Attachment 6 - DD254 SS Con Security Class Spec _01 Oct 10_.pdf

H92222-10-R-0044 Attachment 6

DD Form 254, Contract Security Classification Specification

01 Oct 2010

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

1. CLEARANCE AND SAFEGUARDING

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort.)

a. FACILITY CLEARANCE REQUIRED

Top Secret

b. LEVEL OF SAFEGUARDING REQUIRED

None

2. THIS SPECIFICATION IS FOR: (X and complete as applicable) 3. THIS SPECIFICATION IS: (X and complete as applicable)

a. PRIME CONTRACT NUMBER Contract Number TBD

a. ORIGINAL (Complete date in all cases) Date (YYYYMMDD)

20101001

b. SUBCONTRACT NUMBER

b. REVISED (Supersedes all previous specs)

Revision No. Date (YYYYMMDD)

c. SOLICITATION OR OTHER NUMBER DUE DATE (YYYYMMDD)

c. FINAL (Complete Item 5 in all cases) Date (YYYYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT? YES NO If YES, complete the following

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract

5. IS THIS A FINAL DD FORM 254? YES NO If Yes, complete the following:

In response to the contractor’s request dated , retention of the classified material is authorize d for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE

TBD

b. CAGE CODE

TBD

c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

TBD

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE

b. CAGE CODE

c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

8. ACTUAL P ERFORMANCE

a. LOCATION See Item 13

b. CAGE CODE

c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

Provide Information Technology Specialty Services support and services to HQ USSOCOM, USASOC, JSOC, NAVSOC, AFSOC, MARSOC, SOCCENT, SOCEUR, SOCPAC, SOCAFRICA, SOCSOUTH, SOCJFCOM, and SOCKOR.

Period of Performance: 1 April 2011 through 31 March 2012

10. THIS CONTRACT WILL REQUIRE ACCESS TO: YES NO 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (COMSEC)

INFORMATION

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER

CONTRACTOR’S FACILITY OR A GOVERNMENT ACTIVITY

b. RESTRICTED DATA

b. RECEIVE CLASSIFIED DOCUMENTS ONLY

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION

c. RECEIVE AND GENERATE CLASSIFIED MATERIAL

d. FORMERLY RESTRICTED DATA

d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. INTELLIGENCE INFORMATION e. PERFORM SERVICES ONLY

(1) Sensitive Compartmented Information (SCI)

f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUT SIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES

(2) Non-SCI

g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TE CHNICAL

INFORMATION CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION

CENTER

f. SPECIAL ACCESS INFORMATION

h. REQUIRE A COMSEC ACCOUNT

g. NATO INFORMATION

i. HAVE TEMPEST REQUIREMENTS

h. FOREIGN GOVERNMENT INFORMATION

j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

i. LIMITED DISSEMINATION INFORMATION k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVIC E

j. FOR OFFICIAL USE ONLY INFORMATION WILL BE HANDLED IAW FOUO Addendum l. OTHER (Specify ) Access to all USSOCOM facilities requires contractors to possess a minimum of a secret clearance.

X

k. OTHER (Specify)

FP/ACCM

NIPRNET/SIPRNET/SCI/SAP computer access required at government locations.

NIPRNET computer access required at contractor facility.

DD Form 254, DEC 1999 PREVIOUS EDITION IS OBSOLE TE

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release. Direct Through (Specify)

Requests must be forwarded through the certifying official (block 16), USSOCOM Office of Public Affairs (SOCS-PA), and the Contracting Officer

To the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

* In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency

13. SECURITY GUIDANCE. The security classification guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance, or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes. The contractor may also challenge guidance or the classification assigned to any information or material furnished or generated under this contract; and may submit questions for interpretation of the guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended.

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

While performing duties within HQ USSOCOM, AFSOC, NSWC, NSWG2, MARSOC, JSOC, USASOC, SOCCENT, SOCEUR, SOCSOUTH, SOCAFRICA, SOCKOR and SOCJFCOM owned and operated facilities, the contractor must also adhere to all service/component command/local security directives, regulations, and standard operating procedures at different contract performance locations. The Program Manager listed in block 16 will provide a copy of all applicable security directives for this contract. Appropriate local service/component command security directives, regulations, and standard operating procedures will be provided by the requiring agency (normally through the Performance Monitor or component command COR). Upon completion or termination of the classified contract, or sooner when the purpose of the release has been served, the contractor will return all classified information (furnished or generated to the source from which received unless retention or other disposition instructions are authorized in writing by the USSOCOM Government Contracting Agency/Activity. Furthermore, the contractor will account for and return to the appropriate issuing office, all identification badges and/or entry passes/vehicle decals issued to contractor personnel upon completion or termination of the classified contract, termination of employment, or suspension of classified clearance or access of any contractor employee.

