ATTACHMENT_2_DD254.pdf

DEPARTMENT OF DEFENSE 1. CLEARANCE AND SAFEGUARDING

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

a. FACILITY CLEARANCE REQUIRED

Top Secret

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort)

b. LEVEL OF SAFEGUARDING REQUIRED

None

2. THIS SPECIFICATION IS FOR: (X and complete as applicable) 3. THIS SPECIFICATION IS FOR: (X and complete as applicable)

X

a. PRIME CONTRACT NUMBER

TBD X

a. ORIGINAL (Complete date in all cases)

Date (YYMMDD)

20130124

b. SUBCONTRACT NUMBER

b. REVISED (Supersedes all previous specs) Revision No.

Date (YYMMDD)

X

c. SOLICITATION OR OTHER NUMBER

HHM402-13-R-0023

DUE Date (YYMMDD)

c. FINAL (Complete Item 5 in all cases) Date (YYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT? YES X NO. If Yes, complete the following:

Classified material received or generated under ______________ is transferred to this follow-on contract

5. IS THIS FINAL DD Form 254? YES X NO. If Yes, complete the following:

In response to the contractor’s requested dated ____________, retention of the identified classified material is authorized for the period of _____________________

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, and ZIP CODE

TBD

b. CAGE CODE

c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code) Defense Security Service

TBD

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE

N/A

8. ACTUAL PERFORMANCE

a. LOCATION

See Block 13

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

Tech exploitation support

10. CONTRACTOR WILL REQUIRE ACCESS TO: YES No 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION

X

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER

CONTRACTOR’S FACILITY OR A GOVERNMENT ACTIVITY X

b. RESTRICTED DATA

X

b. RECEIVE CLASSIFIED DOCUMENTS ONLY

X

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION

X

c. RECEIVE AND GENERATE CLASSIFIED MATERIAL

X

d. FORMERLY RESTRICTED DATA

X

d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. INTELLIGENCE INFORMATION

e. PERFORM SERVICES ONLY

(1) Sensitive Compartmented Information (SCI)

X

f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S.

PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES X

(2) Non-SCI

X

g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL

INFORMATION CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION

CENTER

X

f. SPECIAL ACCESS INFORMATION

X

h. REQUIRE A COMSEC ACCOUNT

X

g. NATO INFORMATION

X

I. HAVE TEMPEST REQUIREMENTS

X

h. FOREIGN GOVERNMENT INFORMATION

X

j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

X

I. LIMITED DISSEMINATION INFORMATION

X

k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

X

j. FOR OFFICIAL USE ONLY INFORMATION

I. OTHER (Specify)

See Block 13 X k. OTHER (Specify)

See Block 13 X

DD FORM 254, DEC 1999 PREVIOUS EDITIONS ARE OBSOLETE

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate Government authority. Proposed public releases shall be submitted for approval prior to release

Direct X Through (Specify): The Contracting Officer Representative Robert Mahler (275-8699)

NO PUBLIC RELEASE OF SCI IS AUTHORIZED. Requests for other than SCI must be approved through the COR and appropriate channels prior to release.

13. SECURITY GUIDANCE. The security classification guidance needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes: to challenge the guidance or classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. Baseline Security Classification Guidance (SCG): DoD Instruction C-5240.08, 28 November 2011.

More specific SCG shall be provided by the COR as required.

All applicable provisions of DoD 5220.22M and its supplements apply.

The Contractor will be required to have a Top Secret Facility clearance granted by the Defense Security Service (DSS) prior to contract implementation.

See attached Security Addendums

CONSENT TO SUBCONTRACT RESTRICTION

All security requirements levied upon the prime contractor and/or otherwise associated with this contract shall immediately be flowed down from the prime contractor to any subcontractor (or from subcontractor to a lower tier subcontractor), regardless of the scope of any such participation should it require access to classified information or unescorted access to controlled space where classified information (regardless of media) and/or hardware is open-stored, generated or otherwise accessible. Escorted access is defined as being under the visual control of appropriately cleared personnel with the requisite need-to-know. Subcontractors are expressly not authorized to participate in this contract unless and until such time that the DIA Contracting Officer in coordination with the DIA Counterintelligence & Security Office (DAC), attn: Chief, Industrial Security has expressly consented in writing to the participation of any such participant. As verification, the prime contractor will forward copies of all sub-contract DD254s to the DIA Industrial Security Team. These will be signed in a signature-line, Block 13, and then returned to the prime contractor’s Facility Security Officer (FSO) for their signature and distribution.

