Technical Exhibit 4 DD 254 H9223925R0008 Psychological Assessment Support Services.pdf

Please wait...

If this message is not eventually replaced by the proper contents of the document, your PDF viewer may not be able to display this type of document.

You can upgrade to the latest version of Adobe Reader for Windows®, Mac, or Linux® by visiting http://www.adobe.com/go/reader_download.

For more assistance with Adobe Reader visit http://www.adobe.com/go/acrreader.

Windows is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Mac is a trademark of Apple Inc., registered in the United States and other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.

PREVIOUS EDITION IS OBSOLETE.

Page of

DD FORM 254, APR 2018

NEEDS DD67

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the National Industrial Security Program (NISP) apply to all security aspects of this effort involving classified information.)

OMB No. 0704-0567 OMB approval expires:

June 30, 2025 The public reporting burden for this collection of information, 0704-0567, is estimated to average 36 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, at whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

RETURN COMPLETED FORM AS DIRECTED IN THE INSTRUCTIONS.

1. CLEARANCE AND SAFEGUARDING

2. THIS SPECIFICATION IS FOR: (X and complete as applicable.)

3. THIS SPECIFICATION IS: (X and complete as applicable.)

a. ORIGINAL (Complete date in all cases.)

b. REVISED (Supersedes all previous specifications.)

4. IS THIS A FOLLOW-ON CONTRACT?

If yes, complete the following:

Classified material received or generated under

5. IS THIS A FINAL DD FORM 254?

If yes, complete the following:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

7. SUBCONTRACTOR(S) (Click button if you choose to add or list the subcontractors -- but will still require a separate DD Form 254 issued by a prime contractor to each subcontractor)

8. ACTUAL PERFORMANCE (Click button to add more locations.)

10. CONTRACTOR WILL REQUIRE ACCESS TO: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

e. NATIONAL INTELLIGENCE INFORMATION:

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. See instructions. Provide details in Blocks 13 or 14 as set forth in the instructions.)

12. PUBLIC RELEASE

Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the National Industrial Security Program Operating Manual (NISPOM) or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified here with at least office and phone contact information and if available, an e-mail address. (See instructions)

13. SECURITY GUIDANCE

The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended.

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. The field will expand as text is added. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. Also allows for up to 6 internal reviewers to digitally sign. See instructions for additional guidance or use of the fillable PDF.)

List of Attachments (All Files Must be attached Prior to Signing, i.e., for any digital signature on the form)

14. ADDITIONAL SECURITY REQUIREMENTS

Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the CSO. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

15. INSPECTIONS

Elements of this contract are outside the inspection responsibility of the CSO.

If Yes, explain and identify specific areas and government activity responsible for inspections. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

17. CERTIFICATION AND SIGNATURES

Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. Upon digitally signing Item 17h, no changes can be made as the form will be locked.

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICIAL

9.0.0.2.20120627.2.874785 DD 254, "DoD Contract Security Classification Specification"

(See Instructions) - Select from drop-down list: 2

TBD

Fort Bragg, NC 28310

Fort Bragg, NC

(see item 13) Enter general unclassified description of this procurement.: THIS DD FORM 254 WAS PREPARED SOLELY FOR CONTRACT SOLICITATION, AND SHALL NOT BE USED FOR CONTRACT AWARD. IAW the Federal Acquisition Regulation Part 4, 4.402 and 4.403; A PROPERLY PREPARED AND COORDINATED DD FORM 254 CONTAINING EACH LOCATION OF CONTRACTOR OR SUBCONTRACTOR PERFORMANCE AND CORRESPONDING CAGE CODE WILL BE ISSUED UPON CONTRACT AWARD. IF THIS SOLICITATION DD254 IS ATTACHED TO THE AWARDED CONTRACT THE COMPANY IS TO IMMEDIATELY CONTACT THE KO.

Assist with Special Operations candidate assessment and selection, psychological training support, and operational psychological research, development, testing, and evaluation.

