DD254-EEE.pdf

r

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the Do0 Industrial Security Manual apply t o a// security asoects of this effort.)

(Supersedes all I I orevious saecs, I

1. CLEARANCE AND SAFEGUARDING

a. FACILITY CLEARANCE REQUIRED

Secret

b. LEVEL OF SAFEGUARDING REQUIRED

I Secret

2. THIS SPECIFICATION IS FOR: (X and complete as applicable)

a. PRIME CONTRACT NUMBER

b. SUBCONTRACT NUMBER

1 4 . S THIKFOLLOW-ON CON%ACT? 1 1 YES ( y 1 NO. I f Yes, complete the fol lowing: I

I I , . - - ~ . . I I

- I Classified material received or generated under (Preceding Contract Number) is transferred t o th is fo l low-on contract. I

3. THIS SPECIFICATION IS: IX and complete as applicable1

c. SOLICITATION OR OTHER NUMBER DUE DATE IYYYYMMDDI 1 BAA-03-05-PRK AMEND.8 CALI ~nn607 1 A

a. ORIGINAL (Complete dare in all cases1

b. REVISED 1 REVISION NO.

DATE IYYYYMMDD)

c. FINAL (Complete lrem 5 in all cases)

TBD

DATE (YYYYMMDD)

200606 16

DATE (YYYYMMDD)

5. IS THIS A FINAL DD FORM 254? YES NO. I f Yes. complete the fol lowing:

In response t o t h e contractor's request dated , retention o f the classified material is authorized for t h e period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS. A N D ZIP CODE

TBD

I I

8. ACTUAL PERFORMANCE , .

b. CAGE CODE

TBD

I I

7. SUBCONTRACTOR

I I

9. GENERAL IDENTIFICATION OF THlS PROCUREMENT

c. COGNIZANT SECURITY OFFICE (Name, Address, andzip Code)

a. NAME, ADDRESS, A N D ZIP CODE b. CAGE CODE

Air Vehicle Electroinagnetic Effects Inlmunity (AVE3I). Development and demonstration of an Air Vchicle flight control and power management and distribution subsystem iinmunc to E3.

G. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

9. NATO INFORMATION i. HAVE TEMPEST REQUIREMENTS 1 x

10. CONTRACTOR WILL REQUIRE ACCESS TO:

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION

b. RESTRICTED DATA

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION

d. FORMERLY RESTRICTED DATA

Q. INTELLIGENCE INFORMATION

11) Sensitive Compartmented lnfonnat~on ISCI)

12) Non-SCI

f. SPECIAL ACCESS INFORMATION

I h. FOREIGN GOVERNMENT INFORMATION I 1 Y I j. HAVE OPERATIONS SECURITY IOPSEC) REQUIREMENTS I I¶CI

YES

--re A I Reset (

NO

K K

NO

illi ri' .

11. IN PERFORMING THlS CONTRACT, THE CONTRACTOR WILL:

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT AkOTHER

CONTRACTOR'S FACILITY OR A GOVERNMENT ACTIVITY

b. RECEIVE CLASSIFIED DOCUMENTS ONLY

:,$$ J!':/: , , , )C f

YES

c. RECEIVE AND GENERATE CLASSIFIED MATERIAL

d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. PERFORM SERVICES ONLY

f. HAVE ACCESS TO U.S. CLA SIFIED INFORMATION OUTSIDE THE u.s., PuERTo mco, u.s. PossEsSSIoNs AND TRUST TERRITORIES

8 . BE AUTHORIZEO TO USE THE SERVICES bF DEFENSE TECHNICAL INFORMATION

CENTER IDTIC) OR OTHER SECONDARY DISTRIBUTION CENTER

h. REQUIRE A COMSEC ACCOUNT

K K K Y

I

) 12. PUBLIC RELEASE. Any information (classified orunclassified) pertaining to this contract shall not be released for 4ublic dissemination except as provided t o the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense ( ~ u b l t c Affairs)' for review.

