Attachment_4_DD_254.docx

CONTRACT

N00019-95-G-0242

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

1. CLEARANCE AND SAFEGUARDING

b. LEVEL OF SAFEGUARDING REQUIRED

H92222-13-R-JCTO

20130212

Date (YYYYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT? |_| YES |X| NO If YES, complete the following

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract

5. IS THIS A FINAL DD FORM 254? |_| YES |_| NO If Yes, complete the following:

In response to the contractor’s request dated , retention of the classified material is authorized for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE

TBD

b. CAGE CODE

TBD

c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

TBD

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE

b. CAGE CODE

c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

8. ACTUAL PERFORMANCE

a. LOCATION

HQ USSOCOM

7701 Tampa Point Blvd. FMD JCTO J7 MacDill AFB, FL 33621 All others see Item 13

b. CAGE CODE

c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

USSOCOM Enterprise Wide Training and Exercise Program Period of Performance 1 Jun 2013 – 31 May 2018

e. INTELLIGENCE INFORMATION

i. LIMITED DISSEMINATION INFORMATION

k. OTHER (Specify) NIPRNET required at contractor facility. NIPRNET/SIPRNET (JIANT)/JWICs access required at government facilities only.

DD Form 254, DEC 1999 PREVIOUS EDITION IS OBSOLETE

X )12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release. Direct Through (Specify)

No Public Release Is Authorized For Sensitive Compartmented Information (SCI) Or Special Access Programs (SAP).

All other requests must be forwarded through the certifying official (block 16), USSOCOM Office of Public Affairs (SOCS-PA), and the Contracting Officer.

To the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

* In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency

13. SECURITY GUIDANCE. The security classification guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance, or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes. The contractor may also challenge guidance or the classification assigned to any information or material furnished or generated under this contract; and may submit questions for interpretation of the guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

While performing duties within USSOCOM, Components (USASOC, NSWC, AFSOC, MARSOC, JSOC), or Theater Special Operation Commands (SOCCENT, SOCEUR, SOCPAC, SOCSOUTH, SOCAFRICA, SOCNORTH, SOCKOR or NATO SOF HQ) owned and operated facilities, the contractor must adhere to applicable security directives, regulations, and standard operating procedures at different contract performance locations. The Program Manager listed in block 16 will provide a copy of all applicable security directives for this contract. Appropriate applicable command security directives, regulations, and standard operating procedures will be provided by the requiring agency (normally through the Performance Monitor or designated COR). Upon completion or termination of the classified contract, or sooner when the purpose of the release has been served, the contractor will return all classified information (furnished or generated) to the source from which received unless retention or other disposition instructions are authorized in writing by the USSOCOM Government Contracting Agency/Activity. Furthermore, the contractor will account for and return to the appropriate issuing office, all Common Access Cards (CAC), security badges, installation entry passes/vehicle decals issued to contractor personnel upon completion or termination of the classified contract, termination of employment, or suspension of classified clearance or access of any contractor employee.

SEE CONTINUATION PAGE

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract. |_| YES |_| NO (If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement, which identifies the additional requirements. Provide a copy of the requirements to the Cognizant Security Office. Use Item 13 if additional space is needed.)

SEE CONTINUATION PAGE

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the Cognizant Security Office. |_| YES |_| NO (If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

SEE CONTINUATION PAGE

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL Michael S. Dorris

b. TITLE Deputy Chief / Program Manager

c. TELEPHONE (Include Area Code)

(813) 826-5015

HQ USSOCOM/SORDAC-AS

7701 TAMPA POINT BLVD

MACDILL AFB, FL 33621-5323

DD FORM 254 (BACK), DEC 1999

DD FORM 254 CONTINUATION PAGE

Item 8:

SECTION 13:

The Program Manager listed in Block 16 will provide a copy of all applicable security directives for this contract. Appropriate local service/component command security directives, regulations, and standard operating procedures will be provided by the requiring agency (normally thru the Contracting Officer’s Representative or Technical Representative). Upon completion or termination of the classified contract or sooner when the purpose of the release has been served, the contractor will return all classified information (furnished or generated to the source from which received unless retention or other disposition instructions are authorized in writing by the U.S. Government Contracting Agency/Activity. Furthermore, the contractor will account for and return to the appropriate issuing office all identification badges and/or entry passes/vehicle decals issued to the contractor personnel upon completion or termination of the classified contract, termination of employment, or suspension of clearance or access of any contractor employee.

