Atch_1_DD254_21_Feb_18_FINAL.pdf

Page 1 of 6 Pages

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(Please read Instructions BEFORE completing this application.) (The requirements of the National Industrial Security Program (NISP) apply to all security aspects of this effort involving classified information.)

OMB No. 0704-0567 OMB approval expires October 31, 2020

The public reporting burden for this collection of information, 0704-0567, is estimated to average 70 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, at whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

RETURN COMPLETED FORM AS DIRECTED IN THE INSTRUCTIONS.

1. CLEARANCE AND SAFEGUARDING

a. LEVEL OF FACILITY SECURITY CLEARANCE (FCL) REQUIRED

(See instructions.)

TOP SECRET

b. LEVEL OF SAFEGUARDING FOR CLASSIFIED INFORMATION/MATERIAL

REQUIRED AT CONTRACTOR FACILITY

SECRET

2. THIS SPECIFICATION IS FOR: (X and complete as applicable.) 3. THIS SPECIFICATION IS: (X and complete as applicable.)

a. PRIME CONTRACT NUMBER (See instructions.)

a. ORIGINAL (Complete date in all cases.)

DATE

(YYYYMMDD)

20180221

b. SUBCONTRACT NUMBER

SEE CONTINUATION PAGE

b. REVISED (Supersedes all previous specifications)

REVISION NO. DATE (YYYYMMDD)

c. SOLICITATION OR OTHER NUMBER H92222-18-R-0010

DUE DATE (YYYYMMDD)

04/16/2018 c. FINAL (Complete Item 5 in all cases.)

DATE (YYYYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT? NO YES. If Yes, complete the following:

Classified material received or generated under ________________(Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? NO YES. If Yes, complete the following:

In response to the contractor’s request dated ___________________, retention of the classified is authorized for the period of:______________________________________.

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code.)

a. NAME, ADDRESS, AND ZIP CODE

TBD

b. CAGE CODE

TBD

c. COGNIZANT SECURITY OFFICE (CSO) (Name, Address, ZIP Code, Telephone)

TBD

7. SUBCONTRACTOR(S)

a. NAME, ADDRESS, AND ZIP CODE

SEE CONTINUATION PAGE

b. CAGE CODE c. COGNIZANT SECURITY OFFICE (CSO) (Name, Address, ZIP Code, Telephone)

8. ACTUAL PERFORMANCE

a. LOCATION(S) (For actual performance, see instructions)

SEE CONTINUATION PAGE

b. CAGE CODE c. COGNIZANT SECURITY OFFICE (CSO) (Name, Address, ZIP Code, Telephone)

9. GENERAL UNCLASSIFIED DESCRIPTION OF THIS PROCUREMENT

The contractor shall provide all personnel and services necessary to perform Preservation of the Force and Family (POTFF) Programs Support Contract

Period of Performance is from 09 October 2018 – 08 October 2026 (Annual DD FM 254 Review Required)

10. CONTRACTOR WILL REQUIRE ACCESS TO: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION f. SPECIAL ACCESS PROGRAM (SAP) INFORMATION

b. RESTRICTED DATA g. NORTH ATLANTIC TREATY ORGANIZATION (NATO) INFORMATION

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION (CNWDI) (If CNWDI applies, RESTRICTED DATA must also be marked.)

h. FOREIGN GOVERNMENT INFORMATION

d. FORMERLY RESTRICTED DATA i. ALTERNATIVE COMPENSATORY CONTROL MEASURES (ACCM)

INFORMATION

e. NATIONAL INTELLIGENCE INFORMATION: j. CONTROLLED UNCLASSIFIED INFORMATION (CUI) (See instructions.)

(1) Sensitive Compartmented Information (SCI)

k. OTHER (Specify) (See instructions.)

SEE CONTINUATION PAGE(2) Non-SCI

DD FORM 254, NOV 2017 PREVIOUS EDITION IS OBSOLETE.

mailto:whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil

Page 2 of 6 Pages

DD FORM 254 (BACK), NOV 2017

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER

CONTRACTOR'S FACILITY OR A GOVERNMENT ACTIVITY (Applicable only if there is no access or storage required at contractor facility. See instructions.)

h. REQUIRE A COMSEC ACCOUNT

b. RECEIVE AND STORE CLASSIFIED DOCUMENTS ONLY

i. HAVE A TEMPEST REQUIREMENT

c. RECEIVE, STORE, AND GENERATE CLASSIFIED INFORMATION OR MATERIAL j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE (DCS)

e. PERFORM SERVICES ONLY l. RECEIVE, STORE, OR GENERATE CONTROLLED

UNCLASSIFIED INFORMATION (CUI).

