DD254_HC102818R0098.pdf

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort.)

1. CLEARANCE AND SAFEGUARDING

a. FACILITY CLEARANCE REQUIRED

b. LEVEL OF SAFEGUARDING REQUIRED

2. THIS SPECIFICATION IS FOR: (X and complete as applicable)

a. PRIME CONTRACT NUMBER

b. SUBCONTRACT NUMBER

c. SOLICITATION OR OTHER NUMBER DUE DATE (YYYYMMDD)

3. THIS SPECIFICATION IS: (X and complete as applicable)

a. ORIGINAL (Complete date in all cases)

REVISION NO.

c. FINAL (Complete Item 5 in all cases)

DATE (YYYYMMDD)

b. REVISED (Supersedes all previous specs)

DATE (YYYYMMDD)

DATE (YYYYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT? YES NO. If Yes, complete the following:

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? YES NO. If Yes, complete the following:

In response to the contractor's request dated , retention of the classified material is authorized for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

8. ACTUAL PERFORMANCE

a. LOCATION b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

10. CONTRACTOR WILL REQUIRE ACCESS TO: 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL:YES NO YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION

b. RESTRICTED DATA

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION

d. FORMERLY RESTRICTED DATA

e. INTELLIGENCE INFORMATION

(1) Sensitive Compartmented Information (SCI)

(2) Non-SCI

f. SPECIAL ACCESS INFORMATION

g. NATO INFORMATION

h. FOREIGN GOVERNMENT INFORMATION

i. LIMITED DISSEMINATION INFORMATION

j. FOR OFFICIAL USE ONLY INFORMATION

k. OTHER (Specify)

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER

CONTRACTOR'S FACILITY OR A GOVERNMENT ACTIVITY

b. RECEIVE CLASSIFIED DOCUMENTS ONLY

c. RECEIVE AND GENERATE CLASSIFIED MATERIAL

d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. PERFORM SERVICES ONLY

f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES

g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL INFORMATION

CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER

h. REQUIRE A COMSEC ACCOUNT

i. HAVE TEMPEST REQUIREMENTS

j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

l. OTHER (Specify)

DD FORM 254, DEC 1999 PREVIOUS EDITION IS OBSOLETE.

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release

a. TYPED NAME OF CERTIFYING OFFICIAL

Direct Through (Specify)

d. ADDRESS (Include Zip Code)

Yes No to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classifiection guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract;

and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract.

(If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

Yes No15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office.

(If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

b. TITLE c. TELEPHONE (Include Area Code)

e. SIGNATURE

17. REQUIRED DISTRIBUTION

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER

f. OTHERS AS NECESSARY

DD FORM 254 (BACK), DEC 1999

The contractor will be provided and will abide by ICD 503, "Intelligence Community Information Technology Systems Security Risk Management, July 21, 2015" and by ICD 705 Sensitive Compartmented Information Facilities, May 26, 2010, and DoDM 5105.21. Provided under separate cover. When SCI or SAP task(s) are subcontracted, the subcontractor DD Form 254 must be sent to the DISA Industrial Security PM and be processed through the DISA SSO and/or Program Security Officer for approval. The contractor will abide by ICPG 703.5, Dissemination Controls, including SCI. Provided under separate cover.

DD FORM 254, SECURITY SIGNATURE PAGE

PRIME CONTRACT NUMBER:

SUBCONTRACT NUMBER: _

CERTIFICATION AND SIGNATURES: “Security requirement stated herein are completed and adequate for safeguarding the classified information to be release or generated under this classified effort. All questions shall be referred to the official named below.”

Security Office Approval

Name:

Title:

Security Office Approval

1671 Nelson Street Fort Detrick, MD 21702-5002

All classified visit requests by contractors shall be forwarded to the Contracting Officer Representative (COR) for approval and need-to-know certification before being sent to the facility to be visited.

