DDForm254.pdf

Please wait...

If this message is not eventually replaced by the proper contents of the document, your PDF viewer may not be able to display this type of document.

You can upgrade to the latest version of Adobe Reader for Windows®, Mac, or Linux® by visiting http://www.adobe.com/go/reader_download.

For more assistance with Adobe Reader visit http://www.adobe.com/go/acrreader.

Windows is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Mac is a trademark of Apple Inc., registered in the United States and other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.

DRAFT

SAMPLE

PREVIOUS EDITION IS OBSOLETE.

Page of

DD FORM 254, APR 2018

NEEDS DD67

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the National Industrial Security Program (NISP) apply to all security aspects of this effort involving classified information.)

OMB No. 0704-0567 OMB approval expires:

May 31, 2022 The public reporting burden for this collection of information, 0704-0567, is estimated to average 70 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, at whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

RETURN COMPLETED FORM AS DIRECTED IN THE INSTRUCTIONS.

1. CLEARANCE AND SAFEGUARDING

2. THIS SPECIFICATION IS FOR: (X and complete as applicable.)

3. THIS SPECIFICATION IS: (X and complete as applicable.)

a. ORIGINAL (Complete date in all cases.)

b. REVISED (Supersedes all previous specifications.)

4. IS THIS A FOLLOW-ON CONTRACT?

If yes, complete the following:

Classified material received or generated under

5. IS THIS A FINAL DD FORM 254?

If yes, complete the following:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

7. SUBCONTRACTOR(S) (Click button if you choose to add or list the subcontractors -- but will still require a separate DD Form 254 issued by a prime contractor to each subcontractor)

8. ACTUAL PERFORMANCE (Click button to add more locations.)

10. CONTRACTOR WILL REQUIRE ACCESS TO: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

e. NATIONAL INTELLIGENCE INFORMATION:

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. See instructions. Provide details in Blocks 13 or 14 as set forth in the instructions.)

12. PUBLIC RELEASE

Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the National Industrial Security Program Operating Manual (NISPOM) or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified here with at least office and phone contact information and if available, an e-mail address. (See instructions)

13. SECURITY GUIDANCE

The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended.

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. The field will expand as text is added. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. Also allows for up to 6 internal reviewers to digitally sign. See instructions for additional guidance or use of the fillable PDF.)

List of Attachments (All Files Must be attached Prior to Signing, i.e., for any digital signature on the form)

14. ADDITIONAL SECURITY REQUIREMENTS

Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the CSO. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

15. INSPECTIONS

Elements of this contract are outside the inspection responsibility of the CSO.

If Yes, explain and identify specific areas and government activity responsible for inspections. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

17. CERTIFICATION AND SIGNATURES

Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. Upon digitally signing Item 17h, no changes can be made as the form will be locked.

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICIAL

9.0.0.2.20120627.2.874785 DD 254, "DoD Contract Security Classification Specification" Hide Attachment Bar

N/A Enter cognizant security office(s) (Name, Address, ZIP Code, Telephone required; Email Address optional).:

78 ABW/IP

985 Macon Street Robins AFB GA 31098 Enter cognizant security office(s) (Name, Address, ZIP Code, Telephone required; Email Address optional).: 78 ABW/IPD 985 Macon St Robins AFB, GA 31098 Enter cognizant security office(s) (Name, Address, ZIP Code, Telephone required; Email Address optional).: 412 TW/IP 15 South Muroc Dr.

Bldg. 2430 Edwards AFB CA 93524 Enter cognizant security office(s) (Name, Address, ZIP Code, Telephone required; Email Address optional).: 28 BW/IP (AFGSC) 2740 Eaker Drive, Building 4400 Ellsworth AFB, SD 57706-4829 605-385-2433 / 28bw.ip@us.af.mil Enter cognizant security office(s) (Name, Address, ZIP Code, Telephone required; Email Address optional).: 7 BW/IP 7 Lancer Loop, Room 138 Dyess AFB TX 79607 7bw.ip@dyess.af.mil Enter cognizant security office(s) (Name, Address, ZIP Code, Telephone required; Email Address optional).: 99 ABW/IP 4349 Duffer Dr., Suite 1607 Nellis Air Force Base NV 89191

15 South Muroc St.

Edwards AFB CA 93524 Comm (661) 277-7333 Enter cognizant security office(s) (Name, Address, ZIP Code, Telephone required; Email Address optional).: 412 TW/IP 15 South Muroc St.