Tentative period of performance (PoP) 1 August 2025 to 31 July 2030

(A biennial review of the DD Form 254 will be conducted per DoDM 5220.32, VOL 1, if PoP goes beyond 2 years; see item 13)

Biennial Review required: 2027

Fort Bragg, NC

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. The field will expand as text is added. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. Also allows for up to 6 internal reviewers to digitally sign. See instructions for additional guidance or use of the fillable PDF.): THIS DD FORM 254 WAS PREPARED SOLELY FOR CONTRACT SOLICITATION, AND SHALL NOT BE USED FOR CONTRACT AWARD. IAW the Federal Acquisition Regulation Part 4, 4.402 and 4.403; A PROPERLY PREPARED AND COORDINATED DD FORM 254 CONTAINING EACH LOCATION OF CONTRACTOR OR SUBCONTRACTOR PERFORMANCE AND CORRESPONDING CAGE CODE WILL BE ISSUED UPON CONTRACT AWARD. IF THIS SOLICITATION DD254 IS ATTACHED TO THE AWARDED CONTRACT THE COMPANY IS TO IMMEDIATELY CONTACT THE KO.

(Ref. 1.a.) Employees are restricted to classified access up to and including SECRET only.

(Ref. 1.b.) Safeguarding classified information/material in support of this contract is NOT authorized at the company’s facility.

(Ref. 2.b.) IAW 32 CFR Part 117.17, The Prime Contractor is responsible to prepare the DD Form 254 for subcontracting and to ensure all security requirements identified in the government provided DD Form 254 (for the prime contract) are reflected in the contractor prepared DD Form 254 for subcontracting. Subcontract DD Form 254s must be approved by HQ USASOC prior to award. Forward requests and draft subcontract DD Form 254s for review/approval/signature to the Contracting Officer’s Representative (COR)/Program Manager (PM) and USASOC Industrial Security Specialist (ISS), prior to award.

(Ref. 5.) Upon completion or termination of the classified contract, or sooner when the purpose of the release has been served, the contractor will return all classified information received, collected, and/or generated in performance of this contract to the source from which received unless retention or other disposition instructions are authorized in writing by the Government Contracting Agency/Activity.

- The contractor is responsible for tracking and returning all government information (see CUI addendum for safeguarding CUI) furnished or generated under this contractor.

- The contractor will account for and return all Common Access Cards (CACs) to Contracting Officer's Representative, Program Manager, or Trusted Agent upon completion or termination of the classified contract, termination of employment, or suspension of classified clearance or access of any contractor employee.

- The contractor will out-process with organization security office (S2/G2) upon completion/termination of the classified contract, termination/resignation of employment or suspension of classified clearance/access of any contractor employee. Security badges, installation entry passes/vehicle decals issued to contractor personnel will be returned to the appropriate issuing office as required.

(Ref. 7.) See guidance in Ref.2.b.

(Ref. 8.) Additional performance locations may be identified upon contract award.

Performance locations are subject to change without a revision of the DD Form 254.The contractor may request additional performance work locations, via a memorandum, from the contractor PM to the local government lead with approval by COR/TPOC/KO.

- Any other CONUS/OCONUS locations as required for contract performance under this contract shall be directed in writing by the Contracting/User Organization COR.

- Contractors shall NOT represent themselves as a government (GG, GS, etc) employee (of HQ USASOC, HQ USSOCOM, the Department of the Army, or of any other government agency).

- Requiring Activity (RA) Security POCs shall utilize the security clearance system of record, DISS (Defense Information System for Security) to verify the contractor's "access" and correct category in relation to their visit.

- The Contractor Company FSO/Contract POC must notify the RA Security Office of Personnel Terminations and/or transfers to additional contracts/task orders/delivery orders.

(Ref. 9.) Unless DD FORM 254 revision is required due to change in the security requirements of the effort or there is a change in the contractor’s Facility Clearance (FCL) status, the responsible Contracting Officer’s Representative/Program Manager (COR/PM) must conduct a review of the DD FORM 254 and associated Individual Work Plan, Performance Work Statement/Statement of Objectives/Statement of Work every 24 MONTHS (BIENNIALLY) in order to validate and/or update the requirements of the effort as required by DoDM 5220.32-V1, National Industrial Security Program: Industrial Security Procedures for Government Activities. Documentation of review (email is sufficient) should be forwarded to HQ USASOC Industrial Security via NIPRNet.

