves, alternates to the C5ISR Center Industrial Security Office for processing. This shall allow the FSO to send PII to the Government in a secure fashion. This shall allow the FSO to send PII to the Government in a secure fashion.

13b. All training indicated within the PWS and NISPOM 32 CFR Part 117 shall be completed as directed and submit to COR for tracking.

13c. The information contained within this DD Form 254 has been determined by the C5ISR Center Industrial Security team to be aggregated as a whole to the level of Controlled Unclassified Information (CUI) and should be protected as such.

text: US ARMY C5ISR Center ESI Bldg. 26 Landsdowne Rd.

JBMDL, Lakehurst, NJ 08733

Refer to SCI Addendum

JBMDL, Lakehurst, NJ 08733 Address: 6590 Reconnaissance St., Bldg. 6010

APG, MD 21005