Attachment_2_-_DD254.pdf

fergusonk Typewritten Text HQ0034-14-R-0082; Attachment 2 fergusonk Typewritten Text fergusonk Typewritten Text fergusonk Typewritten Text MAy 22, 2014

Block #13 Continuation ADDENUM TO DD 254

FOR OFFICIAL USE ONLY (FOUO)

Contract Number (TBD)

13. ADDITIONAL SECURITY GUIDANCE:

Facility Clearance:

The Contractor shall possess or obtain a Facility Clearance Level at the “SECRET” level prior to contract start date.

Conduct of Personnel:

The Contractor’s personnel must comply with the rules and regulations of individual sites where work is performed. Failure to do so will result in the Government requiring the Contractor to remove the employee from the job site. The reasons for removal are misconduct; security violations; or being under the influence of alcohol, drugs, or other incapacitating agents. Upon determination by the Government, Contractor employees shall be subject to dismissal from the premises. Such action is necessary in the interests of the Government. The removal from the job site or dismissal from the premises shall not relieve the Contractor of the requirement to provide sufficient personnel to do the services as required by this work statement. Incumbent must obtain & maintain a secret clearance while employed in this duty position.

Personnel Security Clearances:

All contract personnel must posses, at minimum a SECRET security clearance. The Contractor shall identify appropriate individual’s performing work under this contract that will require access to classified information and shall submit them for "SECRET” security clearances 10 work days after contract award if the Contractor already possesses a facility clearance. Application for personnel security clearances shall be made in accordance with DoD Directive 5220.22M., Section 2. Applications for new personnel requiring security clearances shall be submitted within 10 workdays of hire by the Contractor. The Government reserves the right to have the contractor provide documentation to verify compliance with these security requirements. WHS/DFD/FFD will provide security classification guidance for the performance of this contract.

a. In compliance with instructions contained in 48 CFR, Part 52, Federal Acquisition Regulation (FAR), Common Identification Standard for Contractor Personnel, the contractor shall comply with DoD personal identity verification procedures identified in the contract that implement Homeland Security Presidential Directives-12 (HSPD-12), Office of Management and Budget (OMB) Guidance M-05-24, Federal Information Processing Standards Publication (FIPS PUB) number 201) and GSA HSPD-12, Standard Operating Procedure (SOP), Personnel Security Process, dated November 18, 2005. The Contractor shall insert this clause in all subcontracts that the subcontractor is required to have physical access to a federal controlled facility or access to a Federal information system.

b. DoD consultants, and support contractor personnel performing work on sensitive automated information systems (AIS) are to be assigned to positions which are designated at one of 3 sensitivity levels (IT – I, IT – II, or IT – III). These designations equate to Critical Sensitive and Non- Critical Sensitive positions. The employing contractor will ensure individuals assigned to these sensitive positions have completed the appropriate access request forms.

(1) IT Level – I: Individuals assigned to positions where damage to DoD networks and development systems can be accomplished and no checks are in place to determine potential destruction of sensitive information. The investigation requirement for these positions is completion of a Special Security Background Investigation (SSBI) with favorable results.

(2) IT Level – II and III: Individuals assigned to positions where daily unsupervised access to DoD networks and information systems containing Sensitive-but-Unclassified or Sensitive Classified up to and including Collateral Secret information is a portion of their duties.

The investigation requirement for these positions is set in DoD policy.

(3) WHS/DFD/FFD retains the right to have contractors removed through the contracting officer, regardless of prior clearance or adjudication status, whose actions, while assigned to this contract, conflict with the interests of the Government.

(4) All employees performing work under this contract must possess the appropriate clearance commensurate with the level of facility/material to which the employee requires access, up to Secret. The data to be utilized within the proposed system requires at least the investigation noted above.

(5) Privacy. Data processed at WHS/DFD/FFD may contain Privacy Act information which requires the reading, signing, and adherence to appropriate nondisclosure documents.

(6) The contractor is not authorized to release information, orally, visually, or documentary to anyone not associated with this contract.

10j. FOR OFFICIAL USE ONLY (FOUO): The DD Form 254, block 10J is marked YES (For Official Use Only Information (FOUO), therefore, the contractor must comply with the following FOUO handling instructions.

1. GENERAL: The following FOUO instructions comply with guidance provided in the Freedom of Information Act, DoD 5400.7-R; and the Privacy Act.

a. The FOUO marking is assigned to information at the time of its creation in a DoD Agency. It is not authorized as a substitute for a security classification marking but is used on official government information that may be withheld from the public under exemptions 2 through 9 of the Freedom of Information Act.

b. Use of the FOUO marking does not mean that the information cannot be released to the public, only that it must be reviewed by the Government prior to its release to determine whether a significant and legitimate government purpose is served by withholding the information or portions of it

2. IDENTIFICATION MARKINGS:

a. An unclassified document containing FOUO Information will be marked “For Official Use Only” at the bottom of the front cover (if any), on the first page, on each page containing FOUO information but no classified information, the portion will be marked, “FOUO.”

b. In a classified document, an individual page that contains both

FOUO and classified information will be marked at the top and bottom with the highest security classification of information appearing on the page. If an individual portion contains FOUO information but no classified information, the portion will be marked, “FOUO.”

c. Any “For Official Use Only” information released to a contractor by a DoD User Agency is required to be marked with the following statement prior to transfer:

This document contains information EXEMPT FROM MANDATORY DISCLOSURE under the FOIA. Exemptions 2 – 9 apply.

d. Removal of the “For Official Use Only” marking can only be accomplished by the originator or other competent authority. When the “For Official Use Only” status is terminated, all known holders will be notified to the extent practical.

3. DISSEMINATION: Contractors may disseminate “For Official Use Only” information to their employees and subcontractors who have a need for the information in connection with a classified contract only.

4. STORAGE: During working hours, “For Official Use Only” information shall be placed in an out-of-sight location if the work area is accessible to persons who do not have a need for the information. During non-working hours, the information shall be stored to preclude unauthorized access.

Filing such material with other unclassified records in unlocked files or desk is adequate when internal building security is provided during non-working hours. When such internal security control is not exercised, locked buildings or rooms will provide adequate after-hours protection or the material can be stored in locked receptacles such as file cabinets, desks, or bookcases.

5. TRANSMISSION: “For Official Use Only” information may be sent via first –class mail or parcel post. Bulky shipments may be sent by fourth-class mail.

6. DISPOSITION: When no longer needed, FOUO information may be disposed of by shredding or tearing each copy into pieces to preclude reconstructing, and placing it in a regular trash container or as directed by the User Agency.

7. UNAUTHORIZED DISCLOSURE: The unauthorized disclosure of “For

Official Use Only” information does not constitute a security violation but the releasing agency should be informed of any unauthorized disclosure.

The unauthorized disclosure of FOUO information protected by the Privacy Act may result in criminal sanctions.

Contract Number (TBD)

Washington Headquarters Services/Defense Facilities Division/Federal Facilities Division

Washington Headquarters Services/Defense Facilities Divisions Security Manager