All visit access requests (VARs) by contractors shall be sent via the Joint Personnel Adjudication system (JPAS) to the DISA VAR Center (JPAS SMO: DKABAA10) or appropriate SMO for the effort. The COR/ACOR must approve the VAR prior to sending the request to the facility being visited. Contractors must also provide a copy of the VAR to the SM.

The COR/ACOR must be notified and approve the receipt and/or generation of classified information under this contract.

All classified information received and/or generated under this contract is the property of the U.S. Government regardless of proprietary claims. Upon completion or termination of this contract, the U.S. Government will be contacted for destruction or disposition instructions.

Foreign Nationals will not perform on any area of the contract (classified or unclassified).

Prime Contractor FSO will provide the Government a copy of the DD Form 254 and PWS/SOW for all their subcontracts meeting review criteria via a SM to submit for approval.

Period of Performance is July 7, 2018 - July 6, 2023 Base: July 7, 2018 - July 6, 2019 Option Year 1: July 7, 2019 - July 6, 2020 Option Year 2: July 7, 2020 - July 6, 2021 Option Year 3: July 7, 2021 - July 6, 2022 Option Year 4: July 7, 2022 - July 6, 2023

Additional security guidance continued in one (1) supplemental page.

Fort Detrick, MD 21702-5002

Reference Item 10c. This contractor is permitted access to CNWDI in performance of the contract. The Government program manager or designated representative ensures the contractor Facility Security Officer (FSO) is briefed for access to CNWDI by a Government representative prior to granting access.

Refernce Item 10e(1). All contractor SCI work and access will be at a designated Government SCI Facility (SCIF).

1. This contract requires access to SCI.

a. The number of personnel required to have access to SCI is determined by the COR/ACOR and the contractor.

b. The Director, Defense Intelligence Agency (DIA) and Director, Defense Information Systems Agency (DISA), as the executive agent for DIA, have exclusive security responsibility for SCI released to the contractor or developed under this contract.

c. Contractor generated or Government furnished material may not be provided to the Defense Technical Information Center. Contract generated technical reports will bear the statement ''Not Releasable to the Defense Technical Information Center per DoD Instruction 5230.24".

d. All contractor personnel requiring access to SCI information must: be U.S. citizens, have been granted a final ICD 704 security clearance by the U.S. Government, and have been indoctrinated for the applicable compartments of SCI access prior to be given any access to such information released or generated under this contract.

e. Classified material released or generated under this contract is not releasable to foreign nationals without the expressed written permission of the Director, DISA (through the DISA SSO) and Director, DIA.

f. SCI received under this contract may not be released to subcontractors without permission of the DISA SSO.

g. The contractor and COR/ACOR will revalidate all SCI billets under this contract with the DISA SSO annually or when a revised DD Form 254 is issued, whichever is sooner.

h. All SCI visit requests by contractors shall be forwarded to the COR/ACOR for approval and need-to-know certification before being sent through the DISA SSO to the facility to be visited.

Reference 10g. Access up to and including COSMIC TS material will be required for reference only at the National Gateway Center - Detrick (NGC-D).

Personnel not assigned to a NATO staff position, but requiring access to NATO classified information, NATO COSMIC, NATO Secret or access to the NATO accredited SIPRNET terminals, must possess the equivalent FINAL or Interim U.S. Security Clearance based upon the appropriate personnel security investigation required. Personnel with access to NATO ATOMAL information must have the appropriate level FINAL U.S. Security Clearance. The Government program/project manager is the designated representative that will ensure the contractor SM and concerned employees are NATO briefed prior to access being granted. The contractor will maintain strict compliance in regards to NATO information IAW NISPOM Ch 10, Section 7. Prior approval from the KO is required for subcontracting.

Reference Item 10j. Contractor will be provided with and will abide by DoD Regulation 5400.7, DoD Freedom of Information Act Program, and DoD Regulaion 5200.1-M, Information Security Program. Guidance provided under separate cover.

Reference Item 11a. Contract performance is restricted to Bldg 1671, Fort Detrick, MD 21702-5002. The Government activity will provide security classification guidance for the performance of this contract.

Reference Item 11l. IT-1 Access Required. The number of S IT-1 billets required are 4.