8a./11a. Contract performance and access to classified material is restricted to DIA or other U.S. Government controlled facilities. The using contractor or U.S. Government activity will provide security classification guidance for the performance of this contract.

The contractor Facility Security Officer (FSO) on file with DSS is: (TBD) If this information is not correct, the contractor must contact the

DSS Field Office identified in Block 6, and update all contractor information as applicable.

See Block 13 Continuation

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract. (If Yes, X Yes No Identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement, which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

Access to intelligence information requires a special briefing and a FINAL U.S. Government clearance at appropriate level for access. Foreign nationals are prohibited from access to any classified information unless sanctioned by an international or cooperative program agreement.

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. (If Yes, identify specific areas or Yes X No elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

16 b. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall e referred to the official named below

a. TYPED NAME OF CERTIFYING OFFICIAL

Timothy W. Eaton

b. TITLE

Intelligence Officer (CI)

c. TELEPHONE

(703) 907-0512

d. ADDRESS (Include Zip Code) 17. REQUIRED DISTRIBUTION

DIA/DAC-2 (Industrial Security Program) 3100 Clarendon Blvd.

Arlington, VA 22201-5300

X

a. CONTRACTOR

b. SUBCONTRACTOR

X c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

e. SIGNATURE d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

X

e. ADMINISTRATION CONTRACTING OFFICER

X f. DIA Security Office

DD FORM 254, DEC 1999 (BACK)

Block 13 Continuation (Pg. 1) Contract #: TBD

10a. Contractor must forward request for COMSEC material/information through the Contracting Officers Representative (COR). The contractor is governed by DoD 5220.22-M, Chapter 9, Section 4 “Communications Security (COMSEC)” and NSA/CSS Policy Manual 3-16. Access to COMSEC material is restricted to US citizens holding a final US Government security clearance. Such information is not releasable to personnel holding only reciprocal clearance. Prior approval from the Government Contracting Agency is required in order for a Prime Contractor to grant COMSEC access to a Subcontractor. Contractor must comply with DIA/DS guidelines. The NSA Central Office of Record has primary responsibility for the auditing of all COMSEC material governed by the DoD 5220.22-M.

10e. (1) See attached SCI Release of Intelligence Information for additional security requirements. Access to intelligence information requires SCI indoctrination and a final Top Secret U.S. Government clearance. Contractor will require access DCID 6/6 "Security Controls on the Dissemination of Intelligence Information," and DCID 6/1 "Security Policy for SCI and Security Policy Manual." For SCI Requirements: The contractor must provide individuals who are able to achieve and maintain the adjudicative standards set forth in the Intelligence Community Directive (lCD) Number 704 "Personnel Security Standards And Procedures Governing Eligibility For Access To Sensitive Compartmented Information And Other Controlled Access Program Information," for continued employment. In addition to the aforementioned requirements and as mandated by DIAl 5200.002, paragraph 1.5, dated 23 Mar 2010, all contractors are subject to pre-employment, initial, and periodic counterintelligence-scope polygraph screening.

10e. (2) See attached Non-SCI Release of Intelligence Information for additional security requirements. Contractor will require access to lCD 710 "Classification and Control Markings System" (11 SEP 2009)'' For Non-SCI Requirements: Top Secret: All contractor personnel assigned under this contract must possess a current Top Secret security clearance. Personnel are required to sign a non-disclosure statement. DIA Security Office will provide personnel security guidance for the performance of this contract.

10f. The DIA SAP Program Manager (or appropriate User Activity) is responsible for contract access for all DIA SAP material. Access to Special Access Information requires a final U.S. Government clearance at the appropriate level or as identified by the Special Program Manager for each, appropriate, Special Access Program. The contractor must coordinate with SAP Program Manager, through the CO/COR, prior to access. They must adhere to the special access requirements/procedures developed by the SAP Office of Primary Responsibility. SAP information/material will be processed IAW DoD 5220.22-M-SUP 1, NISPOM Supplement and affiliated Service/Agency Regulations. SAP Program Manager must approve all such accesses. If a SAP subcontract is awarded, it is the prime contractor’s responsibility to incorporate the additional security requirements in the subcontract. Authority for access must be obtained from the DIA SAP Program Manager.

10g. Access to NATO material will be required for reference at the Government, or appropriately cleared contractor's facility. Access requires a final U.S. Government security clearance at the appropriate level. Contractor personnel who require access to NATO material will be briefed by the Government Contracting Agency. The Prime Contractor must receive approval from the Government Contracting Agency to grant NATO access to a subcontractor. Contractor personnel shall be debriefed by the Government program manager prior to departure from this contract.

