DD_254.pdf

1. CLEARANCE AND SAFEGUARDING

DEPARTMENT OF DEFENSE a. FAC ILITY CLEARANCE REQU IRED

CONTRACT SECURITY CLASSIFICATION SPECIFICATION SECRET

(The requirements of the DoD Industrial Security Manual apply

b. LEVEL OF SAFEGUARDING REQUIRED to all security aspects of this effort.)

SECRET

2. THIS SPECIFICATION IS FOR: (X and complete as applicable) 3. THIS SPECIFICATION IS: (X and complete as applicable)

a. PRIME CONTRACT NUMBER DATE (YYYYMMDD)

a. ORIGINAL (Complete date in all cases)

b. SUBCONTRACT NUMBER b. REVISED I REVISION NO. DATE (YYYYMMDD) (Supersedes all previous specs)

X

c. SOLICITATION OR OTHER NUMBER DUE DATE (YYYYMMDD) DATE (YYYYMMDD)

FA5215-l3-R-7008 c. FINAL (Complete Item 5 in all cases)

4. IS THIS A FOLLOW-ON CONTRACT? L__j YES L_jNO. If Yes , complete the following:

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DO FORM 254? L_jYES L_jNO. If Yes, complete the following :

In response to the contractor's request dated , retention of the classified materi al is authorized for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE b. CAGE COD E c. COGNIZANT SECU RITY OFFICE (Name. Address, and Zip Code)

Cubic Defense Applications, Inc. 94987 Defense Security Service 9333 Balboa Avenue 16885 W. Bernardo Dr. , Suite 150 San Diego, CA 92123 San Diego, CA 92127-1619

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

8. ACTUALPERFORMANCE

a. LOCATION b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

See block 13 and attachment 1 N/A

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

Misawa/Osan/Kunsan/Kadena Instrumentation System (MOKKJTS) Sustainment

10. CONTRACTOR WILL REQUIRE ACCESS TO: YES NO 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION X a. ~~~~~Ktf6~·J°FXbf'C/y{fl\'~ ).NJ8-5rR'lJ~0E~~~b~itMNOTHER X

b. RESTRICTED DATA X b. RECEIVE CLASSIFIED DOCUMENTS ON LY X

c. CRITICAL NUCLEAR V\£APON DESIGN INFORMATION X c. RECEIVE AND GENERATE CLASSIFIED MATERIAL X

d. FORMERLY RESTRICTED DATA X d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE X

e. INTELLIGENCE INFORMATION e. PERFORM SERVICES ONLY X

(1) Sensitive Compartmented Information (SCI) X r. ~d~-f§~Fc~. mup~~~~//)1~~ ,\_tffD0fRMu"s1J-q.~R~rf§~~~JHE us· X

(2) Non-SCI X g. ~Mf!J~fb't~9:,~00Y~~~~~Sb~~~g~.p~~tN~NT~~~rl~AL INFORMATION X

f. SPECIAL ACCESS INFORMATION X h. REQUIRE A COM SEC ACCOUNT X

g. NATO INFORMATION X i. HAVE TEMPEST REQUIREMENTS X

h. FOREIGN GOVERNMENT INFORMATION X j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS X

i. LIMITED DISSEMINATION INFORMATION X k_ BE AUTHORIZED TO USE THE DEFENSE COURIER SERIIICE X j . FOR OFFICIAL USE ONLY INFORMATION X I. OTHER (Specify) X

k. OTHER (Specify! Al Computer

DO FORM 254, DEC 1999 PREVIOUS EDITION IS OBSOLETE. Adobe Professional 7.0

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority . Proposed public releases shall be submitted for approval prior to release D Direct [KJ Through (Specify)

HQ PACAF/A3XR, JBPH-H, Hl. See Attachment I for additional instructions.

to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

Ref 8a. In addition to the location in block 6a, contract performance will be conducted at Misawa AB, Japan, Osan AB, Korea, Kunsan AB, Korea, Kadena AB, Japan, and all TOY locations as required by the task.

Ref 1 Oa. COM SEC materials/information may not be released to DOD contractors without Air Force Cryptological Support Center

(AFCSC) approval. Contractor must forward COM SEC mater ial/ information to the COM SEC officer through the program office.

