BAA-RQKS-2015-0003_Attachment_5_Draft_DD254.pdf

1. CLEARANCE AND SAFEGUARDING

DEPARTMENT OF DEFENSE a. FACILITY CLEARANCE REQUIRED

CONTRACT SECURITY CLASSIFICATION SPECIFICATION TOP SECRET

(The requirements of the DoD Industrial Security Manual apply

b. LEVEL OF SAFEGUARDING REQUIRED to all security aspects of this effort.) TOP SECRET

2. THIS SPECIFICATION IS FOR: (X and complete as applicable) 3. THIS SPECIFICATION IS: (X and complete as applicable)

a. PRIME CONTRACT NUMBER x DATE (YYYYMMDD)

a. ORIGINAL (Complete date in all cases) 20150310

b. SUBCONTRACT NUMBER b. REVISED I REVISION NO. DATE (YYYYMMDD) (Supersedes all previous specs) x c. SOLICITATION OR OTHER NUMBER DUE DATE (YYYYMMDD) DATE (YYYYMMDD)

BAA-RQKS-2015-0003 c. FINAL (Complete Item 5 in all cases)

4. IS THIS A FOLLOW-ON CONTRACT? L_j YES LXJ NO. If Yes, complete the following :

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? L_j YES ·~ NO. If Yes, complete the following :

In response to the contractor's request dated , retention of the classified material is authorized for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

TBD TBD TBD

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

NIA NIA NIA

8. ACTUALPERFORMANCE

a. LOCATION b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

TBD TBD TBD

r · - , .,_, -... -- .. ~ ... - .... ___ .. __ ' . '\ / ·- l -_,

9. GENERAl:dDENTIFICA TION OF THIS PROCUREMENT

Leading-~dge syste~ of systems spectrum warfare applications/advanced technology development

I

' ·--- - - - - . I

10. CONTRACTOR WILL REQUIRE ACCESS TO: YES NO 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION x a. ~~~~tk~f8~·J°Fxb1'8Wi5'~ AN~8~~trJ~~~?~e\1tMNOTHER x

b. RESTRICTED DATA x b. RECEIVE CLASSIFIED DOCUMENTS ONLY x.

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION x c. RECEIVE AND GENERATE CLASSIFIED MATERIAL x

d. FORMERLY RESTRICTED DATA x d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE x

e. INTELLIGENCE INFORMATION e. PERFORM SERVICES ONLY x

(1) Sensitive Compartmented Information (SCI) x f. HAVE ACCESS TO U.S. CLAgglFIED INFORMATION OUT~DE THE U.S., PUERTO RICO, U.S. POSSE IONS AND TRUST TERRIT RIES x

(2) Non-SCI x g ~M-H!~?D%~16iooy~~~~~35~~'K~$' 8i~.PR%D~fcfNTt~~r~~AL INFORMATIUN x

f. SPECIAL ACCESS INFORMATION x h. REQUIRE A COMSEC ACCOUNT x

g. NATO INFORMATION x i. HAVE TEMPEST REQUIREMENTS x

h. FOREIGN GOVERNMENT INFORMATION x j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS x

i. LIMITED DISSEMINATION INFORMATION x k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE x

j. FOR OFFICIAL USE ONLY INFORMATION x I. OTHER (Specify) x

k. OTHER (Specify) x SAP SCGs will be provided under separate Jetter.

Ref Blk 111: AFF ARS 5352.204-9000 applies. See Blk 13.

Access to classified pre-award

DD FORM 254, DEC 1999 PREVIOUS EDITION IS OBSOLETE. Adobe Professional X

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release C:::J Direct ~ Through (Specify)

a. AFRL/RYWD, 2241 Avionics Circle, WP AFB OH 45433 for non-SAP related material. Transmission of public release request via e-mail is not authorized. Public release of Sensitive Compartmented Information (SCI) is NOT authorized.

to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this classrried eff<Jrt is identrried below. If any difficulty is encountered in applying this guidance or rr any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes: to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

The National Industrial Security Program Operating Manual (NlSPOM), February 2006, applies.

a. Ref lOa/11 h: COMSEC is required.