10h. Prior approval from the Contracting Officer Representative is required for access to foreign government information for the performance of this contract. Foreign government information must be protected at the equivalent level provided to similar categories of U.S. government information or as specified by the Foreign Government in written government-to-government agreements. Prior approval of the COR is required for subcontracting.

10j. FOR OFFICIAL USE ONLY INFORMATION (FOUO): The Contractor is authorized and may have access to UNCLASSIFIED information/material identified as "For Official Use Only" (FOUO). The contractor is prohibited from further disclosure/dissemination of this information without the expressed written authorization of DIA. FOUO Information provided under this contract shall be safeguarded as specified in DoDM 5200.01 , Volume 4 (DoD Information Security Program: Controlled Unclassified Information (CUI) , February 24, 2012", and may be supplemented by DIA. In addition, contractors or subcontractors must obtain written approval from the DIA CO/CORICOTR or DIA Office for Congressional and Public Affairs (CP) prior to posting any unclassified information that was provided to them by DIA on any Web site or the Internet. This will also apply to any acknowledgement of association between the contractor/subcontractor and DIA.

10k. All unclassified DoD information in the possession of non-DoD entities on non-DoD information systems shall be protected in accordance with DoDI 8582.01.

Law Enforcement Sensitive data is FBI originated sensitive data and will be protected in the same manner as FOUO information. Law Enforcement Sensitive data will be on a need to know basis only. Dissemination of this information is not allowed without prior approval from the FBI.

Before an employee departs, the contractor will ensure the employee goes through DIA SSO to be debriefed and return al l badges to Personnel Security. Failure on the part of the contractor for not ensuring their employee is properly debriefed will result in a security violation against the company.

All classified visit requests by contractors shall be forwarded to the COR for approval and need-to-know certification before being sent to the facility to be visited.

All classified information received and/or generated under this contract is the property of the U.S. Government regardless of proprietary claims. Upon completion or termination of this contract, the U.S. Government will be contacted for destruction or disposition instructions.

Block 13 Continuation (Pg. 2) Contract #: TBD

In the event of a suspected or verified security violation associated with this contract or pre-award effort, the Facility Security Officer

(FSO) or appropriate program security officer must notify their COR within 24-hours of their knowledge of the incident. The COR will advise DAC (Industrial Security), (703) 907-0953/0332 immediately upon notification from the contractor, as well as the cognizant DIA Contracting Officer.

Incorporate Antiterrorism measures in accordance with DoD 0-2000.12-H (Chapter 20 Appendix 8)

11e. Contract is for analytical services. Actual knowledge of classified information is required for performance of this contract. Cleared personnel are required to perform this service because access to classified information cannot be precluded. The contractor is not authorized to release classified information to any activity or person, including sub-contractors, without the government contracting officer's representative written approval. Only with the express permission of the government's contracting officer's representative may the contractor reproduce any classified information/material. All requirements for control and accounting for original documentation and copies apply.

11j. 1. The contractor will apply Operations Security (OPSEC) to enhance protection for classified and unclassified critical information. While the documents identified in references below provide details on the development of OPSEC programs and implementation of OPSEC analyses, the requirements below provide the minimum standards for OPSEC application directed in this contract.

(a) The contractor manager or a delegated OPSEC coordinator will be familiar with operations security (OPSEC) as described in National Security Decision Directive Number 298, DoD Directive 5205.02, DoD Manual 5205.02-M, and DIA Directive 5800.100, current versions.

(b) Military Service and COCOM OPSEC guidance (Joint Publication 3-13.3, CJCS Instructions, and appropriate Service or COCOM issuances) may also apply if the contracted activity is performed in a Service or COCOM operational environment.

If performance is conducted in a tenant arrangement within a Service or COCOM environment and a conflict is identified between local and DIA guidance, forward concerns through the COR to the DIA OPSEC Program Manager (DAC-6) for clarification.

2. Personnel will comply with OPSEC measures and program requirements established at the government site/program.

(Contract performance will occur within a DIA site/managed program where an OPSEC PM or Coordinator is designated by the government.)

3. The contract PM will identify an OPSEC coordinator and keep the COR apprised of current contract information. (Use when contract performance will occur at a geographically separate location from DIA site/management).

4. Personnel supporting the contract will protect details described on the Critical Information List (CIL) provided by the COR as proprietary to the government.

5. All personnel supporting the contract will receive initial and recurring (at least annually) OPSEC awareness training that identifies relevant threat information including techniques used by adversaries to obtain classified and unclassified critical information, directed OPSEC measures, OPSEC coordinator contact information, and reporting requirements. The OPSEC coordinator will maintain training records that can be reviewed during assessments or compliance inspections.