The contractor is governed by the NSA Control of Communications Security (COMSEC) Material. NSA/CSS Policy Manual 3/16is the control and protection of COM SEC material/information. Access to COM SEC materia l by personnel is restricted to U.S.

citizens holding final U.S. Government clearances.

Ref 10e.2. See Attachment 2 for guidance.

Ref lOf. SAP contract performance is limited to approved government facilities only. See Attachment I for additional guidance.

Ref lOj. See attachment 3 regarding FOUO guidance.

Billy Smith, Civ, OAF

MOKKITS Functional Director

HQ PACAF/A3XR, JBPH-H, HI

Lee A. Ray, Civ, OAF

PACAF GSSO

HQ PACAF/A3XZ, JBPH-H, HI

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract. .. ~ Yes L_j No (If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

DoD 5220.22-M National Industrial Security Program Operating Manual (NISPOM); Joint Air Force, Army and Navy Manual, JAFAN 6/0, applicable Program Security Directives (PSD), and Security Classification Guides (SCG). See attachment I for additional SAP guidance.

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. -~Yes • L_j No (If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

Defense Security Service (DSS) retains security oversight responsibility for all Non-SCI and Non-SAP materials released or developed under this contract off government installations. The DSS is relieved of collateral oversight for work performed within a SAP Facility. The Wing Commander for the installation will retain cognizance for collateral information on the installation. SEE ATTACHMENT I for additional SAP guidance.

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the class ified information to be released or generated under this classified effort. A ll questions shall be referred to t he official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL b. TITLE c. TELEPHONE (Include Area Code)

James K. Watanabe

d. ADDRESS (Include Zip Code)

90 G. Street, Bldg 120 I

JBPH-H, HI 96853-5230

e. SIGNATURE

DD FORM 254 (BACK), DEC 1999

Contracting Officer

17. REQUIRED DISTRIBUTION

~ a. CONTRACTOR

(808) 448-2904

Attachment 1 DD Form 254 Addendum

SPECIAL ACCESS PROGRAM (SAP) REQUIREMENTS AND PROCEDURES

SAP ATTACHMENT TO DD FORM 254 FOR CONTRACT NO:

Item 10 f: AFOSI/PJ OL-B is the Cognizant Security Authority (CSA) for all SAF/AQ SAP’s related to this contract. HQ PACAF/A3XZ is the servicing Program Security Office and is located at 25E Street, Suite I-222, JBPH-H, HI 96853; commercial: 808-449-3801.

Item 11j: Contractors assigned to government locations will participate in the host unit Operations Security (OPSEC) program. They will ensure they are familiar with the unit OPSEC plan and follow the local Program Security Manager’s guidance regarding OPSEC.

Item 12: No public release of classified or sensitive SAP information pertaining to this contract is authorized. All requests to release must be routed through the servicing program security office to HQ PACAF/A3XZ and

AFOSI/PJ OL-B.

Item 13:

1. All SAP storage and work will be conducted within an approved SAP facility (SAPF) designated by the servicing Government SAP Security Officer (GSSO).

2. Requests for SAP access will be made through the local GSSO or Program Manager (PM).

3. Continued contractor access to SAPs requires initial and recurring (annual) SAP security education training.

The GSSO/PM will conduct the training at the location where the contractor’s program access records are kept.

The contractors’ program access records will be kept in the servicing program security office.

4. Inquiries regarding SAP classification guidance will be directed to the local GSSO or PM.

5. All SAP material furnished or generated in support of this contract remains the property of the government and will be returned to the servicing program office upon completion of this contract.

6. All procedures, equipment, and devices used for data processing or data transfer of SAP information must be accredited (approved) by the Program Security Officer (PSO) before any processing is permitted. Any subsequent configuration or procedural changes must be approved prior to use.

7. The contractor will produce classified material and have access to classified data/areas listed in block 13 only.

The local GSSO will provide daily security oversight for this contract unless delegated in writing by the PSO to another activity.

8. The security clearance requirement for this contract is a final Secret based on a completed NACLC within the last five years.

9. The government will provide adequate classified storage capability at government work performance locations.

Only properly accessed (program briefed) personnel will have access to security containers storing SAP information and media containing SAP information.

