Classified_Submission_Requirements__Instructions_and_Procedures.docx

HR001126S0011

Classified Submission Requirements, Instructions and Procedures Classified Submission Requirements, Instructions and Procedures (applicable to all Proposers)

REQUIREMENTS

Prior to preparing a classified proposal, proposers must have cognizant security agency approved facilities, information systems, appropriately cleared/eligible personnel to perform at the classification level proposed and obtain a solicitation contract security specification (DD form 254) from the DARPA technical office Program Security Officer (PSO) by contacting the BAA Coordinator for this effort at HR001126S0011@darpa.mil.

All proposer personnel performing Information Assurance (IA)/Cybersecurity related duties on classified Information Systems shall meet the requirements set forth in DoD Manual 8570.01-M (Information Assurance Workforce Improvement Program). Additional information on the subjects discussed in this section may be found at http://www.dcsa.mil.

Proposers choosing to submit classified information from other classified sources (i.e., sources other than DARPA) must ensure (1) they have permission from an authorized individual at the cognizant Government agency (e.g., Contracting Officer, Program Manager); (2) the proposal is marked in accordance with the source Security Classification Guide (SCG) from which the material is derived; and (3) the source SCG is submitted along with the proposal. The cognizant agency concurrence and SCG will be included with the classified submission.

CLASSIFIED SUBMISSION INSTRUCTIONS

DARPA will accept hard copy classified submissions and electronic submissions based on the following overarching instructions:

Hard Copy submission: When submitting a hard copy of the classified portion according to the instructions outlined below, proposers should submit three (3) hard copies of the classified portion of their proposal and two (2) CD-ROMs containing the classified portion of the proposal as a single searchable Adobe PDF file. Please ensure that all CDs are well-marked. Each copy of the classified portion must be clearly labeled with Announcement Number, proposer organization, proposal title (short title recommended), and “Copy _ of _.”

Electronic submission: DARPA will accept classified submissions electronically if performers have access to SAVANNAH/ASCEND, JWICS, or SIPERNET, based on the classification level of the proposal. Proposers will engage early with DARPA security at IPTOsecurity@darpa.mil to ensure an electronic submission is possible in order to meet submission deadlines. DARPA will not furnish any classified systems specifically for proposal writing.

The following represents further detailed classified submission instructions and procedures based on the level of security classification for hard copy submissions.

Confidential, Secret, and Top Secret Information When submitting Confidential, Secret, and/or Top Secret classified information, proposers must use transmission, classification, handling, and marking guidance provided by previously issued SCGs, the DoD Information Security Manual (DoDM 5200.01, Volumes 1 - 4), and the National Industrial Security Program Operating Manual, including the Supplement Revision 1 (DoD 5220.22-M and DoD 5200.22-M Sup. 1).

Confidential and Secret Confidential and Secret classified information may be submitted via ONE of the two following methods:

Hand-carried by an appropriately cleared and authorized courier to the DARPA Classified Document Registry (CDR). Prior to traveling, the courier must contact the DARPA CDR at 703-526-4052 to coordinate arrival and delivery.

OR

Mailed via United States Postal Service (USPS) Registered Mail or USPS Express Mail. All classified information must be enclosed in opaque inner and outer covers and double-wrapped. The inner envelope must be sealed and plainly marked with the assigned classification and addresses of both sender and addressee. Senders must address the inner and outer envelopes as stated below:

The inner envelope shall be addressed to:

Defense Advanced Research Projects Agency ATTN: DARPA/IPTO Reference: – HR001125S0011 675 North Randolph Street Arlington, VA 22203-2114

The outer envelope shall be sealed with no identification as to the classification of its contents and addressed to:

Defense Advanced Research Projects Agency Security & Intelligence Directorate ATTN: CDR 675 North Randolph Street Arlington, VA 22203-2114 Top Secret Information Top Secret information must be hand-carried by an appropriately cleared and authorized courier to the DARPA CDR. Prior to traveling, the courier must notify IPTOsecurity@darpa.mil and contact the DARPA CDR at 703-526- 4052 to coordinate arrival and delivery.

Sensitive Compartmented Information (SCI) SCI must be marked, managed and transmitted in accordance with DoDM 5105.21 Volume 2. Unclassified questions regarding the transmission of SCI may be sent to the DARPA Technical Office PSO via IPTOsecurity@darpa.mil.

Special Access Program (SAP) Information SAP information must be marked in accordance with DoDM 5205.07 Volume 4 and transmitted by specifically approved methods which must be approved by the Technical Office PSO via a courier authorization letter.

Proposers choosing to submit SAP information from an agency other than DARPA are required to provide the DARPA Technical Office PSO written permission from the source material’s cognizant Special Access Program Control Officer (SAPCO) or designated representative. For clarification regarding this process, contact the DARPA Technical Office PSO via IPTOsecurity@darpa.mil.

Additional SAP security requirements regarding facility accreditations, information security, personnel security, physical security, operations security, test security, classified transportation plans, and program protection planning may be specified in the solicitation DD Form 254.

NOTE: All proposals containing Special Access Program (SAP) information must be processed on a SAP information technology (SAP IT) system that has received an Approval-to-Operate (ATO) from the DARPA Technology Office PSO or other applicable DARPA SAP IT Authorizing Official. The SAP IT system ATO will be based upon the Risk Management Framework (RMF) process outlined in the Joint Special Access Program Implementation Guide (JSIG), current version (or successor document). (Note: A SAP IT system is any SAP IT system that requires an ATO. It can range from a single laptop/tablet up to a local and wide area networks.)

The Department of War mandates the use of a component’s SAP enterprise system unless a compelling reason exists to use a non-enterprise system. The DARPA Chief Information Officer (CIO) must approve any performer proposal to acquire, build, and operate a non-enterprise SAP IT system during the awarded period of performance. Use of the DARPA SAP enterprise system, SAVANNAH, does not require CIO approval.

SAP IT disposition procedures must be approved in accordance with the DoD CIO Memorandum of April 20, 2020.

Combined Classified and Unclassified Submissions Instructions:

For a proposal that includes both classified and unclassified information, the proposal should be separated into two separate documents; one document will represent the unclassified proposal, and the second document will represent the classified proposal.

When submitting a combined classified and unclassified submission, the proposers must send an unclassified email to HR0011260011@darpa.mil as notification that there is a classified portion to the proposal.

The proposer should include as much information as possible in the unclassified proposal and use the classified proposal ONLY for classified information.

The unclassified proposal must be submitted through the DARPA Broad Agency Announcement Tool (BAAT). Please visit Proposer Instructions and General Terms and Conditions for specific information regarding submission methods through BAAT.

The classified proposal must be submitted separately, in accordance with the Classified Submission Instructions section above. Classified submissions (Executive Summary or Full Proposal) should NOT be submitted through BAAT or Grants.gov.