(DoD Components: refer to DoDM 5200.01, Volume 4 only for specific CUI protection requirements. Non-DoD Components: see instructions.)

f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES m. OTHER (Specify) (See instructions)

SEE CONTINUATION PAGE

g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL

INFORMATION CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION

CENTER

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the National Industrial Security Program Operating Manual (NISPOM) or unless it has been approved for public release by the appropriate U.S. Government authority. Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified

DIRECT THROUGH (Specify) PUBLIC RELEASE AUTHORITY Requests must be forwarded through the responsible Contracting Official (Item 16), Certifying Official (Item 17) and the HQ USSOCOM Special Operations Communication Office (SOCS-SOCO) prior to public release.

13. SECURITY GUIDANCE. The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein.)

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

No Yes (If Yes, identify the pertinent contractual clauses in the contract document itself or provide the appropriate statement which identifies the additional Requirements. Provide a copy of the requirements to the CSO. Use Item 13 if additional space is needed.)

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the CSO. No Yes (If Yes, explain and identify specific areas and government activity responsible for inspections. Use Item 13 if additional space is needed.)

SEE CONTINUATION PAGE

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

a. GCA NAME

HQ USSOCOM/SOF AT&L-KH

b. ACTIVITY ADDRESS CODE (AAC) OF THE CONTRACTING OFFICE (See instructions.)

H92222

c. ADDRESS (Include ZIP Code.)

HQ USSOCOM/SOF AT&L-KH

7701 Tampa Point Blvd MacDill AFB, FL 33621

d. POC NAME (See instructions.)

Jace Anders

e. POC TELEPHONE (Include Area Code.)

(813) 826-7247

f. EMAIL ADDRESS (See instructions.)

Jace.Anders@socom.mil

17. CERTIFICATION AND SIGNATURES. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL (Last, First, Middle Initial) (See instructions.)

Spurling, Alicia N.

b. TITLE Primary Contracting Officer’s Representative

c. ADDRESS (Include ZIP Code.)

HQ USSOCOM/SOF AT&L-PEO-SV

7701 Tampa Point Blvd MacDill AFB, FL 33621

d. AAC OF THE CONTRACTING OFFICE (See instructions.)

N/A

e. CAGE CODE OF THE PRIME CONTRACTOR (See instructions.)

N/A

f. TELEPHONE (Include Area Code.)

(813) 826-1851

g. EMAIL ADDRESS (See instructions.)

alicia.spurling@socom.mil

h. DATE

20180221

i. SIGNATURE

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICAL

a. CONTRACTOR f. OTHERS AS NECESSARY (If more room is needed, continue in Item 13 or on additional page if necessary.)

b. SUBCONTRACTOR HQ USSOCOM SMO

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

b. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER

TBD

CONTINUATION PAGE

Page 3 of 6 Pages

DD FORM 254 (BACK), NOV 2017

13. SECURITY GUIDANCE (Continued) The Contracting Officer’s Representative/Program Manager listed in Item 17 will provide a copy of all applicable security directives for this contract. Appropriate applicable HQ USSOCOM security directives, regulations, and standard operating procedures will be provided by the requiring agency (normally through the Performance Monitor or Component/Theater Special Operations Command COR/PM).

Upon completion or termination of the classified contract, or sooner when the purpose of the release has been served, the contractor will return all classified information (furnished or generated) to the source from which received unless retention or other disposition instructions are authorized in writing by the USSOCOM Government Contracting Agency/Activity. Furthermore, the contractor will account for and return all Common Access Cards (CACs) to Contracting Officer's Representative, Program Manager, or Trusted Agent upon completion or termination of the classified contract, termination of employment, or suspension of classified clearance or access of any contractor employee. Security badges, installation entry passes/vehicle decals issued to contractor personnel will be returned to the appropriate issuing office as required.

THIS DD FORM 254 IS ESTABLISHED FOR THE BASE CONTRACT. INDIVIDUAL TASK ORDERS WILL IDENTIFY TASK ORDER SPECIFIC SECURITY REQUIREMENTS AND INCLUDE A TASK ORDER SPECIFIC DD FORM 254.

This DD Form 254 is tentatively approved. Upon identification of a Contract Number, but prior to award and any classified release, this DD Form 254 with all pertinent information inserted in appropriate sections will be submitted to SMO for final review and approval.

