D1 DD Form 254 RFQ Attachment 2.pdf

Please wait...

If this message is not eventually replaced by the proper contents of the document, your PDF viewer may not be able to display this type of document.

You can upgrade to the latest version of Adobe Reader for Windows®, Mac, or Linux® by visiting http://www.adobe.com/go/reader_download.

For more assistance with Adobe Reader visit http://www.adobe.com/go/acrreader.

Windows is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Mac is a trademark of Apple Inc., registered in the United States and other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.

DRAFT

SAMPLE

PREVIOUS EDITION IS OBSOLETE.

Page of

DD FORM 254, APR 2018

NEEDS DD67

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the National Industrial Security Program (NISP) apply to all security aspects of this effort involving classified information.)

OMB No. 0704-0567 OMB approval expires:

June 30, 2025 The public reporting burden for this collection of information, 0704-0567, is estimated to average 70 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, at whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

RETURN COMPLETED FORM AS DIRECTED IN THE INSTRUCTIONS.

1. CLEARANCE AND SAFEGUARDING

2. THIS SPECIFICATION IS FOR: (X and complete as applicable.)

3. THIS SPECIFICATION IS: (X and complete as applicable.)

a. ORIGINAL (Complete date in all cases.)

b. REVISED (Supersedes all previous specifications.)

4. IS THIS A FOLLOW-ON CONTRACT?

If yes, complete the following:

Classified material received or generated under

5. IS THIS A FINAL DD FORM 254?

If yes, complete the following:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

7. SUBCONTRACTOR(S) (Click button if you choose to add or list the subcontractors -- but will still require a separate DD Form 254 issued by a prime contractor to each subcontractor)

8. ACTUAL PERFORMANCE (Click button to add more locations.)

10. CONTRACTOR WILL REQUIRE ACCESS TO: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

e. NATIONAL INTELLIGENCE INFORMATION:

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. See instructions. Provide details in Blocks 13 or 14 as set forth in the instructions.)

12. PUBLIC RELEASE

Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the National Industrial Security Program Operating Manual (NISPOM) or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified here with at least office and phone contact information and if available, an e-mail address. (See instructions)

13. SECURITY GUIDANCE

The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended.

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. The field will expand as text is added. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. Also allows for up to 6 internal reviewers to digitally sign. See instructions for additional guidance or use of the fillable PDF.)

List of Attachments (All Files Must be attached Prior to Signing, i.e., for any digital signature on the form)

14. ADDITIONAL SECURITY REQUIREMENTS

Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the CSO. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

15. INSPECTIONS

Elements of this contract are outside the inspection responsibility of the CSO.

If Yes, explain and identify specific areas and government activity responsible for inspections. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

17. CERTIFICATION AND SIGNATURES

Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. Upon digitally signing Item 17h, no changes can be made as the form will be locked.

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICIAL

9.0.0.2.20120627.2.874785 DD 254, "DoD Contract Security Classification Specification"

27410 Hot Patch Road Quantico, VA Enter location(s).: Marine Corps Cyber Warfare Group (MCCYWG) 7125 Columbia Gateway Drive Columbia, MD

Security Classification Guide (SGC): All classified work to be performed at government sites; SCG to be provided by the COR. All classified guides will be reviewed at the government site.

Direct all questions to the SCI Contracting Officer's Representative (COR) Amber Carnett, alcarne@nsa.gov: (443) 654-1481; Regional Contracting Officer (KO) Cynthia Guthridge ;

Prime Contractor's are required to send copies of all subcontract DD Form 254's to obtain flow-down approvals as required to the distribution list in block 17: COR, KO , and MARINE CORPS CYBER WARFARE GROUP (MCCYWG) or MARINE CORPS

CYBERSPACE OPERATIONS GROUP (MCCOG) SSO.

MCCYWG SSO: Mr. Erich Moyer MCCOG SSO: Mr. Walter Burgess 10.a MCCYWG Location: NSA has oversight for COMSEC.

10e (1): Contractor requires access to SCI materials; No public release of information authorized, public disclosure or confirmation of any subject related to the support contract is not authorized without first obtaining written approval from the CM.