'In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

SECURITY GUIDANCE. The security classifiection guidance needed for this classified effort is identified below. 14 any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; t o challenge the guidance or the classification assigned to any information or material f u tn~s ed or generated under this contract;

OM to submit any questions for interpretation of this guidance t o the official identified below. Pending final decisionithe information involved shall be handled and protected e t the highest level of classification assigned or recommended. /Fill in as appropriate for the classified effort. Attach, or forwardunder separate correspondence, any documentdguides/ertracrs referenced herein. Add additional pages as needed to provi&e complete guidance.)

by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government akhority. Proposed public releases shall

I I The National Industrial Security Program Operating Manual (NISPOM), February 2006 applics to this solicitation.

be submitted for approval prior t o release ) Direct Through (Specify)

Wright Site Public Affairs; ATTN: Security and Policy Review; Building 45,2130 8th St, WPAFB, 255-0143

I a. Ref Elk 101: For Offlcial Use Only (FOUO) applics. See addendum. I

OH 45433-7542 (937)

b. Ref Blk 1 lc: Any classified information generated in the performance of this contract shall require the contractor to apply derivative classification and markings consistent with the source material, or be governed by the cu+ent version of the following security classification guide (SCG): F-16 Multimission SCG, 1 August 2003, OPR: ASC/YP, WP+FB OH. Special Considerations Apply. See Ad.dendum. SCG will be provided under separate cover or is Attachment XX (state which)."

c. PROGRAM MANAGER: Miguel A. Maldonado, AFRLPRPE, 937 255-2622. I I d. Security POC: Jerry Phelps, AFRLPROB, 937 255-4856. I I e. Ref Blk 17f (DISTRIBUTION): 88 SFSISFAS, AFRLPR Security Manager

RFP reviewed by Sheila Simmons, 88 SFSISFAS, (937) 255-4737 on 16 Jun 06.

14. ADDITIONAL SECURITY REQUIREMENTS. Requirernewts, in addition to ISM requirements, are established for tdis contract. ( /If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional I requirements. Provide a copy of the requirements to the cognizant security office. Use Item 73 if additionalspace is needed.)

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office.

(If Yes, explain and identify specific areas or elements carved our and the activity responsible for inspections. Use Item

1 Connie E. Pospiril I Contracting Officer 1 1 937 255-0340 I

Yes NO

13 if additional space is needed.)

I

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the off~c~al named below.

I

d. ADDRESS Ilnclude Zip Code) )REQUIRED DISTRIBUTION 1 I

a. TYPED NAME OF CERTIFYING OFFICIAL

CONTRACTOR

SUBCONTRACTOR

COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

U.S. ACTIVITY RESPONSIBLE FO OVERSEAS SECURITY ADMINISTRATION

ADMINISTRATIVE CONTRACTING OFFICER

OTHERS AS NECESSARY n

b. TITLE

I "

c. TELEPHONE /Include Area Code)

ADDENDUM TO DD FORM 254 (Block 10j)

FOR OFFICIAL USE ONLY (FOUO)

(Reference DoD Regulation 5400.7lAir Force Supplement, 22 July 1999)

1. GENERAL: FOUO is ~nformation that has not been given a security classification pursuant to the criteria of an Executive Order, but whch may be withheld from the public because disclosure would cause a foreseeable harm to an interest protected by one or more of the Freedom of Information Act (FOIA) exemptions 2 through 9. Additional information on FOUO may be obtained by contacting the User Agency. FOUO is assigned to information at the time it is created in a DoD Agency or derivatively as instructed in a Security Classification Guide.

