RFI_DARPA-SN-26-93_Attachment_3_-_Security_06302026_FINAL.pdf

Defense Advanced Research Program Agency (DARPA)

Tactical Technology Office (TTO)

DARPA-SN-26-93

Request for Information (RFI)

Attachment 3 – Security Information

1. PROGRAM SECURITY

1.1. Controlled Unclassified Information (CUI) and Controlled Technical Information

(CTI) on Non-DoD Information Systems

For unclassified white papers containing Controlled Unclassified Information (CUI), Proposers will ensure personnel and information systems processing CUI security requirements are in place.

If an unclassified submission contains CUI or the suspicion of such, as defined by Executive

Order (EO) 13556 and 32 CFR Part 2002, the information must be appropriately and conspicuously marked CUI in accordance with Department of Defense Instruction (DoDI)

5200.48. Identification of what is CUI or higher should be clearly detailed within the Proposer’s

Security Classification Guide (SCG) or Controlled Unclassified Information Guide (CUIG).

Proposers submitting white papers involving the pursuit and protection of the Defense Advanced

Research Projects Agency (DARPA) information designated as CUI must have an information system authorized to process CUI information in accordance with (IAW) the National Institute of

Standards and Technology (NIST) Special Publication (SP) 800-171 and DoDI 8582.01.

Further information on CUI identification, marking, protecting and control, to include processing on non-DoD information systems, is incorporated herein and can be found at https://www.darpa.mil/about/offices/contracts-management/proposer-general-terms#cui.

1.2. Classified Submissions

For classified white paper submissions, Proposers shall ensure all industrial, personnel, and information systems processing security requirements are in place and at the appropriate level

(e.g., Facility Clearance Level (FCL)), and that Automated Information Security (AIS), Certification and Accreditation (C&A), and any Foreign Ownership Control and Influence

(FOCI) requirements are mitigated prior to submission. Additional information on these requirements can be found at https://www.dcsa.mil/.

(a) Classified Markings

Classified submissions shall be transmitted and marked in accordance with the security classification guidance referenced and sourced from the Proposers governing SCG. This SCG must be provided to the DARPA Program Security Representative (PSR) for review along with written authorization for the use of classified information in response to this Request for Information (RFI). Questions regarding classified submissions should be sent via unclassified email to the PSR at DARPA-SN-26-93@darpa.mil.

If the Proposers submission contains Classified National Security Information (CNSI) or the suspicion of such, as defined by EO13526, the information must be appropriately and conspicuously marked with the classification level and declassification date. Classification must be detailed equal to the level that the sourced SCG dictates. Submissions requiring DARPA to make a final classification determination shall be marked as follows:

https://www.darpa.mil/about/offices/contracts-management/proposer-general-terms#cui.

https://www.dcsa.mil/ mailto:DARPA-SN-26-33@darpa.mil

“CLASSIFICATION DETERMINATION PENDING. Final review by the DARPA PSR.

____________________(insert the recommended classification level, e.g., Top Secret, Secret or

Confidential)”

Submissions containing both classified information and CUI must be appropriately and conspicuously marked with the proposed classification level as well as ensuring CUI is marked in accordance with DoDI 5200.48.

(b) Classified Submission Requirements and Procedures

Proposers choosing to submit classified information from other collateral classified sources (i.e., sources other than DARPA) must comply with the following:

(1) Permission from an authorized individual at the cognizant Government agency (e.g., Contracting Officer, Agreement Officer, or Program Manager)

(2) Proposal is marked in accordance with the source SCG) from which the material is derived

(3) Source SCG is submitted with the Proposer’s RFI response

When a white paper includes a classified portion, IAW security guidelines, the Proposer is required to send an unclassified email to DARPA-SN-26-93@darpa.mil providing notification a classified portion exists within the submission. When submitting classified white papers, digital submissions are preferred (email or CD-ROM) and will be accepted via appropriate channels.

Pre-coordinate transmission by sending an unclassified email to DARPA-SN-26-93@darpa.mil.

Submissions containing the classified portion of the white paper should be submitted as a single searchable Adobe PDF file.

(c) Both Classified and Unclassified Submissions

DARPA prefers the RFI responses are submitted on the same network; however, if the Proposer requires, portions of the response be split between classified and unclassified systems as dictated below.

White papers that includes both classified and unclassified information must be separated by classification, i.e., unclassified and classified. The Proposer shall provide unclassified information in the unclassified response and only classified information in the classified response. There should absolutely be no combination of unclassified or classified information in the responses. The unclassified response should be sent unclassified email to DARPA-SN-26-

93@darpa.mil. The classified response must be submitted separately, IAW the instructions outlined in Section 1.2., paragraph (b) ‘Classified Submission Requirements and Procedures’ above.

1.2.1. Confidential, Secret, and Top Secret Information

Use transmission, classification, handling, and marking guidance provided by previously issued

SCGs, the DoD Information Security Manual (DoDM 5200.01, Volumes 1 - 4), and the National

Industrial Security Program Operating Manual (NISPOM) (32 CFR Part 117), when submitting confidential, secret, and/or top secret classified information.

1.2.2. Confidential and Secret

mailto:DARPA-SN-26-33@darpa.mil mailto:DARPA-SN-26-33@darpa.mil

Confidential and secret classified information may be submitted electronically using the appropriate information system. The Proposer must coordinate the submission by sending an unclassified email request to DARPA-SN-26-93@darpa.mil. DARPA will verify the appropriate access to the classified information system the Program Team may accept the submission(s).

1.2.3. Top Secret, Sensitive Compartmented Information (SCI), and/or Special Access

Program (SAP) Information

If top secret, SCI, and/or SAP information must be included, the Proposer is required to send an unclassified email request to DARPA-SN-26-93@darpa.mil.