Additional supplements may be added by DIA on a case-by-case basis.

11l. Contractors shall provide all cleared employees with security training and briefings commensurate with their involvement with classified information. The contractor shall provide all cleared employees with some form of security education and training at least annually. Refresher training shall reinforce the information provided during the initial security briefing and shall keep cleared employees informed of appropriate changes in security regulations. Contractors shall maintain records about the programs offered and employee participation in them. Contractors may obtain defensive security, threat awareness, and other education and training information and material from their CSA or other sources.

Security Requirements (AUG 1996)

(a) This clause applies to the extent that this contract involves access to information classified Top Secret.

(b) The contractor shall comply with –

(1) The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M); and

(2) Any revisions to that manual, notice of which has been furnished to the Contractor.

(c) If, subsequent to the date of this contract, the security classification or security requirements under this contract are changed by the Government and if the changes cause an increase or decrease in security costs or otherwise affect any other term or condition of this contract, the contract shall be subject to an equitable adjustment as if the changes were directed under the Changes clause of this contract.

(d) The Contractor agrees to insert terms that conform substantially to the language of this clause, including this paragraph (d) but excluding any reference to the Changes clause of this contract, in all subcontracts under this contract that involve access to classified information.

Contract Expiration Date: TBD [Also Include Expiration Date for each potential Option Period, if applicable]

Version 2.0 (13 December 2012)

Attachment 1

RELEASE OF NON-SENSITIVE COMPARTMENTED INFORMATION (SCI) INTELLIGENCE

INFORMATION TO DoD CONTRACTORS

ATTACHMENT TO DD FORM 254 FOR CONTRACT NO: TBD

CONTRACT EXPIRATION DATE: TBD [Also Include Expiration Date for each potential Option Period, if applicable]

1. Requirements for access to non-SCI:

a. Any collateral classified and/or proprietary sensitive information obtained by contractors on behalf of DIA’s mission, will only be discussed or processed in facilities approved by DIA leadership. At no time, will such information be discussed or shared with unauthorized contractors. All DIA contractor employees will be required to sign a DIA Non-Disclosure Agreement stating the same.

b. All intelligence material released to the contractor remains the property of the US Government and may be withdrawn at any time. Contractors must maintain accountability for all classified intelligence released into their custody.

c. The contractor must not reproduce intelligence material without the written permission of the originating agency through the contracting officer's representative (COR). If permission is granted, each copy shall be controlled in the same manner as the original.

d. The contractor must not destroy any intelligence material without advance approval or as specified by the contracting officer's representative (COR). (EXCEPTION: Classified waste shall be destroyed as soon as practicable in accordance with the provisions of the Industrial Security Program).

e. The contractor must restrict access to only those individuals who possess the necessary security clearance and who are actually providing services under the contract with a valid need to know. Further dissemination to other contractors, subcontractors, other government agencies, private individuals or organizations is prohibited unless authorized in writing by the originating agency through the COR.

f. The contractor must ensure each employee having access to intelligence material is fully aware of the special security requirements for this material and shall maintain records in a manner that will permit the contractor to furnish, on demand, the names of individuals who have had access to this material in their custody.

g. Intelligence material must not be released to foreign nationals or immigrant aliens whether they are consultants, US contractors, or employees of the contractor and regardless of the level of their security clearance, except with advance written permission from the originator. Requests for release to foreign nationals shall be initially forwarded to the contracting officer's representative and shall include:

i. A copy of the proposed disclosure.

ii. Full justification reflecting the benefits to US interests.

iii. Name, nationality, particulars of clearance, and current access authorization of each proposed foreign national recipient.

h. Upon completion or termination of the classified contract, or sooner when the purpose of the release has been served, the contractor will return all classified intelligence (furnished or generated) to the source from which received unless retention or other disposition instructions (see DCID 6/1) are authorized in writing by the COR, and a Final DD254 is generated.

i. The contractor must designate an individual who is working on the contract as custodian. The designated custodian shall be responsible for receipting and accounting for all classified intelligence material received under this contract. This does not mean that the custodian must personally sign for all classified material. The inner wrapper of all classified material dispatched should be marked for the attention of a designated custodian and must not be opened by anyone not working directly on the contract.

j. Within 30 days after the final product is received and accepted by the procuring agency, classified intelligence materials released to or generated by the contractor, must be returned to the originating agency through the contracting officer's representative unless written instructions authorizing destruction or retention are issued.

