HHM402-13-R-0023_ATTACHMENT_2_DD254.pdf

DEPARTIIENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the DoD lndustial Secudty Manual apply to arl secur'fv asoects of this effod)

1. CLEARANCE AND SAFEGUARDING

a, FACILITY CLEARANCE REOUIRED

Top Secret

b. LEVEL OF SAFEGUARDING REQUIRED

Secret

2. THIS SPECIFICATION lS FOR: (X and comDlete as aoolicable) | 3. 'HlS SPECIFICATION lS FOR: (X and comDlete as aDDlicable)

X

a. PRIME CONTRACT NUMBER

TBD X

a. ORIGINAL (comproto d,it6 in arr c€66s) DAIE IYMMDD)

20130124

b. SUBCONTRACT NUMAER b. REVISED (sup66edss all I Revision No.

pr€vDus 3p€c€t I

Dale {YYMMDD)

X

c. SOLICITATION OR OTHER NUMaER I DUE Date (yyMMDD)

288{tO90-132 |

c. FINAL (Complole lt€m 5 in allc€s€s) Date fYMMDD)

4. rs rHrs A FoLLow-oN GoNTRAGT? | IYES lXlNO. [yes, comprete rhetolowing:

Classifed material received or generated under_ is lransfered to this follow-on contract

5. ls THls FllaLDD Fo]tn 254? I IYES lXlNO. rYes, complete the following:

In fesponle lo the contractois requesled dated _, retention ol the identifed classified mate.ialis authorized lor the p€riod ol

6- COiITRACTOR rrn"r"d. cmmdodand Gffirenr Entrtu (CAGE) codo)

a. tlAME. ADORESS. and ZIP COoE

TBD

b. CAGE CODE

TBD

c. COGNIZANT SECURITY OFFICE (Name, Add6ss, and Zip Code) Defense Securily Service

TBI)

7. SUBCoNTRAGTOR

a. I,IAME, ADDRESS, AND ZIP COOE

N/A

b. CAGE CODE

N/A

c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

N/A

8. AGTUAL PERFoRMANGE

A, LOCATION

See Block 13

b. CAGE CODE

N/A

c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

N/A

9, GEI{ERAL IDENTIFICATION OF THIS PROCUREUENT

Tech exploitation support

10, COI{TRACTOR WILL REOUIRE ACCESS TO: YFS NO ,I1. IN PERFORISII{G THIS COI{TRACT, THE CO TRAGTOR WILL: YES NO

a. coMMuNtcAt toNs StcuR Y tcoMsEcl rNronMAr roN X

9. HAVE A(.r(iEsS rO CLASsrrrEU rNr-Or{MA||ON ONLY AI ANorriEK

CONTRACTOR'S FACILIIY OR A GOVERNIVENT ACTIVITY X

b. RESTRIC]ED OATA X b R€CEIVE CLASSIFIED DOCUMENTS ONTY X c CRIfICAL NUCLEAR WEAPON OESIGN INFORMAIION X

C. RECEIVEAND GENERATE CLASSIFIED MATERIAT

X d FORMERLY RESTRICTED DATA X d FABRICATE, MOOIFY. OR STORE CLASSIFIEO HAROWARE

X

E INTELLIGENCEINFORMATION 6 PERFORM SERVICES OIILY

X

(1) SeNiriv€ Cmpadm6nr€d Inronnarid (SCl)

X

I HAVEACCESS TO U,S. CIASSIFIED INFORMAIION OUTSIOE IHE U S

PUERTO RICO, U S POSSESSIONS AND TRUST TERRITORIES X

(2) r,bn-scl X

O U!AUIHOr{|zEU I(JUsE IHESERVICESOT DETENSE IECHNI(JAL

INFORMATION CENTER (DTIC) OR OTHER SECONDARY DISTRIEUTION

CENTER

X i SPECIAL ACCESS INFORMATION

X

h. REqUIRE A COMSEC ACCOUNT

X

g. NATO INFORMATION

X

I HAVE TEMPEST REQUIREMENTS

X h.

X I. HAVE OPERAI|ONS SECURIry (OPSEC) REOUIREMENTS

X I

X

K. BE AUTHORIZED TO USETHE DEFENSE COURIER SERVICE

X i FOR OFFICIAL USE ONTY INFORMATION

X Sco Block 13 X

See Block l3 X

DD FORM 254, DEC 1999 PREVIOUS EDITIONS ARE OBSOLETE

l2.PuBL|cRELEAstE'^nyinformalion(dan'f6dorUnda3sf€d)p€.tainingtolh!conl'act$d|nolb6Gt66!€dforpob|icdiss€mination6xc€pla5provi(t€dby|dals

o. Lrnless it has b€sr approv€d ior pLblic de$ by appropriet€ Govrnd'€nl aulho.ity Pn pos€d p!5lic Bloas€s shall b€ ebmitt€d for approvd p.ia to 16l@$

| | Direct I X I rhroush (sps'ry)' The Contracting O,fficer Ropretentative Robert Mahler (275{699) NO PUBLIC RELEASE OF SCI lS AUTHORIZED. Requests for other than SCI must be approved through the COR and appropriate channels prior to release.