Additional persons assisting with completion of form (signatures and titles)

Reviewed/Tentatively Approved HQ USSOCOM Industrial Security 21 Feb 2018

14. ADDITIONAL SECURITY REQUIREMENTS. (Continued)

While performing duties at USSOCOM, Component (JSOC, AFSOC, NSWC, MARSOC, or USASOC), or Theater Special Operation Command (SOCNORTH, SOCCENT, SOCEUR, SOCPAC, SOCSOUTH, SOCAFRICA, or SOCKOR) owned and operated facilities, the contractor will adhere to the applicable Information Security Program, ADP and DODIIS Programs, Physical Security Program, Industrial Security Program, and SCI/SAP Program (if applicable). Prior approval of the contracting activity is required for subcontracting. Access to intelligence information requires special briefings and a U.S. Government clearance at the appropriate level.

Training Requirement: Contractors performing on this contract at military installations are required to conduct command and unit specific security training (Initial/Refresher INFOSEC, OPSEC, EMSEC, AT/FP, Intelligence Oversight, etc.). This training will be provided by the responsible military organization.

IA requirements: Specific Information Assurance requirements may be mandated and are authorized by the responsible command/unit where primary performance location is identified.

All security incidents/violations will be reported to the responsible cognizant security office, facility security officer, contracting officer, and primary contracting officer representative (PCOR/COR) for the contract.

SEE CONTINUATION PAGE

15. INSPECTIONS. (Continued) Defense Security Service is relieved of all inspection responsibility within USSOCOM, Component (JSOC, AFSOC, NSWC, MARSOC, or USASOC), or Theater Special Operation Command (SOCNORTH, SOCCENT, SOCEUR, SOCPAC, SOCSOUTH, SOCAFRICA or SOCKOR) owned and operated facilities but retains responsibility for all non-SCI classified material released to or developed under the contract and held within the contractor's facility.

Continuation of Page 4 of 6

Ref 2b: Subcontracting of this effort must be approved by HQ USSOCOM prior to award. Forward requests and draft Subcontract DD FM 254s to the Certifying Official identified in Item 16 and USSOCOM Industrial Security (IndustrialSecurity@socom.mil).

(IAW USSOCOM R 380-9, Industrial Security, please allow 10 duty days for review/approval).

Ref 7: See guidance in Ref 2b.

Ref 8a: Additional performance locations, both CONUS and OCONUS, will be required based on specific requirements of individual task orders.

Ref 8: Performance Locations (Continued):

a. TBD Company b. TBD CAGE Code c. Defense Security Service (TBD)

a. USSOCOM b. N/A c. HQ USSOCOM SOCS-Z-SM 7701 Tampa Point Blvd MacDill AFB, FL 33621-5323

a. USASOC b. NA c. Commander, USASOC AOIN-SOD 2929 Desert Storm Drive, Stop A Fort Bragg, NC 28310

a. JSOC b. NA c. HQ JSOC

ATTN: JSOC-SD

P.O. Box 70239 Fort Bragg, NC 28307

a. AFSOC b. N/A c. 1st Special Ops Wing IP Office

212 Lukasik Avenue, Ste. 230 Hurlburt Field, FL 32544

a. NSWC b. N/A c. Commanding Officer, NSW

2000 Trident Way San Diego, CA 92155

a. MARSOC b. N/A c. Commander, MARSOC Bldg RR 400 Rifle Range Rd Camp Lejeune, NC 28542-0116

a. SOCCENT b. N/A c. SOCCENT Security 7561 Blackbird St, Building 1043 MacDill AFB, FL 33621-5101

a. SOCKOR b. N/A c. SOCKOR Security USAG-Yongsan BLDG 1262

Galwall-dong 104 Gate #17 Camp Kim, Yongsan-gu, Seoul, Korea 140-012

a. SOCSOUTH b. N/A c. SOCSOUTH Security 29401 125TH Ave Building 600

Homestead ARB, FL 33039

Item 13 Security Guidance. (Continued):

Ref 10j: Controlled Unclassified Information (CUI) provided under this contract shall be safeguarded as specified in the FOUO Addendum included with this specification.

Ref 10k: NIPRNET/SIPRNET access required at government facilities only.

mailto:IndustrialSecurity@socom.mil

Continuation of Page 5 of 6

Ref 11c: The contractor requires access to classified source data up to and including SECRET level in support of the work effort.

Contractor will reference the appropriate security classification guidance when generating or deriving classified material or hardware. All classified information received or generated will be properly stored and handled according to the markings on the material. All classified information received or generated is the property of the U.S. Government. At the termination or expiration of this contract, the U.S.

Government will be contacted for proper disposition instructions.

Ref 11f: Classified performance in locations other than the United States, Puerto Rico, U.S. Possessions and Trust Territories is restricted to SOCKOR, Seoul South Korea.