Ref 8 continued:

8a. HQ USSOCOM b. N/A c. USSOCOM/SOCS-Z-SM MacDill AFB, FL 33621 7701 Tampa Point Blvd MacDill AFB, Fl 33621

8a. Air Force Special Operations Command/A6 b. N/A c. 1st Special Ops Wing IP Office Hurlburt Field, FL 32544 212 Lukasik Avenue, Ste 230 Hurlburt Field, Fl 32544

8a. Naval Special Warfare Command b. N/A c. Commander, Naval Special Warfare San Diego CA 92155 2000 Trident Way San Diego, Ca 92155

8a. Naval Special Warfare Group Two b. N/A c. Naval Special Warfare Group Two Norfolk, VA 23521 Security Manager 1300 Helicopter Rd., Bldg 3854 Norfolk, VA 23521

8a. US Army Special Operations Command b. N/A c. Commander, USASOC, AOIN-SOD Fort Bragg, NC 28310 2929 Desert Storm Dr. Stop A Ft. Bragg, NC 28310

8a. MARSOC b. N/A c. MARSOC Security Division Building H-1, Wing 1-8-S Bldg H1 Camp Lejeune, NC 28542-0116 PSC Box 20116 Camp Lejeune, NC 28542-0116

8a. MARSOC b. N/A c. MARSOC Security Division 1st Marine Special Operations Battalion Bldg H1 Building 210722 PSC Box 20116 Camp Lejeune, NC 28542-0116 Camp Lejeune, NC 28542-0116

8a. JSOC b. N/A c. HQ JSOC Ft. Bragg, NC Attn: JSOC-SD PO Box 70239 Ft. Bragg, NC 28307

8a. Special Operations Command Central b. N/A c. Special Operations Command Central 7115 S. Boundary Rd. Attn: SOC-J2 MacDill AFB, FL 33621 7115 Boundary Rd.

MacDill AFB, FL 33621

X

8a. Special Operations Command Pacific b. N/A c. SOCPAC/SOJ24 Camp Smith, HI 96861 Box 64046 Camp Smith, HI 96861 8a. Special Operations Command Korea b. N/A c. SOCKOR J2 SSO Camp Kim, Korea 96205 HQ SOCKOR, Unit # 15622

APO AP 96205-0328

8a. Special Operations Command Joint Forces b. N/A c. U.S. Joint Forces Command 1721 Piersey St. Attn: JO2SM Norfolk, VA 23511 1562 Mitscher Ave., Suite 200 Norfolk, VA 23551-2488

8a. Special Operations Command Europe b. N/A c. HQ USEUCOM/SSO Patch Barracks Germany Unit 30400

APO, AE 09131

8a. Special Operations Command South b. N/A c. SOCSOUTH/SSO 29350 Coral Sea Boulevard 29350 Coral Sea Boulevard Homestead ARB, FL 33039-1299 Homestead ARB, FL 33039-1299

Ref. 10e (1): See SCI Addendum.

Ref 10f: SAP processing associated with this effort will be conducted in facilities specifically approved for SAP processing by the USSOCOM SAPCO or equivalent component-level SAP Coordination Office (SAPCOORD). Contact the appropriate servicing SAPCO for approved SAP facilities locations. SAP activities are governed by Revision 1 Department of Defense Overprint to the National Industrial Security Program Operating Manual Supplement, 1 Apr 04, USSOCOM Manual 380-2 and applicable program security classification and procedures guides. USSOCOM and Component-managed SAPFs and SAP Temporary Secure Working Areas (TSWA) are governed by JAFAN 6/9. Access to SAP information requires employees undergo additional personnel security screening and meet the requirements of DoD SAP-accessing directives and policies. SAP inspections and security oversight while in USSOCOM or Component-managed facilities are under the cognizance of the USSOCOM or Component SAPCOORD, as appropriate. Additional SAP security requirements may apply at non HQ USSOCOM locations/facilities based on service/component command requirements. The Performance Monitor or component command COR at these locations/facilities will provide specific and additional guidance. SAP inspections conducted at approved contractor facilities are under the security oversight of the Defense Security Service (DSS) unless officially relieved of their oversight responsibilities.

Ref 10j: FOUO information/provided under this contract shall be safeguard as specified in the attachment, Protecting for Official Use Only (FOUO) Information.

Ref 10k: ACCM information is governed by DoD 5200.1-R, “Information Security Program,” Chapter 6, Section 8, “Alternative Compensatory Control Measures (ACCM),” and OSD/C3I Memorandum, 18 April 2003, “Revised Alternative Compensatory Control Measures (ACCM) Guidance”; Focal Point Program information is governed by CJCS Manual 3213.02B, “Focal Point Program Procedures”, and supporting documentation for each Focal Point sub-system, including security classification guides, program security plans, and governing directives. Inspections of ACCM information in USSOCOM and/or each Military Service Component (AFSOC, NSWC, NSWG2, USASOC, MARSOC, SOCSOUTH, and SOCKOR) facilities are under the auspices of the respective Command or Component FPPCO. Additional ACCM requirements may be required at non USSOCOM locations/facilities (based on service/command requirements). The Performance Monitor or component command COR at these locations/facilities will provide specific information.