13. SECURITY GUIDANCE. The security classifcation guidance needed for this effon is identfied below. lf any difficulty is encountered in applying lhis guidance or if any other contributing faclor indicates a need for changes in this guidance, the conlractor is authorized and encouraged to provide recommended changes: to challenge the guidance or classification assigned to any information or material fumished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the infomation involved shall be handled and protected at the highest level of classification assigned or recommended. Baseline Security Classification Guidance (SCG): DoD Instruction C-5240.08, 28 November 2011.

More specitic SCG shall be provided by the COR as rcquired, All applicable provisions of DoD 5220.22M and its supplements apply.

The Contractor will be required to have a Top Secret Facility clearance granted by the Defense Security Service (DSS) prior to contracl implementation.

See attached Securily Addendums

CONSENT TO SUBCONTRACT RESTRICTION

All security requirements levied upon the prime contractor and/or othgrwba associated with this contract shall immediately be flowed down from the prime contractor to any subcontractor (or from subcontractor to a loyver tier subconlractor), .egardless of the scope of any such participation should it require access to clarsified infomatlon or unescorted access to controlled space where cla$itied information (rsgardless of media) and/or hardwar€ is open€tor€d, generated or otherwise accessiblo. Escorted access is defined as being under the vl3ual control of appropdately cleared peBonnel with the requisite need-to-know. Subconfracfors are expressly not authorhed ao participate in this contract untess and unfil such Ame that the DIA Contracfing Ofricer in coordination with the DIA Counbintettigence & Securry Ottice (DAC), attn: Chtaf, lndustrial Secudty ftas expr€ssry consented in wrifing to the pafticipation of any such padicipant As vertfication, the pime contractor will forward copies of att sub-contract DD2a/ts to the DtA lndusfial S*uity Team. These will be signed in a signature-line, Block 1 3, and then retumed to the pime contnctor's Facitity Secury Offtcer (FSO) for their signature and distribution.

8a./11a. Conkact perfomance and access to classified material is restricted to DIA or other U.S. Government controlled facilities and the Contracto/s facility listed in block 6a. The only classified matarial to be stored/accessed at the contracto/s 6a facility is the Statement of Work (SOW) for the contract listed in block 2a, Accsss to any other classified material shall be limited to DIA or other U.S. Government controlled facilities. The using contractor or U.S. Government activity will provide security classification guidance for the performance of this contract.

The contractor Facility Security Officer (FSO) on lile with DSS is: (TBD) It this information is not correct, the contractor must coniact the DSS Field Oftice identified in Block 6, and update allconlractor information as applicable.

See Block l3 Continuation

14. ADDITTONAL SECURIW REQUIREIIENTS. nequnam€nrs, in addition ro tsM requiemenrs, ar€ eltsbrished tor this conrracr. (rf Yes lX lYes I lNo ldentify the p€rlin€rn conlraclual clauses in th€ conhect doc! t€nl it$ll, or provido an appropnar€ stat€honl, ehich dntilid th€ additioal r6qun6menProvrd6 a copy ot th6 GquiGm€nls to lh€ cognizant s€oiily ofic€. U.6ltom t3 il 6.ldiuon6l Bp6@ iG nsd6d.)

Access to intelligence information requires a special brieting and a FINAL U.S. Government clearance at appropriate level for access. Foreign nationals are prohibited from access to any classified information unless sanctioned by an internalional or cooperative otodrrm adreemenl

15. INSPECTIONS. Ebmerte of rhis contracr 16 orrsid6 th6 inspoction r6spomibility or ths cosni:anl security offcr (rrYes, idsntiry sp€oinc a.€as or I lYes I X I No ol6m6nts oarved oul and th6 aclivily rcspon{'ib's ior insp€rtioft Uss llsm 'l 3 il additional spEc€ iB n€6d6d ) l6b.GERnFEAnoNANo5lGNArURE.5l*urityr.qu|r€monl..|f!.df.r.|nrr.cornp|.t.md.d.qu.t.lor..l.g!.rd|ngih€c|...l'i.di|r.orn.iiootob.E|e4do claltl.d .fiort. All qusdon€ shall . Bf.n d to tn. oflcl.l n.m€d b.los, A. TYPED NAME OF CERTIFYING OFFICIAL

Timothy W. Eaton

b. TITLE

Intelligence Ofticer (Cl)

c. TELEPHONE

(703) 907-0512

d. ADDRESS (lncrud€ zp cod€)

DItuDAC-2 (lndustrial Security Program) 3100 Clarendon Blvd.

Arlingion, VA 22201-5300

17.

Tl--l Tlf

XI

TI

REQUIREO DISTRIBUTION

a. CONTRACTOR c, COGNIZANT SECURIIYOFFICE FOR PRIME AND SUBCONIRACTOR

d. U.S, ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

€ ADMINISTRATION CONTRACTING OFFICER

e. SIGiIATURE

DD FORM 254, DEC 1999 (BACK)

Block 13 Continuation (Pg. l) Gontract #: TBD

10a. Contractor must foMard request for COMSEC maierial/information through the Contracting Officers Representative (COR). The contractor is governed by DoD 5220.22-M, Chapter9, Section 4 'Communications Security (COMSEC)" and NSA,/CSS Policy Manual 3-16. Access to COMSEC material is restricted to US citizens holding a final US Government security clearance. Such information is not releasable to personnel holding only reciprocal clearance. Prior approval from the Govemment Contracling Agency is required in order for a Prime Contraclor to grant COMSEC access to a Subcontraclor. Contraclor must comply with DIA,/DS guidelines. The NSA Central Office of Record has primary responsibility tor lhe auditing of all COMSEC material govemed by the DoD 5220.22-M.