Edwards AFB CA 93524 Comm (661) 277-7333

235 Byron Street, Suite 19A Robins AFB GA 31098-1813 Enter location(s).: AFLCMC/WNYEBA 235 Byron Street, Suite 19A Robins AFB GA 31098-1813 Enter location(s).: 419 FLTS 20 East Jones Rd Edwards AFB CA 93524 Enter location(s).: 28 MXG 1910 Bergstrom Dr. Bldg 8305 Ellsworth AFB SD 57706 Enter location(s).: 7 MXG 913 Anaconda Ave, Suite 211 Dyess AFB TX 79606 Enter location(s).: Nevada Test and Training Range (NTTR) 4700 Las Vegas Blvd North Nellis Air Force Base NV 89191-7078 Enter location(s).:

Contractor's Facility-TBD Enter location(s).:

Benefield Anechoic Facility Building 1030 30 Hoglan Ave Edwards AFB CA 93524 Enter location(s).:

IFAST

20 Hoglon Rd Building 1020, Room 313 Edwards AFB CA 93524 Enter general unclassified description of this procurement.:

Scope includes (1) engineering support services for the AN/ALM-280, commonly referred to as the Enhanced Automated Special Test Equipment (EASTE); (2) engineering support for the AN/ALQ-161A system software qualification and test for all ongoing and future AN/ ALQ-161A deficiency analyses, technical inquiries, Preprocessor Flight Software (PFS) block cycle change programs, and laboratory maintenance/upgrade efforts (3) engineering and configuration management support for the B-1 B Defensive Avionics Subsystem (DAS) sustainment efforts.

Ref Blk 1a/b: Contractor must be granted a Top Secret Facility Security Clearance prior to being granted access to Top Secret information.

Ref Blk 8a and 11c: work to be performed in locations listed in 8a.

The following security classification guide applies to this effort:

B-1 Security Classification Guide (SCG) dated 1 October 1997, Revision 4 - 10 October 2017. Subsequent updates shall be provided by the Technical Point of Contact/Contracting Officer Representative/Contracting Officer or Security Representative (as applicable) as Government Furnished Information (GFI) and shall be executed by the Contractor without obligation to modify this DD Form 254.

Prior to declassifying or downgrading information marked with a date or event on the "declassify on" line: The Contractor will confirm the OCA has not extended the classification period by reference to the applicable Security Classification or Declassification Guide or by consulting with the Program Office with the OCA.

Transfer of documents to other IR&D efforts is not permitted

Ref Item 10a/11h: The contractor is authorized to receive Government furnished cryptographic equipment. Access to COMSEC information is authorized to the prime contractor only. Further release requires prior approval from the owner of the COMSEC information. Access to classified COMSEC information requires a final U.S. Government clearance at the appropriate level. Further disclosure of classified COMSEC information by a contractor, to include subcontracting, requires prior approval of the GCA. Non-accountable COMSEC information, though not tracked in the COMSEC material control system, may still require a level of control within a document control system. Refer to NSA/CSS Manual 3-16, “Control of Communications Security Material,” and the Committee on National Security Systems Instruction (CNSSI) 4001, “Controlled Cryptographic Items,” for guidance.

COMSEC/Cryptologic safeguarding requirements apply. See AFMAN 17-1302-O, Communications Security (COMSEC) Operations for guidance. Contractor personnel will follow the security requirements of the host government activity.

Ref Blk 10b: Access to Restricted Data (RD) requires a final U.S. Government clearance at the appropriate level.

Ref. Blk 10d: Access to Formerly Restricted Data (FRD) requires a final U.S. Government clearance at the appropriate level.

Ref Blk 10e (1): Public release of Sensitive Compartmented Information (SCI) is NOT authorized. Contractor requires access to SCI materials; SCI security requirements apply. See AFLCMC/INGS (IN-WR), SSO Robins Intelligence Security Addendum (SCI) for details.

AFLCMC/INGS has exclusive security responsibility for all SCI material released to or developed under this contract.

Ref Blk 10e (2): Contractor will require access to intelligence information and must comply with directions provided by the Contracting Officer’s Representative (COR). The Program Manager has determined that disclosure does not create an unfair competitive advantage for the contractor or a conflict of interest with the contractor’s obligation to protect the information. The COR will identify what intelligence information is required for the contractor to satisfy the contract and will submit that information to the servicing Senior Intelligence Officer (SIO) for approval prior to granting access.

Ref Blk 10e : Access will be obtained at meetings, conferences or training- no SCI will be generated or stored at the contractor's facility. SCI access is granted for Intelligence data purposes only. TS/SCI data will be stored at a government sponsored SCIF.

RRef Item 10f: The National Industrial Security Program Operating Manual (NISPOM) is the authoritative manual concerning baseline standards for the protection of classified information in connection with classified contract and activities under the National Industrial Security Program. The contractor shall comply with:

- DoD Manual 5205.07, Volume 1, “DoD Special Access Program (SAP Security Manual: General Procedures,” 18 June 2015, as the authoritative SAP security manual pending Air Force implementation guidance.

