BAA-RQKS-2015-0004-DraftDD254.pdf

1. CLEARANCE AND SAFEGUARDING

DEPARTMENT OF DEFENSE a. FACILITY CLEARANCE REQUIRED

CONTRACT SECURITY CLASSIFICATION SPECIFICATION TOP SECRET

(The requirements of the DoD Industrial Security Manual apply

b. LEVEL OF SAFEGUARDING REQUIRED to all security aspects of this effort.)

TOP SECRET

2. THIS SPECIFICATION IS FOR: (X and complete as applicable) 3. THIS SPECIFICATION IS: (X and complete as applicable)

a. PRIME CONTRACT NUMBER x DATE (YYYYMMDD)

a. ORIGINAL (Complete date in all cases)

20141124

b. SUBCONTRACT NUMBER b. REVISED I REVISION NO. DATE (YYYYMMDD)

(Supersedes all previous specs) x c. SOLICITATION OR OTHER NUMBER DUE DATE (YYYYMMDD) DATE (YYYYMMDD)

BAA-RQKS-2015-0004 c. FINAL (Complete Item 5 in all cases)

4. IS THIS A FOLLOW-ON CONTRACT? __j YES l_XJ NO. If Yes, complete the following :

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? L_j YES l_XJ NO. If Yes, complete the following:

In response to the contractor's request dated , retention of the classified material is authorized for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

SEE SOURCE LIST SOURCELIST SEE SOURCE LIST

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

NIA NIA NIA

8. ACTUALPERFORMANCE

a. LOCATION b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

NIA NIA NIA

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

Microelectronics and Embedded Systems Assurance (MESA); The objective of this program is to provide technical effort to develop, evaluate, and facilitate the transition of technologies to improve the security and reliability of avionics microelectronics and embedded systems.

10. CONTRACTOR WILL REQUIRE ACCESS TO: YES NO 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION x a. 8~~~it:~f8~·N xb'i"LIW!Y~ ,\''G~-51~·WJi,,'1:'~N~b't1tMNOT HER x

b. RESTRICTED DATA x b. RECEIVE CLASSIFIED DOCUMENTS ONLY x

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION x c. RECEIVE AND GENERATE CLASSIFIED MATERIAL x

d. FORMERLY RESTRICTED DATA x d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE x

e. INTELLIGENCE INFORMATION e. PERFORM SERVICES ONLY x

(1) Sensitive Compartmented Information (SCI) x f. HAVE AC~ESS TO U.S. ~LAgglFIE£l INFORMATION OUT§DE THE U.S., PUERTO ICO, U.S. PO SE ION AND TRUST TERRIT RIES x

(2) Non-SCI x g. gMflil~?D~R:E\1b~ooY~~~~~8o~~~~~ 8i~.P~~10~ilSN T~~~f~~AL INFORMATION x

f. SPECIAL ACCESS INFORMATION x h. REQUIRE A COMSEC ACCOUNT x

g. NATO INFORMATION x i. HAVE TEMPEST REQUIREMENTS x

h. FOREIGN GOVERNMENT INFORMATION x j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS x

i. LIMITED DISSEMINATION INFORMATION x k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE x

j. FOR OFFICIAL USE ONLY INFORMATION x I. OTHER (Specify) x

k. OTHER (Specify) x Preaward access to classified is required.

Tech Protection Plan

DD FORM 254, DEC 1999 PREVIOUS EDIT

rl~TE Adobe Professional X

·~ ,..-. ... <"R :: ~~ '

BAA-RQKS-2015-0004

Attachment 3

.FT

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release C::=J Direct ~ Through (Specify)

AFRL/RYWA, 2241 Avionics Circle, Wright-Patterson AFB, 45433 for non-SAR related material. Transmission of public release request via e-mail is not authorized.

*SEE CONTINUATION SHEET*

to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

The National Industrial Security Program Operating Manual (NISPOM), February 2006 applies.

a. RefBlk IOa/1 lh: COMSEC is required.

b. RefBlk lOe(l): Contractor requires access to SCI materials; SCI security requirements apply, (see 21 IS/INS, SSO WP AFB, SCI addendum, for details).

c. RefBlk lOe (2): Contractor will require access to intelligence information and must comply with AFI 14-303/AFMC

Supplement 1. The Program Manager has determined that disclosure does not create an unfair competitive advantage for the contractor or a conflict of interest with the contractor's obligation to protect the information and will submit the AFMC Form 210 to the servicing Senior Intelligence Officer (SIO) for approval prior to granting access. Access to SIPRNET is required.

d. RefBlk IOf: The National Industrial Security Program Operating Manual (NISPOM) is the authoritative manual concerning baseline standards for the protection of classified information in connection with classified contract and activities under the National

Industrial Security Program. As stated in the SAFI AA Implementing Memorandum dated 24 July 2008, the Joint Air Force Army Navy (JAFAN) Manual 6/0, Revision 1, is the authoritative SAP security manual.)

PM: MICHAEL P. KNIGHT, CAPT, USAF

AFRL/RYWA

*****SEE CONTINUATION SHEET*****

RefBlk IOe(l ): SCI security requirements apply, see SCI addendum for details.

*SEE CONTINUATION SHEET*

MARK D. COULTER

AFOSl/PJ Det 2 PSO

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office.

(If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

RefBlks IOa/l lh: COMSEC oversight TBD.

RefBlk IOe(I): SCI security requirements apply, see SCI addendum (para 13) for details. SAP Security requirements apply (continuation page)

*SEE CONTINUATION SHEET*

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL b. TITLE c. TELEPHONE (Include Area Code)

d. ADDRESS (Include Zip Code)

e. SIGNATURE

DD FORM 254 (BACK), DEC 1999

DRAFT

DD 254 Continuation Sheet

Block 12 Cont'd:

Ref Blk lOe(l): Public release of Sensitive Compartmented Information (SCI) is NOT authorized.

