Atch 2 WICS-II (DD254) 29 Jan 20.pdf

Please wait...

If this message is not eventually replaced by the proper contents of the document, your PDF viewer may not be able to display this type of document.

You can upgrade to the latest version of Adobe Reader for Windows®, Mac, or Linux® by visiting http://www.adobe.com/go/reader_download.

For more assistance with Adobe Reader visit http://www.adobe.com/go/acrreader.

Windows is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Mac is a trademark of Apple Inc., registered in the United States and other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.

DRAFT

SAMPLE

PREVIOUS EDITION IS OBSOLETE.

Page of

DD FORM 254, MAY 2019

NEEDS DD67

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the National Industrial Security Program (NISP) apply to all security aspects of this effort involving classified information.)

OMB No. 0704-0567 OMB approval expires:

20220531 The public reporting burden for this collection of information, 0704-0567, is estimated to average 70 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, at whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

RETURN COMPLETED FORM AS DIRECTED IN THE INSTRUCTIONS.

1. CLEARANCE AND SAFEGUARDING

2. THIS SPECIFICATION IS FOR: (X and complete as applicable.)

3. THIS SPECIFICATION IS: (X and complete as applicable.)

a. ORIGINAL (Complete date in all cases.)

b. REVISED (Supersedes all previous specifications.)

4. IS THIS A FOLLOW-ON CONTRACT?

If yes, complete the following:

Classified material received or generated under

5. IS THIS A FINAL DD FORM 254?

If yes, complete the following:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

7. SUBCONTRACTOR(S) (Click button if you choose to add or list the subcontractors -- but will still require a separate DD Form 254 issued by a prime contractor to each subcontractor)

8. ACTUAL PERFORMANCE (Click button to add more locations.)

10. CONTRACTOR WILL REQUIRE ACCESS TO: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

e. NATIONAL INTELLIGENCE INFORMATION:

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. See instructions. Provide details in Blocks 13 or 14 as set forth in the instructions.)

12. PUBLIC RELEASE

Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the National Industrial Security Program Operating Manual (NISPOM) or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified here with at least office and phone contact information and if available, an e-mail address. (See instructions)

13. SECURITY GUIDANCE

The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended.

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. The field will expand as text is added. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. Also allows for up to 6 internal reviewers to digitally sign. See instructions for additional guidance or use of the fillable PDF.)

14. ADDITIONAL SECURITY REQUIREMENTS

Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the CSO. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

15. INSPECTIONS

Elements of this contract are outside the inspection responsibility of the CSO.

If Yes, explain and identify specific areas and government activity responsible for inspections. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

17. CERTIFICATION AND SIGNATURES

Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. Upon digitally signing Item 17h, no changes can be made as the form will be locked.

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICIAL

9.0.0.2.20120627.2.874785 DD 254, DoD Contract Security Classification Specification whs.mc-alex.esd.mbx.formswebmaster@mail.mil

WHS

List of Attachments (All Files Must be Attached Prior to Signing, i.e., for any digital signature on the form)

210 Falcon Parkway, Ste 2101 Schriever AFB CO 80912 719-567-5698 CSO: DSS Irving Field Office (IOFSI) 2250 West John Carpenter Freeway, Suite 450 Irving, TX 75063-2764 469-329-6367 DSS.IrvingFieldOffice@mail.mil CSO: DSS Philadelphia Field Office (IOFNP) 2 International Plaze - Ste 340 Philadelphia, PA 19113 610-537-1060

CSO: 75 ABW/IP

7981 Georgia St Hill AFB UT 84056-5204 801-586-1204

CSO: 21 SW/IP

135 Dover St, Ste 1055 Peterson AFB, CO 719-556-5287

CSO: 21 SW/IP

135 Dover St, Ste 1055 Peterson AFB, CO 719-556-5287

CSO: USAFA/IP

2360 Vandenberg Dr, Ste 1C4A

USAFA, CO 80840

719-333-6342

CSO: 460 SW/IP

18300 E. Crested Butte Ave Buckley AFB, CO 80011 720-847-5086

CSO: 90 MW/IP

1105 Wyoming Ave F. E. Warren AFB, WY 82005 307-773-4611

CSO: 341 MW/IP

7410 Flightline Dr Malmstrom AFB, MT 59402 406-731-6477 CSO: Space and Missile System Center Los Angeles AFB, CA 310-653-1318