Ref 11l: Controlled Unclassified Information (CUI) provided under this contract shall be safeguarded as specified in the FOUO Addendum included with this guide.

Ref 11m: Access to all USSOCOM facilities requires contractors to possess a minimum of a SECRET clearance.

Ref 11m: Contractor will be authorized to courier classified information up to the SECRET in performance of official duties upon approval of and designation by the COR, PM and/or SSO.

Continuation of Page 6 of 6

PROTECTING "FOR OFFICIAL USE ONLY" (FOUO) INFORMATION

(Updated June 2014)

1. GENERAL:

a. The "For Official Use Only" (FOUO) marking is assigned to information at the ti.me of its creation in a DOD User Agency. It is not authorized as a substitute for a security classification marking but is used on official government information that may be withheld from the public under exemptions 2 through 9 of the Freedom of Information Act (FOIA).

b. Other non-security markings, such as "Limited Official Use" and "Official Use Only" are used by non-DOD User Agencies for the same type of information and should be safeguarded and handled in accordance with instruction received from such agencies.

c. Use of the above markings does not mean that the information cannot be released to the public under FOIA, only that it must be reviewed by the Government prior to its release to determine whether a significant and legitimate government purpose is served by withholding the information or portions of it

2. MARKINGS:

a. Unclassified documents containing FOUO information will be marked "UNCLASSIFIED//For Official Use Only" or "U//FOUO" at the bottom of the front cover (if any), on the first page, on each page containing FOUO information , on the back page, and on the outside of the back cover (if any). Each paragraph containing FOUO information shall be marked as such.

b. Within a classified document, an individual page that contains both FOUO and classified information will be marked at the top and bottom with the highest security classification of information appearing on the page. Individual paragraphs shall be marked at the appropriate level be it classified, unclassified, or FOUO. An individual page that ONLY contains FOUO and unclassified information shall be marked “FOR OFFICIAL USE ONLY” or the highest classification of the entire document at the top and bottom of the page.

If an individual portion contains FOUO information but no classified information, the portion will be marked, "FOUO."

c. Mark other records, such as computer print outs, photographs, films, tapes, or slides "FOR OFFICIAL USE ONLY" so that the viewer knows the record contains FOUO information.

d. Removal of the "For Official Use Only" marking can only be accomplished by the originator or other competent authority. When the "For Official Use Only" status is terminated, all known holders will be notified to the extent practical.

3. DISSEMINATION: "For Official Use Only" information may be disseminated between officials of DOD Components, DOD contractors, consultants, and grantees to conduct official business for the DOD. FOUO information may also be passed to officials in other departments and agencies of the executive and judicial branches to fulfill a government function. Recipients shall ·be made aware of the special handling instructions detailed in this document and that it's exempt from public disclosure under the FOIA utilizing the following statement: "This document contains information EXEMPT FROM MANDATORY DISCLOSURE UNDER THE FOIA".

4. STORAGE: During working hours, "For Official Use Only" information shall be placed in an out-of-sight location if the work area is accessible to persons who do not have a need for the information. During nonworking hours, the information shall be stored to preclude unauthorized access. Filing such material with other unclassified records in unlocked files or desks, is adequate when internal building security is provided during nonworking hours. When such internal security control is not exercised, locked buildings or rooms will provide adequate after- hours protection or the material can be stored in locked receptacles such as file cabinets, desks, or bookcases.

5. TRANSMISSION: "For Official Use Only" information may be sent in the following ways:

a. Mail - FOUO may be sent via first-class mail or parcel post. Bulky shipments may be sent by fourth-class mail.

b. Fax - Normally FOUO may be sent over facsimile equipment. To prevent unauthorized disclosure the following should be considered:

Use of special cover sheets, location of fax machines {both ends), and whether authorized persoru1el are around to receive FOUO information.

c. E-Mail/Websites E-mail may be used on approved secure communication systems or systems utilizing other protective measures such as Public Key Infrastructure (PKI) or transport layer security (e.g., https).

**Make sure documents/methods that transmit FOUO material call attention to any FOUO attachments. **

6. DISPOSITION: When no longer needed, FOUO information must be disposed of in a way that will preclude its disclosure to unauthorized individuals.

7. UNAUTHORIZED DISCLOSURE: Unauthorized disclosure of "For Official Use Only" information does not constitute a security violation but the releasing agency should be informed of any unauthorized disclosure. The unauthorized disclosure of FOUO information protected by the Privacy Act may result in criminal sanctions and disciplinary action may be taken against those responsible.