2. MARKING:

a. FOUO information received (released by a DoD component) should contain the following m a r h g , when receive& THIS DOCUMENT CONTMNS INFORMATION EXEMPT FROM MANDATORY DISCLOSURE UNDER FOIA. EXEMPTION(S)

- APPLIES/APPL Y;

b. Mark an unclassified document containing FOUO lnformation "FOR OFFICIAL USE ONLY" at the bottom of each page containing FOUO information and on the bottom of the front page or front cover (if any) and on the back of the last page and on the back cover (if any), Each paragraph containing FOUO lnformation shall be marked as such.

c. Within a classified document, an individual page that contains both FOUO and classified information shall be marked at the top and bottom with the highest security classification of information appearing on the page. Individual paragraphs shall be marked at the appropriate classification level, as well as unclassified or FOUO, as appropriate. An individual page that contains FOUO information but no classified information shall be marked "FOR OFFICIAL USE ONLY" at the top and bottom of the page, as well as each paragraph that contains FOUO information. NOTE: For "production efficiency" the entire document may be marked top and bottom with the hghest level of classification contained w i h it, as long as every paragraph is marked to reflect the specific classification of the information it coiitains.

d. Mark other records, such as computer print outs, photographs, films, tapes, or slides 'FOR OFFICIAL USE ONLY" so that the receiver or viewer knows the record contains FOUO information.

e. Mark each pxrt of a message that contains FOUO mformation. Unclassified niessages containing FOUO information must show the abbreviation "FOUO" before the text begins.

3. DISSEMINATION: FOUO may be disseminated between officials of DoD Components, DoD contractors, consultants and grantees to conduct official business fox DoD. Recipients shall be made aware of the status of such information and transmission shall be by means that preclude unauthorized public disclosure.

4. TRANSMISSION: FOUO Sormation shall be transmitted in a manner that prevents disclosure of the contents. When not commingled with classified information, it may be sent via first-class mail or parcel post. Bulky shipments, i.e. testing materials, that otherwise qualify under postal regulations, may be sent by fourth-class mail. FOUO information may also be sent over facsimile equipment; however, when deciding whether to use th~s means, balance the sensitivity of the records against the risk of disclosure.

Consider the location of sending and receiving machines and ensure authorized personnel are available to receive the FOUO information as soon as it is transmitted. Transmittal documents shall call attention to die presence of FOUO attachments. FOUO information may also be sent via e-mail, if it is sent via a system that will prevent unintentional or unauthorized disclosure.

5. STORAGE: To safeguard FOR OFFICIAL USE ONLY records during normal duty hours, place them in an out-of-sight location if your work area is accessible to persons who do not have a valid need fox the information. After normal duty hours, store FOUO records to prevent unauthorized access. File them with other unclassified records in unlocked files or desks when normal internal building security is provided. When there is no internal building security, locked buildings or rooms normally provide adequate after-hours protection. If such protection is not considered adequate, FOUO material shall be stored in locked containers such as file cabinets, desks, or bookcases. Expenditure of funds for securiv containers or closed areas solely for the protection of FOUO data is prohibited.

6. DESTRUCTION: When no longer needed, FOUO informatron shall be disposed of by any method that will preclude its disclosure to unauthorized individuals.

Effective 12 February 2002 . -

RFP PROB-BAA-03-05-PRK

ADDENDUM TO DD FORM 254 (Block l l c )

SPECIAL CONSIDERATIONS

(AFMAN 33-214V EXTRACT)

3.4. Special Items. People may innocently introduce other radio devices, such as pagers, hand-held portable transceiver radios, cellular telephones, cordless telephones, and cordless microphones into the area processing classified information with disastrous results. Also, alarm systems may use radio transmitters to alert remotely located security or fne-fighting teams.

3.4.1. Hand-Held Radios. These countermeasures are required. Hand-held radio transceivers used with intrabase radios and land mobile radios deserve special consideration because of their unique operational applications. A person may carry these devices into an area where classified information is processed. If the person carrying such a device works in the facility, either turn off the device and use the telephone or separate it 2 meters from classified processors: no transmissions are allowed. If the person carrying the device is a short-term visitor, it is not necessary to turn off the raho because the visitor usually moves about in the facility. Idrequent transmissions are allowed, but only for short durations.

