BAM_DD254.docx

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort.)

1. CLEARANCE AND SAFEGUARDING

a. FACILITY CLEARANCE REQUIRED Secret

b. LEVEL OF SAFEGUARDING REQUIRED None

20131009

all previous specs) Revision No.

DATE (YYYYMMDD)

HC1028-13-R-0046

DUE DATE (YYYYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT? |_| YES |X| NO. If yes, complete the following:

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? |_| YES |X| NO. If yes, complete the following:

In response to the contractor's request dated , retention of the classified material is authorized for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

7. SUBCONTRACTOR

8. ACTUAL PERFORMANCE

DISA DECC OKC

Gate 33, SE59 and Air Depot Rd 8705 Industrial Blvd, Bldg 3900 Tinker AFB, Oklahoma City, OK 73145-3064

241 18th St. S., Ste. 100A Arlington, VA 22202

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION

b. RESTRICTED DATA

X

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION

X

d. FORMERLY RESTRICTED DATA

d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

X

e. INTELLIGENCE INFORMATION:

(1) Sensitive Compartmented Information (SCI)

X

(2) Non-SCI

X

f. SPECIAL ACCESS INFORMATION

X

g. NATO INFORMATION

X

h. FOREIGN GOVERNMENT INFORMATION

X

i. LIMITED DISSEMINATION INFORMATION

X

l. OTHER (Specify)

k. OTHER (Specify)

DD Form 254, DEC 1999 (EF) PREVIOUS EDITIONS ARE OBSOLETE

12. PUBLIC RELEASE. Any Information (Classified Or Unclassified) Pertaining To This Contract Shall Not Be Released For Public Dissemination Except As Provided By The Industrial Security Manual Or Unless It Has Been Approved For Public Release By Appropriate U.S. Government Authority. Proposed Public Releases Shall Be Submitted For Approval Prior To Release |_| Direct |_| Through (Specify):

to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs) * for review.

* In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

(NOTE): SEE ITEM 13 CONTINUATION FOR ADDITIONAL DETAILS OF REQUIREMENTS.

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract. (If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use item 13 if additional space is needed.)

|_| YES |X| NO

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. (If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use item 13 if additional space is needed.)

|_| YES |X| NO

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

DISA Logistics, BLDG 12 1 Overcash Ave Chambersburg, PA 17201

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

e. SIGNATURE

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER

f. OTHERS AS NECESSARY

DD Form 254 (BACK), DEC 1999 ITEM 13 Continuation

10j - For Official Use Only (FOUO) Information.

(1) Contractors may disseminate “For Official Use Only” information to their employees and subcontractors who have a need for the information in connection with this contract.

(2) Removal of the “For Official Use Only” (FOUO) marking or release of FOUO material to the public can only be accomplished by the Government Cognizant Authority (GCA).

(3) “For Official Use Only” information shall be stored in locked receptacles such as file cabinets, desks, or bookcases. When such internal security control is not exercised, locked buildings or rooms will provide adequate after-hours protection. During working hours, the information shall be placed in an out-of-sight location if the work area is accessible to persons who do not have a need for the information.

(4) “For Official Use Only” information may be sent via first-class mail or parcel post. Facsimile communications marked FOUO may be transmitted by nonsecure terminals with the FOUO marking intact between U.S. Department of Defense, and other U.S. Government agencies, and U.S. Government support contractors for official purposes.

(5) When no longer needed, FOUO information may be disposed of by shredding each copy into pieces to preclude reconstructing, and placing it in a regular trash container.

(6) Unauthorized disclosure of “For Official Use Only” information does not constitute a security violation, but the GCA shall be informed of any unauthorized disclosure. The unauthorized disclosure of FOUO information protected by the Privacy Act may result in criminal sanctions. Specific guidance may be found in DOD Regulation 5400.7, DOD Freedom of Information Act Program.

10k – AIS access will be at the IT-II (user level) only. DISA Personnel Security specifically approves AIS access upon receipt of a VAR from the Contractor, which is forwarded via the DISA Computing Services Security Manager. No privileged systems duties or access (system administrator, data base administrator or root level authority) is authorized.

11 l – Other.

(1) The contractor is not authorized to release information, orally, visually, or documentary to anyone not associated with this contract.

(2) All questions regarding security requirements indicated herein will be referred to the Contract Technical Monitor, if one is designated, or the Contracting Officer.

(3) Personnel Security Requirements

(a) Contractor must have a current Facility Security Clearance (FCL) with the Defense Industrial Security Office (DISCO).

(b) Personnel performing duties under this contract must undergo a National Agency Check with Local Agency Checks and Credit Check (NACLC) as the minimum investigation. All personnel performing on this contract will be U.S. citizens.

(c) Before reporting for work at any of the sites, Contractor employees working under this contract will be required to have a minimum Secret security clearance adjudicated by DISCO. Interim Secret clearances granted by DISCO will be accepted pending adjudication of the NACLC.

(d) Derogatory information or failure to meet or comply with security requirements discovered during the period of employment under this contract may at the discretion of the Government be grounds for termination of an individual contractor employee’s employment.

(e) The Contractor will forward a Visit Authorization Letter (VAL) on all their employees to each Government site at which work under this solicitation will be performed and a comprehensive VAL to:

DISA Computing Services Security Manager ATTN: Lindsay Mull 1 Overcash Avenue Letterkenny Army Depot Chambersburg, PA 17201-4122

(f) The VAL shall be on company letterhead and contain the following information:

Contract number with start and end dates Company point of contact (POC) and telephone number Government Task Monitor name and telephone number Complete legal name of employee(s) Social Security Number Security Clearance level, date granted, and Adjudication facility name, i.e. DISCO Type of personnel security investigation (PSI) pending or completed Date PSI completed

(g) Contractor employees will be required to comply with all Government security regulations and requirements.

(h) Initial and periodic refresher security training and briefings must be provided by the Contractor as required by regulations.

(i) Supplemental security training may be provided by Government security personnel.

(j) Failure to comply with security requirements can be cause for termination of employment.

(k) If employment is terminated due to unfavorable personnel security actions or failure to comply with security requirements, the Contractor will provide a suitable replacement.