CSO: 78 ABW/IP

985 Macon St Robbins AFB, GA 31098 478-222-1977

CSO: 45 SW/IP

Bldg 423, Rm S-200 Patrick AFB, FL 32925 321-494-7685

CSO: 66 ABG/IP

102 Barksdale St Hanscom AFB, MA 01731 781-225-6005

CSO: 319 FW/IP

Grand Forks AFB, ND 701-747-3110

CSO: 354 FW/IP

Eielson AFB, AK 907-377-6097 354fw.ip@us.af.mil CSO: POC: Charles Mayes Phone: 540-653-0500 CSO: NCTS FE DET Diego Garcia

KBR-DG LLC, ANNEX 3

POC: James Lockett Address: PSC 466 Box 60, FPO AP 96595 Office symbol; KBR-DG

CSO: 96 TW/IP

101 West D Ave, Ste 14 Eglin AFB, FL 32542 850-882-5823 CSO: Location: Fylingsdale RAK, United Kingdom POC: James Cason Phone: 94-(314)238-0600 Address: 21 OG-OLA RAF Fylingsdale unit 8406 APO

CSO: 15 WG/IP

Hickam AFB HI 315-449-0828, Ext 3 CSO: Defense Security Service 3 Edgewater Dr, Suite 204 Norwood, MA 02062

CSO: 55 WG/IP

205 Looking Glass Ave Offutt AFB, NE 68113 402-294-5252 CSO: Location: Site R POC: Jeremy Cook Phone: 94-988-3517 (CA)

DRSN: 80-452-7583

Address: 114 Signal Battalion Raven Rock Mountain Com CSO: Location: Socorro AS, NM POC: Dane Holt Phone: 94-349-4134 Address: P.O. Box 486 San Antonio, NM 87832 Office Symbol: GEODSS IOTH A.F.

CSO: 21 SW/IP

135 Dover St, Ste 1055 Peterson AFB, CO 719-556-5287 CSO: Location: Kwajalein AS POC: Suzanne (Security Manager) Phone: 94-254-5130

Oklahoma City, OK Location: Enterprise Computing Center Mechanicsburg, PA

Westford, MA

The WICS-II contract provides services required to operate, maintain, and logistically support 50th Space Wing (50 SW) information and communications systems. The 50 SW supports multiple programs and resources under the auspices of Air Force Space Command (AFSPC).

Ref 10d: Access to Formerly Restricted Data requires a final U.S. Government clearance at the appropriate level.

Ref 10e(1)&(2):

1. Name, organization, telephone number and address of the Contract Officer Representative (COR) for the SCI portion of this contract is:

Name/Office/ Symbol/Phone

2. All DD Form 254s prepared for subcontracts involving access to SCI under this contract must be forwarded to the COR for approval and then to (SSO, location) for review and concurrence prior to award of the contract. Inquiries pertaining to classification guidance on SCI will be directed to the COR listed in para. 2 above. SCI security management issues shall be directed to SSO SAFB, 300 O’Malley Ave. Suite #26, Schriever AFB, CO 80912, DSN: 560-4990, Com: (719) 560-4990.

3. SCI access is subject to U.S. Government review and approval as outlined in the aforementioned SCI security guidance. Upon completion or cancellation of the contract, the SSO/CSSO will debrief all personnel not required for contract closeout and those positions will be disestablished.

4. Names of contractor personnel requiring access to SCI and justification for SCI access will be submitted for coordination and action to SSO SAFB, Schriever AFB after the COR’s approval/concurrence. Upon receipt of written approval from the COR, the Facility Security Officer (FSO) and/or Contractor Special Security Officer (CSSO) may submit the necessary forms to the Defense Security Service (DSS) for a Single Scope Background Investigation (SSBI) for those personnel nominated for SCI in accordance with the National Industrial Security Program Operating Manual (NISPOM).