SPECIAL ACCESS PROGRAM (SAP) REQUIREMENTS AND PROCEDURES

(GOVERNMENT FACILITY) Continued

SAP ATTACHMENT TO DD FORM 254 FOR CONTRACT NO:

Item 14: The contractor will follow all applicable security guidance related to the protection of SAP information.

Baseline guidance includes the National Industrial Security Program Operating Manual (NISPOM), Joint Air Force, Army, and Navy Manuals (JAFAN) 6/0, 6/3, 6/4, and 6/9, applicable Program Security Directives (PSDs), Security Classification Guides (SCGs), and local Standard Operating Procedures. The GSSO will provide a copy of applicable guidance to the contractor.

Item 15: AFOSI/PJ OL-B, or designated representative, will conduct security reviews of all SAP facilities, material, personnel, and operations related to this contract. DSS and local SF oversight over SAP portions of this contract is carved-out.

LEE A. RAY, Civ, HQ PACAF/A3XZ Program Security Officer

Current as of July 23, 2008

Attachment 2

CONTRACT No: Contract Expiration Date:

RELEASE OF NON-SCI INTELLIGENCE INFORMATION

TO US CONTRACTORS

DD Form 254 Block 10.e.(2)

1. Requirements for access to non-SCI:

a. All intelligence material released to the contractor remains the property of the US Government and may be withdrawn at any time. Contractors must maintain accountability for all classified intelligence released into their custody.

b. The contractor must not reproduce intelligence material without the written permission of the originating agency through the Intelligence Support Office. If permission is granted, each copy shall be controlled in the same manner as the original.

c. The contractor must not destroy any intelligence material without advance approval or as specified by the contract monitor (CM). (EXCEPTION: Classified waste shall be destroyed as soon as practical in accordance with the provisions of the Industrial Security Program).

d. The contractor must restrict access to only those individuals who possess the necessary security clearance and who are actually providing services under the contract with a valid need to know. Further dissemination to other contractors, sub-contractors, other government agencies, private individuals or organizations is prohibited unless authorized in writing by the originating agency through the CM.

e. The contractor must ensure each employee having access to intelligence material is fully aware of the special security requirements for this material and shall maintain records in a manner that will permit the contractor to furnish, on demand, the names of individuals who have had access to this material in their custody.

f. Intelligence material must not be released to foreign nationals or immigrant aliens whether they are consultants, US contractors, or employees of the contractor and regardless of the level of their security clearance, except with advance written permission from the originator. Requests for release to foreign nationals shall be initially forwarded to the contract monitor and shall include:

(1) A copy of the proposed disclosure.

(2) Full justification reflecting the benefits to US interests.

(3) Name, nationality, particulars of clearance, and current access authorization of each proposed foreign national recipient.

g. Upon completion or termination of the classified contract, or sooner when the purpose of the release has been served, the contractor will return all classified intelligence (furnished or generated) to the source from which received unless retention or other disposition instructions (see AFMAN 37-139) are authorized in writing by the CM.

h. The contractor must designate an individual who is working on the contract as custodian. The designated custodian shall be responsible for reciting and accounting for all classified material.

The inner wrapper of all classified material dispatched should be marked for the attention of a designated custodian and must not be opened by anyone not working directly on the contract.

i. Within 30 days after the final product is received and accepted by the procuring agency, classified intelligence materials released to or generated by the contractor, must be returned to the originating agency, through the contract monitor, unless written instructions authorizing destruction or retention are issued. Requests to retain material shall be directed to the CM for this contract in writing and clearly indicate the justification for retention and identity of the specific document to be retained.

j. Classification, grading, or declassification markings of documentation produced by the contractor shall be consistent with that applied to the information or documentation from which the new document was prepared. If a compilation of information or a complete analysis of subject appears to require a security classification other than that of the source documentation, the contractor shall assign the tentative security classification and request instructions from the contract monitor. Pending final determination, the material shall be safeguarded as required for its assigned or proposed classification, whichever is higher, until the classification is changed or otherwise verified.