(Ref. 10.i.) Alternative Compensatory Control Measures (ACCM) is governed by DoDM 5200.01-V3, DoD Information Security Program: Protection of Classified Information.

- The contractor shall also operate under HQ, USASOC (and the User Agency’s) program security plans and security classification guidance as well as AR 380-5 and 32 CFR Part 117, for controlling /monitoring the transportation / transmission of ACCM classified information / materials associated with this contract.

- Personnel assigned to this contract may require access to ACCM information as determined by the COR and local ACCM control officer.

- Per DEPSECDEF guidance in April 2024, access to ACCM information requires current FINAL eligibility at the appropriate level.

- Approval to courier/hand carry shall be specifically authorized /approved in writing by the:

o User Organization COR.

o Written approval by the User Organization ACCM PCO.

(Ref. 10.j.) Controlled Unclassified Information (CUI) provided under this contract shall be marked, safeguarded and protected IAW the CUI Addendum included with this specification as well as DoDI 5200.48.

(Ref. 10.k.) Applicable Security Classification Guides (SCGs) will be provided by the program KO/COR.

Contractor employees who require access to government IT under the terms of a government contract must be determined to be trustworthy by a designated Government official prior to grant of IT access. Access trustworthiness determinations will be processed in accordance with DOD 5200.2–R, AR 25–2 and AR 380-67.

DoDD 8570.01, DoD 8570.01-M, and AR 25-2 establishes cybersecurity policy, roles, and responsibilities. All contractor personnel with cyber security functions must comply with DoD and Army training requirements within six months of employment IAW DFAR 252.239.7001.

- Cybersecurity: Prevention of damage to, protection of, and restoration of computers, electronic communications systems, electronic communications services, wire communications, and electronic communications, including information contained therein, to ensure their availability, integrity, authentication, confidentiality, and nonrepudiation. Defined in National Security Presidential Directive-54/Homeland Security Presidential Directive-23.

- Information Technology (IT): Any equipment or interconnected system or subsystem of equipment that is used in the automatic acquisition, storage, manipulation, management, movement, control, display, switching, interchange, transmission, or reception of data or in-formation by the executive agency. For purposes of the preceding sentence, equipment is used by an executive agency if the equipment is used by the executive agency directly or is used by a contractor under a contract with the executive agency that: 1) requires the use of such equipment; or 2) requires the use, to a significant extent, of such equipment in the performance of a service or the furnishing of a product. The term IT includes computers, ancillary equipment, software, firmware and similar procedures, services (including support services), and related resources.

- IAW AR 380-49, the minimum background investigation requirement for access to Government information systems will be determined in accordance with AR 25–2.

Authorized Users

- Meet DOD cybersecurity awareness requirements, in accordance with DOD 8570.01–M; establish an ATCTS account prior to gaining network access; and complete and record awareness training annually.

- Meet the security clearance requirements in AR 380–67 for the classification level of the information processed by the IT system they are accessing.

- Contractor personnel may be subject to administrative and/or judicial sanctions if they knowingly, willingly, or negligently compromise, damage, or place IT or information at risk by violating the user agreement. Individuals involved with the misuse of IT or prohibited activities may be subject to suspension of computer account access for a defined period of time and/or required to complete the appropriate remedial training.

Use of Government Owned Computers:

The contractor may be provided with government owned computers at government facility(s) for processing UNCLASSIFIED/ Controlled Unclassified Information (CUI)/CLASSIFIED information provided, collected, generated and/or developed during the contract’s period of performance. The purpose of the government owned computer is to conduct business as required by this contract. Any other use of the government owned computer by the contractor is prohibited.

- The contractor is not authorized to process any government owned information on any personally owned computers. This is to include any government information provided, collected, generated and/or developed during the contract’s period of performance.

- Contractors requiring access to restricted areas, sensitive information or government equipment and/or unclassified networks (i.e., Enterprise NIPRNet) shall be limited to those contractor individuals who meet the requirements of AR 25-2 and AR 380-67.

