DRAFT_Attachment_3__GAP_CIE_DD254.pdf

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort.)

1. CLEARANCE AND SAFEGUARDING

a. FACILITY CLEARANCE REQUIRED

Top Secret

b. LEVEL OF SAFEGUARDING REQUIRED

Secret

2. THIS SPECIFICATION IS FOR: (x and complete as applicable) 3. THIS SPECIFICATION IS: (x and complete as applicable)

a. PRIME CONTRACT NUMBER

a. ORIGINAL (Complete date in all cases)

DATE (YYMMDD)

130308

b. SUBCONTRACT NUMBER

b. REVISED (Supersedes all previous specs)

Revision No. DATE (YYMMDD)

c. SOLICITATION OR OTHER NUMBER

FA8707-12-R-0014

DUE DATE (YYMMDD)

TBD

c. FINAL (Complete Item 5 in all cases)

DATE (YYMMDD)

4. THIS IS A FOLLOW-ON CONTRACT? YES NO. If Yes, complete the following:

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? YES NO. If Yes, complete the following:

In response to the contractor’s request dated , retention of the identified classified material is authorized for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE

TBD

b. CAGE CODE

TBD

c. .COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

TBD

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE

TBD

b. CAGE CODE

TBD

c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip code)

TBD

8. ACTUAL PERFORMANCE

a. LOCATION

TBD

b. CAGE CODE

TBD

c. COGNIZANT SECURITY OFFICE(Name, Address, and Zip Code)

TBD

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

Sustainment and maintenance deliveries to existing capabilities within the Global Adaptive Planning-Collaborative

Information Environment (GAP-CIE) software application. IDIQ type contract with a five (5) year ordering period.

10. THIS CONTRACT WILL REQUIRE ACCESS TO: YES NO 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER CONTRACTOR’S

FACILITY OR A GOVERNMENT ACTIVITY

b. RESTRICTED DATA b. RECEIVE CLASSIFIED DOCUMENTS ONLY

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION c. RECEIVE AND GENERATE CLASSIFIED MATERIAL

d. FORMERLY RESTRICTED DATA d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. INTELLIGENCE INFORMATION: e. PERFORM SERVICES ONLY

(1) Sensitive Compartmented information (SCI)

f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES

(2) Non-SCI

g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL INFORMATION

CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER

f. SPECIAL ACCESS INFORMATION h. REQUIRE A COMSEC ACCOUNT

g. NATO INFORMATION i. HAVE TEMPEST REQUIREMENTS

h. FOREIGN GOVERNMENT INFORMATION j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

i. LIMITED DISSEMINATION INFORMATION k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

j. FOR OFFICIAL USE ONLY INFORMATION

l. OTHER (Specify)

k. OTHER (Specify)

DD FORM 254, DEC 1999

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the iNISPOM or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release

Direct Through (Specify):

901 SAC Boulevard Suite 1A1

Offutt AFB NE 68113-6020

"Public Release By Private Parties – NONE AUTHORIZED" to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

See DD Form 254 Continuation Sheets for additional security guidance.

Coordination: JFCC-GS / JF63______ AFLCMC/HBCC ______ J050______ J2S12______

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to NISPOM requirements, are established for this contract. (If Yes, identify the Yes No pertinent contractual clauses in the contract document itself, or provide any appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

Visitor Group Contractors are required to enter into a security agreement with the host base information security program manager. Provide the information requested by the Notification of Government Security Activity and Visitor Group Security Agreement Clause, AFFARS 5352.204-9000 to the Servicing Security Activity (SSA). Cont in Sec 13/continuation sheet

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. (If Yes, explain and identify specific Yes No areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

When contractors are designated as Visitor Groups on Air Force installations, Industrial Security Reviews for collateral information will be conducted by the host base SSA. DSS will have inspection oversight of the contractor’s off-base facilities. The Defense Security Service (DSS) is relieved of inspection responsibilities for contract activities at USSTRATCOM not involving SCI access. USSTRATCOM/J050 will conduct Information Security

Program Reviews biennially to ensure compliance with the NISPOM, DoD 5200.1-R, Strategic Instructions, and the Visitor Group Security Agreement.

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL

Lee E. Smales

b. TITLE

Contracting Officer

c. TELEPHONE (Include Area Code)

(402) 232-7367

d. ADDRESS (Include Zip Code)

901 SAC Blvd, STE 2H29

Offutt AFB NE 68113

17. REQUIRED DISTRIBUTION

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINSTRATIVE CONTRACTING OFFICER

f. OTHERS AS NECESSARY

e. SIGNATURE

DD FORM 254 (BACK), DEC 1999

Continuation Sheet for DD Form 254 for Contract No TBD (Page 3 of 6)

Reference Item 6a. , 6b. , and 6c.

