Exhibit_B_-_DD_FORM_254.pdf

CONTINUATION DD FORM 254:

13. SECURITY GUIDANCE:

Item 8.a: Performance will be at the contractor’s facility and at other contractor facilities and government installations that will be provided a the time of tasking.

Item 10.j.: Protect “For Official Use Only” information the same as company proprietary information and as specified in the NISPOM, Chapter 5, Section 5. Also see Attachment 6 for additional guidance. (Add Attachment 6).

Item 11.c.: The contractor requires access and storage to classified source data up to and including SECRET. Any extracts or use of such data requires the contractor to apply derivative classifications and markings consistent with the source documents and Executive Order 13526.

Use of “Multiple Sources” on the “Derived From” line necessitates compliance with Executive Order 13526, NISPOM paragraph 4-208, and use of bibliography. Classification, declassification, and markings will be in accordance with EO 13526 and Information Security Oversight Office (ISOO) Implementation Directive entitled “Classified National Security Information Directive No. 1”, effective 25 Jun 10.

Item 11.d.: The contractor must provide adequate storage for classified hardware and materials up to and including the SECRET level that exceeds two cubic feet and is of size and quantity that cannot be safeguarded in an approved GSA storage container.

Item 11.j.: The contractor must comply with any OPSEC requirement/clauses indicated in the contract. On Eglin AFB, follow the Eglin OPSEC Program guidelines as established by 96 TW/IPIP (OPSEC). The contractor will follow and adhere to OPSEC guidance when performance is conducted at other Air Force Installations.

Item 11.l.: Any transfer or processing of classified or sensitive information via electronic methods (e.g., facsimile, telemetry, voice, computer) must be protected by implementing an appropriate combination of countermeasures such as encryption devices and sound practices and procedures. For performance on Eglin AFB, the specific countermeasures used must be coordinated by the Project Manager for approval through the 96 CS/SCXSI, 102 North 2nd Street Suite 106, Eglin AFB FL 32542-6829. For performance on other government installations, coordination by the Project Manager with the appropriate communications activity is required.

SENSITIVE INFORMATION:

Sensitive information is information that if lost, misused, compromised or accessed by unauthorized persons could adversely affect US national interest, the conduct of DoD programs, or the privacy of DoD personnel. It comes in many forms; personal data under the Privacy Act, personnel records, privileged data (chaplain and judge advocate records), investigative data, scientific and technical information (STINFO), export controlled data (critical technologies), proprietary data, or For Official Use Only (FOUO) data. Sensitive information meets the criteria for exemption from mandatory public disclosure under the Freedom of Information Act (FOIA).

Sensitive information must be protected. During working hours, reasonable steps should be taken to minimize risk of access by unauthorized personnel. After working hours, sensitive information can be stored in unlocked containers, desks or cabinets if Government or Government-contract building security is provided. If Government or Government-contract building security is not provided after working hours sensitive information shall be stored in locked desks, file cabinets, book cases, locked rooms, or similar items. Storage in a safe designed to secure classified information is not required. Sensitive records may be destroyed by any method that will prevent disclosure of contents or reconstruction of the document. For paper items, strip shredding is recommended with 3/16” being the maximum strip width.

Item 15 (Con’t): When performance of contract is conducted at other Air Force Installations the contractor will follow the guidance from the Installation Information Protection Office to include Government inspection oversight.

EMISSIONS SECURITY (AKA TEMPEST) REQUIREMENTS

1. The contractor shall ensure that emissions security (EMSEC) conditions related to this contract are minimized.

2. When government furnished or contractor owned Information Systems (IS) are used on government installations EMSEC (aka TEMPEST) countermeasures will be applied by the government supporting activity. Classified processing shall not begin until accreditation is completed by appropriate government personnel.

3. The contractor is required to provide copies of the written approval/authorization to appropriate government personnel upon request.

4. Problems encountered in obtaining the written approval/authorization for classified processing should be brought to the attention of the Government Contracting Activity (GCA) and Government Program Manager.

5. The EMSEC authority at Eglin AFB is 96 CS/SCXSI, located in Building 249, Room 106.

6. Use of any telecommunications systems or devices (on Eglin AFB and range facilities) to include, but not limited to; government issued cellular phones, hand-held radios, beepers/pagers, cordless telephones, cordless microphones, facsimile machines and computers constitutes consent to monitoring in accordance with AFI 10-712.

ATTACHMENT 6

FOR OFFICIAL USE ONLY (FOUO) ADDENDUM

The following procedures will be used to protect FOR OFFICIAL USE ONLY (FOUO) material:

1. HANDLING. Access to FOUO material shall be limited to those employees needing the material to do their jobs. The FOUO marking is assigned to material created by a DOD user agency. FOUO is not a classification, but requires extra precaution to ensure it is not released to the public.

2. MARKING. An unclassified document containing FOUO information shall be marked “For Official Use Only” at the bottom on the outside of the front cover (if any), on each page containing FOUO information, and on the outside of the back cover (if any). Each paragraph containing FOUO information shall be marked as such.

a. Within a classified document, an individual page that contains both FOUO and classified information shall be marked at the top and bottom with the highest security classification of information appearing on the page. Individual paragraphs shall be marked at the appropriate classification level, as well as unclassified or FOUO, as appropriate.

b. Within a classified document, an individual page that contains FOUO information but no classified information shall be marked “For Official Use Only’ at the top and bottom of the page, as well as each paragraph that contains FOUO information.

c. If a classified document also contains FOUO material, or if the classified material becomes FOUO when declassified, place the following statement on the bottom of the cover or the first page under the classification marking: “NOTE: If declassified, review the document to make sure material is not FOUO and not exempt under DOD Regulation 5400.7/Air Force Supplement, 24 June 2002 before public release.”

d. Mark other records such as computer print outs, photographs, films, tapes, or slides “FOR OFFICIAL USE ONLY” so the receiver or viewer knows the record contains FOUO material.

e. Mark each part of a message that contains FOUO material. Unclassified messages containing FOUO material must show the abbreviation “FOUO” before the text begins.

f. Ensure documents that transmit FOUO material call attention to any FOUO attachments.

g. FOUO material released to a contractor by a DOD user agency must have the following statement on the front page or cover: “THIS DOCUMENT CONTAINS MATERIAL EXEMPT

FROM MANDATORY DISCLOSURE UNDER THE FREEDOM OF INFORMATION ACT.

EXEMPTION(S) _________APPLY.”

3. STORAGE. During normal duty hours, place FOUO material in an out-of-sight location, if your work area is accessible to persons who do not have a valid need for the material. After normal duty hours, store FOUO material to prevent unauthorized access. File with other unclassified records in unlocked files or desks when internal building security is provided.

When there is no internal security, locked buildings or rooms usually provide adequate after-hours protection. For additional protection, store FOUO material in locked containers such as file cabinets, desks, or bookcases. Expenditure of funds for security container or closed areas solely for the protection of FOUO material is prohibited.

4. TRANSPORTING FOUO INFORMATION. Records containing FOUO information shall be transported in a manner that prevents disclosure of the contents. When not co-mingled with classified information, FOUO information may be sent via first-class mail or parcel post. Bulk shipments, such as distributions of FOUO Directives or testing materials, that otherwise qualify under postal regulations, may be sent by fourth-class mail.

5. RELEASE. FOUO material shall not be released outside the contractor’s facility except to representatives of the DOD.

6. DESTRUCTION. When no longer needed, FOUO material shall be disposed of by a method that precludes its disclosure to unauthorized individuals.