DSOAE3001_(8)_(2)_(2)_(3)_v1.pdf

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort.)

1. CLEARANCE AND SAFEGUARDING

a. FACILITY CLEARANCE REQUIRED

b. LEVEL OF SAFEGUARDING REQUIRED

2. THIS SPECIFICATION IS FOR: (X and complete as applicable)

a. PRIME CONTRACT NUMBER

b. SUBCONTRACT NUMBER

c. SOLICITATION OR OTHER NUMBER DUE DATE (YYYYMMDD)

3. THIS SPECIFICATION IS: (X and complete as applicable)

a. ORIGINAL (Complete date in all cases)

REVISION NO.

c. FINAL (Complete Item 5 in all cases)

DATE (YYYYMMDD)

b. REVISED (Supersedes all previous specs)

DATE (YYYYMMDD)

DATE (YYYYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT? YES NO. If Yes, complete the following:

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? YES NO. If Yes, complete the following:

In response to the contractor's request dated , retention of the classified material is authorized for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

8. ACTUAL PERFORMANCE

a. LOCATION b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

10. CONTRACTOR WILL REQUIRE ACCESS TO: 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL:YES NO YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION

b. RESTRICTED DATA

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION

d. FORMERLY RESTRICTED DATA

e. INTELLIGENCE INFORMATION

(1) Sensitive Compartmented Information (SCI)

(2) Non-SCI

f. SPECIAL ACCESS INFORMATION

g. NATO INFORMATION

h. FOREIGN GOVERNMENT INFORMATION

i. LIMITED DISSEMINATION INFORMATION

j. FOR OFFICIAL USE ONLY INFORMATION

k. OTHER (Specify)

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER

CONTRACTOR'S FACILITY OR A GOVERNMENT ACTIVITY

b. RECEIVE CLASSIFIED DOCUMENTS ONLY

c. RECEIVE AND GENERATE CLASSIFIED MATERIAL

d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. PERFORM SERVICES ONLY

f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES

g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL INFORMATION

CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER

h. REQUIRE A COMSEC ACCOUNT

i. HAVE TEMPEST REQUIREMENTS

j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

l. OTHER (Specify)

DD FORM 254, DEC 1999 PREVIOUS EDITION IS OBSOLETE.

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release

a. TYPED NAME OF CERTIFYING OFFICIAL

Direct Through (Specify)

d. ADDRESS (Include Zip Code)

Yes No to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classifiection guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract;

and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract.

(If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

Yes No15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office.

(If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

b. TITLE c. TELEPHONE (Include Area Code)

e. SIGNATURE

17. REQUIRED DISTRIBUTION

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER

f. OTHERS AS NECESSARY

DD FORM 254 (BACK), DEC 1999

DD FORM 254 , SECURITY SIGNATURE PAGE

Contract Number:

CERTIFICATION AND SIGNATURES: “Security requirement stated herein are completed and adequate for safeguarding the classified information to be release or generated under this classified effort. All questions shall be referred to the official named below.”

Security Office Approved Date

Name:

Title:

Security Office Approved Date

Name:

Title:

6910 Cooper Ave Fort George G. Meade, MD Public release not authorized.

B. Acronyms: See Appendix B.

C. Program Manager:

STEVEN J. AVERETT, Captain, USN Commander, Joint Spectrum Center DSN 281-2456 or (410) 293-2456 D. Expiration: Contract Base Period ends 30 June 2017. The four potential one year options terminate 30 June of successive years.

E. Pre-award access is not required, however, the awarded contractor is required to have access to perform duties by the completion of the transition period. This DD Form 254 reflects the security requirements for the contract when awarded.

General Information All classified visit request by contractors shall be forwarded to the Contracting Officer Representative (COR) for approval and need -to-know certification before being sent to the facility to be visited.

All visit access requests (VARs) by contractors shall be sent via the Joint Personnel Adjudication System (JPAS) to the DISA VAR Center (JPAS SMO:DKABAA10) or appropriate SMO for the effort. The COR/TM must approve the VAR prior to sending the request to the facility being visited. Contractors must also provide a copy of the VAR to the security manager.

The COR must be notified and approve the receipt and/or generation of classified information under this contract.

All classified information received and or generated under this contract is the property of the U.S. Government regardless of proprietary claims. Upon completion or termination of this contract, the U.S. Government will be contacted for destruction or disposition instructions.