2. Intelligence material carries special markings. The following is a list of the authorized control markings of intelligence material:

a. “Dissemination and Extraction of Information Controlled by Originator (ORCON).” This marking is used, with a security classification, to enable a continuing knowledge and supervision by the originator of the use made of the information involved. This marking may be used on intelligence that clearly identifies, or would reasonably permit ready identification of an intelligence source or method which is particularly susceptible to countermeasures that would nullify or measurably reduce its effectiveness. This marking may not be used when an item or information will reasonably be protected by the use of other markings specified herein, or by the application of the “need-to-know” principle and the safeguarding procedures of the security classification system.

b. Authorized for Release to (Name of the Country(ies)/International Organization.” The above is abbreviated “REL______________.” This marking must be used when it is necessary to identify classified intelligence material the US government originator has predetermined to be releasable or has been released through established foreign disclosure channels to the indicated country (ies) or organization.

3. The following procedures govern the use of control markings.

a. Any recipient desiring to use intelligence in a manner contrary to restrictions established by the control markings set forth above shall obtain the advance permission of the originating agency through the CM.

Such permission applies only to the specific purposes agreed to by the originator and does not automatically apply to all recipients. Originators shall ensure that prompt consideration is given to recipients’ requests in these regards, with particular attention to reviewing and editing, if necessary, sanitized or paraphrased versions to derive a text suitable for release subject to lesser or no control markings.

b. The control marking authorized above shall be shown on the title page, front cover, and other applicable pages of documents, incorporated in the text of electrical communications, shown on graphics, and associated (in full or abbreviated form, with data stored or processed in automatic data processing systems. The control marking also shall be indicated by parenthetical use of the marking abbreviations at the beginning or end of the appropriate portions. If the control marking applies to several or all portions the document must be marked with a statement to this effect rather than marking each portion individually.

c. The control markings shall be individually assigned at the time of preparation of intelligence products and used in conjunction with security classifications and other marking specified by E.O. 12958 and its’ implementing security directives. The marking shall be carried forward to any new format in which the same information is incorporated including oral and visual presentations.

4. Request for release of intelligence material to a contractor must be prepared by the contract monitor (CM) and submitted through the PACAF/A2 SSO to the Senior Intelligence Officer, AAC/IN. This should be accomplished as soon as possible after the contract has been awarded. The request will be prepared and submitted plain bond paper accompanied by a copy of the DD-254 and the Statement of Work (SOW). (Note: CM can obtain a copy of format from the PACAF/A2 SSO).

Attachment 3

FOR OFFICIAL USE ONLY (FOUO) ADDENDUM

ATTACHMENT TO DD Form 254 for Contract No: _____________________________

The following procedures will be used to protect FOR OFFICIAL USE ONLY (FOUO) material:

1. HANDLING. Access to FOUO material shall be limited to those employees needing the material to do their jobs. The FOUO marking is assigned to material created by a DoD user agency. FOUO is not a classification, but requires extra precaution to ensure it is not released to the public.

2. MARKING. An unclassified document containing FOUO information shall be marked “For Official Use Only” at the bottom on the outside of the front cover (if any), on each page containing FOUO information, and on the outside of the back cover (if any). Each paragraph containing FOUO information shall be marked as such.

a. Within a classified document, an individual page that contains both FOUO and classified information shall be marked at the top and bottom with the highest security classification of information appearing on the page. Individual paragraphs shall be marked at the appropriate classification level, as well as unclassified or FOUO, as appropriate.

b. Within a classified document, an individual page that contains FOUO information but no classified information shall be marked “For Official USE Only’ at the top and bottom of the page, as well as each paragraph that contains FOUO information.

c. If a classified document also contains FOUO material or if the classified material becomes FOUO when declassified, place the following statement on the bottom of the cover or the first page under the classification marking: “NOTE: If declassified, review the document to make sure material is not FOUO and not exempt under DoD Regulation 5400.7/Air Force Supplement, 24 June 2002 before public release.”

d. Mark other records such as computer print outs, photographs, films, tapes, or slides “FOR OFFICIAL USE ONLY”so the receiver or viewer knows the record contains FOUO material.

e. Mark each part of a message that contains FOUO material. Unclassified messages containing FOUO material must show the abbreviation “FOUO” before the text begins.

f. Ensure documents that transmit FOUO material call attention to any FOUO attachments.

g. FOUO material released to a contractor by a DoD user agency must have the following statement on the front page or cover: “THIS DOCUMENT CONTAINS MATERIAL EXEMPT

FROM MANDATORY DISCLOSURE UNDER THE FREEDOM OF INFORMATION ACT.

EXEMPTION(S) _________APPLY.”

