Attachment J-4 DD Form 254.docx

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort.)

1. CLEARANCE AND SAFEGUARDING

a. FACILITY CLEARANCE REQUIRED Top Secret

b. LEVEL OF SAFEGUARDING REQUIRED None

all previous specs) Revision No.

DATE (YYYYMMDD)

2/28/2011

DUE DATE (YYYYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT? |_| YES |X| NO. If yes, complete the following:

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? |_| YES |_| NO. If yes, complete the following:

In response to the contractor's request dated , retention of the classified material is authorized for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

187 Ballardvale Street, Suite B-205 Wilmington, MA 01887-1062

7. SUBCONTRACTOR

8. ACTUAL PERFORMANCE

DISA Denver, DTC, DISA CSD 6162 S. Willow Drive, Suite 200 Greenwood Village, CO 80111

DISA ISC St. Louis 4300 /Goodfellow Blvd, Bldg 103 St. Louis, MO 63120

DECC Mechanicsburg 5450 Carlisle Pike, PO BOX 2045 Mechanicsburg, PA 17050-0975

DISA Facilities Fort Meade, MD

5540 N. Academy Blvd., Suite 150 Colorado Springs, CO 80918-3696

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

DISA Computing Services Facilities Team Technical Support

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION

b. RESTRICTED DATA

X

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION

X

d. FORMERLY RESTRICTED DATA

X

e. INTELLIGENCE INFORMATION:

(1) Sensitive Compartmented Information (SCI)

X

(2) Non-SCI

X

f. SPECIAL ACCESS INFORMATION

X

g. NATO INFORMATION

X

h. FOREIGN GOVERNMENT INFORMATION

X

i. LIMITED DISSEMINATION INFORMATION

X

k. OTHER (Specify) See Block 13 X

See Block 13

DD Form 254, DEC 1999 (EF) PREVIOUS EDITIONS ARE OBSOLETE

12. PUBLIC RELEASE. Any Information (Classified Or Unclassified) Pertaining To This Contract Shall Not Be Released For Public Dissemination Except As Provided By The Industrial Security Manual Or Unless It Has Been Approved For Public Release By Appropriate U.S. Government Authority. Proposed Public Releases Shall Be Submitted For Approval Prior To Release |_| Direct |X| Through (Specify):

HQ DISA, Public Affairs Office, Washington, DC to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs) * for review.

* In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

Security. This section shall be considered a supplement to block 13 of the Government provided DD 254, Contract Classification Specification. The work to be performed under this contract is up to and including the Top Secret level. The company must have a final or interim Secret Facility Clearance (FCL) from the Defense Industrial Security Clearance Office (DISCO). The following positions require Top Secret clearance:

Electrical Engineer – 1 Facility Engineer – 1

Continued Below

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract. (If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use item 13 if additional space is needed.)

|_| YES |X| NO

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. (If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use item 13 if additional space is needed.)

|_| YES |X| NO

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

DISA/DITCO/PL8313

2300 EAST DRIVE

BLDG. 3600

SCOTT AFB IL 62225-5406

b. SUBCONTRACTOR

e. SIGNATURE

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

DD Form 254 (BACK), DEC 1999

Section 13 (continued) Security:

Security. This section shall be considered a supplement to block 13 of the Government provided DD 254, Contract Classification Specification. The work to be performed under this contract is up to and including the Top Secret level. The company must have a final or interim Secret Facility Clearance (FCL) from the Defense Industrial Security Clearance Office (DISCO). The following positions require Top Secret clearance:

Electrical Engineer – 1 Facility Engineer – 1

a. DOD 5200.2-R, DOD Personnel Security Program.

b. DISAI 240-110-36, Personnel Security.

c. DOD 5220.22-M, National Industrial Security Program Operating Manual.

d. DOD 5220.22-R, Industrial Security Regulation.

e. CSD Security Handbook.

The following security requirements shall apply to this effort.

Facility Security Clearance. The work to be performed under this contract is up to and including the Top Secret level and positions are IT-I for systems access. Therefore the company must have a final or interim Top Secret Facility Clearance (FCL) from the Defense Industrial Security Clearance Office (DISCO).

Security Clearance and Information Technology (IT) Level. All personnel performing on this contract will be U.S. citizens. Contract employees require a minimum of interim Secret security clearance and interim IT-I eligibility when performance starts.

Investigation Requirements. Personnel performing duties under this contract must undergo a favorably adjudicated Single Scope Background Investigation (SSBI) as a minimum investigation. The SSBI will be maintained current within 5-years and requests for Special Background Periodic Review (SBPR)/Phased Periodic Reinvestigation (PPR) will be initiated by DISA 6-months prior to the 5-year anniversary date of the previous SSBI, SBPR or PPR.

Adjudication for IT Access. Adjudication of investigations for granting of interim or final IT-I access will be accomplished through DISA Personnel Security. An exception to this is that individual contractor employees with an SSBI or SBPR (within a 5-year scope) that is already favorably adjudicated for a Top Secret or Secret security clearance by any of the Department of Defense adjudication facilities (DISCO, DIA, ACCF, AFCAF, DONCAF, WHSCAF) or other approved adjudication facilities will automatically be accepted for final IT-I access.