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract. YES NO (If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement, which identifies the additional requirements. Provide a copy of the requirements to the Cognizant Security Office. Use Item 13 if additional space is needed.)

While performing at Military Service/Component Command (USSOCOM, AFSOC, NSWC, NSWG2, MARSOC, or USASOC) owned and/or operated locations/facilities, the contractor will adhere to the respective Military Service/Component Command: Information Security Program, ADP and DoDIIS Programs, Physical Security Program, Industrial Security Program, and SCI/SAP Program (if applicable). Appropriate local service/component command security directives, regulations, and standard operating procedures will be provided by the requiring agency (normally through the Performance Monitor or component command COR) at these locations/facilities.

Prior approval of the contracting activity is required for subcontracting. Access to intelligence information requires special briefings and a U.S. Government clearance at the appropriate level.

Training Requirement: Contractors performing on this contract at military installations are required to conduct command and unit specific security training (OPSEC, EMSEC, At/FP, Etc.). This training will be provided by the responsible military organization.

IA requirements: Specific Information Assurance requirements may be mandated and are authorized by the responsible command/unit where primary performance location is identified.

Contractor will be authorized to courier classified information up to the “TS/SCI” level in performance of official duties upon approval of and designation by the COR, PM, KO, and/ SSO.

AFSOC Requirement:

Provide the information requested by the Notification of Government Security Activity clause and Visitor Group Security Agreements Clause, AFFARS 5352.204-9000, to the Servicing Security Activity indicated in Item 13 above. Refer to the contract document for these clauses. The visitor group will operate per DoD 5200.1-R, AFI 31-401, AFI 31-601, Hurlburt Field supplements and unit security program operating instructions, plans and procedures.

USASOC Requirement (Ref 10f): Defense contractor personnel who require access to Army Special Access Program (SAP) information, as defined by AR 380-381, shall agree to undergo random counterintelligence scope polygraph examinations, when requested by proper authority, to determine suitability for receiving and/or maintaining access to SAP information.

Contractors shall certify prior to contract award, or subsequent to award, but prior to the commencement of duties for new employees, that all personnel so identified have freely consented to such examination.

1. Contractor personnel who withdraw their consent at any time during their period of access shall be immediately removed from access to SAP information, and such action shall be promptly reported to the contracting officer or such party as the contracting officer may direct.

2. Additional information about polygraphs and DD Form 254 for SAPs is contained in AR 380-381, including the requirement for distribution of a copy of all DD Form 254 in support of SAP contracts to be forwarded to HQDA (DACS-DMP), Room 2A528, 200 Army Pentagon, Washington, DC 20310-0200 and HQ USSOCOM (SOAL-SP), 7701 Tampa Point Blvd, MacDill AFB, FL 33621-5323.

3. Additionally, any requirement that contractor personnel shall undergo polygraph examinations needs to be clearly stated in the contract document.

All security violations/incidents will be reported to the responsible cognizant security office, facility security officer, contracting officer, and primary contract officer representative (PCOR) for the contract.

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the Cognizant Security Office. YES NO (If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

Defense Security Service is relieved of inspection responsibility within USSOCOM and/or each Military Service Component ( AFSOC, NSWC, NSWG2, MARSOC, and USASOC) owned and operated locations/facilities. Classified contract activities and performance at each

Military Service’s locations/facilities are governed by applicable service/component command/local security directives, regulations, and standard operating procedures and are the responsibility of the respective Security Officers. Collateral contractor classified operations conducted within military installations/facilities will be under the Security Cognizance of the services respective Security Management Office. If applicable, SCI/SAP/ACCM portions of the contract fall under the purview of the location/facility SSO/SAPCO/FPCO.

Additional SCI/SAP/ACCM requirements/responsibilities may exist at different contract performance locations. The Performance Monitor or component command COR at these locations/facilities will provide specific information.

16. CERTIFICATION AND SIGNATURE. Security require ments stated herein are complete and adequate for s afeguarding the classif ied informa tion to be released or generated under this classified e ffort. All questions shall be referred to the offi cial named below.

a. TYPED NAME OF CERTIFYING OFFICIAL Gregory J Brauer

b. TITLE J6 Contract Manager

c. TELEPHONE (Include Area Code)

(813) 826-7086

d. ADDRESS (Include Zip Code) 17. REQUIRED DISTRIBUTION

HQ USSOCOM / J65

7701 Tampa Point BLVD MacDill AFB FL 33621-5323

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

e. SIGNATURE D. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY

ADMINISTRATION

E. ADMINISTRATIVE CONTRACTING OFFICER

F. OTHERS AS NECESSARY USSOCOM SSO/SAPCO

DD FORM 254 (BACK), DEC 1999