To be completed as required for additional/alternate contract performance locations:

Company Name of Contractor (Cage Code) Cognizant Security Office

Street Address Street Address

City, State, and Zip Code City, State, and Zip Code

Reference Item 10e. Access to Intelligence Information requires a final US Government clearance at the appropriate level. Prior approval of the contracting activity is required for sub-contracting.

Reference Item 10e.(1):

a) Intelligence Information Sensitive Compartmented Information (SCI) is required for contractor personnel in the ST 03-002 SCIF located in Bldg. 500, room 1E21.

b) The Command Foreign Disclosure and Special Security Office (J2S12) is designated as the responsible security office for the SCI elements of the contract. DIA is responsible for security oversight of the

SCI elements of this contract while DSS retains oversight for the collateral elements that are performed off Offutt AFB NE.

c) Instructions for access to SCI are as follows:

1) All SCI will be handled in accordance with special security requirements furnished by the responsible Special Security Office designated above.

2) The contractor shall provide J2S12, through the contract monitor, a list of all employees performing work on the contract who require SCI access. The chief of the division where contractor employees are working will certify need-to-know for SCI access.

3) SCI will not be released to contractor personnel without specific release approval of the

USSTRATCOM Senior Intelligence Official or the originator of the material, when applicable, obtained through J2S12, based on prior approval and certification of "Need to Know" by the appropriate Division Chief through the designated contract monitor.

4) Inquiries pertaining to classification guidance on SCI will be directed to the responsible contract monitor. Any SCI or SCI derived material generated under this contract shall be reviewed by the contract monitor for proper SCI classification prior to final publication and distribution. The responsible Special Security Office designated above will provide assistance as required.

5) SCI furnished in support of this contract remains the property of the DoD department, agency or command that releases it. Upon completion or cancellation of the contract, all SCI furnished will be returned to the direct custody of the responsible Special Security Office designated above. See

DoD 5105.21-M-1 for complete guidance of handling SCI.

6) All work on SCI material will be done within a SCI Facility (SCIF) on Offutt AFB or

Government-approved contractor SCIF, or other Government-approved SCI facility.

7) National Interest Determination (NID), as required. The Community Acquisition Risk Section

(CARS), on behalf of the Director of National Intelligence, letter to the AFLCMC/HBCC dated

TBD, approved the requested NID for (Company name of contractor).

8) Designated contract monitor is: TBD (to be completed by Government)

Reference Item 10e.(2): The following requirements and controls apply to classified foreign intelligence.

Continuation Sheet for DD Form 254 for Contract No TBD (Page 4 of 6)

a) Requests for release of classified foreign intelligence information are prepared by the contractor and submitted to USSTRATCOM / J2S12 through the contracting agency. Each request for release of intelligence must contain the following information and clarification.

1) Name and address of the contractor for whom the intelligence is intended and certification by the contracting activity of the clearance and safeguarding capability.

Company Name of Contractor

Street Address

City, State, and Zip Code

2) Contract number and length of contract: TBD, (Expiration date).

3) Name of the contracting activity, their certification of need-to-know, and name and telephone number of a point of contact.

AFLCMC/HBCC

901 SAC Blvd., Ste 2H27

Offutt AFB, NE 68113

Need to know will be certified by the appropriate certification authority via the contract monitor.

Designated contract monitors are the points of contact.

TBD (to be completed by Government)

4) Complete identification of the intelligence for which release approval is requested. Identify issuing agency, security classification, and all restrictive control markings and statements. Also include a statement as to whether the material is locally available to the requestor.

5) A description of the contractor work for which the intelligence is required. Include sufficient detail so J2S12 can determine all of the intelligence information the contractor needs.

6) Contractor tasks are specified in the applicable portion of the Statement of Work (SOW).

CONTRACTOR CONTROLS FOR CLASSIFIED FOREIGN INTELLIGENCE

a) The contractor shall maintain accountability for all classified foreign intelligence released to its custody (includes Confidential Information).

b) The contractor shall not reproduce classified foreign intelligence without the written permission of the releasing agency. If permission is granted, each copy will be controlled in the same manner as the original.

c) The contractor must not destroy any classified foreign intelligence without the written permission of the releasing agency.

d) The contractor shall restrict access to only those individuals who possess the necessary security clearance and who are actually providing services under the contract. Further dissemination to other contractors, subcontractors, other government agencies, private individuals, or organizations is prohibited unless authorized in writing by the releasing agency.

e) Classified foreign intelligence must not be released to foreign nationals or immigrant aliens, whether or not they are also consultants, U.S. contractors or employees of the contractor, and regardless of the level of their security clearance, except with the written permission of the originator.

f) The contractor must ensure that each employee having access to classified foreign intelligence material is fully aware of the special security requirements for this material and shall maintain records in a manner that will permit the contractor to furnish, on demand, the names of individuals who have had access to the material in the contractor's custody.