10e. (1) See atlached SCI Release of Intelligence Information for additional security requirements. Access to intelligence infomalion requires SCI indoctrination and a tinal Top Secret U.S. Governmenl dearance. Contractor will require access OCIO 6/6 'Security Controls on lhe Dissemination of Intelligence Informalion," and DCID 6/1 "Security Policy for SCI and Securily Policy Manual." For SCI Requirements: The contractor must provide individuals who are able to achieve and maintain the adjudicative standards set fonh in the Intelligence Community Directive (lCD) Number 704 "Personnel Security Standards And Procedures Governing Eligibility For Access To Sensitive Compartmented Information And Olher Controlled Access Program Information," for continued employmenl. In addition to the aforemenlioned requirements and as mandated by DlAl 5200.002, paragraph 1.5, dated 23 Mar 2010, all contraclors are subject to pre-employment, initial, and periodic counterintelligenc€-scope polygraph screening.

10e. (2) See attached Non-SCl Release of Intelligence Informalion for additional security requirements. Contractor will require access to ICD 710 "Classificaiion and Control Markings System" (11 SEP 2009)" For Non-SCl Requirements: Top Secrel: Allcontraclor personnel assigned under this conlract musl possess a current Top Secret security clearance. Personnelare required lo sign a non-disclosure slatement. DIA Security Offic€ will provide personnel securily guidance for the performance of this contract.

'10f. The DIA SAP Program Manager (or appropriate User Activity) is responsible for contract access for all DIA SAP material. Access to Special Access Infomation requires a final U.S. Govemment clearance at the appropriab level or as identmed by the Special Program Manager tor each, appropriate, Special Access Program. The contraclor must coordinate with SAP Program Manager, through the CO/COR, prior to access. They must adhere to the special acc€Bs requirements/procedures developed by lhe SAP Office of Primary Responsibility. SAP information/material will be processed IAW DoD 5220.22-M-SUP 1, NISPOM Supplemenl and affliated Service/Agency Regulations. SAP Program Manager must approve all such a@esses. lf a SAP subcontracl is awarded, it is the prime contracloCs responsibility to incorporate the additional security requirements ln the subcontract. Authority for access must be obtained from the DIA SAP Program Manager.

109. Access to NATO material will be required for reference at the Govemment, or appropriately cleared contracto/s facility. Access requires a final U.S. Govemmenl security clearance ai the appropaiate level. Contractor personnel who require access to NATO material will be briefed by the Government Contracting Agency. The Prime Conlraclor must receive approval from lhe Govemmenl Contracling Agency to grant NATO access to a sub@nlractor. Conlrac-tor personnel shall be debriefed by the Government program manager prior to departure from this contract.

10h. Prior approval from the Contracting Oflicer Representative is required lor access to foreign government information for the performance of this contract. Foreign government information musl be protected at the equivalent level provided to similar categories ol U.S. government information or as specifed by the Foreign Government in written govemmenl-to-government agreements. Prior approval oflhe COR is required for subcontracting.

10j. FOR OFFICIAL USE ONLY INFORMATION (FOUO): The Contractor is authorized and may have access to UNCLASSIFIED information/material identifed as "For Official Use Only" (FOUO). The contractor is prohibited from furlher disclosure/dissemination of this information withoul lhe expressed writlen authorization of DlA. FOUO Information provided under this contract shall be safeguarded as specilied in DoDM 5200.0'l , Volume 4 (DoD Information Security Program: Controlled Unclassilied Information (CUl) , February 24, 20'12", and may be supplemented by DlA. In addition, contraclors or sub@ntractors must obtain written approval from the DIA CO/CORICOTR or DIA Office for Congressional and Public Affairs (CP) prior to posting any unclassified information that was provided to them by DIA on any Web site or the Internet. This will also apply to any acknowledgement of association between the contractor/subcontractor and DlA.

10k. All uncla3sified DoD information in the posse3sion of non-Doo entities on non-DoD information systems shall be protected In accordance wilh DoDl 8582.01.

Law Enforcement Sensitive data is FBI originated sensilive data and will be protecled in the same manner as FOUO information. Law Enforcemenl Sensitive data will be on a need to know basis only. Dissemination of lhis information is not allowed without prior approval from the FBl.

Before an employee departs, the contractor will ensure the employee goes through DIA SSO to be debriefed and retum al I badges to Personnel Securily. Failure on the part ofthe contractor for not ensuring their employee is properly debriefed will result in a security violation against the company.

All classified visit requests by contractors shall be foMarded to the COR for approval and need-to-know certifcation betore being sent to the facility to be visited.

All classified information received and/or generated under this contract is the property of the U.S. Governmenl regardless of proprietary claims. Upon complelion or termination of this contract, the U.S. Govemment will be contacted for destruction or disposition anstructions.

Block 13 Continuation (Pg. 2) Contract #: TBD

In the event of a suspected or verified security violation associated with this contract or pre-award eforl, lhe Facility Security Oflicer (FSO) or appropriate program security officer must notry their COR within 24-hours oftheir knowledge ofthe incident. The COR will advise DAC (lndustrial Security), (703) 907-0953/0332 immediately upon notification from the conlractor, as well as the cognizant DIA Contracting Officer.