- Secret Internet Protocol Network (SIPRNET) access may be required and will require a NATO briefing prior to contractor personnel being authorized access to the SIPRNET. Contractor personnel shall not access, download, or further disseminate any special access data (i.e. Intelligence, NATO, COMSEC, etc.) outside the execution of the defined contract requirements and without the guidance and written permission of the KO/COR. Contractor access to SIPRNET via government accounts is restricted to only sites directly related to meeting the requirements of this contract as validated by the KO/COR and authorized IAW the Contract DD FORM 254, the Statement of Work (SOW)/Performance Work Statement (PWS).

o Contractor personnel requiring a SIPRNET account must follow agency account request requirements.

(Ref 11.a.) Contractor performance is restricted to locations identified in item 8.a.

- Cleared contractor personnel are required by 32 CFR Part 117, National Industrial Security Program Operating Manual (NISPOM), to provide supplemental controls.

- Releasing DoD (Government) activity shall furnish Security Classification Guidance (SCG), if required.

(Ref. 11.m.) Access to all restricted USASOC facilities require contractors to possess a minimum of a SECRET clearance. Reference the SOW/PWS for position specific clearance level requirements. Contractor personnel without the appropriate security clearance are not authorized access to classified information, information systems or restricted facilities where classified is processed.

- Contractors performing on this contract at government installations are required to conduct command and unit specific security training as directed by the Government agency/activity and/or the SOW/PWS. Required training will be provided by the responsible government agency but may be supplemented with FSO directed training if supporting documentation can be provided. The KO/COR will ensure all personnel supporting this contract are in compliance with training requirements, which may include but is not limited to:

Initial/Refresher Information Security (INFOSEC) Derivative Classification Controlled Unclassified Information (CUI) Operations Security (OPSEC) Antiterrorism/Force Protection (AT/FP) Threat Awareness and Reporting (TARP) Cyber Awareness

- Additional requirements may be mandated and are authorized by the agency/activity where primary performance location is identified.

(Ref. 12.) PUBLIC RELEASE OF ACCM IS NOT AUTHORIZED. Per DODM 5205.02 contractors will not disclose classified or unclassified information pertaining to a classified contract to the public without prior review and clearance as specified.

The GCA is responsible for and has overall approval authority for the public release of any unclassified information related to the classified contract or subcontract.

The contractor is responsible for obtaining the approval of the KO prior to release of any information received or generated under the contract. Requests must be forwarded through the responsible Contracting Officer’s Representative/Program Manager and Contracting Official (Item 16).

(Ref. 13.) User Organizations COR Responsibilities: The User Organization COR is responsible for ensuring contractor employees are briefed (as required) on Local / Applicable Directives, Regulations, Policies and Procedures concerning classified contract performance, materials, information, and “need-to-know” for contract performance under this contract.

(Ref. 17.) Certification and Signatures: The certification of this DD FORM 254 confirms it has been prepared and distributed in accordance with DoD policy guidance for those agencies covered by the NISP. Once certified this is a legal document and should not be altered in any way.

(Ref. 18.) Required Distribution: In accordance with Army Regulation 380-49 and the Federal Acquisition Regulation (FAR) -- Part 4, Subpart 4.4 - Safeguarding Classified Information Within Industry, the Contracting Officer is responsible for the disbursement of the DD FORM 254 to the Contractor, User Agency, and other locations as identified in Item 8(a). Security personnel DO NOT possess the authority to release the form to the vendor.

Ensure a copy of the DD Form 254 is provided to the government supporting security office for all designated performance locations listed in item 8 upon contract award.