- DoD Manual 5205.07, Volume 2, “Special Access Program (SAP Security Manual: Personnel Security,” 24 November 2015, will be utilized for all Program Access Requests (PARs pending Air Force implementation guidance.

- DoD Manual 5205.07, Volume 3, “DoD Special Access Program Security (SAP Manual: Physical Security,” 23 April 2015; Change 1, 21 September 2015; Air Force Manual 16-703, Volume 3, “Special Access Program (SAP Security Manual: Physical Security,” 31 December 2015 will serve as the baseline for physical security of SAP facilities.

- DoD Manual 5205.07, Volume 4, “Special Access Program (SAP Security Manual: Marking,” 10 October 2013, and the “SAF/AAZ Implementation Memorandum, 7 November 2013, and “United States Air Force Security Marking Guide for Special Access Programs”, 1 July 2011; Revision 1, 16 October 2013, will serve as the marking guide(s for all SAP material generated under this contract.

All SAP work must be conducted within an AFOSI Office of Special Projects PJ-approved location.

There will be no SAP work performed at the contractor’s facility. The personnel will only need to travel to a location and get into the area to observe testing.

Government Special Access Program Security Officer (GSSO): Wendy Myers, AFLCMC/WN-IP, (478) 926-5105, wendy.myers.1@us.af.mil

Program Security Officer (PSO): Frank Jolly, Chief, OSI/PJ, Det 3 OL-A Marietta, GA

Ref Item 10f: Public release of Special Access Program (SAP) related data is NOT authorized without prior coordination through the Air Force Office of Special Investigations (AFOSI), Office of Special Projects (PJ) Security Director and subsequent approval of the Original Classification Authority (OCA) and Air Force Special Access Program Central Office (AFSAPCO). Submit all proposed public disclosures related to SAP data to the Government Program Manager (GPM) and the Air Force Office of Special Investigations (AFOSI), Office of Special Project (PJ) Program Security Officer (PSO).

All SAP work must be conducted within an AFOSI Office of Special Projects PJ-approved location.

Ref Blk 10j/11l: The contractor shall comply with DoDI 5200.48, Controlled Unclassified Information, AFI 16-1404 Air Force Information Security Program, Air Force Guidance Memorandum 2021-16-01, Air Force Guidance Memorandum for CUI, 22 July 2021, and DoDM 5400.07-Air Force Manual 33-302, DoD Freedom of Information Act (FOIA) Program. The contractor shall monitor CUI aggregation and compilation based on the potential to generate classified information pursuant to security classification guidance addressing the accumulation of unclassified data or information.

Ref Item 10k: Actual knowledge of, generation, or production of North Atlantic Treaty Organization (NATO) information is not required for performance on the contract; however, a NATO awareness briefing for cleared contractor personnel with SIPRNET access is required for contract performance. Access to Secret Internet Protocol Router Network (SIPRNET) is authorized. SIPRNET users shall receive the Air Force NATO Security Awareness Briefing and sign an acknowledgment prior to SIPRNET access. A formal NATO briefing is required when 1) the SIPRNET enclave, or other classified networks, is approved for NATO and no additional security measures are in place to preclude access or 2) Access to NATO information is authorized. Formal NATO briefings shall be accomplished IAW the NISPOM, Para 10-706. Program Protection Plans (PPP) will be provided by the Government activity. All contractor personnel who access unclassified and/or classified information must be a U.S. Citizen.

Ref Item 11c: Contract performance will occur at the contractor’s facility listed in Item 6a, and at the following government locations: AFLCMC/WNY Robins AFB GA; 28 MXG, Ellsworth AFB SD; 7 MXG, Dyess AFB TX; 16th EWS, Eglin AFB FL; 419 FLTS, Edwards AFB CA, Nevada Test & Training Range (NTTR), Nellis AFB NV, Benefield Anechoic Facility, Edwards AFB, CA, and the Integrated Facility for Avionics Test (IFAST), Edwards AFB, CA. The following security classification guide applies to this effort: B-1 Security Classification Guide (SCG) dated 1 October 1997, Revision 4 - 10 October 2017.

The contractor requires access to classified source data up to and including TOP SECRET in support of the work effort. The applicable SCG will be provided under a separate cover. The contractor will reference the appropriate security classification guidance when generating or deriving classified material or hardware. All classified information received or generated will be properly stored and handled according to the markings on the material.

At the termination or expiration of the contract, the U.S. Government will be contacted to proper disposition instructions. All classified information received or generated is the property of the U.S. Government. Subsequent updates shall be provided by the Technical Point of Contact/Contracting Officer Representative/Contracting Officer or Security Representative (as applicable) as Government Furnished Information (GFI) and shall be executed by the Contractor without obligation to modify this DD Form 254; OPR: AFLCMC/WWD, Tinker AFB OK.

