Attachment_3_DD254.pdf

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort.)

1. CLEARANCE AND SAFEGUARDING

a. FACILITY CLEARANCE REQUIRED

b. LEVEL OF SAFEGUARDING REQUIRED

2. THIS SPECIFICATION IS FOR: (X and complete as applicable)

a. PRIME CONTRACT NUMBER

b. SUBCONTRACT NUMBER

c. SOLICITATION OR OTHER NUMBER DUE DATE (YYYYMMDD)

3. THIS SPECIFICATION IS: (X and complete as applicable)

a. ORIGINAL (Complete date in all cases)

REVISION NO.

c. FINAL (Complete Item 5 in all cases)

DATE (YYYYMMDD)

b. REVISED (Supersedes all previous specs)

DATE (YYYYMMDD)

DATE (YYYYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT? YES NO. If Yes, complete the following:

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? YES NO. If Yes, complete the following:

In response to the contractor's request dated , retention of the classified material is authorized for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

8. ACTUAL PERFORMANCE

a. LOCATION b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

10. CONTRACTOR WILL REQUIRE ACCESS TO: 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL:YES NO YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION

b. RESTRICTED DATA

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION

d. FORMERLY RESTRICTED DATA

e. INTELLIGENCE INFORMATION

(1) Sensitive Compartmented Information (SCI)

(2) Non-SCI

f. SPECIAL ACCESS INFORMATION

g. NATO INFORMATION

h. FOREIGN GOVERNMENT INFORMATION

i. LIMITED DISSEMINATION INFORMATION

j. FOR OFFICIAL USE ONLY INFORMATION

k. OTHER (Specify)

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER

CONTRACTOR'S FACILITY OR A GOVERNMENT ACTIVITY

b. RECEIVE CLASSIFIED DOCUMENTS ONLY

c. RECEIVE AND GENERATE CLASSIFIED MATERIAL

d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. PERFORM SERVICES ONLY

f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES

g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL INFORMATION

CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER

h. REQUIRE A COMSEC ACCOUNT

i. HAVE TEMPEST REQUIREMENTS

j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

l. OTHER (Specify)

DD FORM 254, DEC 1999 PREVIOUS EDITION IS OBSOLETE.

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release

a. TYPED NAME OF CERTIFYING OFFICIAL

Direct Through (Specify)

d. ADDRESS (Include Zip Code)

Yes No to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classifiection guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract;

and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract.

(If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

Yes No15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office.

(If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

b. TITLE c. TELEPHONE (Include Area Code)

e. SIGNATURE

17. REQUIRED DISTRIBUTION

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER

f. OTHERS AS NECESSARY

DD FORM 254 (BACK), DEC 1999

DD FORM 254 , SECURITY SIGNATURE PAGE

Contract Number:

CERTIFICATION AND SIGNATURES: “Security requirement stated herein are completed and adequate for safeguarding the classified information to be release or generated under this classified effort. All questions shall be referred to the official named below.”

Security Office Approved Date

Name:

Title:

Security Office Approved Date

Name:

Title:

SEE ITEM 13 Continuation sheet attached.

Chamberburg, PA 17201

Reference 8a - For Official Use Only (FOUO) Information.

Harrisburg, PA area; Denver, CO area; Montgomery AL area; St. Louis, MO area; Columbus, OH area; San Antonio, TX area; Salt Lake City, Utah area; Oklahoma City, OK area; Macon, GA area; Honolulu, HI area; Wiesbaden Germany; area; Baltimore, MD area; Bahrain area;

Reference 10j - For Official Use Only (FOUO) Information.

(1) Contractors may disseminate “For Official Use Only” information to their employees and subcontractors who have a need for the information in connection with this contract.

(2) Removal of the “For Official Use Only” (FOUO) marking or release of FOUO material to the public can only be accomplished by the Government Cognizant Authority (GCA).