PROTECTING “CONTROLLED UNCLASSIFIED INFORMATION” (CUI)

CUI Addendum (Updated March 2021)

1. GENERAL:

a. Controlled Unclassified Information (CUI) is not a security classification but designates unclassified information that requires any safeguarding or dissemination control per DoD Instruction 5200.48, “Controlled Unclassified Information” (6 March 2020).

b. With the implementation of DoDI 5200.48, DoDI 5200.01, Volume 4, “DoD Information Security Program: Controlled Unclassified Information” (24 February 2012, as amended), has been cancelled and “For Official Use Only” (FOUO) and is no longer authorized. All new documents shall be marked in accordance with the guidance below.

c. In order to balance the need to safeguard CUI with the public interest the CUI Registry, established by DoDI 5200.48, lists categories of CUI Basic/Specified and identifies basis for controls, and includes guidance on handling procedures.

d. There are two subsets of CUI.

i. CUI Basic is the subset of CUI for which law, regulation, or government policy does not set out specific handling or dissemination controls. CUI Basic handling and dissemination controls are the same as previously used for FOUO.

ii. CUI Specified is the subset of CUI for which law, regulation, or government policy contains specific handling controls that differ from CUI Basic. The government will provide marking and handling guidance separately for CUI Specified.

e. Remarking legacy FOUO documents is not required if they remain under DoD control. When needed, FOUO information does not automatically become CUI, so the material must be reviewed by the information owner to determine if it meets the CUI requirements and marked appropriately.

f. When responding to FOIA requests, the responsible DoD agency must base its decision on the content of the information and applicability of any of the FOIA statutory exemptions regardless of whether an agency designates or marks the information as CUI.

2. DESIGNATION as CUI: Designating CUI occurs when an authorized holder, consistent with DoDI 5200.48 and the CUI Registry, determines that a specific item of information falls into a CUI category or subcategory. The information must be designated as either CUI Basic or CUI Specified, and the authorized holder must ensure that appropriate markings are applied to documents to ensure recipients are aware of the CUI status. See the associated Security Classification Guide (SCG) or other guidance provided by the Government Contracting Agency (GCA) for specific categories of CUI related to this contract and guidance on storage, handling, and dissemination.

3. MARKING:

a. Unclassified documents containing CUI will be marked CUI at the top & bottom of each page. As a best practice each “portion” (i.e., titles, subject lines, paragraphs, bullets, charts, etc.) containing CUI may be Portion Marked (CUI). If portion marks are used, then Unclassified portions will be Portion Marked (U). Do not use (U//CUI).

b. The government will provide marking, handling, and dissemination guidance separately for any CUI Specified information. For classified contracts, this guidance will be contained in the associated SCG.

c. The following CUI Designation Indicator information will be included on the first/title page or cover of all unclassified documents containing CUI:

Controlled by: [Name of DoD Component and Office] CUI Category: [List of Category or Categories of CUI] Distribution/Dissemination Control: [Use “None” for CUI Basic/As required for CUI Specified) POC: [Phone Number and/or E-mail]

d. Classified documents containing CUI will NOT include CUI in the banner marking at the top and bottom of each page. Each paragraph that contains only CUI will be portion marked (CUI). All other paragraphs will be marked according to their classification. Do not “co-mingle” CUI with classified information. The above CUI Designation Indicator information must be included on the first page or cover (same as unclassified documents). Additionally, the following statement must be included on the first page of documents that contain both CUI and classified information:

This content is classified at the [insert highest classification level of the document] level and may contain elements of controlled unclassified information (CUI), unclassified, or information classified at a lower level than the overall classification displayed. This content shall not be used as a source of derivative classification; refer to [cite specific reference or applicable Security Classification Guide]. It must be reviewed for both Classified National Security Information (CNSI) and CUI in accordance with DoDI 5230.09 prior to public release.

4. PROCESSING: Unclassified Automated Information Systems (AIS) used to process CUI under this contract must meet the basic security requirements listed in the NIST SP 800-171 REV 2, “Protecting Controlled Unclassified Information in Non-Federal Systems and Organizations”, 21 February 2020. AIS accredited and approved for processing classified information under this contract are also approved to process DoD CUI.

5. DISSEMINATION: CUI may be disseminated between officials of DoD Agencies, DoD contractors, consultants and grantees to conduct official business for the DoD provided the dissemination is consistent with controls imposed by a Distribution Statement or Limited Dissemination Controls (LDC). Guidance on Distribution Statements and LDCs will be provided separately by the government for any prescribed CUI Specified information. For classified contracts, this information will be contained in the program SCG. CUI always requires Foreign Disclosure Decision before release outside of DoD Agencies, DoD contractors, consultants, and grantees.