Requests to retain material shall be directed to the COR for this contract in writing and must clearly indicate the justification for retention and identity of the specific document to be retained.

k. Classification, regarding, or declassification markings of documentation produced by the contractor shall be consistent with that applied to the information or documentation from which the new document was prepared. If a compilation of information or a complete analysis of a subject appears to require a security classification other than that of the source documentation, the contractor shall assign the tentative security classification and request instructions from the contracting officer's representative. Pending final determination, the material shall be safeguarded as required for its assigned or proposed classification, whichever is higher, until the classification is changed or otherwise verified.

2. Intelligence material carries special markings. The following is a list of the authorized control markings of intelligence material:

a. “Dissemination and Extraction of Information Controlled by Originator (ORCON).” This marking is used, with a security classification, to enable a continuing knowledge and supervision by the originator of the use made of the information involved. This marking may be used on intelligence, which clearly identifies, or would reasonably permit ready identification of an intelligence source or method, which is particularly susceptible to countermeasures that would nullify or measurably reduce its effectiveness. This marking may not be used when an item or information will reasonably be protected by use of other markings specified herein, or by the application of the “need-to-know” principle and the safeguarding procedures of the security classification system.

b. “Authorized for Release to (Name of Country(ies)/International Organization.” The above is abbreviated “REL ________.”

This marking must be used when it is necessary to identify classified intelligence material the US government originator has predetermined to be releasable or has been released through established foreign disclosure channels to the indicated country(ies) or organization.

3. The following procedures govern the use of control markings.

a. Any recipient desiring to use intelligence in a manner contrary to restrictions established by the control marking set forth above shall obtain the advance permission of the originating agency through the COR. Such permission applies only to the specific purposes agreed to by the originator and does not automatically apply to all recipients. Originators shall ensure that prompt consideration is given to recipients’ requests in these regards, with particular attention to reviewing and editing, if necessary, sanitized or paraphrased versions to derive a text suitable for release subject to lesser or no control markings.

b. The control marking authorized above shall be shown on the title page, front cover, and other applicable pages of documents, incorporated in the text of electrical communications, shown on graphics, and associated (in full or abbreviated form) with data stored or processed in automatic data processing systems. The control marking also shall be indicated by parenthetical use of the marking abbreviations at the beginning or end of the appropriate portions. If the control marking applies to several or all portions, the document must be marked with a statement to this effect rather than marking each portion individually.

c. The control markings shall be individually assigned at the time of preparation of intelligence products and used in conjunction with security classifications and other marking specified by E.O. 13526 and its implementing security directives. The marking shall be carried forward to any new format in which the same information is incorporated including oral and visual presentations.

4. Request for release of intelligence material to a contractor must be prepared by the contracting officer’s representative (COR) and submitted to the Senior Intelligence Officer or his designated representative. This should be accomplished as soon as possible after the contract has been awarded. The request will be prepared and accompanied with a letter explaining the requirements and copies of the DD Form 254 and Statement of Work.

Attachment 2

RELEASE OF SENSITIVE COMPARTMENTED INFORMATION (SCI) INTELLIGENCE

INFORMATION TO US CONTRACTORS

ATTACHMENT TO DD FORM 254 FOR CONTRACT NO: TBD

NUMBER OF SCI BILLETS AUTHORIZED: As Required

CONTRACT EXPIRATION DATE: TBD [Also Include Expiration Date for each potential Option Period, if applicable]

The Director, DIA has exclusive security responsibility for all Sensitive Compartmented Information (SCI); classified material released to or developed under the contract and held within the Contractor SCI Facility (SCIF). DoDM 5105.21-V1, (Sensitive Compartmented Information (SCI) Administrative Security Manual: Administration of Information and Information Systems Security), DoDM 5105.21-V2, (Sensitive Compartmented Information (SCI) Administrative Security Manual: Administration of Physical Security, Visitor Control, and Technical Security), DoDM 5105.21-V3, (Sensitive Compartmented Information (SCI) Administrative Security Manual: Administration of Personnel Security, Industrial Security, and Special Activities), DCID 6/1 , ICD 503, ICD 704, DCID 6/6, DCID 6/7, ICD 705, National Industrial Security Program Operating Manual (NISPOM), DoD 5220.22-R (Department of Defense Industrial Security Program) and will comply with all regulations/manuals/directives stated therein which provide the necessary security & classification guidance for personnel, information, physical, AIS, and technical security measures and is a part of the SCI security specifications for the contract.

Inquiries pertaining to SCI classification guidance determination or interpretations shall be directed to the Contracting Officer /Contracting Officer Representative (CO/COR) identified in Block 12 of the attached DD254.