****RELEASE OF SCI/NON-SCI INTELLIGENCE INFORMATION TO DOD CONTRACTORS****

1. Requirements for access to SCI:

a. All SCI will be handled in accordance with special security requirements, which will be furnished by MARFORCYBER SSO. Specific security directives provided will be included in Block 13 of the DD Form 254.

b. SCI will not be released to contractor employees without specific release approval of the originator of the material as outlined in governing directives; based on prior approval and certification of "need to know" by the designated COR.

c. Names of contractor personnel requiring access to SCI will be submitted to the MFCC COR for approval. Upon receipt of written approval from the COR the company security officer will submit copies of appropriate and completed contractor security in-processing forms to the MCCYWG or MCCOG SSO. The Facility Security Officer (FSO)/Contractor Special Security Officer (CSSO) must follow the contractor security processing instructions provided by MCCYWG and MCCOG SSO.

d. Inquiries pertaining to classification guidance on SCI will be directed through the CSSO to the responsible COR as indicated on the DD Form 254.

e. SCI furnished in support of this contract remains the property of the Department of Defense (DOD) department, agency, or command originator. Upon completion or cancellation of the contract, SCI furnished will be returned to the direct custody of MCCYWG or MCCOG SSO/COR or destroyed IAW instructions outlined by the COR.

10.g/k. Access to NATO material will be required for reference at the Government, or appropriately cleared contractor’s facility. Access requires a final U.S. Government security clearance at the appropriate level. Contractor personnel who require access to NATO material will be briefed by the government contractor Agency. The PRIME Contractor must receive approval from the Government Contractor agency to grant NATO access to a subcontractor. Contractor personnel shall be debrief by the Government Cognizant Agency prior to departure from this contract. NIPRNET; SIPRNET; JWICS; Contractor personnel may require access to Joint Worldwide Intelligence Communication System (JWICS). All contractor personnel who require access to TS/SCI and JWICS, at any location, will require a Top Secret/SCI security clearance based on a Single Scope Background Investigation (SSBI), SSBI-Periodic Reinvestigation (SSBI-PR), Tier 5 (T5),or Tier 5 Re-investigation (T5R) with ICD 704 eligibility in-scope or enrolled/deferred in the Continuous Evaluation (CE) program within 5 years of the last investigation or CE date. Contractors who need access to NSAnet and NSA facilities will require a Counterintelligence (CI) Polygraph adjudicated within the last 5 years 9 months.

10j/11.l The contractor shall identify and protect national security information and CUI in accordance with national level policy issuances. Promote information sharing, facilitate judicious use of resources, and simplify management through implementation of uniform and standardized processes. Protect CUI from unauthorized disclosure by appropriately marking, safeguarding, disseminating, and destroying such information at its facility and/or place of performance.

11.e Contract is for: Cleared personnel are required to perform this service because escorting personnel or sanitization of the work space cannot preclude access to classified information. Any classification guidance needed will be provided by COR.

11.j Contractors are required to take Operation Security training. Additional OPSEC information is attached.

Classified information is subject to DoD M5105.21 NSA Security Classification Guides USCYBERCOM Security Classification Guides CAPCO Security Classification Guides

• DoD 8570.01-M Change 1, Information Assurance Workforce Improvement Program

• ICD 700 (Protection of National Intelligence, CI & Security Activities)

• ICD 701 (Unauthorized Disclosures of Classified Information)

• ICD 703; ICPG 703.1-6 (Protection of Classified National Intelligence,

• Including SCI)

• ICD 704; ICPG 704.1-6 (Personnel Security Standards)

• ICD 705; ICS 705.1-2; IC Tech Spec for ICD 705 (SCIF Visitor control)

- ICD 709 (Clearance Reciprocity)

• ICD 709 (Clearance Reciprocity)

• ICD 710; ICPG 710.1-2 (Classification Management and Control Marking System)

• DoDM 5105.21 Vol 1-3 (SCIF Administrative Security Manual -Information, Physical, Personnel and Special Activities Security)

• DoDM 5200.01 Vol 1-4 (Information Security - Classification, Marking, Protection, Controlled Unclassified Information)

• DoD 5200.2-R (Personnel Security Program)

• DoD 5200.08-R (Visitor control Program)

• Technical Specifications For Construction And Management Of Sensitive Compartmented Information Facilities Version 1.3, IC Tech Spec‐for ICD/ICS 705, 10 September 2015 -- (U) DoD Instruction 5200.8, Security of DoD Installations and Resources, dated 10 December 2005 -- (U) DoD 5200.8R, Physical Security Program, 27 May 2009

• MCCOG 5510 Group Order 5510.1B Security Program

• MMCOG 5239 Cyber Security Group Order

• SECNAV M-5510.36 Information Security Program

• SECNAV M-5510.30 Personnel Security Program

• MCO 5510.18B Security Order

Region – Regional Contracting Office (MCINCR-RCO) 2010 Henderson Rd.

Marine Corps Base Quantico, VA 22134-5000 Enter address (include zip code).: 9800 Savage Road, Ste 6850 Fort George G. Meade, Maryland 20755