Inmrporate Antiterrorism measures in accordance wilh DoD 0-2000.'12-H (Chapter 20 Appendix 8)

11e. Contract is for analytical services. Actual knowledge of classilied informaiion is required for performance of this contacl. Cleared personnel are required to perform this service because access to classified informalion cannot be precluded. The contraclor is not authorized to release classifed information lo any activity or person, including suFcontractors, without lhe government mntracling officer's representative written approval. Only with the express pemission ofthe government's contracling office/s representative may the contractor reproduce any classified information/material. All requiremenls for conlrol and accounting for original documentation and copies apply.

11j. 'l . The contractor will apply Operations Security (OPSEC) to enhance prolection for classified and unclassifed critical information. While the documents identified in references below provide details on the development of OPSEC programs and implemenlation of OPSEC analyses, the requirements below provide the minimum standards for OPSEC application directed in this contract.

(a) The conhactor manager or a delegated OPSEC coordinator will be familiar with operations security (OPSEC) as described in National Security Decision Direclive Number 298, DoD Directive 5205.02, OoD Manual 5205.02-M, and DIA Directive 5800.100, cunent versions.

(b) Military Service and COCOM OPSEC guidance (Joint Publication &13.3, CJCS Insiruclions, and appropriate Service or COCOM issuances) may also apply if the contracted activity is performed in a Service or COCOM operational environment.

lf performance is conducled in a tenant anangement within a Service or COCOM environmenl and a conflicl is identified between local and DIA guidance, foMard concerns through lhe COR to the DIA OPSEC Program Manager (DAC-6) for clarification.

2. Personnel will comply with OPSEC measures and program requirements established at the government site/program.

(Contracl performance will occur within a DIA site/managed program where an OPSEC PM or Coordinator is designated by the government.)

3. The contract PM will idenfry an OPSEC coordinator and keep the COR apprised of cunent contract infomalion. (Use when contract performance will occur at a geographically separale location from DIA site/management).

4. Personnel supporting the contract will proteci details doscribed on the Critical Information List (ClL) provided by the COR as proprielary to the government.

5. All personnel supporting the contract will receive initial and recurring (at least annually) OPSEC awareness training that identifies relevant threat informalion including techniques used by adversaries to obtain classilied and unclassified critical information, direcied OPSEC measures, OPSEC coordinalor contact information, and reporting requirements. The OPSEC coordinator will maintain training records that can be reviewed during assessments or compliance inspections.

Additional supplements may be added by DIA on a case-by-case basis.

1 11. Contractors shall provide all cleared employe€s wilh security training and briefings commensurate with their involvement with classifed informalion. The contraclor shall provide all cleared employees wilh some form of security education and training at least annually. Refresher training shall reinforce the infoamation provided during the initial securiiy brieling and shall keep cleared employees informed of appropriate changes in security regulations. Contractors shall maintain records about the programs offered and employee participation in them. Contractors may obtain defensive security, threal awareness, and other education and training information and material from their CSA or olher sources.

Security Requirements (AUG 1996)

This clause applies to the extent that this contract involves access to information classified Top Secret.

The contractor shall comply with -(1) The Security Agreement (DD Form 441), including the National Industrial Security Program Operaling Manual (DoD

522O.22-Ml: and

(2) Any revisions to that manual, notice ofwhich has been furnished to the Contraclor.

(c) lf, subsequent to the date of this contract, the security classificalion or security requirements under this contract are changed by the Government and if the changes cause an increase or decrease in secudg cosls or otheMise affect any other tem or condition of this contracl, the contract shall be subject to an equitable adjustment as if the changes were directed under the Changes clause of this conlracl.

(d) The Contractor agrees to insert terms lhat conform substantially to the language of this clause, including this paragraph (d) but excluding any reference to the Changes clause of this contract, in all submntracts under this contract that involve access to classified information, Contract Expiration Date: TBD lAlso Includo Explletion Date for each potsntlal Optlon Porlod, ifapplicablol

Version 2.0 (13 December 2012)

(a) (b)

Attachment I

RELEASE OF NON-SENSITIVE COMPARTMENTED INFORMATION (SCI) INTELLIGENCE

INFORMATION TO DoD CONTRAGTORS

ATTACHMENT TO DD FORM 254 FOR CONTRACT NO: TBD

CONTRACT EXPIRATION DATE: TBD lAlso Include Explratlon l]ate for each potontial Option Period, if applicablel

'1 . Reouirements for access to non-Scl:

a. Any collateral classified and/or proprietary sensitive information obtained by contraclors on behalf of DIA's mission, will only be discussed or processed in facilities approved by DIA leadership. At no time, will such information be discussed or shared with unaulhorized contraclors. All DIA contractor employees will be required to sign a DIA Non-Disclosure Agreement stating the same.

b. All intelligence material released to the conlractor remains the property of the US Government and may be withdrawn at any time. Coniractors musl maintain ac,countability for all classified intelligence released into their custody.

c. The contractor must not reproduce intelligence material without the written permission of the originating agency through the contracting office/s representative (COR). It permission is granted, each copy shall be controlled in the same manner as the original.

d. The conlraclor must not destroy any intelligence material without advance approval or as specifed by the contracting officeds representative (COR). (EXCEPTION: Classified waste shall be destroyed as soon as praclicable in accordance with the provisions of the Industrial Security Program).

e. The contractor musl restricl access to only those individuals who possess the necessary security ciearance and who are actually providing services under the contract with a valid need to know. Furlher dissemination lo other conlractors, sub@ntractors, other government agencies, private individuals or organizations is prohibited unless aulhorized in writing by the originating agency through the coR.

