J-3 DD254.doc

DEPARTMENT OF DEFENSE

1. CLEARANCE AND SAFEGUARDING

SECRET

(The requirements of the DoD Industrial Security Manual apply to all aspects of this effort)

b. LEVEL OF SAFEGUARDING REQUIRED SECRET

a. PRIME CONTRACT NUMBER

FORMCHECKBOX

FORMCHECKBOX

b. SUBCONTRACT NUMBER

b. REVISED (Supersedes all previous specs) Revision No.

Date (YYMMDD)

FORMCHECKBOX

FORMCHECKBOX

FORMCHECKBOX

NO. If Yes complete the following -

Classified material received or generated under ______(Preceding Contract Number) is transferred to this follow-on contract

NO. If Yes complete the following

In response to the contractor's request dated , retention of the identified classified material is authorized for the period of .

6. CONTRACTOR (Include Commercial and Government Entity ( CAGE) Code)

7. SUBCONTRACTOR

8. ACTUAL PERFORMANCE

Access to classified will be at the Government Facilities listed in the contract.

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

Contract is to provide for capacity services communications for DISA Computing Services.

a. COMMUNICATIONS SECURITY (COMSEC)

INFORMATION

FORMCHECKBOX

FORMCHECKBOX

FORMCHECKBOX

FORMCHECKBOX

FORMCHECKBOX

FORMCHECKBOX

FORMCHECKBOX

FORMCHECKBOX

FORMCHECKBOX

e. INTELLIGENCE INFORMATION:

FORMCHECKBOX

FORMCHECKBOX

FORMCHECKBOX

FORMCHECKBOX

FORMCHECKBOX

FORMCHECKBOX

FORMCHECKBOX

FORMCHECKBOX

FORMCHECKBOX

FORMCHECKBOX

FORMCHECKBOX

FORMCHECKBOX

FORMCHECKBOX

FORMCHECKBOX

FORMCHECKBOX

k. OTHER Specify)

FORMCHECKBOX

All positions in support of this contract will be critical sensitive and require IT-I access

DD Form 254, DEC 1999

Previous editions are obsolete

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the industrial

Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public release shall be submitted for approval prior to release

FORMCHECKBOX

Through (Specify):

Public release of classified or sensitive material is not authorized

HQs DISA Public Affairs Office, Washington DC to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes: to challenge the guidance or classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any document/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.

See continuation page

Additional security requirements may be contained with in the DD Form 254 upon award of contract.

Public release of classified and/or controlled unclassified information is not authorized SEE ATTACHED Item 13 for additional security guidance

No

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. (If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.

FORMCHECKBOX

No

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL

BEVERLY L. JONES

b. TITLE Contracting Officer

c. TELEPHONE (Include Area Code)

618-229-9689

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

FORMCHECKBOX

e. ADMINISTRATIVE CONTRACTING OFFICER

FORMCHECKBOX

DISA-Industrial Security, MPS6

f. OTHERS AS NECESSARY DISA Industrial Security MPS6

DD Form 254 Reverse, DEC 1999

Previous editions are obsolete DD FORM 254 – (RFP HC1028-08-R-2008) - Continuation Page 3 of 3

ITEM 13 Continuation

ITEM 13 Continuation

Reference 10j - For Official Use Only (FOUO) Information.

(1) Contractors may disseminate “For Official Use Only” information to their employees and subcontractors who have a need for the information in connection with this contract.

(2) Removal of the “For Official Use Only” (FOUO) marking or release of FOUO material to the public can only be accomplished by the Government Cognizant Authority (GCA).

(3) “For Official Use Only” information shall be stored in locked receptacles such as file cabinets, desks, or bookcases. When such internal security control is not exercised, locked buildings or rooms will provide adequate after-hours protection. During working hours, the information shall be placed in an out-of-sight location if the work area is accessible to persons who do not have a need for the information.

(4) “For Official Use Only” information may be sent via first-class mail or parcel post. Facsimile communications marked FOUO may be transmitted by nonsecure terminals with the FOUO marking intact between U.S. Department of Defense, and other U.S. Government agencies, and U.S. Government support contractors for official purposes.

(5) When no longer needed, FOUO information may be disposed of by shredding each copy into pieces to preclude reconstructing, and placing it in a regular trash container.

(6) Unauthorized disclosure of “For Official Use Only” information does not constitute a security violation, but the GCA shall be informed of any unauthorized disclosure. The unauthorized disclosure of FOUO information protected by the Privacy Act may result in criminal sanctions. Specific guidance may be found in DOD Regulation 5400.7, DOD Freedom of Information Act Program.

Reference 10k – Automated Information Systems (IS) access will be at the IT-I (privileged level). DISA Personnel Security specifically approves AIS access upon receipt of a VAR from the Contractor, which is forwarded via the DISA Computing Services Security Manager.

11 a and e

(1) All classified information received under this contract must be properly protected in accordance with the NISPOM and all other applicable DOD guidelines and is the property of the U.S. Government.

(2) At the termination or expiration of this contract, the contractor shall request disposition instructions for all classified and unclassified project material. The contractor may be directed to properly destroy the material or return it. If classified or unclassified project material is to be retained by the contractor, every effort should be taken to transfer it to a follow-on contract or similar effort, if applicable. This must be done, however, with Contracting Officer (CO) approval. Unless written authorization by the CO to retain specific material for a specific period of time is received, the material shall be returned or destroyed as instructed.

11 l – Other.

(1) The contractor is not authorized to release information, orally, visually, or documentary to anyone not associated with this contract.

(2) All questions regarding security requirements indicated herein will be referred to the Contract Technical Monitor, if one is designated, or the Contracting Officer.

(3) Personnel Security Requirements

(a) Contractor must have a current Facility Security Clearance (FCL) with the Defense Industrial Security

Office (DISCO).

(b) Personnel performing duties under this contract must undergo a Single Scope Background Investigation (SSBI) or Special Background Investigation (SBPR) to be eligible for ADP-I sensitivity level duties on systems. All personnel performing on this contract will be U.S. citizens.

(c) Contractor employees working under this contract will be required to have a minimum Secret security clearance adjudicated by (DISCO) before reporting for work.

(d) Derogatory information or failure to meet or comply with security requirements discovered during the period of employment under this contract may at the discretion of the Government be grounds for termination of an individual contractor employee’s employment.

(e) All visit access requests (VARs) by contractors shall be sent via the Joint Personnel Adjudication System (JPAS) to the DISA VAR Center. The COR/TM must approve the VAR prior to sending the request to the facility being visited. Contractors must also provide a copy of the VAR to the security manager.

(f) The COR/TM must be notified and approve the receipt and/or generation of classified information under this contract.

(g) All classified information received and/or generated under this contract is the property of the U.S. Government regardless of proprietary claims. Upon completion or termination of this contract, the U.S. Government will be contacted for destruction or disposition instructions.

(h) Foreign Nationals will not perform on any area of the contract (classified or unclassified).

(i) Contractor employees will be required to comply with all Government security regulations and requirements.

(j) Initial and periodic refresher security training and briefings must be provided by the Contractor as required by regulations.

(k) Supplemental security training may be provided by Government security personnel.

(l) Failure to comply with security requirements can be cause for termination of employment.

(m) If employment is terminated due to unfavorable personnel security actions or failure to comply with security requirements, the Contractor will provide a suitable replacement.