6. STORAGE: During working hours, to prevent unauthorized access, do not leave CUI unattended, read or discuss around unauthorized personnel. CUI shall be placed in an out-of-sight location if the work area is accessible to persons who do not have a need for the information. During non-working hours, the information shall be stored to preclude unauthorized access. Filing such material with other unclassified records in unlocked files or desks, is adequate when internal building security is provided during non-working hours. When such internal security control is not exercised, locked buildings or rooms will provide adequate after-hours protection or the material can be stored in locked receptacles such as file cabinets, desks, or bookcases.

7. TRANSMISSION: CUI may be transmitted using the following:

a. Mail – CUI may be sent via first class mail or parcel post. Bulk shipments may be sent by fourth class mail. Contents must be properly marked, but no markings will appear on the outer wrapper.

b. Fax – Normally CUI may be sent via Facsimile equipment. To prevent unauthorized disclosure, coversheets should be used, the locations of both fax machines should be considered, and availability of an authorized recipient at the receiving end should be confirmed. Secure classified fax machines may be used without the above verifications.

c. E-Mail/Web Sites – E-mail may be used on approved secure communication systems or systems using other protective measures such as Public Key Infrastructure (PKI) or transport layer security (e.g., https). E-mail messages must be appropriately marked to identify CUI status. Personnel will not use unofficial or personal email accounts, messaging systems, or other non-DoD information systems, except approved government contractor systems to conduct official business involving CUI.

d. Video Teleconferencing – Only use Government Agency approved secure, encrypted video conferencing and collaborative platforms (i.e., SVTC, etc.). CUI may not be discussed over commercially available video conferencing applications.

e. Avoid wireless transmission unless no other means are available.

8. DESTRUCTION: When no longer needed, CUI must be disposed of in a way that will make it unreadable, indecipherable, and irrecoverable. Use of approved sensitive/classified material destruction devices is recommended. (ISOO CUI Notice 2019-03, “Destroying Controlled Unclassified Information in Paper Form”, 15 July 2019)

9. UNAUTHORIZED DISCLOSURE: Report misuse, mishandling, or Unauthorized Disclosure of CUI to the Unauthorized Disclosure Program Management Office, the Controlling Agency, and the appropriate Military Department Counterintelligence Organization. While Unauthorized Disclosure of CUI does not constitute a security violation, a formal security inquiry/investigation is required if disciplinary action will be taken against the individual(s) responsible. Unauthorized Disclosure of certain CUI, such as export controlled-technical data, may also result in civil and criminal sanctions against responsible persons based on procedures codified in relevant law, regulation, or government-wide policy.

Program Support Specialist, DPA, USASOC

- FSO will submit a Visit Authorization Request (VAR) to the appropriate Security Management Office (SMO) via DISS.

- All classified information received or generated is the property of the U.S. Government. At the termination or expiration of this contract, the U.S. Government will be contacted for proper disposition instructions.

- Classified Materials shall be marked, handled, stored and protected IAW AR 380-5 and the appropriate Security Class Guide(s) (SCG). If any classified information is generated in the performance of this contract at the identified location(s), the contractor shall apply derivative classification and markings consistent with the source material.

o IAW 32 CFR Part 117.13(c)(4), all employees authorized to make derivative classification decisions will be sufficiently trained annually.

o The FSO will retain records of the date of the most recent training (initial or refresher) and the type of training received. Annual Security Refresher Training is also required IAW the 32 CFR Part 117.12. Training can be taken at the GOV customer location or via the CDSE website.

- Any classification questions beyond the scope of the classification guide, or that cannot be derivatively classified shall be directed to the User Organization COR.

- The prime contractor and any subcontractors will adhere to the Operations Security (OPSEC) provisions of DoDM 5205.02, if no OPSEC Plan is provided while working at government facilities or 32 CFR Part 117 while working at contractor facilities.

(Ref. 10.i.) ACCM information is governed by DoDM 5200.01-V3; All personnel who will require access to ACCM materials will be required to be briefed and/or verified by the Organization ACCM PCO prior to being granted access to ACCM.

Fort Bragg NC