f. The contractor must ensure each employee having access to intelligence material is fully aware of the special security requiremenls for this material and shall maintain records in a manner that will permit the contractor to furnish, on demand, the names of individuals who have had access to this material in their custody.

g. Intelligence material must not be released to foreign nationals or immigrant aliens whether they are consultants, US contractors, or employees of the contraclor and regardless ofthe level of their security clearance, except with advance written permission from the originator. Requests for release to foreign nationals shall be initially foMarded to the contracting officeis reDresentative and shall include:

i. A copy of the proposed disclosure.

ii. Fulljustification reflecting the benefits to US interests.

iii. Name, nationality, particulars of clearance, and current access authorization of each proposed foreign national reciDient.

h. Upon completion or tetmination of the classified contracl, or sooner when the purpose of the release has been served, the contractor will relum all classifed intelligence (furnished or generated) to the source from which received unless retention or other disposition instructions (see DCIO 6/1) are authorized in writing by the COR, and a Final DD254 is generated.

i. The contractor must designate an individual who is working on lhe contract as custodian. The designated custodian shall be responsible for receipting and accounting for all classified inlelligence material received under this contract. This does not mean that the custodian must personally sign for all classified material. The inner wrapper of all classified material dispatched should be marked for the attenlion of a designated custodian and must nol be opened by anyone not working directly on the contract.

j. Within 30 days aftot the final product is received and accepted by the procuring agency, classitied intelligence materials released to or generaled by lhe contraclor, must be returned to the originating agency through the mntracting office/s representative unless written instructions authorizing deslruction or retenlion are issued.

Requests to retain material shall be directed to the COR for this contract in writing and must clearly indicate the justification for retention and identity ofthe sp€cific document lo be retained.

k. Classification, regarding, or declassification markings of documentation produced by the contractor shall be consistent with that applied to the informalion or documentation from which the new document was prepared. lf a compilation of infomation or a complete analysis of a sub.iect appears to require a security classification other than lhat of lhe source documentation, the contractor shall assign the tentative security classification and request instructions from the contracting officer's representative. Pending final determination, the material shall be safeguarded as required for ils assigned or proposed ciassification, whichever is higher, until the classification is changed or otherwise verified.

2. Inlelligence material carries special markings. The following is a list of the authorized control ma*ings of intelligence material:

a. "Dissemination and Exlraction of Information Controlled by Originator (ORCON).'This marking is used, with a security classificalion, to enable a continuing knowledge and supervision by the originator ofthe use made ofthe information involved. This ma*ing may be used on intelligence, which clearly identifies, or would reasonably permit ready identitication of an intelligence source or method, which is particularly susceptible to countermeasures that would nullifo or measurably reduce ils effecliveness. This ma*ing may not be used when an item or inlormation will reasonably be protected by use of other markings specified herein, or by the application of the 'need-to-knovy'' principle and the safeguarding procedures of the security classitication system.

b. 'Authorized for Release to (Name of Country(ies)/lntemational Organizalion." The above is abbrevialed "REL _.' This marking musi be used when it is necessary to identit classified intelligence matedal the US government originator has predetermined to be releasable or has been released through established foreign disclosure channels to the indicated country(ies) or organization.

The following procedures govern the use of control markangs.

a. Any recipient desiring to use intelligence in a manner conlrary to restrictions established by the control marking set forth above shall obtain the advance permission ofthe originating agency through lhe COR. Such permission applies only to lhe specific purposes agreed lo by the originaior and does not automatically apply to all recipients. Originators shall ensure that prompt consideration is given lo recipients' requests in lhese regards, with particular attention to reviewing and editing, if necessary, sanitized or paraphrased versions to derive a text suitable for release subjecl to lesser or no control markings.

b. The control marking authorized above shall be shown on the title page, front cover, and olher applicable pages of documents, incorporated in the text of electrical communications, shown on graphics, and associated (in full or abbreviated form) wilh data stored or processed in automatic dala processing systems. The control ma*ing also shall be indicated by parenthetical use of the marking abbreviations at the beginning or end of the appropriate portions. lf the control marking applies to several or all portions, the document must be marked with a statement to this effect rather than majking each portion individually.

c. The crnlrol markings shall be individually assigned at the tims of preparation of intelligence producls and used in conjunction with security classitications and oiher marking specified by E.O. 13526 and its implemenling security directives. The ma*ing shall be carried foMard to any n€w format in which the same informalion is incorporated including oral and visual presenlations.

Requesl tor release of inlelligence material to a contractor must be prepared by the contracling offce/s representative (COR) and submitled to the Senior Intelligence Oflicer or his designated represenlalive. This should be accomplished as soon as possible aller the contract has been awarded. The request will be prepared and accompanied with a letter explaining the requirements and cooies ofthe DD Fotm 254 and Statement of Work.

4.