b. RefBlk IOe(l): Contractor requires access to SCI materials: JWICS Access Authorized. SCI security requirements apply. (see 21 IS/INS, SSO WPAFB,SCI addendum, for details).

c. RefBlk 10e(2): Contractor will require access to intelligence iriformation and must comply with AFI 14-303/AFMC Supplement 1. The Program Manager has determined that disclosure does not create and unfair competitive advantage for the contractor of a conflict of interest with the contractor's obligation to protect the information and will submit the AFMC Form 210 to AFRL/RYOY for approval prior to gaining access. Access to SIPRNET required.

d. RefBlk lOf: Contractor requires access to Special Access Program (SAP)/Special Access Required (SAR) materials: SAP/SAR security requirements apply. ·see SAP/SAR addendum to this DD254 for SAP-specific provisions.

e. Ref Blk .1 Og: NA TO briefing required prior to granting access. See NlSPOM Chapter I 0 for details.

f. RefBlk IOj : See DoDM 5200.01, Volume 4, DoD Information Security Program: Controlled Unclassified Information (CUI), Enclosures 3 & 4 and DoD 5400.7-R/Air Force Manual 33-302, DoD Freedom oflnformation Act (FOlAO Program, for requirement

SEE CONTINUATION SHEET

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contr ct. At:~ I Y~v f\l\'jO (If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifiErs"-'t"'"he.;..-.~~'fi1011JfU;;..:·o;.;..;.;;.~-"-1'=1' __ l---<~ requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

COORDINATION a. RefBlk IOe(l): SCI Security requirements apply. See SCI addendum for details

SEE CONTINUATION SHEET

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. ~ Yes LJ No (If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

a. COMSEC oversight TBD.

b. RefBlk !Oe(l): SCI security requirements apply. See SCI addendum (para 13) for details

SEE CONTINUATION SHEET

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL b. TITLE c. TELEPHONE (Include Area Code)

Shayla Wray Contracting Officer (312) 713-9984

d. ADDRESS (Include Zip Code) 17. REQUIRED DISTRIBUTION

Det 1 AFRL/PKKSE X a. CONTRACTOR

Bldg 45, Area B, 2130 8th Street b. SUBCONTRACTOR

Wright-Patterson AFB, OH 45433-754 l x C. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR 1--e-_-S_l_G_N_A_,,T-U.,,..R"""E-----------------------ir---i d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

~ e. ADMINISTRATIVE CONTRACTING OFFICER

X f. OTHERS AS NECESSARY

DD FORM 254 (BACK), DEC 1999

1082103992C Typewritten Text Mark D. Coulter, PSO AFOSI PJ Det 2

DD Form 254 Continuation Sheet

BAA-RQKS-2015-003

BLOCK 13 (Cont)

g. Security POC: Gayle Wagner, AFRL/RYOY, 937-528-8538

h. Program Manager: William Austin, AFRL/RYWD

i. Ref Blk 11k: Go to http://www.transcom.mil/dcd/ for Defense Courier Service points of contact and guidance.

j. Ref Blk 17f(Distribution): AFRL/RYOY, 2241 Avionics Circle, WPAFB, OH 45433-7301, (Security

Manager and Senior Intelligence Officer) gayle.wagner@us.af.mil, and joseph.worrel.l@us.af.mil; 21

ISNIS, SSO WPAFB, OH 2450 D Street, Bldg 20', WPAFB, OH 45433-7629, us.af.mil

BLOCK 15 (Cont)

Ref Blk 11i: EMSEC requirements apply to the SCIF execution location. See Defense Federal Acquisition

Regulation Supplement (DFARS) Clause 252.239-7000, Protection Against Compromising Emanations, dated 25 Jun 04, revised 10 Jan 08; Intelligence Community (IC) Tech Spec-for ICD/ICS 705, Technical

Specifications For Construction and Management of Sensitive Compartmented Information Facilities, Version 1.2, dated 23 Apr 12; Committee on National Security Systems Advisory Memorandum

(CNSSAM) TEMPEST/01-13, Red/Black Installation Guidance, dated 17 Jan 14.