Numerous security classification guides may apply to this contract and will be issued to the contractor as needed by the cognizant government Program Manager. Each task order will identify the security service needed to perform the service and the security classification guide that governs the classification of the material to be handled.

All classified information generated under this contract will be derivatively classified IAW USSOCOM Manual 380-1, Chapter 3, and DOD 5220.22.M, utilizing existing classified source documents or applicable classification guides.

This Form DD 254 establishes the security requirements for the Basic Contract. Each task order award from the Basic Contract will require a separate PWS, DD Form 254, and applicable addendums based on the specific work being done per task order.

Ref. 10a: COMSEC security requirements apply. Contractor must forward requests for COMSEC material/information to the appropriate COMSEC officer through the program office. The contractor is governed by DoD 5220.22-M, NISPOM. Access to COMSEC material by personnel is restricted to U.S. citizens holding final U.S. Government clearances. Such information is not releasable to personnel holding only reciprocal clearances. The government program/project manager shall designate the number of personnel requiring cryptographic access. The number will be limited to the minimum necessary and will be on a strict need-to-know basis. Additional COMSEC requirements may be required at non USSOCOM locations/facilities (based on service/command requirements). The Performance Monitor or component command COR at these locations/facilities will provide specific information.

· Subcontracting of COMSEC material by a contractor requires prior approval of the contracting activity.

· Access to COMSEC material requires special briefings.

· Access to classified COMSEC material requires a final U.S. Government clearance at the appropriate level.

· Access to COMSEC material may require contractor to complete a counterintelligence (CI) scope polygraph examination.

Ref. 10e (1): See SCI Addendum.

Ref 10f: The following regulations, guides, manuals, instructions and standard operating procedures may apply to work performed under this contract and will be delineated at the task order level: Joint Air Force-Army-Navy (JAFAN) Manual 6/0, Special Access Program Security Manual, Revision 1; JAFAN Manual 6/3, Protecting Special Access Program Information Within Information Systems; JAFAN 6/4, Special Access Program Tier Review Process, Revision 1; JAFAN 6/9 Physical Security Standards for Special Access Program Facilities, with SAPCO Issues Change 2; USSOCOM Manual 380-2, Special Access Program Security Guide; Chairman, Joint Chiefs of Staff Manual 32l3.02A, Joint Staff Focal Point Communications Procedures Manual; USSOCOM Manual 380-5, Focal Point Communications Systems Procedures; Chairman, Joint Chiefs of Staff Instruction (CJCSI) 5250.01; Program Specific Security Classification and Procedure Guides. SAP operations and processing associated with this effort will be conducted in facilities specifically approved for SAP processing by the USSOCOM SAPCO, PSO or equivalent component-level SAP Coordination Office (SAPCOORD). Contact the appropriate servicing SAPCO or SAP Coordination Office to verify approved SAP facilities locations. USSOCOM and Component-managed SAPFs and SAP Temporary Secure Working Areas (TSWA) are governed by JAFAN 6/9. Access to SAP information requires employees undergo additional personnel security screening IAW JAFAN 6/4, Special Access Program Tier Review Process. SAP security oversight while in USSOCOM or USSOCOM Component-managed facilities is under the cognizance of the USSOCOM or Component SAPCOORD, as appropriate. Additional SAP security requirements may apply at Component Headquarters locations/facilities based on local component requirements. The Performance Monitor or component command COR at these locations/facilities will provide additional guidance. SAP inspections conducted at approved contractor facilities, if applicable, is under the security oversight of the Defense Security Service (DSS) unless officially relieved of their oversight responsibilities.

Ref 10g: The contractor is permitted access to North Atlantic Treaty Organization (NATO) information in performance of this contract. Access to NATO information requires a final U.S. Government clearance at the appropriate level. The government program/project manager is the designated representative that will ensure the contractor security manager and concerned employees are NATO briefed prior to access being granted. The contractor will maintain strict compliance in regards to NATO information IAW NISPOM Ch 10, Section 7. Prior approval from the contracting activity is required for subcontracting.