Continuation Sheet for DD Form 254 for Contract No TBD (Page 5 of 6)

g) Upon completion or termination of the classified contract, or sooner when the purpose of the release has been served, the contractor shall return all classified foreign intelligence (furnished or generated), unless retention or destruction is authorized in writing by originator or USSTRATCOM / J2S12.

Reference Item 10g.

a) Contractor may require access to North Atlantic Treaty Organization (NATO) Top Secret information for reference only at USSTRATCOM. This means information belonging to, and circulated by, NATO. Prior approval of the contracting activity is required for subcontracting. Special briefings are required and access to classified NATO information requires a final U.S. Government clearance at the appropriate level.

Reference Item 10j.

a) The For Official Use Only (FOUO) marking is assigned to information at the time of its creation in a

DoD agency. It is not authorized as a substitute for a security classification marking, but it is used on official government information that may be withheld from the public under exemptions 2 through 9 of the Freedom of Information Act (FOIA).

b) Use of the FOUO markings does not mean that the information cannot be released to the public, only that it must be reviewed by the government prior to its release to determine whether a significant and legitimate government purpose is served by withholding the information or portions of it.

c) An unclassified document containing FOUO information will be marked “For Official Use Only” at the bottom of the front cover (if any); the first page; each page containing FOUO information; the back page; and the outside of the back cover (if any). Each paragraph containing FOUO information shall be marked as such.

d) Material other than paper documents (for example, slides, computer media, films, etc.) shall bear markings which alert the holder or viewer that the material contains FOUO information.

e) Within a classified document, an individual page that contains both FOUO and classified information will be marked at the top and bottom with the highest security classification of information appearing on that page. If an individual paragraph contains FOUO information, but no classified information, the paragraph will be marked FOUO.

f) Any FOUO information released to a contractor will be marked with the following statement: “This document contains information EXEMPT FROM MANDATORY DISCLOSURE under the FOIA.

Exemptions 1, 3, and 4 apply.

g) Removal of the FOUO marking can only be accomplished by the originator or other competent authority. When the FOUO status is terminated, all known holders will be notified to the extent practical.

h) Contractors may disseminate FOUO information to their employees and subcontractors who have a need for the information in connection with a classified contract.

i) During working hours, FOUO information shall be placed in an out-of-sight location if the work is accessible to persons who do not have a need for the information. During non-working hours, the information shall be stored to preclude unauthorized access. Filing such material with other unclassified records in unlocked files or desks is adequate when internal building security is provided during non-working hours. When such internal security is not exercised, locked buildings or rooms will provide adequate after-hours protection or the material can be stored in locked receptacles, such as file cabinets, desks, or bookcases.

j) FOUO information may be sent via first-class mail or parcel post. Bulky shipments may be sent by fourth-class mail.

Continuation Sheet for DD Form 254 for Contract No TBD (Page 6 of 6)

k) When no longer needed, FOUO information may be disposed of by shredding, or as directed by the releasing agency.

l) Unauthorized disclosure of FOUO information does not constitute a security violation, but the releasing agency should be informed of any unauthorized disclosure. The unauthorized disclosure of

FOUO information protected by the Privacy Act may result in criminal sanctions.

Reference Item 11a. Contract performance is restricted to facilities approved by the U.S. government. The using contractor or government activity will provide security classification guidance for performance of this contract.

Reference Item 11c. Contractor is expected to receive and generate classified material. The following security classification guide applies for performance of this contract: GAP CIE Security Classification

Guide, dated 17 Dec 2010. The Government authorizes (Company name of contractor) to maintain the

ISPAN A&I contract (FA8722-04-C-0009) documents as reference material for the duration of the GAP

CIE contract (contract number) or until the Government, in conjunction with (Company name of contractor), determines the documents are no longer required.

Reference Item 11j. OPSEC requirements apply. The contractor will participate in the host unit OPSEC program and ensure familiarity with unit OPSEC plan.

Reference Item 17f. Required distribution:

J050

901 SAC Boulevard Suite 1C17

Offutt AFB, NE 68113-6010

J2S12

Special Security and Command Foreign Disclosure Office

901 SAC Blvd., Suite 2G

Offutt AFB, NE 68113-6200

AFLCMC / HBCC

901 SAC Boulevard Suite 1H11

Offutt AFB, NE 68113-7500