Version 2.0 (13 December 2012)

Attachment 2

RELEASE OF SENSITIVE COMPARTMENTED INFORMATION (SCD INTELLIGENCE

INFORMATION TO US CONTRACTORS

ATTACHMENT TO DD FORM 254 FOR CONTRAGT NO: TBD

NUiIBER OF SCI BILLETS AUTHORZED: As Required

CONTRACT EXPIRATION DATE: TBD lAlso Includo Erpi]atlon Date for each pobntial Option Perlod, if applicablel

The Director, DIA has exclusive security responsibility for all Sensitive Compartmented Information (SCl); classilied matedal released to or developed under the contract and held within the Contractor SCI Facility (SCIF). DoDM 5105.21-V1, (Sensitive Compartmented Information (SCl) Administrative Security Manual: Administration of Information and Information Systems Security), DoDM 5105.21-V2, (Sensitive Compartmented Information (SCl) Administrative Security Manual: Administration of Physical Security, Msilor Control, and Technical Securily), DoDM 5105.21-V3, (Sensitive Compartmented Information (SCl) Administrative Secudty Manual: Administration of Personnel Security, Industrial Security, and Special Activities), DCID 6/1 , ICD 503, ICD 704, DCID 6/6, DCID 6t, ICD 705, National Industrial Security Program Operating Manual (NISPOM), DoD 5220.22-R (Oepartmenl of Defense Industrial S€curity Program) and will comply with all regulations/manuals/directives stated therein which provide the necessary security & clagsification guidance for personnel, information, physical, AlS, and technical secudty measures and is a part of the SCI security sp€cilications for lhe mntract.

Inquiries pertaining lo SCI classilication guidance determination or interpretations shall be direcied to the Contracting Officer /Contracting Officer Representative (CO/COR) identified in Block 12 oflhe attached DD254.

1. Requirements for access io SCI:

a. All SCI will be handled in accordance with special security requirements, which will be fumished by the designated responsible special security office (SSO).

b. SCI will not be released to contractor employees without specific release approval of the originator of the material as outlined in governing directives; based on prior approval and cerlification of "need{o-knord' by the designated contractor.

c. Names of contractor personnel requiring access to SCI will be submitted to the contrac;ting office/s representative (COR) for approval. Ohe conlracting office/s representative is identifed in Block 12 oflhe DD Form 254.) Upon receipt of written approvalfrom the COR, the company security offcer will submit request(s) for special background investigations in accordance with the NISPOM, to the Defense Industrial Security Clearance Office (DISCO). A copy of the personnet security questionnaire (SF-86) should be foMarded to the DIA Personnel Security Office.

d. Inquiries pertaining to classification guidance on SCI will bo directed through the CSSO to the responsible COR as indicated on the DD Form 254.

e. SCI furnished in support of this contract remains the property of the Department of Defense (DoD) depadment, agency, or command originator. Upon completion or cancellation of the conkact, SCI furnished will be retumed to the direct custody of the supporting SSO, or destroyed lA W instructions outlined by the COR.

f. SCI will be stored and maintained only in properly accredited facilities at the U.S. Government's location.

I The DIA Security Office will recognize the above noled expiration date as the completion date for the contract. The DIA SCI security ofice will initiate action to debtief contractor personnel with access lo this contract unless extensions or modifications to the contract are received by the DIA SCI security office no later than 30 days afrer the established completion date.

h. The contraclor is govorned by ICD 704, 'Personnel Security Standards and Procedures Goveming Eligibility for Access to Sensitive Compartmented Infomation (SCl) And Other Controlled Access Program Information ' and as may be supplemented by DlA. Although conlractor p€rsonnel may be eligible for access to SCI or currently possess an SCI personnel security clearance with another non-DlA agency, contraclor p€rsonnel performing on this contract must be adjudicated by DIA/DAC-3 prior to having access to SCI infomation retained by DlA, unescorted access to DIA spaces, and receipt of a DIA issued conlractor badge. The mnlractor will identry in writing, contractor personnel assigned to this contract by NAME, SSN, Date of Eirth and Place of Birth, and provide this documentation to the CO/COR identitied in patagraph 3, above. The CO/COR will forward a copy of this documentation to D|A,/DAC-3 for adiudication. This documentation will be marked and protected under the Privacy Act of 1974.

i. Electronic processing ofSCl must be accomplished on equipment accredited in accordance with DoDM 5105.21-V1, DIAM 5O-4, ICD 503, and the DoOllS-Joint Security lmplementation Guide (DJStc).

2. The contracling offce/s representalive (COR) will:

a. Review the SCI product for contract applicability and determine that lhe product is required by the contractor to complete contractual obligations. Afier the COR has reviewed the SCI product(s) for contract applicability and determined that the product is required by the contraclor to complete obligations, the COR must request release ftom the originator through the Intelligence Division. Originator release aulhority is required on the product types below:

i. Documents bearing the control markings of ORCON, PROPIN.

ii. GAMMA controlled documents.

iii. Any NSA/SPECIAL marked producl.

lV. All categories as listed in DoDM 5105.21-Vl.

b. Prepare or review contractor billeuaccess requests lo insure satisfaclory jusliltcation (need-to-know) and completeness of required information.

c. Approve and coordinate visits by contraclor employees when such visits are conducted as part ofthe conlract etfort.

d. Maintain records of all SCI material provided to the contractor in support of the contrac{ effort. By 15 January (annually), provide the contractor, for inventory purposes, with a complete list of all documents transferred by contract number, organizational control number, copy number, and document lille.

e. Detemine dissemination of SCI studies or materials originated or developed by the contraclor.

f. Within 30 days after completion ofthe contracl, provide wdtten disposition instruclions for all SCI material furnished to, or generated by, lhe contractor with an information copy to the supporting SSO.