Ref. 10h: The contractor is permitted access to Foreign Government Information (FGI) in the performance of this contract. Access to FGI requires a final U.S. Government clearance at the appropriate level. Contractor employees will be briefed, and acknowledge in writing, their responsibilities for handling FGI prior to being granted access. The contractor will maintain strict compliance with NSPOM Ch 10. Prior approval of the contracting activity is required for subcontracting.

Ref. 10j: FOUO information/provided under this contract shall be safeguard as specified in the attachment, Protecting for Official Use Only (FOUO) Information.

Ref. 10k: ACCM information is governed by DoD 5200.1-R, “Information Security Program,” Chapter 6, Section 8, “Alternative Compensatory Control Measures (ACCM),” and OSD/C3I Memorandum, 18 Apr 03, “Revised ACCM Guidance”; Focal Point Program information is governed by CJCS Manual 3213.02B, “Focal Point Program Procedures”, and supporting documentation for each Focal Point sub-system, including security classification guides, program security plans, and governing directives. Inspections of ACCM information in USSOCOM and/or each Military Service Component (AFSOC, NSWC, NSWG2, USASOC, and MARSOC) facilities are under the auspices of the respective Command or Component FPPCO. Additional ACCM requirements may be required at non USSOCOM locations/facilities (based on service/command requirements). The Performance Monitor or component command COR at these locations/facilities will provide specific information. SIPRNET, JWICS, and JIANT access required at Government facilities.

Ref. 11c: The contractor requires access to classified source data up to and including Top Secret in support of the work effort. Any extracts of use of such data requires the contractor to apply derivative classifications and markings consistent with the source documents. Use of “Multiple Sources” on the “Derived From” line necessitates compliance with the NISPOM, paragraph 4-208a, and the use of a bibliography.

Ref. 11d: Contractor must provide adequate storage at their facility for classified hardware to the level of Secret.

SECTION 14:

While performing at Military Service/Component Command (USSOCOM, JSOC, AFSOC, NSWC, NSWG2, MARSOC, or USASOC) owned and/or operated locations/facilities, the contractor will adhere to the respective Military Service/Component Command: Information Security Program, ADP and DoDIIS Programs, Physical Security Program, Industrial Security Program, and SCI/SAP Program (if applicable). Appropriate local service/component command security directives, regulations, and standard operating procedures will be provided by the requiring agency (normally through the Performance Monitor or component command COR) at these locations/facilities. Prior approval of the contracting activity is required for subcontracting. Access to intelligence information requires special briefings and a U.S. Government clearance at the appropriate level.

Training Requirement: Contractors performing on this contract at military installations are required to conduct command and unit specific security training (Initial/Refresher INFOSEC, OPSEC, EMSEC, AT/FP, Etc.). This training will be provided by the responsible military organization.

IA requirements: Specific Information Assurance requirements may be mandated and are authorized by the responsible command/unit where primary performance location is identified.

Contractor will be authorized to courier classified information up to Secret in performance of official duties upon approval of and designation by the COR, PM, and/or SSO.

SECTION 15:

Defense Security Service is relieved of all inspection responsibility within USSOCOM, Component (JSOC, AFSOC, NSWC, MARSOC, or USASOC), or Theater Special Operation Command (SOCCENT, SOCEUR, SOCPAC, SOCSOUTH, SOCAFRICA, SOCNORTH or SOCKOR) owned and operated facilities but retains responsibility for all non-SCI classified material released to or developed under the contract and held within the contractor's facility.

If applicable, DSS is relieved of security inspection responsibility for SCI or SAP portions of the contract within a contractor's facility. Security oversight and inspection responsibility fall under the purview of the USSOCOM, Component (JSOC, AFSOC, NSWC, MARSOC, or USASOC), or Theater Special Operation Command (SOCCENT, SOCEUR, SOCPAC, SOCSOUTH, SOCAFRICA, SOCNORTH or SOCKOR) SSO/SSR or SAPCO.