3.4.2. Beepers and Pagers. These countermeasures are required Beepers and pagers deserve special consideration because of their unique operational applications. A person may carry these devices into an area where classified information is processed. If the person carrying such a device works in the facility, either turn off the device and use the telephone or keep the device 2 meters from classified processors. If the person carrying the device is a short-term visitor, it is not necessary to t~un off the device because the visitor usually moves about in the facility. If the device has a transmit capability, follow the instructions for hand-held radios.

3.4.3. Alarm Systems. These countermeasures are required The mode of operation of alarm systems radio frequency ttansmitters will determine their treatment. Any such transmitter with a continuous transmit mode or a high duty cycle (transmits most of the time) must meet the same separation requirements as all other fixed transmitters; follow the applicable guidance in paragraph 3.3. If they do not meet these requirements, exclude them fiom operating in the classified information processing area. Low duty cycle (transmits short bursts infrequently) systems are not considered hazards and require no special treatment.

3.4.4. Cellular Telephones. These countermeasures are required. When a cellular telephone is used as an operational necessity separate it 5 meters from .RED equipment. When the cellular telephone is a personal asset, its use is prohbited. Disable the unit from receiving calls or separate it 10 meters from RED processors. Cellular telephones are excluded from operating within 10 meters of the classified information processing area when the facility is located outside the United States.

3.4.5. Cordless Telephones. These countermeasures are required. When a radio frequency cordless telephone is used as an operational necessity, separate it 5 meters from RED equipment. When the cordless telephone is a personal asset, its use is prohbited.

Disable the personal cordless telephone from receiving calls or separate it 10 meters from RED processors. There are no separation requirements for infrared cordless telephones. Cordless telephones are excluded from operating withn 10 meters of the classified dormation processing area when the facility is located outside the United States.

3.4.6. Cordless Microphones.

3.4.6.1. Radio Frequency Cordless Microphones. These countermeasures are required. When a radio frequency cordless microphone, encrypted or unencrypted, is used for briefing either classified information or unclassified mformation, separate it 10 meters from RED equipment. Using unencrypted radio frequency cordless microphones for classified briefings is prohibited.

3.4.6.2. Infrared Cordless Microphones. These countermeasures are required. Using an infrared cordless microphone for briefing classified information requires blocking the line of sight to a possible place where an adversary could detect the infrared emanations. Do not forget that smooth or shiny surfaces cause infrared signals to be reflected. The best solution is to use a closed room, keeping the doors closed and covering the windows with drapes.

3.4.7. Cordless Accessories. These countermeasures axe required. When a radio frequency cordless accessory such as a keyboard or a mouse is used, separate it 5 meters from RED equipment. Radio frequency cordless accessories cannot be used to process classified information unless encrypted.

3.4.8 Wireless Local Area Networks (LAN). These countermeasures are required. When a radio frequency wireless LAN is used, separate the transmitter and receiver units 5 meters from RED equipment.

3.4.9 Infrared LANs. These countermeasures are required. An mfrared LAN processing classified information requires bloclung the line of sight to a possible place where an adversary could detect the infrared emanations. Do not forget that smooth or shiny surfaces cause infrared signals to be reflected. The best solution is to use a closed room, keeping the doors closed and covering the windows with drapes.

3.4.10 Infrared Devices. These countermeasures are required. Infrared devices not covered by any subparagraph of paragraph 3.4 requires blocking the line of sight to a possible place where an adversary could detect the infrared emanations. Do not forget that smooth or shiny surfaces cause infrared signals to be reflected. The best solution is to use a closed room, keeping the doors closed and covering the windows with drapes.

NOTE: If guidance in paragraph 3.3 on Alarm signals is needed, please contact the Program ManagerJContract Monitor to obtain.

Effective 9 April 2002