5. The SSO/CSSO can grant access to only those who possess the necessary security clearance and who are actually providing services under the contract. Further dissemination to other contractors, sub-contractors, other government agencies, private individuals or organizations is prohibited unless authorized in writing by the releasing agency.

6. SCI materials furnished in support of this contract remains the property of the DoD department or command that released it. Upon completion or cancellation of the contract, all SCI materials furnished will be returned to the direct custody of the originator of the materials.

7. Classified foreign intelligence materials must not be released to foreign nationals or immigrant aliens whether or not they are also consultants, U.S. contractors, or employees of the contractor regardless of the level of their security clearance, except with advance written permission from the originator.

8. Contractor personnel must maintain accountability for all intelligence (to include foreign intelligence) materials released to their custody.

9. Contractor personnel must not reproduce classified foreign intelligence without advance approval of the releasing agency. If permission is granted, each copy will be controlled in the same manner as the original. The CSSO must not destroy any classified foreign intelligence without advance approval of the releasing agency.

10. A SCIF meeting the physical security requirements in DCID 6/9 or ICD 705 is required for this contracting effort. All SCI used for this contract shall be stored, handled, and maintained in an accredited SCIF, be it the local contractor SCIF or similarly SCI accredited facilities used by the contractor. Address of the SCIF for contract execution:

• (Office Symbol and Company Name, street address, Bldg #, City, State, and Zip Code.

• Name and Telephone number of FSO/CSSO.

12. Visits. The contractor will submit the written request for SCI visit certifications through the COR for approval of the visit. The certification must arrive at SSO SAFB at least three working days prior to the visit.

13. Information assurance and electronic processing; information security (computer) and network connectivity require accreditation of the equipment connectivity.

14. The prime contractor is responsible for preparing DD Form 254s for SCI access of their subcontractors. Completed subcontractor DD 254s are provided to the supporting SSO for review and validation. Validation consists of ensuring SCI security requirements mirror that of the Prime Contractor’s DD 254. All attachments and addendums should be part of the subcontractor’s DD 254 as well. Supporting SSO will submit the reviewed and validated DD 254 to the MAJCOM SSO (listed on the Prime Contract) for approval.

Ref 10j: Controlled Unclassified Information (CUI) provided under this contract shall be managed and safeguarded IAW DoDM 5200.01-V4, DoD Information Security Program: Controlled Unclassified Information (CUI). NOTE: DoDM 5200.01-V4 states that DFARs clause 252.204-7000 must be included in contracts that require the contractor to have access to or receive, store or generate CUI.

Ref 11c: Contractor will reference the appropriate security classification guidance when generating or deriving classified material or hardware. All classified information received or generated will be properly stored and handled according to the markings on the material. All classified information received or generated is the property of the U.S. government. At the termination or expiration of this contract, the U.S. government will be contacted for proper disposition instructions. The contractor will abide by the following security classification guidance: (LIST unclassified titles or identities and provide security classification guide(s) either on the contract package or under separate cover. If under separate cover, add “Provided under separate cover” following the listed class guide(s).)

-DoD Air Force Program Executive Officer of Space (AFPGO/SV) -GBS Security Classification Guide, 29 April 2007 -As Applicable Cyber Mission System Security Classification Guides (NEED TO LIST SPECIFIC SCG) -As Applicable USCYBERCOM Security Classification Guides (NEED TO LIST SPECIFIC SCG) -As Applicable 50 SW Space Security Classification Guides (NEED TO LIST SPECIFIC SCG) -Milstar/Advanced Extremely High Frequency (AEHF), Security Classification/Declassification Guide, Revision A., 14 August 2009 (FOUO) -Wideband Satellite Communications (SATCOM) Operations, Security Classification Guide, 19 June 2015 (FOUO) -SIGINT Program Classification Guide TK Version (1 December 2000) -Signals Intelligence Security Regulations (SISR) -Guidance for the classification, compartmentation, releasability, and sanitization of information from and about signals intelligence (SIGINT) activities. (May 1999)

Ref 11d: The Government will provide the contractor with adequate safeguarding capability for up to TOP SECRET/SCI material and hardware which is of the size which or quantity that cannot be safeguarded in an approved storage container.