Interim IT Access. Pending completion of an SSBI and final adjudication for security clearance, contractor employees may be granted interim authorization to perform duties designated as IT-I. The interim authority for IT sensitive positions is the DISA Personnel Security Office. Following are the requirements, which must be met prior to granting of interim IT-I authorization:

Visit Authorization Letters/Requests. The Contractor Facility Security Officer (FSO) will forward a Visit Authorization Letter/Request (VAL/VAR) to the Contracting Officer’s Representative (COR)/Task Monitor identified in the Statement of Work (SOW)/Performance Work Statement (PWS) for all employees prior to the beginning of each contracting/task order period of performance and as new contractor employees are assigned to the contract.

The VAL/VAR should be sent via one of two methods. The preferred method is to e-mail the VAL/VAR to the COR. Because it contains sensitive information covered by the Privacy Act, the VAL/VAR should be sent using in a locked “Zip” file in one e-mail and then followed-up by another e-mail with the password to unlock the Zipped file. The alternative method to transmit the VAL/VAR is via facsimile (Fax) to the COR. Prior coordination with the COR should be made via phone to ensure the method of transmission is agreed upon and properly secure.

The VAL/VAR shall be on company letterhead or pre-fabricated form and contain the following information:

Contract number with start and end dates (period of performance) Government Task Monitor name and telephone number Complete legal name of employee(s) Social Security Number (Full SSN required) Citizenship of the individual Date and place of birth (state) Individual’s security clearance level, date granted, adjudication facility name, e.g. DISCO Type of personnel security investigation (PSI) pending or completed e.g. ANACI, SSBI Date PSI closed/completed Individual’s e-mail address FCL and Commercial and Government Entity (CAGE) Code Name, title, phone, fax number and signature of cognizant official who certifies the authenticity of the individual/facility clearance data found on the VAR/VAL. The certifying official may NOT be anyone listed on the VAR/VAL.

The COR will forward the VAR/VAL to the appropriate DISA Security Manager or VAR Center for review and verification. Once verified, the appropriate DISA Security Manager submits a request for investigative service to DISA Security Personnel.

SSBI Requests. The request for SSBI, thru e-QIP, must be submitted by DISA Personnel Security to the Office of Personnel Management (OPM). The contracting company WILL NOT submit contractors for Secret IT-I contracts. The e-QIP will be initiated and reviewed by DISA Personnel Security and approved for Interim access if the contractor has a previously favorable NAC and a favorably reviewed SSBI e-QIP. If the contractor DOES NOT have a previously favorable NAC the e-QIP will be reviewed, if there are issues on the case the process will stop and the contracting company will supply a new contractor to fill the position. If the case has no issues it will be submitted to OPM. Once the NAC portion closes FAVORABLY, an Interim IT-I will be granted. This process takes approximately 2-4 weeks once submitted to OPM. If at any time there are issues on the NAC portion of the SSBI, the investigation will be cancelled and a new contractor will be supplied by the company.

For contractors that are submitting SBPR’s or SSBI’s that have a previously favorable NAC and have a new issue reflected on the e-QIP that is submitted to DISA, each case will be reviewed and approved or found ineligible by DISA Personnel Security on a case by case basis.

New Contractor Employees. All new contractor employees are not cleared to report for work until they are cleared through the appropriate DECC Security Manager.

Point of Contacts. DISA Security Personnel can be contacted for security related questions:

For Industrial Security related issues:

Primary: Regina Lee, phone (703) 607-4887 (DSN 327) Alternate: Steven Mollish, phone: (703) 607-4550 (DSN 327) Defense Information Systems Agency ATTN: MPS61, Industrial Security Bldg 12, Room 1625 701 South Courthouse Road, Arlington, VA 22204

For Personnel Security related issues to include interim IT access requests:

Primary: Anni Otis, phone: (703) 607-7926 (DSN 327) Alternate: Mark Ridley, phone: (703) 607-6292 (DSN 327) Defense Information Systems Agency ATTN: MPS62, Personnel Security Bldg 12, Room 1625 701 South Courthouse Road, Arlington, VA 22204

Physical, Information and other Miscellaneous Security Requirements. Contractor personnel must comply with local security requirements for entry and exit control for personnel and property at the government facility.

Contractor employees will be required to comply with all Government security regulations and requirements. Initial and periodic security training and briefings will be provided by Government security personnel. Failure to comply with security requirements can be cause for termination of employment.

The Contractor shall not divulge any information about DoD files, data processing activities or functions, user identifications, passwords, or any other knowledge that may be gained, to anyone who is not authorized to have access to such information. The Contractor shall observe and comply with the security provisions in effect at the DoD facility. Identification shall be worn and displayed as required.

DISA retains the right to request removal of contractor personnel regardless of prior clearance or adjudication status, whose actions, while assigned to this contract, clearly conflict with the interest of the Government. The reason for removal will be fully documented in writing by the Contracting Officer (CO). When and if such removal occurs, the contractor shall, within 15 working days, assign qualified personnel to the vacancy(ies) thus created.