Ref Blk lOf: No public release of Special Access Required (SAR) or SAR-related information or material is authorized without approval from SAF/AQL through AFOSI Office of Special Projects (PJ) Det 2, 2725 c Street, Suite 010, Wright-Patterson AFB, OH 45433.

Block 13 Cont'd:

Ref Blk lOf: The SAF/AAZ Memorandum, "Air Force Special Access Programs Nomination Process

(SAPNP), dated 30 September 2013, and USD(I) Memorandum, "Special Access Programs Nomination

Process", dated 20 May 2013, will be utilized for all Program Access Requests (PARs). The DoD Manual

52.5.07, Volume 4, dated 10 October 2013, "Special Access Program (SAP) Security Manual: Marking", SAF/AAZ Implementation Memorandum, dated 7 November 2013, and "United States Air Force Security marking Guide for Special Access Programs", dated 17 Jul 2011, Revision 1, dated 16 October 2013, will serve as the marking guide(s) for all SAP material generated under this contract, as well as any subsequent revisions to the above publications revisions to the above publications.

In accordance with DoD SAPCO Memorandum, "Transition to the Risk Management Framework", dated

18 December 2013, certification and authorization of any information system after 1 January 2014 must be accomplished utilizing the Risk Management Framework (RMF) and the Joint Special Access Program

Implementation Guide (JSIG), dated 9 October 2013. Currently accredited systems will continue to operate in accordance with JAFAN 6/3, "Protecting Special Access Program Information within

Information Systems", dated 15 October 2004, and the JAFAN 6/3 Implementation Guide, Version 1, dated September 2006. Upon Approval to Operate (ATO) expiration, all existing information systems certified under JAFAN 6/3 will be reaccredited utilizing the JSIG. All systems will be re-accredited under the JSIG no later than 18 December 2016.

All Special Access Program (SAP) work must be conducted within an AFOSI Office of Special Projects (PJ) approved location. Modifications to an existing SAP Facility must comply with the JAFAN 6/9 Manual, Physical Security Standards for SAP Facilities, dated 23 March 2004, Change 1, dated 20 December 2005.

Security Classification Guides (SCG) will be provided under separate cover.

Government Special Access Program Security Officer (GSSO): Robin Grollmus, AFRL/RYWA, (937) 656-

Program Security Officer (PSO): Mr. Mark Coulter, AFOSI Office of Special Projects (PJ), Det 2, (937) 255-

9949.

All Special Access Program (SAP) work must be conducted within an AFOSI Office of Special Projects (PJ) approved location. Modifications to an existing SAP Facility must comply with the Joint Air

Force/ Army/Navy (JAFAN) 6/9 Manual, Physical Security Standards for SAP Facilities, dated 23 Mar 04, Change 1, dated 20 Dec 05.

e. Ref Blk lOg: NATO briefing required prior to granting access. See NISPOM Chapter 10 for details.

f. Ref Blk lOj: See DoDM 5200.01, Volume 4, DoD Information Security Program: Controlled

Unclassified Information (CUI), Enclosures 3 & 4 and DoD 5400.7-R/Air Force Manual 33-302, DoD

Freedom of Information Act (FOIA) Program, for requirements.

g. Ref Blk llc: Any classified information generated in the performance of this contract shall require the contractor to apply derivative classification and markings consistent with the source material.

h. Ref Blk lld: The contractor is required to provide adequate and approved storage for classified hardware or material to the level of TOP SECRET which because of size or quantity cannot be safeguarded in an approved storage container.

i.Ref Blk llk: Go to http://www.transcom.mil/dcd/ for Defense Courier Service points of contacts and guidance.

j .Ref Blk 111: Provide the information requested by the Notification of Government Security Activity and

Visitor Group Security Agreements clause, Air Force Federal Acquisition Regulation Supplement

(AFFARS) 5352.204-9000, to (enter the Servicing Security Activity (SSA) office symbol, street address, city, state and zip code or e-mail address for each installation).

Defense Security Service (DSS) is carved out of all security and inspection responsibility for SAR performance under this contract. AFOSl/PJ retains security cognizance for all SAP performance as well as all collateral information used in the development of SAR information/materials under this contract.

k. Ref Blk 17f (Distribution): AFRL/RYOY (Security Manager) 2241 Avionics Circle, Wright-Patterson AFB, 45433, gayle.wagner@us.af.mil; joseph.l.worrell.l@us.af.mil; WPAFB Special Security Office (SSO): 21

IS/INS, SSO WPAFB, 2450 D Street, Bldg 20, Area B, WPAFB OH 45433-7629, WPAFBSpecialSecurityOffice.Mailbox@us.af.mil

I. Program Manager: Capt Michael Knight, AFRL/RYWA, 937-656-9590

m. Security Manager: Gayle Wagner, AFRL/RYOY, 937-528-8538

n. ACO: TBD

Block 14 Cont'd:

Ref Blk 10k: Technology Protection Plan (TPP) or alternative source will be provided by the Government activity.

Ref Blk llj: OPS EC requirements apply. See Statement of Objectives (SOO) for requirements.

Block 15 Cont'd:

Ref Blk lOf & 111: Defense Security Service (DSS) is relieved of all security oversight for performance on the installation. For performance on WPAFB, security oversight will be under the cognizance of AFRL IP office for non-SAR performance and by AFOSI Office of Special Projects (PJ) for SAR performance.