J-5_DD254.doc

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort.)

1. CLEARANCE AND SAFEGUARDING

a. FACILITY CLEARANCE REQUIRED

SECRET

b. LEVEL OF SAFEGUARDING REQUIRED

FORMCHECKBOX

a. PRIME CONTRACT NUMBER

FORMCHECKBOX

FORMCHECKBOX

b. SUBCONTRACT NUMBER

FORMCHECKBOX

b. REVISED (Supersedes all previous specs) Revision No.

DATE (YYYYMMDD)

FORMCHECKBOX

c. SOLICITATION OR OTHER NUMBER

DUE DATE (YYYYMMDD)

FORMCHECKBOX

4. IS THIS A FOLLOW-ON CONTRACT?

FORMCHECKBOX

YES

FORMCHECKBOX

NO.

If yes, complete the following:

Classified material received or generated under HC1013-07-D-2009 (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254?

FORMCHECKBOX

YES

FORMCHECKBOX

NO.

If yes, complete the following:

In response to the contractor's request dated , retention of the classified material is authorized for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

7. SUBCONTRACTOR

8. ACTUAL PERFORMANCE

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION

b. RESTRICTED DATA

X

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION

X

d. FORMERLY RESTRICTED DATA

X

e. INTELLIGENCE INFORMATION:

(1) Sensitive Compartmented Information (SCI)

X

(2) Non-SCI

f. SPECIAL ACCESS INFORMATION

X

g. NATO INFORMATION

X

h. FOREIGN GOVERNMENT INFORMATION

X

i. LIMITED DISSEMINATION INFORMATION

X

l. OTHER (Specify)

k. OTHER (Specify)

DD Form 254, DEC 1999 (EF)

PREVIOUS EDITIONS ARE OBSOLETE

12. PUBLIC RELEASE. Any Information (Classified Or Unclassified) Pertaining To This Contract Shall Not Be Released For Public Dissemination Except As Provided By The Industrial Security Manual Or Unless It Has Been Approved For Public Release By Appropriate U.S. Government Authority. Proposed Public Releases Shall Be Submitted For Approval Prior To Release

FORMCHECKBOX

Direct

FORMCHECKBOX

Through (Specify):

HQs DISA Public Affairs Office, Ft Meade, MD Public release of classified and/or controlled unclassified information is not authorized.

to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs) * for review.

* In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

Additional security requirements may be contained within the DD Form 254 upon award of contract. 01252003 SEE ATTACHED Item 13 for additional security guidance.

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract. (If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use item 13 if additional space is needed.)

FORMCHECKBOX

YES

FORMCHECKBOX

NO

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. (If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use item 13 if additional space is needed.)

FORMCHECKBOX

YES

FORMCHECKBOX

NO

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

e. SIGNATURE

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER

DD Form 254 (BACK), DEC 1999

Continuation from DD Form 254

ITEM 13:

A. DD Form 254 Reference Item 11a:

1. All classified services rendered in performance of this contract will be conducted at designated government approved facilities.

2. Prior to contracted employees being granted access to designated DISA Computing Services sites and/or classified systems, the Contractor must provide a Visit Authorization Letter (VAL) on each employee requiring access to the COR for approval and need-to-know. Once the clearance information is validated by DISA MPS through DISA Field Security Office, the COR will forward to the affected site. To preclude from having to submit a VAL each time a site is to be visited, the duration of VAL may extend one year or the period-of-performance date of contract whichever is shorter. The required information must be on company letterhead and contain the listed information:

Agency/Company name and address:

Name and address of facility to be visited:

Date(s) of visit:

Purpose of visit:

Contract Number:

Hosting Facility POCs (government): full name and telephone number:

Visitors- Name:

SSN:

Date and place of birth:

Citizenship:

Clearance- Clearance level:

Date Granted:

Agency who granted clearance:

Type Investigation:

Date of investigation:

Agency/Company cognizant security office name and address:

Agency/Company clearance date - Clearance/safeguarding levels:

Date granted:

CAGE code:

Agency/Company security officer's - Name:

Telephone:

Signature:

Date:

3.

Foreign Nationals will not be authorized access to classified and/or DISA Computing Service sites without written approval from the Director of DISA or designated representative.

B. DD Form 254 Reference Item 11e:

1. This contract is to provide DISA Computing Services with software, firmware and hardware support on both classified and unclassified automated systems/networks. The contractor(s) will be responsible for acquiring, installing, configuring, and providing maintenance of hardware, firmware and operating software running at DISA Computing Data Centers.

2. The contractor’s actual knowledge, generation, or production of classified data and/or hardware is not required to perform services outlined by this contract. However, access and clearance levels are required to perform services because escorting personnel cannot preclude exposure to classified information. The contracted personnel assigned in support of this contract will be adjudicated to the Secret level based on a Single Scope Background investigation and awarded a sensitivity level of IT-I. Many times an interim access/clearance level is granted pending completion of appropriate investigation and adjudication of subjects access and/or clearance request. Given these circumstances and provided interim access/clearance level granted meets the required access/clearance level per contract, then a local determination to grant access to facilities, systems and/or data outlined by this contract and DD Form 254 may be approved using the VAL process outlined in item 13. A.2 of this document. Submission for clearances is the responsibility of the contractor.

3. DISA retains the right to remove any contracting personnel regardless of prior clearance or adjudication status, whose actions, while assigned to this contract, clearly conflict with the interest of the Government. The reason for removal will be fully documented in writing by the COR to the Contracting Officer (KO). Upon removal the contractor shall provide a qualified person(s) to fill vacancy within 15 working days.

4. All systems; components and/or writeable media being removed from the site (I.E. hard drives, tape, floppies, CD-R etc.) will be sanitized in accordance with security regulations IAW the SOW. The contractor must be aware that the sanitation process is to prevent any compromise of classified and/or controlled unclassified data and may render the system components and/or writeable media unserviceable and/or completely destroyed.

C. DD Form 254 Reference Item 11g:

1. The contractor, at their discretion, may prepare and forward DD Form XE "Forms:Investigation"

XE "Forms" 1540 to the COR XE "COR" for authorization BEFORE the services may be requested.

2. Technical information on file at the Defense Technical Information Center (DTIC) will be made available to the contractor if the contractor requires such information. The contracting officer will certify the field of interest relating to the contract.

3. All classification guidance required in the performance of this contract will be provided by the using activity.

4. The COR XE "COR" must be notified and approve the receipt and/or generation of classified information under this contract.

5. The contractor will not remove classified material and/or information from DISA Computing Services site.

6. All classified information received and/or generated under this contract is the property of the U.S. Government regardless of proprietary claims. All exceptions to the security policy outlined in this document shall be referred to DISA Security Division (MPS6) for coordination with appropriate agencies and the contracting officer.

D. DD Form 254 Reference Item 17f:

1. The Statement of Objectives, DD Form 254 and supporting documentation will be forwarded to DISA Industrial Security.