Ref Blk 11d: The contractor is required to provide adequate storage for classified hardware and materials to the level of SECRET which exceeds 2 cubic feet and is of size and quantity that it cannot be safeguarded in a General Service Administration (GSA) approved security container. There is no requirement for storage of classified TS/SCI information at the actual performance location of contractor's facility.

Ref Item 11d: The contractor is authorized to have SIPRNET connections as authorized by the government PM/COR.

Ref Block 11g: Access to DTIC can be requested through the DD Form 1540, Registration for Scientific and Technical Information Services or online at: http://www.dtic.mil/dtic/registration/registration.html.

Ref Blk 11.h. A COMSEC account will be established. Ref 10a.

Ref Item 11j: OPSEC requirements apply. See Statement of Work (SOW) for requirements.

Ref Block 11k: Go to https://www.ustranscom.mil/cmd/associated/dcd/ for Defense Courier Service points of contacts and guidance.

Ref. Blk 12. Sensitive Compartmented Information (SCI): Public release of SCI is NOT authorized.

Ref Blk 12. Special Access Program (SAP): Contractor is to submit requests through the Contracting Officer for OPSEC Program Manager review and public release authorization. Contractor is to submit requests through the Contracting Officer for OPSEC Program Manager review and public release authorization. The Contracting Officer will provide contractor with written approval/disapproval. Information requiring AF or DoD-level review will be reviewed by the unit's OPSEC Program Manager or Coordinator who will in-turn forward to the entry-level public affairs office through the AFIMSC Public Affairs Office to the Secretary of the Air Force, Office of Public Affairs, Security and Review Division (SAF/PAX), 1690 Air Force Pentagon, Washington DC 20330-1690.

AFLCMC/WNY, 235 Byron Street, Robins AFB, GA. 31098. Transmission of public release request via e-mail is not authorized.

Ref Blk 13a: The DD Form 254 will re reviewed at the end of the 5 yr basic ordering period of this contract on 30 Jan 2027.

The Contractor will notify the Government Contracting Activity and the Government Security Manager within 48 hours of any incident involving the actual or suspected compromise/loss of classified information to enable the Government to conduct immediate assessment of potential impact pending formal inquiry/investigation. Actual or suspected compromise of Covered Defense Information will be reported IAW DFARS Clause 252.204-7012.

Contractor will reference the appropriate security classification guidance when generating or deriving classified material or hardware. All classified information received or generated will be properly stored and handled according to the markings on the material. All classified information received or generated is the property of the U.S. Government. At the termination or expiration of the contract, the U.S.

Government will be contacted for proper disposition instructions. Contractor will abide by and shall apply derivative classification and markings governed by the current version of the following security classification guidance:

Classification Specification Guidance Review will be performed by the program/project manager.

Ref Block 18.f. Distribution will be made to the facilities referenced in Block 8.a. and 8.c. and to the following:

AFLCMC/WNY AFLCMC/WNE-IP

235 Byron St, Suite 19A 235 Byron St, Suite 19A Robins AFB, GA 31098-1813 Robins AFB, GA 31098-1813 ATTN: Rhonda Durham ATTN: Brandi Ellingham

AFLCMC/IP SSO Robins - AFLCMC/INGS 1801 Tenth St, Bldg 8, Rm 103 235 Byron St, Suite 19A Robins AFB, GA 31098-1813 Robins AFB, GA 31098-1813 WPAFB, OH 45433 ATTN: Michael Long ATTN: Sean Crone

Mr. Frank V. Jolly 21 IS/INS, SSO WPAFB OSI/PJ 2450 D Street, Bldg 2 Det 3 OL-A WPAFB OH

HQ Defense Security Service 27130 Telegraph Rd Quantico VA 22134

Applicable FARS and DFARS Clauses:

FAR Clause 52.204-2 Security Requirements FAR Clause 52-204-21 Basic Safeguarding of Covered Contractor Information DFARS Clause 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting DFARS Clause 252.204-7000 Disclosure of Information DFARS Clause 252.204.7009 Limitations on the Use or Disclosure of Third-Party Contractor Reported Cyber Incident Information

AN/ALQ-161A System Engineer (COR) rep: BRANDI ELLINGHAM, NH-03 Security Specialist rep: FRANK JOLLY, GS-14, DAF Chief, OSI PJ Det 3 OL-A Marietta, GA rep: MELVESE HARRIS, 78 ABW/IPD Servicing Security Activity

Robins AFB GA 31098 Enter address (include zip code).: 235 Byron Street, Suite 19A Robins AFB GA 31098