9. Review and foMard all contraclor requests to process SCI electronically to the acdediting SSO for coordination through appropriate SCI channels.

h. Request for release of intelligence material to a conlractor must be prepared by the contracting ofticeis representative (COR) and submitted to the DIA Senior Intelligence Officer or his designated repaesentative. This should be accomplished as soon as possible afler the contract has been awarded. A letter explaining the requirement shall be attached to the request along with a copy of the DD Form 254 and the Statement of Work.

3. The contractor will inform the CO/COR and the DIA SCI securily office at least 20 working days in advance of any business visits that will involve the passing of access from one location to another. (Note: Emergency exceptions will be handled on a case-by-case basis.)

The CO/COR will cediry need-to-know and approve passing of clearances by DIA SCI security offices.

4. SCI with restriciive caveats will be released to the contractor only when the originatois approval has been obtained. All other SCI may be released to lhe contractor on approval bythe CO/COR. The contrac{orwill not release SCI to any personnel without pdor approval from lhe GO/COR,

5. Transporting of SCI on commercial aircrafl is only authorized by an exception waiver issued by the DIA Senior Intelligence Officer (sro).

6. The conttaclor is authorized direct communicalions with the designated CO/COR and the DIA SCI security oflice in all mafters pertaining lo SCI requirements. The CO/COR identified in Block 12 of the DD Form 254 will receive a copy of any correspondence, which may have an impact upon the contracto/s ability to perform under this mntract.

7. On receipt of any SCI that impacts the cost ofthe contract, the contractor will inform the CO/COR, who, in iurn, will notil, the Contrac{ing Officer/ Activity prior to expending addiiional funds. The DIA SCI security ofiice will receive a copy of this mst modification as well.

8. Contraclors who have TOP SECRET/SCI access may have unescorted a@ess to a government facility, including Government Owned Contractor Operated (GOCO) facilities, and may be permitted to work alone inside the facility without the requirement for the presence of a U.S. Government employed representative provided all PROP lN, ORCON, GAMMA, SIOP, CNWDI, Law Enforcement Sensitive (LES) and other special program materials are secured to preclude contractor access to this material, or a non-disclosure form is signed by the contractor(s) w/ written approval of lhe originating agency, or if a U.S. Government employee (military or civilian) is on-site at the time.

9. Elec{ronic processing ofSCl musl be accomplished on equipment accredited in accordance with DoDM 5105.21-Vl, DIAM 50.4. tCD 503, and the DoDlls-Joint Seqrrity lmplementation cuide (DJStG).

Version 2.0 (13 December 2012)

Security Addendum-Standard As Applied to contract

TBD

Dated: 24 January 2013

'1. The name, telephone numb€r, and address ofthe CO/COR for this contract is: Robart Mahler (275{699).

2. The private use of classitied information is nol permi(ed except in furtherance of a lawful and authorized Government purpose.

3. Security briefings will be in accordance with the NISPOM, and/or other appropriale direclives, (OoDM 5105.21-Vl, and Enclosure 5 to DoDM 5200.01-V3). In all cases, the employee will be briefed on his/her obligation to safeguard the information. Th€ employee/conlractor will be debriefed according to the applicable regulations when the access is terminated and/or no longer has the need-to-know.

4. The Special Security Officer/Contractor Special Security Officer, (SSO/CSSO) will maintain records, by name and litle, of all employees and authorized visitors who have a@ess io the classified and/or intelligence material. The SSO/CSSO will conlirm ihat all employees/visitors are appropriately cleared and authorized, prior to gaining access to the material.

5. ALL MATERIALS GENERA TED BY THE CONTRACTOR (including but not limited to conespondence, drawings, models, mockups, pholographs, schematics, status, progress, and special reporls) will be classified according to its own content and/or by special instructions issued by the CSA, Contracting Officer or his/her duly appointed represeniative.

6. Special instructions and controls for the handling, processing, storing, and transmission ofclassified inlormalion and material are provided in lhe appropriale regulations, manuals, or directive. The documents are identified as follows: DIAM (s8-Series Manuals) and DIA Desk Reference Guide to Executive Order 13526.

7. The conttactors will not release classitied and/or inlelligence material to any aclivity, employee, or other person not direclly engaged in providing under this conlraci unless specific written authorization for such release is received from the CO/COR. This prohibition precludes release without written authorily to anolher contrac{or or subcontEclor, Government agency, private individual, or organization.

8. Unclassified information released or generated under this contract will be reslricted in its dissemination to contractor and Govemment personnel involved in the contract. Release in open literature or exhibition of such information is strictly prohibited withoul permission of the CO/COR.

9. Intelligence material, whether or not bearing control markings, will not be released to foreign visitors, foreign nationals, or immigrant aliens regardless of their position or level oftheir securily clearance, except with the specific pemission of the originating agency.

10. lf the contractor is required to utilize any wirelesa transmitter devices, to include radao frequency (RF) or infrared (lR) to support this contract, the contractor must contaci DIA/DAC-2A (OlA SCIF Management Branch) and identry the device(s), the planned use purpose or scope of the devices, respond to requestg for additional information conceming such devices, and comply with TEMPEST guidelines identilied by DAC-2A (DlA SCIF Management Branch).

'1 1. The contractor will comply with DIA policy, and policy as may be revised, regarding the use of Portable Electronic Devices (PED) within DIA accredited spaces. Should the contractor be within spaces belonging to another agency (host), the conlractor will comply with the host requirement. A PED is any electronic device that receives, transmits, stores, processes, records audio/visual, scans, or otheMise is capable ot manipulating information in any form . A PED includes but is not limited to cellular telephones, cameras, pocket scanners, voice recorders, pagers, and computers.

