Attachment__2_-_Draft_DD_254_09-14-15.pdf

Reset

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort.)

1. CLEARANCE AND SAFEGUARDING

a. FACILITY CLEARANCE REQUIRED

SECRET

b. LEVEL OF SAFEGUARDING REQUIRED N/A

2. THIS SPECIFICATION IS FOR: (X and complete as applicable) 3. THIS SPECIFICATION IS: (X and complete as applicable)

a. PRIME CONTRACT NUMBER

a. ORIGINAL (Complete date in all cases)

DATE (YYYYMMDD)

20150901

b. SUBCONTRACT NUMBER b. REVISED (Supersedes all previous specs)

REVISION NO. DATE (YYYYMMDD)

c. SOLICITATION OR OTHER NUMBER DUE DATE (YYYYMMDD)

c. FINAL (Complete Item 5 in all cases)

DATE (YYYYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT? YES NO. If Yes, complete the following:

Classified material received or generated under FA5215-14-C-0010 (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? YES NO. If Yes, complete the following:

In response to the contractor's request dated , retention of the classified material is authorized for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE

TBD

b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

8. ACTUAL PERFORMANCE

a. LOCATION

Daniel K. Inouye (DKI) Asia-Pacific Center for Security Studies (APCSS) 2058 Maluhia Road

Honolulu, HI 96815

b. CAGE CODE N39934

c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

DKI Asia-Pacific Center for Security Studies

ATTN: Christopher Conde

2058 Maluhia Road

Honolulu, HI 96815

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

The Contractor shall provide all labor, on-site administration and management required to provide graphics, digital media, audiovisual, Video

Teleconferencing (VTC) and technical support services in preparation for, support during, and after action evaluations of Workshops/Seminars, courses and events offered by DKI APCSS. This includes the preparation of various graphics, digital media, photography, and publishing services as required to support the mission of DKI APCSS.

10. CONTRACTOR WILL REQUIRE ACCESS TO: YES NO 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER

CONTRACTOR'S FACILITY OR A GOVERNMENT ACTIVITY

b. RESTRICTED DATA b. RECEIVE CLASSIFIED DOCUMENTS ONLY

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION c. RECEIVE AND GENERATE CLASSIFIED MATERIAL

d. FORMERLY RESTRICTED DATA d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. INTELLIGENCE INFORMATION e. PERFORM SERVICES ONLY

(1) Sensitive Compartmented Information (SCI) f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES

(2) Non-SCI g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL INFORMATION

CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER

f. SPECIAL ACCESS INFORMATION h. REQUIRE A COMSEC ACCOUNT

g. NATO INFORMATION i. HAVE TEMPEST REQUIREMENTS

h. FOREIGN GOVERNMENT INFORMATION j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

i. LIMITED DISSEMINATION INFORMATION k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

j. FOR OFFICIAL USE ONLY INFORMATION l. OTHER (Specify)

Per DoD 5200.2-R, contractor must initiate or undergo the appropriate investigation required for each IT Level contracted.

k. OTHER (Specify)

DD FORM 254, DEC 1999 PREVIOUS EDITION IS OBSOLETE. Adobe Professional 7.0

FA5215-16-Q-0001 Attachment 2

DRAFT

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release Direct Through (Specify)

NO PUBLIC RELEASE AUTHORIZED

to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

Contractor personnel site shall wear government issued badge during duty hours at the work site. Badge shall be visible at all times.

Contractor shall complete all applicable DoD/DKI APCSS training requirements and comply with all DoD/APCSS policies. Upon completion of the contract, the contractor is responsible for turning in all government badges and/or passes to Human Resources

Department Daniel K. Inouye Asia-Pacific Center for Security Studies. Under no circumstances will retired military ID be used to gain access to the work site. Contractor, in advance, will submit visit authorization requests/letters (VAR/VAL) on all personnel working under this contract to the Personnel Security Manager for need-to-know authorization prior to commencement of contractual services. Questions involving security issues shall be addressed to the APCSS Personnel Security Manager - Mr. Pedro

Guitierrez-Torres, 808-971-4055, gutierreztorresp@apcss.org

Ref. 8a,11a: Contract performance is restricted to units/agencies within APCSS, Hawaii; see Attachment 1 - Classified Information Access Adendum for additional information.

Ref. 11i: APCSS contractors must posses a favorable background investigation as appropriate for the worker's IT level contracted as listed in Attachment 2 - Investigation Addendum.

Ref 10j: FOUO information provided under this contract shall be safeguarded as specified in DoD 5200.01-V4 pg 11 - 18 and in Attachment 3- FOUO Addendum.

Performance location: DKI APCSS, Honolulu, HI

PROGRAM OFFICE REPRESENTATIVE: rank/name/address/phone #

SIGN:

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract. Yes No (If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

See 13.

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. Yes No (If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL b. TITLE

Contracting Officer

c. TELEPHONE (Include Area Code)

d. ADDRESS (Include Zip Code)

766 SCONS/PKZ

90 G. Street, Bldg 1201

Joint Base Pearl Harbor Hickam, HI 96853

17. REQUIRED DISTRIBUTION

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER

f. OTHERS AS NECESSARY See attached for each location's SSA address

e. SIGNATURE

DD FORM 254 (BACK), DEC 1999

Reset

SECURITY OFFICE REPRESENTATIVE: rank/name/address/phone #

SIGN:

FA5215-16-Q-0001 Attachment 2 mailto:gutierreztorresp@apcss.org

Attachment 1 to DD254

CLASSIFIED INFORMATION ACCESS ADDENDUM

Performance of the classified portion of this contract is restricted to facilities and/or the locations cited in Block 8a.