(3) “For Official Use Only” information shall be stored in locked receptacles such as file cabinets, desks, or bookcases. When such internal security control is not exercised, locked buildings or rooms will provide adequate after-hours protection. During working hours, the information shall be placed in an out-of-sight location if the work area is accessible to persons who do not have a need for the information.

(4) “For Official Use Only” information may be sent via first-class mail or parcel post. Facsimile communications marked FOUO may be transmitted by nonsecure terminals with the FOUO marking intact between U.S. Department of Defense, and other U.S. Government agencies, and U.S. Government support contractors for official purposes.

(5) When no longer needed, FOUO information may be disposed of by shredding each copy to preclude reconstructing, and placing it in a regular trash container.

(6) Unauthorized disclosure of “For Official Use Only” information does not constitute a security violation, but the GCA shall be informed of any unauthorized disclosure. The unauthorized disclosure of FOUO information protected by the Privacy Act may result in criminal sanctions. Specific guidance may be found in DOD Regulation 5400.7, DOD Freedom of Information Act Program.

(7) All classified and/or sensitive information/material generated in support of this contract is the property of the U.S Government regardless of proprietary claims, thus subject to all security protection and control measures as outlined by this contract.

Access to Automated Information Systems (AIS) shall require access levels up to and including Secret/IT-I and IT-II. Positions, investigations and adjudicative requirements are defined in Section 8 of SOW.

DISA Personnel Security specifically approves facility and AIS access upon receipt of a certified VAL/VAR from the Contractor FSO. The VAL/VAR shall include all required information defined in section 8 of SOW and routed to Task Monitor of contract for distribution to MPS and site Security Manager where work is to be performed.

Reference 11 a and e

(1) Access to and storage of classified information will be performed and contained at the locations defined in section 5 of the SOW. The servicing vendor of this contract shall not disclose or remove any classified or sensitive information from any defined location in SOW without the approval of DISA Security. All classified information obtained while under this contract must be properly protected in accordance with the NISPOM and all other applicable DOD guidelines and is the property of the U.S. Government.

(2) At the termination or expiration of this contract, the contractor shall request disposition instructions for all classified and unclassified project material. The contractor may be directed to properly destroy the material or return

it. If classified or unclassified project material is authorized by DISA to be retained by the contractor, every effort should be taken to transfer it to a follow-on contract or similar effort, if applicable. This must be done, however, with Contracting Officer (CO) approval. Unless written authorization by the CO to retain specific material for a specific period of time is received, the material shall be returned or destroyed as instructed.

(3) Contract is for equipment maintenance services on equipment which processes classified information. Actual knowledge of, generation, or production of classified information is not required for performance of the contract. Cleared personnel are required to perform this service because access to classified information cannot be precluded by escorting personnel.

Reference 11 l – Other.

(1) The contractor is not authorized to release information, orally, visually, or documentary to anyone not associated with this contract.

(2) All questions regarding security requirements indicated herein will be referred to the Contract Technical Monitor, if one is designated, or the Contracting Officer.

(3) Personnel Security Requirements

(a) Contractor must maintain a current Facility Security Clearance (FCL) at Secret level with the Defense Industrial Security Office (DISCO).

(b) All personnel performing services under this contract shall obtain and maintain a favorably adjudicated investigation as defined by section 8 of the SOW. The appropriate Interim Clearance level is acceptable to start performance under this contract until a final decision has been determined. All personnel performing on this contract will be U.S. citizens.

(c) Derogatory information or failure to meet or comply with security requirements discovered during the period of employment under this contract may at the discretion of the Government be grounds for termination of an individual contractor employee’s employment.

(4) Classified material generated and/or knowledge of classified shall not be released or disclosed to foreign nations without the express written permission of DISA Director.

(5) A copy of the final DD 254 will be provided to the DISA Computing Services Security Manager

(6) NOTE: IT-I requires at least a SSBI or PTSBI investigation.

(7) NOTE: IT-II requires at least a NACLC, NACI, ANACI, or NAC investigation

-NOTHING FOLLOWS-