BAA-RQKS-2015-0003

ADDENDUM TO DD FORM 254 (Block lOe (1)) - Effective date: 07 May 2014

SENSITIVE COMPARTMENTED INFORMATION (SCD CLAUSES

1. Reference Block 14: The National Security Act of 1947, as amended; Executive Order (EO) 12333, as amended; EO 13526; E0· 13549; E012829; EO 12968, as amended; 32 CFR Part 2001; 32 CFR Part 2003, 32 CFR Part 2004; and other applicable provisions of law; DoD Manual 5105.21, Volumes 1 -3, dated 19 Oct 12;

AFMAN 14-304; ICD 701 , ICD 702, ICD 703, DCID 6-03 w/ICPM 2006-700-9, ICD 704/ICPGs 704.1. ICPG 704.2, ICPG 704.3, ICPG 704.4, ICD 710, DCID 6-06, as amended; DCID 6-07, ICD 705, ICS 705-1; ICD 503, Joint DoDISS/Cryptologic SCI Information Systems Security Standards (JDCSISSS) and DoD Joint Security Implementation Guide (DJSIG), dated June 2011 , and the AFMC SCI Management Guidance provides the necessary guidance for physical, personnel, industrial, information, and information systems security measures and are part of the Sensitive Compartmented Information (SCI) security specifications for the contract.

2. SCI will not be released to contractor employees without the specific release approval by the originator of the material as outlined in the governing directives and based on prior approval and certification of "need-to-know" by the Contracting Officer's Representative (COR):

TBD TBD TBD

3. Names of contractor personnel requiring access to SCI and justification for SCI billets will be submitted for coordination and action to 21 IN/INS, sso WP AFB after the contract monitor approval/concurrence. Upon receipt of written approval from the COR, the Contractor Special Security Officer (CSSO) may submit the necessary forms to Defense Security Service (DSS) for a Single Scope Background Investigation (SSBI) for those personnel nominated for SCI access in accordance with the National Industrial Security Program Operating Manual (NISPOM).

4. This contract will require O SCI billets in order to fulfill contractual obligations incurred. SCI access is subject to US Government review and approval as outlined in the aforementioned SCI security regulations.

Upon completion or cancellation of the contract, the CSSO will debrief all personnel not required for contract closeout and those billets will be disestablished.

5. The CSSO must restrict access to only those individuals who possess the necessary security clearance and who are actually providing services under the contract. Further dissemination to other contractors, sub-contractors, other government agencies, private individuals or organizations is prohibited unless authorized in writing by the releasing agency.

6. SCI materials furnished in support of this contract remain the property of the DoD department or command that released it. Upon completion or cancellation of the contract, all SCI materials furnished will be returned to the direct custody of the originator of the materials.

7. Classified foreign intelligence materials must not be released to foreign nationals or immigrant aliens whether or not they are also consultants, US contractors, or employees of the contractor, regardless of the level of their security clearance, except with advanced written permission from the originator.

8. Inquiries pertaining to classification guidance on SCI will be directed to the COR listed in para 2 above. SCI security management issues shall be directed to SSO, 21 IS/INS, sso WP AFB , phone (937) 255-0431 DSN prefix 785

FOR OFFICIAL USE ONLY

This Document contains information exempt from mandatory disclosure under the FOIA Page 1 of2

9. OJ/FOUG An SCI Facility (SCIF) meeting the physical security requirements outlined in ICD 705 must be either used for contract work 'or established and maintained at the contractor location. All SCI used for this contract shall be stored, handled, and maintained in a SCIF, be it the local contractor SCIF or similarly SCI accredited facilities used by the contractor. Address of SCIF for contract execution:

Meetings and Conferences Only

10. For contract work within a contractor established SCIF, infonnation systems (computers), electronic connectivity, and similar electronic methods of storing and communicating within and outside the SCIF must be in compliance with DCID 613, DIAM 50-4, the JDCSISSS, and any additional instructions issued by Defense Intelligence Agency (DIA)/DAC-2A, 21 IS/INS, SSO WP AFB

11 . The CSSO must maintain accountability for all classified foreign intelligence materials released to their custody.