The COR or alternate COR will provide security classification guidance for performance of this contract as well as the lead coordinator for specific events involving classified information.

Collateral classified information may be processed, displayed, discussed or stored at the approved U.S. Government agency assigned.

The highest level of security clearance required for contract performance is Secret.

The government will oversee the handling and storage of classified information in support of this contract.

The government will provide storage capability for all classified material required for this contract.

All classified information shall be returned to the U.S.

Government upon termination of the contract.

Attachment 2 to DD254

INVESTIGATIONS ADDENDUM

ADP/IT LEVELS: DoD military, civilian personnel, consultants, and contractor personnel performing on unclassified automated information systems may be assigned to one of three position sensitivity designations and investigated as follows:

ADP/IT-I :BI

ADP/IT-II :DNACI/NACI

ADP/IT-III :NAC/ENTNAC

Those personnel falling in the above categories who require access to classified information will, of course, be subject to the appropriate investigative scope.

ADP/IT-I

Responsibility or the development and administration of Agency computer security programs, and also including direction and control of risk analysis and/or threat assessment.

Significant involvement in life-critical or mission-critical systems.

Responsibility for the preparation or approval of data for input into a system, which does not necessarily involve personal access to the system, but with relatively high risk for effecting grave damage or realizing significant personal gain.

Relatively high risk assignments associated with or directly involving the accounting, disbursement, or authorization for disbursement from systems of

(1) dollar amounts of $10 million per year or greater, or (2) lesser amounts if.the activities of the individual are not subject to technical review by higher authority in the ADP-I category to insure the integrity of the system.

Positions involving major responsibility for the direction, planning, design, testing, maintenance, operation, monitoring, and/or management of systems hardware and software.

Other positions as designated by the Agency head that involve relatively high risk for effecting grave damage or realizing significant personal gain.

ADP/IT-II

Responsibility for systems design, operation, testing, maintenance, and/or monitoring that is carried out under technical review of higher authority in the ADP-I category, includes, but is not limited to:

(1) access to and/or processing of proprietary data, information requiring protection under the Privacy Act of 1974, and Government-developed privileged information involving the award of contracts;

(2) accounting, disbursement, or authorization for disbursement from systems of dollar amounts less than $10 million per year. Other positions are designated by the Agency head that involve a degree of access to a system that creates a significant potential for damage or personal gain less than that in ADP-I positions.

ADP/IT-III All other positions involved in Federal computer activities.

Attachment 3 to DD254

FOR OFFICIAL USE ONLY (FOUO) ADDENDUM

The following procedures will be used to protect FOR OFFICIAL USE ONLY (FOUO) material:

HANDLING: Access to FOUO material shall be limited to those employees needing the material to do their jobs. The FOUO marking is assigned to material created by a DoD user agency.

FOUO is not a classification, but requires extra precaution to ensure it is not released to the public.

MARKING: Mark unclassified documents containing FOUO, “FOR OFFICIAL USE ONLY” at the bottom of each page and back cover (if any). In a classified document, mark:

a. An individual paragraph that contains FOUO, but not classified material by placing “FOUO” at the beginning of the paragraph.

b. The top and bottom of each page that has both FOUO and classified material with the highest security classification of the material on that page.

c. “FOUO” at the bottom of each page that has FOUO but not classified material.

d. If a classified document also contains FOUO material or if the classified material becomes FOUO when declassified, place the following statement on the bottom of the cover or the first page under the classified marking: “NOTE: If declassified, review the document to make sure material is not FOUO and not exempt under AFI 37-131 before public release.”

e. Mark other records such as computer printouts, photographs, films, tapes, or slides “FOR OFFICIAL USE ONLY” so the receiver or viewer knows the record contains FOUO material.

f. Mark each part of a message that contains FOUO material.

Unclassified messages containing FOUO material must show the abbreviation “FOUO” before the text begins.

g. Insure documents that transmit FOUO material call attention to any FOUO attachment.

h. FOUO material released to a contractor by a DoD user agency must have the following statement on the front page or cover: “THIS DOCUMENT CONTAINS MATERIAL EXEMPT FROM

MANDATORY DISCLOSURE UNDER THE FREEDOM OF INFORMATION ACT.

STORAGE: During normal duty hours, place FOUO material in an out-of-sight location, if your work area is accessible to persons who do not have a valid need for the material. After normal duty hours, store FOUO material to prevent unauthorized access. File with other unclassified records in unlocked files or desks when internal building security is provided. When there is not internal security, locked buildings or rooms usually provide adequate after-hours protection. For additional protection, store FOUO material in locked container such a file cabinets, desks, or bookcases. Expenditures of funds for security container or close area solely for the protection of FOUO material are prohibited.

TRANSMISSION: All FOUO material transmitted off-site, via e-mail, must be encrypted. Discussion of all FOUO material must be via secure telecommunications. FOUO material may be transmitted over telephone lines in digital form, via fax, or DSN lines without encryption.

RELEASE: FOUO material shall not be released outside the government and/or contractor’s facility except to representatives of the DoD and approved by the Government Program/Project Manager.

DESTRUCTION: When no longer needed, FOUO material shall be disposed of by a method that precludes its disclosure to unauthorized individuals.