3. STORAGE. During normal duty hours, place FOUO material in an out-of-sight location, if your work area is accessible to persons who do not have a valid need for the material. After normal duty hours, store FOUO material to prevent unauthorized access. File with other unclassified records in unlocked files or desks when internal building security is provided. When

FOR OFFICIAL USE ONLY (FOUO) ADDENDUM

there is not internal security, locked buildings or rooms usually provide adequate after-hours protection. For additional protection, store FOUO material in locked container such as file cabinets, desks, or bookcases. Expenditure of funds for security container or closed areas solely for the protection of FOUO material is prohibited.

4. TRANSPORTING FOUO INFORMATION. Records containing FOUO information shall be transported in a manner that prevents disclosure of the contents. When not commingled with classified information, FOUO information may be sent via first-class mail or parcel post. Bulk shipments, such as distributions of FOUO Directives or testing materials, that otherwise qualify under postal regulations, may be sent by fourth-class mail.

5. RELEASE. FOUO material shall not be released outside the contractor’s facility except to representatives of the DoD.

6. DESTRUCTION. When no longer needed, FOUO material shall be disposed of by a method that precludes its disclosure to unauthorized individuals.

Contract #

DD FORM 254 CONTINUATION PAGE 1 OF 2

Block 13. Security Guidance Continuation - Operations

Contract requires access to unclassified sensitive government Automated Information System (AIS). As a minimum, contractor employees must be the subject of a completed favorable National Agency Check (NAC) IAW AFI 33-119 and complete Security Awareness Training and Education (SATE) IAW AFI 33-204 prior to being granted access to government AIS. Contract employees having access to classified AIS, or related classified equipment, shall have a personnel security clearance at the level equal to the AIS or higher. In addition, they must meet the Director of Central Intelligence Directive (DCID) 6/4 adjudication standards. At a minimum, personnel operating and maintaining DMDs and associated equipment shall meet DCID 6/4 standards.

Classification guidance is provided in the following documents:

1) AFR 55-90 (S)

2) Security Classification Guide for Electronic Warfare Threat Emitters, Sacramento Air Logistics Center, McClellan AFB, CA 95652

3) OPNAVINST C55113.2B (See Appendix A)

4) Yukon Measurement and Debriefing System (YMDS) Automated Information System Security Plan

(AISSP)

5) Alaska ACMI Upgrade SSP.

Ref 10j. See Attachment 3.

Ref 11c. The contractor is expected to received and generate classified material (documents and/or hardware) in accordance with security classification guidance in performance of the contract.

Ref 11d. The equipment is unclassified but does utilize SECRET NOFORN WNINTEL simulated weapons database and display classified operations information.

Ref 11f. Classified information outside of the US, Puerto Rico, U.S. Possessions and trust territories – overseas performance listed in item 8a.

Ref 11h. Contractor will need administrative access to classified COMSEC material. The contractor will not receipt, copy or generate classified COMSEC material. The contractor will follow all applicable Air Force System Security Instructions (AFSSIs) in the storage, handling, inventory, destruction, and incident reporting.

Ref 11i. TEMPEST Countermeasure Assessment Requests may be requested by the GCA for the contractor.

Ref 11j. Contractor will follow base and unit Operations Security guidance (SOPs, OIs etc.) for the locations identified in 8a. A copy of the local guidance will be provided to the contractor. Contractor will be subject to investigation and potential adverse actions in the event of security deviations or violations.

Ref 11l. Any transfer or processing of classified or sensitive information via electronic methods (e.g.

facsimile, telemetry, voice, and computer) shall be protected by implementing an appropriate combination of countermeasures such as encryption devices and sound practices/procedures. The specific countermeasures must comply with YMDS and AAU SSPs, and JAFAN 6/3 as applicable.

See Section 1 of the general provisions for the clause titled Notification of Government Security Activity.

AF FAR SUP 52.204-9000.

Task ordering could require additional security classification guidance. Additional security classification guidance will be provided, maintained and used by the contractor as required. Security classification guidance on information, hardware and equipment not included in security classification guides will be furnished to the contractor through the ACO or authorized representative at the time the contractor is tasked a classified project, furnished information, hardware and equipment or when classification changes occur. Task ordering requiring additional security classification guidance as indicated above independent of other changes will not require updating or revising the DD Form 254.