'12. Classified and/or intelligence related material released to or generated by the contraclor may be destroyed locally by the contractor.

Such destruction willbe in accordance with the applicable regulations: DoDM 5105.21-Vl or Chapter 5, Section 7, NISPOM, utilizing destruction procedures, devices, methods, or equipment approved by the Nalional Security Agency.

13. By virtue of access to SCI and/or intelligence malerial, contractor employees may have restrictions placed on lhem for foreign travel in or through designated counlries or geographic areas. The contractor shall be responsible for exercising adequate supervision to assure that employees are willing lo comply with notification requirements for anticipated and completed foreign travel.

14. Subcontracling this contract or any portion thereof of this contract requires the contraclor lo sponsor the subcontractor and be approved by the CO/COR. The prime contractor must complete a separate DD 254. Additionally the subcontractor must have a llnal facility clearance issued by Defense Security Service (DSS) or other U.S. Government agency authorized to issue equivalent clearances.

15. Conlraciors are prohibited from having access to "PROPRIETARY INFORMATION" (abbreviated PROP lN or PR), and "DISSEMINATION AND EXTRACTION OF INFORMATION CONTROLLEO BY ORIGINATOR" (abbreviated ORCON) unless in compliance wiih one of the following:

a. The originating agency of lhe PROPIN and ORCON provides written consent to lhe accessing contractor, and the accessing contractor agrees in writing with the originating agency not to divulge, use, or olheMise release PROPIN and ORCON. The originating agency of the PROPIN and ORCON is responsible for identiting and marking PROPIN and ORCON. The GO/COR is responsible for identirying marked PROPIN and ORCON information within their control and initiating the request and release documentalion between the originating agency owning the PROPIN and ORCON and the accessing contractor. lfthe originating agency ofthe PROPIN and ORCON fails to or denies access to the accessing contraclor, or ifthe accessing contraclor fails io or does not agree to not io divulge, use, or otheMise release the PROPIN and ORCON, then the CO/COR is responsible for denying PROPIN and ORCON access until the appropriate documentation has been compleled- Contraclors, who intentionally oblain access to PRO PIN and ORCON without the required documentation, may be subjec{ to civil and criminal liabilities and penallies as provided by law. US Government employees who release PRO PIN and ORCON, whelher intentionally or accidentally lo unauthorized contraclors, are subject to civil and criminal liabilities and penalties as provided by law, or

b. A US Government employee (military or civilian) is on-sile, when contractor access to PROPIN or ORCON is possible or available.

'16. The contractor must comply with Foreign Ownership, Control or Influence (FOCI) reshictions and notifications as outlined in the

NISPOM.

17. lfthe contraclor identified in DD 254, Block 6a, Block 7a or Block 8a. is identified as a being under FOCI by Defense Security Service (DSS), a favorable National Interesl Determination (NlO) must be completed as outlined within the NISPOM priorto the contractor being awarded the conlract and having access to PROSCRIBED INFORMATION. PROSCRIBED INF ORMATION includes COMSEC, Sensilive Compartmented Information, Critical Nuclear Weapons Design Information, Restricted Data, Formerly Restricted Data, TOP SECRET, Special Access Programs, other classified information, and other Executive Branch Departmenls and Agencies for classified information under the cognizance of such.

18. The contractor may not introduce, aclivate or use any wireless transmission devices wilhin any DIA facilities or any DIA accredited facilities without first receiving written permission from the Regional Information Assurance Manager (RIAM) (Contact Security policy Division (below) for the relevant POC in your area.) Military Departments, Major Commands, Combatant Commands, Senior Intelligence Ofiicers, and local Special Security Officers or Contractor Special Security Officers may require more stringent standards which must be complied with. lf the contractor is located within another agency's fiacility or accredited facility, the contractor will comply wilh the olher agency's policies regarding the introduction, aclivation or use of any such device. The Director, Nationat tntettigence (DNI) may by policy, directive or other means, bar the introduction of any wireless tmnsmission devico into any SCIF area after the date of this contnct. Should this occur the DNI policy will automatically supersede this pangraph and if the wirctess device is stitt rcquired to be introduced into the SCIF atea, justitication and a waiver rcquest must be submifted to RIAM for a determinauon.

19. Contractors who anlicipate a change of name and/or ownership, must notify the CO/COR in writing upon consideration of the proposed change. Changes may affect facility clearances which may affect mntanuance oflhe conlract.

20. A security review of this DO Form 254 is required during the different stages of the contract or any revision of this contract. The CO/COR will provide the contractor with applicable changes in security requirement(s) by issuing a revised DD Form 254.

NOTE: CONTRACTORS, PLEASE GO THROUGH YOUR CO/COR PRIOR TO CONTACTING THE OFFICES BELoW.

DIA Points of Contact for Securitv lsruss:

D|A"/DAC-2A, (703) 907-291 1/0512/0953 (DlA lndustrial Security) DItuDAC-2A, (703) 907-1300 (DlA SCIF Management Branch) D|A,/DAC-1 , (703) 907-1365 (Security Policy Division) D|A,/DAC-3A, (703) 907-1311 (Central Clearance Branch) DltuDS, (202) 23'l-8OOO (lnformation Management)

Version 2.0 ('13 December 2012)