1. Requirements for access to SCI:

a. All SCI will be handled in accordance with special security requirements, which will be furnished by the designated responsible special security office (SSO).

b. SCI will not be released to contractor employees without specific release approval of the originator of the material as outlined in governing directives; based on prior approval and certification of "need-to-know" by the designated contractor.

c. Names of contractor personnel requiring access to SCI will be submitted to the contracting officer's representative (COR) for approval. (The contracting officer's representative is identified in Block 12 of the DD Form 254.) Upon receipt of written approval from the COR, the company security officer will submit request(s) for special background investigations in accordance with the NISPOM, to the Defense Industrial Security Clearance Office (DISCO). A copy of the personnel security questionnaire (SF-86) should be forwarded to the DIA Personnel Security Office.

d. Inquiries pertaining to classification guidance on SCI will be directed through the CSSO to the responsible COR as indicated on the DD Form 254.

e. SCI furnished in support of this contract remains the property of the Department of Defense (DoD) department, agency, or command originator. Upon completion or cancellation of the contract, SCI furnished will be returned to the direct custody of the supporting SSO, or destroyed IA W instructions outlined by the COR.

f. SCI will be stored and maintained only in properly accredited facilities at the U.S. Government's location.

g The DIA Security Office will recognize the above noted expiration date as the completion date for the contract. The DIA SCI security office will initiate action to debrief contractor personnel with access to this contract unless extensions or modifications to the contract are received by the DIA SCI security office no later than 30 days after the established completion date.

h. The contractor is governed by ICD 704, 'Personnel Security Standards and Procedures Governing Eligibility for Access to Sensitive Compartmented Information (SCI) And Other Controlled Access Program Information ' and as may be supplemented by DIA. Although contractor personnel may be eligible for access to SCI or currently possess an SCI personnel security clearance with another non-DIA agency, contractor personnel performing on this contract must be adjudicated by DIA/DAC-3 prior to having access to SCI information retained by DIA, unescorted access to DIA spaces, and receipt of a DIA issued contractor badge. The contractor will identify in writing, contractor personnel assigned to this contract by NAME, SSN, Date of Birth and Place of Birth, and provide this documentation to the CO/COR identified in paragraph 3, above. The CO/COR will forward a copy of this documentation to DIA/DAC-3 for adjudication. This documentation will be marked and protected under the Privacy Act of 1974.

i. Electronic processing of SCI must be accomplished on equipment accredited in accordance with DoDM 5105.21-V1, DIAM 50-4, ICD 503, and the DoDIIS-Joint Security Implementation Guide (DJSIG).

2. The contracting officer's representative (COR) will:

a. Review the SCI product for contract applicability and determine that the product is required by the contractor to complete contractual obligations. After the COR has reviewed the SCI product(s) for contract applicability and determined that the product is required by the contractor to complete obligations, the COR must request release from the originator through the Intelligence Division. Originator release authority is required on the product types below:

i. Documents bearing the control markings of ORCON, PROPIN.

ii. GAMMA controlled documents.

iii. Any NSA/SPECIAL marked product.

IV. All categories as listed in DoDM 5105.21-VI.

b. Prepare or review contractor billet/access requests to insure satisfactory justification (need-to-know) and completeness of required information.

c. Approve and coordinate visits by contractor employees when such visits are conducted as part of the contract effort.

d. Maintain records of all SCI material provided to the contractor in support of the contract effort. By 15 January (annually), provide the contractor, for inventory purposes, with a complete list of all documents transferred by contract number, organizational control number, copy number, and document title.

e. Determine dissemination of SCI studies or materials originated or developed by the contractor.

f. Within 30 days after completion of the contract, provide written disposition instructions for all SCI material furnished to, or generated by, the contractor with an information copy to the supporting SSO.

g. Review and forward all contractor requests to process SCI electronically to the accrediting SSO for coordination through appropriate SCI channels.

h. Request for release of intelligence material to a contractor must be prepared by the contracting officer's representative (COR) and submitted to the DIA Senior Intelligence Officer or his designated representative. This should be accomplished as soon as possible after the contract has been awarded. A letter explaining the requirement shall be attached to the request along with a copy of the DD Form 254 and the Statement of Work.

3. The contractor will inform the CO/COR and the DIA SCI security office at least 20 working days in advance of any business visits that will involve the passing of access from one location to another. (Note: Emergency exceptions will be handled on a case-by-case basis.)

The CO/COR will certify need-to-know and approve passing of clearances by DIA SCI security offices.

4. SCI with restrictive caveats will be released to the contractor only when the originator's approval has been obtained. All other SCI may be released to the contractor on approval by the CO/COR. The contractor will not release SCI to any personnel without prior approval from the CO/COR.

5. Transporting of SCI on commercial aircraft is only authorized by an exception waiver issued by the DIA Senior Intelligence Officer

(SIO).