Foreign Nationals will not perform on any area of the contract (classified or unclassified).

Item 13 is continued on additional pages.

Annapolis, MD 21402-5064

Contractor is authorized to receive Government furnished cryptographic equipment. Access to classified COMSEC information requires a final U.S. Government clearance at the appropriate level. Further disclosure of COMSEC information by a contractor, to include subcontracting, requires prior approval of the contracting activity.

Reference Block 10j: Contractor will be provided with and will abide by DoD Regulation 5400.7, DoD Freedom of Information Act Program, and DoD 5200.01-M, Information Security Program. Guidance provided under separate cover

Reference Block10k: SIPRNet access required

Reference ITEM 11c:

Any classified information generated in performance of this contract shall be classified according to the markings on the source material. All classified information received or generated is the property of the U.S. Government. The U.S. Government will be contacted at the expiration or termination of this contract for proper disposition instructions. The Contractor will be required to prepare an AIS/SSP for their AIS operations and the system will require approval of the CSO/CSA in accordance with DoD 5220.22M.

Reference ITEM 11d:

The Contractor will properly safeguard and will provide adequate and appropriate storage space for all Classified Hardware. Restricted and or Closed Areas will be required (approximately 15,000 square feet).

Reference ITEM 11g:

a. Technical information on file at the Defense Technical Information Center will be made available to the contractor if the contractor requires such information.

b. The contractor must prepare and forward a DD Form 1540 to the COR/TM for authorization BEFORE the services may be requested.

c. Contractors requiring to courier classified information or equipment, up to Top Secret shall receive a Government Issued Collateral Courier card from the Government Security office prior to couriering classified information or material in support of official duties. The contractor will only be issued a collateral courier card to hand carry classified information or equipment if there are no other means of safely and securely transporting or sending the classified information or equipment.

The contractors must also have a requirement to courier any classified information or equipment on a weekly basis. A courier letter can be issued by the Government Security Manager if there is a requirement to courier periodically. All contractors will follow the DoD Manual 5200.01, Information Security and the collateral courier card standard operating procedures (SOP) that is issued by the DISA Security Office. A collateral courier card or letter will only be issued up to the clearance level of the individual contractor.

Reference ITEM 11h:

Contractor is authorized to receive Government furnished cryptographic equipment. Access to classified COMSEC information requires a final U.S. Government clearance at the appropriate level. Further disclosure of COMSEC information by a contractor, to include subcontracting, requires prior approval of the contracting activity.

Reference ITEM 11i:

The contractor is required to impose TEMPEST countermeasures on information-processing equipment after vulnerability assessments are completed. The contractor shall not process classified information by electrical means prior to a DISA TEMPEST evaluation of the equipment/systems and facility, and written DISA certification that the facility meets DISA TEMPEST criteria. In order to expedite the DISA TEMPEST evaluation, the contractor shall provide a list of equipment, to include model number, which is associated with the processing of classified information. In addition, the estimated percentage of classified information processed, cable/conduit runs, a floor plan layout that depicts placement of equipment in relation to other rooms, equipment distances from walls or uncontrolled areas, and physical security being afforded the equipment both during processing and after hours. The above TEMPEST evaluation and DISA approval will not be required if previous DISA approval can be furnished and is no more than 2 years old. The existing approval must be for processing information at the same or higher level and at the same facility and items of equipment.

Reference ITEM 11j:

The contractor must adhere to and enforce US Government polices and procedures concerning Operation Security (OPSEC) requirements. OPSEC requirements will not be imposed until the DoD User Agency has finalized an OPSEC plan. Final review of the DoD User Agency OPSEC plan must be sent to, and approved by, the DISA OPSEC office. The prime contractor and the prime contractor’s subcontractors under this contract are authorized to courier information classified at the SECRET level or below between their respective locations in furtherance of efforts under this contract without passing the information through the Joint Spectrum Center. All individuals couriering classified must be briefed in accordance with the National Industrial Security Program Operating Manual (NISPOM) Section 5-410 Use of Couriers, Hand carriers, and Escorts with regard to their responsibilities as a courier and approved by their respective FSO prior to acting as a courier.

Reference ITEM 11l:

IT-II access required. NOTE: IT-II requires at least a National Agency Check with Local Agency and Credit, National Agency Check with Inquiries, Access National Agency Check with Inquiries, or National Agency Check investigation.