Attachment_3_-_DD254_COM-F.doc

DEPARTMENT OF DEFENSE

1. CLEARANCE AND SAFEGUARDING

SECRET

(The requirements of the DoD Industrial Security Manual apply to all aspects of this effort)

b. LEVEL OF SAFEGUARDING REQUIRED

N/A

b. SUBCONTRACT NUMBER

b. REVISED (Supersedes all previous specs) Revision No.

4. IS THIS A FOLLOW-ON CONTRACT?

YES

NO. If Yes complete the following

Classified material received or generated under _________________________ (Preceding Contract Number) is transferred to this follow-on contract

5. IS THIS A FINAL DD FORM 254?

In response to the contractor's request dated , retention of the identified classified material is authorized for the period of .

6. CONTRACTOR (Include Commercial and Government Entity ( CAGE) Code)

7. SUBCONTRACTOR

8. ACTUAL PERFORMANCE

507 Symington Drive, Bldg P40N

Scott AFB IL 62258 618-229-0957

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

The contractor shall provide operations and maintenance including help desk, system administration, network administration, database administration, web page support, and configuration management in support of the AMC Command and Control (C2), In-Transit Visibility (ITV), and business systems.

a. COMMUNICATIONS SECURITY (COMSEC)

INFORMATION

b. RESTRICTED DATA

X

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION

X

d. FORMERLY RESTRICTED DATA:

e. INTELLIGENCE INFORMATION:

e. PERFORM SERVICES ONLY

X

(1) Sensitive Compartmented Information (SCI)

X

(2) Non-SCI

X

f. SPECIAL ACCESS INFORMATION

X

i. HAVE A TEMPEST REQUIREMENT

X

h. FOREIGN GOVERNMENT INFORMATION

i. LIMITED DISSEMINATION INFORMATION

X

l. OTHER (Specify) See Blk 13 X

k. OTHER Specify)

X

DD Form 254, DEC 1999

Previous editions are obsolete

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public release shall be submitted for approval prior to release

HQ AMC/PA

Scott AFB IL 62225 and OPSEC Manager/Office to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review. *In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes: to challenge the guidance or classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any document/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.

1a/b – (1) The contractor shall NOT be authorized to receive, handle, store any classified material, e.g., data (hardcopy or electronic) at any contractor owned or leased facilities or produce/manufacture any classified hardware at any contractor owned/leased facility under this contract. Work with any classified material or hardware will take place only at Government facilities or where directed by the PMO.

(2) The contractor shall provide individuals with the appropriate level of security clearances and within the limitations cited in the DD Form 254, to perform the services required by the contract.

(3) The contractor, within the confines of federal government facilities, shall provide the necessary policies, procedures and oversight to comply with the security requirements of this contract.

(4) Contractor employees, cleared at the appropriate levels, may require access to secure areas, as well as, secure networks on US Government installations. Need-to-know will be required at all times. Safeguarding of materials will be secured only at US Government installations. Access will be authorized to personnel who possess the clearance and need-to-know requirement. Under this contract no safeguarding will take place at the contractor’s facilities. Contractor personnel will be under the security policies and procedures of the US Government installation cognizant security office.

8c – On Scott AFB, oversight will be conducted by HQ AMC/A7SA (618) 229-0957/0998. HQ AMC/A7SA will retain a copy of the DD254 in their files.

10g – Special briefings are required for access to NATO IAW AFI 31-406, Applying NATO Protection Standards. Prior approval of the contracting activity is required for subcontracting. Access to classified NATO information requires a final U.S. Government clearance at the appropriate level.

10j – For Official Use Only (FOUO) information provided under this contract shall be managed and safeguarded IAW DoD 5400.7-R, Chapter 4, DoD Freedom of Information Act (FOIA) 11a – Releasing contractor or Government activity will furnish complete classification guidance for the service to be performed or information provided.

11b – Selected contractor personnel performing services in support of the contract will be required to have SECRET clearance as required by their position for building access requirements and may be receiving or storing classified material at work locations other than the contractor’s facility. 11b is marked YES to note that during the performance of the contract, at locations other than the contractor’s facility, contractor personnel may receive but will not generate classified documents.

11f – Additional CONUS/OCONUS locations worldwide will be stipulated by the Government Task Lead.

11j – OPSEC is an analytic process that identifies, and mitigates indicators of U.S. intentions, capabilities, operations, and activities. In compliance with DoD Operations Security Program Directive (DoD Directive 5205.02 and DoDM 5205.02-M), DoD OPSEC requirements; OPSEC measures shall be employed to deny indicators to adversaries that reveal critical, or classified information about DoD missions and functions. At a minimum, within 90 days of employment, then annually thereafter, personnel with access to Government networks under this contract shall receive recurring DoD ADLS Information Protection training (ZZ1330078 - incorporates and replaces OPSEC course ZZ133086) and Information Assurance Awareness training (ZZ133098). To augment provided training, at initial employment and annually thereafter, the company shall provide a briefing, oral or written, summarizing contract specific OPSEC awareness information.

11l – (1) Classified Defense Information may be encountered during normal conduct of the contract and will be protected using policy and guidance of DoD 5220.22M, the National Industrial Security Program Operating Manual (NISPOM), Chapter 5, and the NISPOM Supplement. The contractor will enter into a Visitor Group Security Agreement (VGSA) and fall under the information security program of the using organization at Scott AFB.

(2) Licensing network users and certifying network professionals shall be IAW AFI 33-115, Volume 2 implementing DoD 8570.01-M requirements.

Contract Period of Performance is a 3-month phase-in period from 1 Jun 14 – 31 Aug 14, a 1-month base period from 1 Sep 14 – 30 Sep 14, four 1-year option periods from 1 Oct 14 – 30 Sep 18, an 8-month option period from 1 Oct 18 – 31 May 19 for a total of 60 months.

No

Visitor Group contractors are required to enter into a security agreement with the host base Information Protection Office (IPO). Provide the information requested by the Notification of Government Security Activity Clause, AFFARS 5352.204.9000, and Visitor Group Security Agreements Clause. Visitor Groups will safeguard all collateral classified information IAW DoD 5200.1-R, Information Security Program; AFI 31-401, Information Security Program Management; AFI 31-601, Industrial Security Program Management, and other directives deemed necessary by the servicing IPO. Prior approval of the contracting activity is required for subcontracting.

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. (If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.

No

When contractors are designated as Visitor Groups on Air Force installations, Industrial Security Reviews for collateral classified information will be conducted by the servicing IPO. Defense Security Service retains cognizance over the cleared contractor facility.

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL Jennifer Gasparich

b. TITLE Contracting Officer

c. TELEPHONE (Include Area Code)

(618) 256-9978

HQ AMC/A7KQA

507 Symington Drive, Room W202

Scott AFB, IL 62225-5022

e. SIGNATURE

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

DD Form 254 (BACK), DEC 1999