6. The contractor is authorized direct communications with the designated CO/COR and the DIA SCI security office in all matters pertaining to SCI requirements. The CO/COR identified in Block 12 of the DD Form 254 will receive a copy of any correspondence, which may have an impact upon the contractor's ability to perform under this contract.

7. On receipt of any SCI that impacts the cost of the contract, the contractor will inform the CO/COR, who, in turn, will notify the Contracting Officer/ Activity prior to expending additional funds. The DIA SCI security office will receive a copy of this cost modification as well.

8. Contractors who have TOP SECRET/SCI access may have unescorted access to a government facility, including Government Owned Contractor Operated (GOCO) facilities, and may be permitted to work alone inside the facility without the requirement for the presence of a U.S. Government employed representative provided all PROP IN, ORCON, GAMMA, SlOP, CNWDI, Law Enforcement Sensitive (LES) and other special program materials are secured to preclude contractor access to this material, or a non-disclosure form is signed by the contractor(s) w/ written approval of the originating agency, or if a U.S. Government employee (military or civilian) is on-site at the time.

9. Electronic processing of SCI must be accomplished on equipment accredited in accordance with DoDM 5105.21-V1, DIAM 50-4, ICD 503, and the DoDIIS-Joint Security Implementation Guide (DJSIG).

Security Addendum-Standard As Applied to Contract

Dated: 24 January 2013

1. The name, telephone number, and address of the CO/COR for this contract is: Robert Mahler (275-8699).

2. The private use of classified information is not permitted except in furtherance of a lawful and authorized Government purpose.

3. Security briefings will be in accordance with the NISPOM, and/or other appropriate directives, (DoDM 5105.21-V1, and Enclosure 5 to DoDM 5200.01-V3). In all cases, the employee will be briefed on his/her obligation to safeguard the information. The employee/contractor will be debriefed according to the applicable regulations when the access is terminated and/or no longer has the need-to-know.

4. The Special Security Officer/Contractor Special Security Officer, (SSO/CSSO) will maintain records, by name and title, of all employees and authorized visitors who have access to the classified and/or intelligence material. The SSO/CSSO will confirm that all employees/visitors are appropriately cleared and authorized, prior to gaining access to the material.

5. ALL MATERIALS GENERA TED BY THE CONTRACTOR (including but not limited to correspondence, drawings, models, mockups, photographs, schematics, status, progress, and special reports) will be classified according to its own content and/or by special instructions issued by the CSA, Contracting Officer or his/her duly appointed representative.

6. Special instructions and controls for the handling, processing, storing, and transmission of classified information and material are provided in the appropriate regulations, manuals, or directive. The documents are identified as follows: DIAM (58-Series Manuals) and DIA Desk Reference Guide to Executive Order 13526.

7. The contractors will not release classified and/or intelligence material to any activity, employee, or other person not directly engaged in providing under this contract unless specific written authorization for such release is received from the CO/COR. This prohibition precludes release without written authority to another contractor or subcontractor, Government agency, private individual, or organization.

8. Unclassified information released or generated under this contract will be restricted in its dissemination to contractor and Government personnel involved in the contract. Release in open literature or exhibition of such information is strictly prohibited without permission of the CO/COR.

9. Intelligence material, whether or not bearing control markings, will not be released to foreign visitors, foreign nationals, or immigrant aliens regardless of their position or level of their security clearance, except with the specific permission of the originating agency.

10. If the contractor is required to utilize any wireless transmitter devices, to include radio frequency (RF) or infrared (IR) to support this contract, the contractor must contact DIA/DAC-2A (DIA SCIF Management Branch) and identify the device(s), the planned use purpose or scope of the devices, respond to requests for additional information concerning such devices, and comply with TEMPEST guidelines identified by DAC-2A (DIA SCIF Management Branch).

11. The contractor will comply with DIA policy, and policy as may be revised, regarding the use of Portable Electronic Devices (PED) within DIA accredited spaces. Should the contractor be within spaces belonging to another agency (host), the contractor will comply with the host requirement. A PED is any electronic device that receives, transmits, stores, processes, records audio/visual, scans, or otherwise is capable of manipulating information in any form . A PED includes but is not limited to cellular telephones, cameras, pocket scanners, voice recorders, pagers, and computers.

12. Classified and/or intelligence related material released to or generated by the contractor may be destroyed locally by the contractor.

Such destruction will be in accordance with the applicable regulations: DoDM 5105.21-V1 or Chapter 5, Section 7, NISPOM, utilizing destruction procedures, devices, methods, or equipment approved by the National Security Agency.