12. The CSSO must not reproduce classified foreign intelligence without advance approval of the releasing agency. Ifpennission is granted, each copy will be controlled in the same manner as the original. The CSSO must not destroy any classified foreign intelligence without advance approval of the releasing agency.

13. Reference Block 15: This contract requires access to SCI. If the contractor has established a SCIF, the DIA and its designees are responsible for all inspections of the contractor SCIF and SCI security management program for ensuring compliance with all SCI security regulations and policies.

14. The estimated completion date for this contract effort is: 6/30/2021

SCI requirements reviewed and approved by: Name: Date:

Org/Office Symbol: Phone:

FOR OFFICIAL USE ONLY

This Document contains information exempt from mandatory disclosure under the FOIA

Page 2 of2

SAP ADDENDUM EXAMPLE

Special Access Information Effective Date:

The National ·Industrial Security Program Operating Manual (NISPOM) is the authoritative manual concerning baseline standards for the protection of classified information in connection with classified contract and activities under the National Industrial Security Program. As stated in the SAF/AA Implementing Memorandum dated 24 July 2008, the Joint Air Force Army Navy (JAFAN) Manual 6/0 - Revision 1, is the authoritative SAP security manual.

The SAF/AAZ Memorandum, "Air Force Special Access Programs Nomination Process (SAPNP), dated 30 September 2013, and USD(I) Memorandum, "Special Access Programs Nomination Process", dated 20 May 2013, will be utilized for all Program Access Requests (PARs) . The DoD Manual 5205.07 Volume 4, dated 10 October 2013, "Special Access Program (SAP) Security Manual : Marking", SAF/AAZ Implementation Memorandum, dated 7 November 2013, and "United States Air Force Security Marking Guide for Special Access Programs", dated 17 July 2011, Revision 1, dated 16 October 2013, will serve as the marking guide(s) for all SAP material generated under this contract, as well as any subsequent revisions to the above publications.

In accordance with DoD SAPCO Memorandum, "Transition to the Risk Management Framework", dated 18 December 2013, certification and authorization of any information system after 1 January 2014 must be accomplished utilizing the Risk Management Framework (RMF) and the Joint Special Access Program Implementation Guide (JSIG), dated 9 October 2013. Currently accredited systems will continue to operate in accordance with JAFAN 6/3, "Protecting Special Access Program Information within Information Systems", dated 15 October 2004, and the JAFAN 6/3 Implementation Guide, Version 1, dated September 2006. Upon Approval to Operate (ATO) expiration, all existing information systems certified under JAFAN 6/3 will be reaccredited utilizing the JSIG. All systems will be re-accredited under the JSIG no later than 18 December 2016.

All Special Access Program (SAP) work must be conducted within an AFOSI Office of Special Projects (P J) -approved location. Modifications to and existing SAP facility must comply with the Joint Air Force/Army/Navy (JAFAN) 6/9 Manual, Physical Security Standards for SAP Facilities, dated 23 Mar o4, Change 1, dated 20 Dec 05.

Government Special Access Program Security Officer (GSSO) : Mary McAfee, AFMC/XPZ, 69795

ASR : Celia Clark, AFRL/RYWD, 937-904-5706

Program Security Officer (PSO): Mark Coulter, AFOSl/PJ, 59949

Blk 111: When contract involves SAP information:

Ref Blk lOf: Defense Security Service (DSS) is carved out of all inspection responsibility for SAR performance under this contract. AFOSI retains security cognizance for all SAR performance.

Blk 12 Cont'd:

Ref Blk lOf: No public release of Special Access Required (SAR) or SAR related material is authorized without approval of SAF/ AQ through the AFOSI Office of Special Projects (P J) Det 2, 2725 C Street, Suite 0010, WP AFB OH 45433.

Blk 14 Cont'd:

Ref Blk l Oe(l) : SAP security requirements apply, see SAP addendum for details

Blk 15 Cont'd:

Ref Blk lOf & 111 : Defense Security Service (DSS) is relieved of all security oversight for performance on the installation. For performance on WPAFB, security oversight will be under the cognizance of AFRL IP office for non SAR performance, and by AFOSI Office of Special Projects (P J) for SAR performance.