Ref 11g: The sponsoring GCA must submit the DD Form 1540, “Registration for Scientific and Technical Information Services” to DTIC on behalf of the contractor. For subcontractors, the prime contractor submits the DD Form 2540, “Registration for Scientific and Technical Information Services” with the GCA verifying the need to know.

Ref 11h: The government will provide all appropriate oversight for the contractor’s access and maintenance of accountable COMSEC material. The contractor will require COMSEC accounts and sub-accounts (or Local Elements) at locations specified in the WICS-II Performance Work Statement (PWS).

Ref 11j: The contractor shall comply with OPSEC requirements referencing AFI 10-701 Operations Security (OPSEC) and AFI 35-102 Security and Policy Review Process for guidance and/or direction. The contractor shall adhere to OPSEC guidance and be familiar with the organization’s/weapon’s system Critical Information and Indicator List (CIIL)/Critical Information List (CIL) and ensure indicators & vulnerabilities are protected from disclosure per organization’s/weapon’s system countermeasures/measures. The contractor shall complete OPSEC in-processing/initial training to include follow on OPSEC training such as event-driven and annual OPSEC training as required. OPSEC training will be provided by the respective AFSPC unit OPSEC Program Manager (PM)/Planner/Coordinator. To obtain OPSEC training or ask OPSEC related questions contact the respective unit OPSEC PM/Planner/Coordinator. The AFSPC OPSEC PM/Planner can be reached over respective automated-information systems. The following link contains OPSEC POCs for each unit: https://cs2.eis.af.mil/sites/12638/IO/Lists/AFSPC%20OPSEC%20PMs%20and%20Signature%20Managers/Web%20View.aspx. The contractor is not responsible to develop an OPSEC plan nor do they conduct OPSEC training.

Ref 11l: DFARs clause 252.204-7000, DISCLOSURE OF INFORMATION (OCT 2016)

(a) The Contractor shall not release to anyone outside the Contractor's organization any unclassified information, regardless of medium (e.g., film, tape, document), pertaining to any part of this contract or any program related to this contract, unless—

(1) The Contracting Officer has given prior written approval;

(2) The information is otherwise in the public domain before the date of release; or

(3) The information results from or arises during the performance of a project that involves no covered defense information (as defined in the clause at DFARS 252.204-7012) and has been scoped and negotiated by the contracting activity with the contractor and research performer and determined in writing by the contracting officer to be fundamental research (which by definition cannot involve any covered defense information), in accordance with National Security Decision Directive 189, National Policy on the Transfer of Scientific, Technical and Engineering Information, in effect on the date of contract award and the Under Secretary of Defense (Acquisition, Technology, and Logistics) memoranda on Fundamental Research, dated May 24, 2010, and on Contracted Fundamental Research, dated June 26, 2008 (available at DFARS PGI 204.4).

(b) Requests for approval under paragraph (a)(1) shall identify the specific information to be released, the medium to be used, and the purpose for the release. The Contractor shall submit its request to the Contracting Officer at least 10 business days before the proposed date for release.

(c) The Contractor agrees to include a similar requirement, including this paragraph (c), in each subcontract under this contract. Subcontractors shall submit requests for authorization to release through the prime contractor to the Contracting Officer.

The following guidance and subsequent changes will be used in the performance of this contract:

-AFI 10-701 Operations Security (OPSEC) Original document is 8 Jun 11 and AFGM 2018-01 is dated 30 Jul 18 30 Jul18 -AFI 16-1404 Air Force Information Security Program 29-May-15 -AFI 16-1406 Air Force Industrial Security Program 25 Aug 15, Incorporating C2, 18 Oct 18 -AFMAN 17-1302-O Communications Security (COMSEC) Operations (and AFMAN17-1302-O AFGM2018-01, 15 Feb 18) 3-Feb-17 -CJCSM 6510.01B Cyber Incident Handling Program 10-Jul-12 -DoD 5220.22-M National Industrial Security Program Operating Manual 28 Feb 06, Inc Change 2, 18 May 16 -DoDM 5200.01 V1 DoD Information Security Program - Overview, Classification, And Declassification 24-Feb-12, Incorporating C1, 4 May 18 -DoDM 5200.01 V2 DoD Information Security Program - Marking Of Classified Information 24-Feb-12, Incorporating C3, 14 May 19 -DoDM 5200.01 V3 DoD Information Security Program - Protection Of Classified Information 24-Feb-12, Incorporating C2, 19 Mar 13 -DoDM 5200.01 V4 DoD Information Security Program - Controlled Unclassified Information (CUI) 24-Feb-12, Incorporating C1, 9 May 18 -DoDM 5200.02_AFMAN 16-1405 Air Force Personnel Security Program 1 Aug 2018 -DoDM 5220.00, Vol 2 National Industrial Security Program: Industrial Security Procedures for Government Activities 1 Aug 18 -SEAD 3 Reporting Requirements for Personnel With Access to Classified Information or Who Hold a Sensitive Position 12 Jun 17 -SEAD 4 National Security Adjudicative Guidelines 8 Jun 17 -SEAD 6 Continuous Evaluation 12 Jan 18 -DCID 1/20 - Security Policy Concerning Travel and Assignment of Personnel with Access to SCI (29 DEC 91) -DCID 6/1 - Security Policy for Sensitive Compartmented Information and Security PolicyManual [formerly DCID 1/19] (1 MAR 95) -ICD 301 – National Open Source Enterprise [formerly DCID 1/7] (11 JUL 06) -ICD 704 - Personnel Security Standards and Procedures Governing Eligibility for Access to Sensitive Compartmented Information and Other Controlled Access Program Information [formerly DCID 6/4] (1 OCT 08) -ICD 705 – Sensitive Compartmented Information Facilities [formerly DCID 6/9] (5 MAY 11) -ICD 503 – Information Systems (15 September 2008) -ICD 704 – Personnel Security Standards and Procedures for Access to Sensitive Compartmented Information and other Controlled Access Program Information (2 October 2008) -ICD 705- Sensitive Compartmented Information Facilities (5 May 2011) -DoDM 5105.21, Vol 1 – Sensitive Compartmented Information (SCI) Administrative Security Manual: Administration of Information and Information Systems Security (OCT 12) -DoDM 5105.21, Vol 2 – Sensitive Compartmented Information (SCI) Administrative Security Manual: Administration of Physical Security, Visitor Control, and Technical Security (OCT 12) -DoDM 5105.21, Vol 3 – Sensitive Compartmented Information (SCI) Administrative Security Manual: Administration of Personnel Security, Industrial Security, and Special Activities (OCT 12) -AFI 14-302 – Control, Protection, and Dissemination of Sensitive Compartmented Information (18 JAN 94) -AFI 14-303 – Release of Intelligence to U.S. Contractors (1 APR 99) -AFMAN 14-304 -The Security Use, and Dissemination of Sensitive Compartmented Security Information (23 December 2016) -AFI 14-303 - Release of Intelligence to U.S. Contractors (1 April 1999) -E.O. 12333 - United States Intelligence Activities (8 December 1 981) (Amended 2008) -E.O. 12958 - Classified National Security Information (17 April 1995) (Amended 2003)

Reference Item 15: This contract requires access to SCI. If the contractor has established a SCIF, DIA and its designees are responsible for all inspections of the contractor SCIF and SCI security management program for ensuring compliance with all SCI security regulations and policies. If a new SCIF must be established in accordance with this contracting effort, permission to build/accredit a SCIF must be requested through the COR and forwarded to the SSO SAFB. Special Security Officers reserve the right to conduct program reviews of AF SCI materials and SCI program management to ensure the protection of AF equities.

See SCI Release of Intelligence Information for additional security requirements. Prior approval of the contracting activity is required for subcontracting. Access to intelligence information requires special briefing and a final US Government clearance at an appropriate level.

Schriever AFB, CO 80912 Address: 210 Falcon Parkway, Schriever AFB, CO 80912