13. By virtue of access to SCI and/or intelligence material, contractor employees may have restrictions placed on them for foreign travel in or through designated countries or geographic areas. The contractor shall be responsible for exercising adequate supervision to assure that employees are willing to comply with notification requirements for anticipated and completed foreign travel.

14. Subcontracting this contract or any portion thereof of this contract requires the contractor to sponsor the subcontractor and be approved by the CO/COR. The prime contractor must complete a separate DD 254. Additionally the subcontractor must have a final facility clearance issued by Defense Security Service (DSS) or other U.S. Government agency authorized to issue equivalent clearances.

15. Contractors are prohibited from having access to "PROPRIETARY INFORMATION" (abbreviated PROP IN or PR), and "DISSEMINATION AND EXTRACTION OF INFORMATION CONTROLLED BY ORIGINATOR" (abbreviated ORCON) unless in compliance with one of the following:

a. The originating agency of the PROPIN and ORCON provides written consent to the accessing contractor, and the accessing contractor agrees in writing with the originating agency not to divulge, use, or otherwise release PROPIN and ORCON. The originating agency of the PROPIN and ORCON is responsible for identifying and marking PROPIN and ORCON. The CO/COR is responsible for identifying marked PROPIN and ORCON information within their control and initiating the request and release documentation between the originating agency owning the PROPIN and ORCON and the accessing contractor. If the originating agency of the PROPIN and ORCON fails to or denies access to the accessing contractor, or if the accessing contractor fails to or does not agree to not to divulge, use, or otherwise release the PROPIN and ORCON, then the CO/COR is responsible for denying PROPIN and ORCON access until the appropriate documentation has been completed. Contractors, who intentionally obtain access to PRO PIN and ORCON without the required documentation, may be subject to civil and criminal liabilities and penalties as provided by law. US Government employees who release PRO PIN and ORCON, whether intentionally or accidentally to unauthorized contractors, are subject to civil and criminal liabilities and penalties as provided by law, or

b. A US Government employee (military or civilian) is on-site, when contractor access to PROPIN or ORCON is possible or available.

16. The contractor must comply with Foreign Ownership, Control or Influence (FOCI) restrictions and notifications as outlined in the

NISPOM.

17. If the contractor identified in DD 254, Block 6a, Block 7a or Block 8a. is identified as a being under FOCI by Defense Security Service (DSS), a favorable National Interest Determination (NID) must be completed as outlined within the NISPOM prior to the contractor being awarded the contract and having access to PROSCRIBED INFORMATION. PROSCRIBED INF'ORMATION includes COMSEC, Sensitive Compartmented Information, Critical Nuclear Weapons Design Information, Restricted Data, Formerly Restricted Data, TOP SECRET, Special Access Programs, other classified information, and other Executive Branch Departments and Agencies for classified information under the cognizance of such.

18. The contractor may not introduce, activate or use any wireless transmission devices within any DIA facilities or any DIA accredited facilities without first receiving written permission from the Regional Information Assurance Manager (RIAM) (Contact Security Policy Division (below) for the relevant POC in your area.) Military Departments, Major Commands, Combatant Commands, Senior Intelligence Officers, and local Special Security Officers or Contractor Special Security Officers may require more stringent standards which must be complied with. If the contractor is located within another agency's facility or accredited facility, the contractor will comply with the other agency's policies regarding the introduction, activation or use of any such device. The Director, National Intelligence (DNI) may by policy, directive or other means, bar the introduction of any wireless transmission device into any SCIF area after the date of this contract. Should this occur the DNI policy will automatically supersede this paragraph and if the wireless device is still required to be introduced into the SCIF area, justification and a waiver request must be submitted to RIAM for a determination.

19. Contractors who anticipate a change of name and/or ownership, must notify the CO/COR in writing upon consideration of the proposed change. Changes may affect facility clearances which may affect continuance of the contract.

20. A security review of this DD Form 254 is required during the different stages of the contract or any revision of this contract. The CO/COR will provide the contractor with applicable changes in security requirement(s) by issuing a revised DD Form 254.

NOTE: CONTRACTORS, PLEASE GO THROUGH YOUR CO/COR PRIOR TO CONTACTING THE OFFICES BELOW.

DIA Points of Contact for Security Issues:

DIA/DAC-2A, (703) 907-2911/0512/0953 (DIA Industrial Security) DIA/DAC-2A, (703) 907-1300 (DIA SCIF Management Branch) DIA/DAC-1 , (703) 907-1365 (Security Policy Division) DIA/DAC-3A, (703) 907-1311 (Central Clearance Branch) DIA/DS, (202) 231-8000 (Information Management)