RRMC_SOL_Tree_Herbicide_AUG_31_2015.pdf

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort.)

1. AND SAFEGUARDING

a. CLEARANCE REQUIRED

b. LEVEL OF SAFEGUARDING REQUIRED

2. IS FOR: (X and complete as applicable)

a. CONTRACT NUMBER

b. SUBCONTRACT NUMBER

c. DUE DATE (YYYYMMDD)

3. IS: (X and complete as applicable)

a. (Complete date in all cases)

REVISION NO.

c. (Complete Item 5 in all cases)

DATE (YYYYMMDD)

b. REVISED (Supersedes all previous specs)

DATE (YYYYMMDD)

DATE (YYYYMMDD)

4. THIS A FOLLOW-ON CONTRACT? YES NO. Yes, complete the following:

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract.

5. THIS A FINAL DD FORM 254? YES NO. Yes, complete the following:

In response to the contractor's request dated , retention of the classified material is authorized for the period of

6. (Include Commercial and Government Entity (CAGE) Code)

a. ADDRESS, AND ZIP CODE b. CAGE CODE c. SECURITY OFFICE (Name, Address, and Zip Code)

7.

a. ADDRESS, AND ZIP CODE b. CAGE CODE c. SECURITY OFFICE (Name, Address, and Zip Code)

8. PERFORMANCE

a. b. CAGE CODE c. SECURITY OFFICE (Name, Address, and Zip Code)

9. IDENTIFICATION OF THIS PROCUREMENT

10. CONTRACTOR WILL REQUIRE ACCESS TO: 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL:YES NO YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION

b. RESTRICTED DATA

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION

d. FORMERLY RESTRICTED DATA

e. INTELLIGENCE INFORMATION

(1) Sensitive Compartmented Information (SCI)

(2) Non-SCI f.

g. NATO INFORMATION

h. FOREIGN GOVERNMENT INFORMATION

i. LIMITED DISSEMINATION INFORMATION

j. FOR OFFICIAL USE ONLY INFORMATION

k. (Specify)

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER

CONTRACTOR'S FACILITY OR A GOVERNMENT ACTIVITY

b. RECEIVE CLASSIFIED DOCUMENTS ONLY

c. RECEIVE AND GENERATE CLASSIFIED MATERIAL

d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. PERFORM SERVICES ONLY

f. ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES

g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL INFORMATION

CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER

h. REQUIRE A COMSEC ACCOUNT

i. HAVE TEMPEST REQUIREMENTS

j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

l. (Specify)

CLEARANCE

FACILITY

THIS SPECIFICATION

PRIME

SOLICITATION OR OTHER NUMBER

THIS SPECIFICATION

ORIGINAL

FINAL

IS If

IS If

CONTRACTOR

NAME, COGNIZANT

SUBCONTRACTOR

NAME, COGNIZANT

ACTUAL

LOCATION COGNIZANT

GENERAL

SPECIAL ACCESS INFORMATION

OTHER

HAVE

OTHER

DD FORM 254, DEC 1999 PREVIOUS EDITION IS OBSOLETE.

12. RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release a.

Direct Through (Specify)

d. ADDRESS (Include Zip Code)

Yes No to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. The security classifiection guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract;

and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

14. Requirements, in addition to ISM requirements, are established for this contract.

(If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

Yes No15. Elements of this contract are outside the inspection responsibility of the cognizant security office.

(If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. questions shall be referred to the official named below.

b. TITLE c. (Include Area Code) e.

17. DISTRIBUTION

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER f.

PUBLIC

TYPED NAME OF CERTIFYING OFFICIAL

SECURITY GUIDANCE.

ADDITIONAL SECURITY REQUIREMENTS.

INSPECTIONS.

All

TELEPHONE

SIGNATURE

REQUIRED

OTHERS AS NECESSARY

DD FORM 254 (BACK), DEC 1999

BLOCK 13. SECURITY GUIDANCE (Continued) Contract # TBD

Item lO.j. FOR OFFICIAL USE ONLY (FOUO) INFORMATION:

FOUO information shall be marked and safeguarded as specified in DoDM 5200.01-V4, February 24, 2012.

Public release of FOUO information by the contractor is not authorized. The contractor is not authorized to use information developed or resulting from this contract in any advertising without prior review and written approval from the RRMC Security Office.

All contract documents generated (drawings, specifications, calculations, and studies, etc.) or produced by the contractor at a minimum shall be marked "FOR OFFICIAL USE ONLY". The following distribution statement shall be placed on classified and unclassified technical documents: Distribution authorized to the DoD and U.S.

DoD contractors only; (reason (e.g. Administrative or Operational Use)); (date). Other requests for this document shall be referred to (controlling DoD office (e.g. RRMC Engineering)).

Item lla. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER CONTRACTOR'S

FACILITY OR A GOVERNMENT ACTIVITY:

All classified information, original and reproductions must be transmitted, marked, controlled and protected IAW National Industrial Security Program, DoD 5220.22-M (Change 1 March 28, 20 13). The information will remain property of the U.S. Government and shall be returned upon completion of the project per Contracting Officer's direction for disposition instructions

Item llj. OPERATIONS SECURITY (OPSEC) REQUIREMENTS:

The general aim of OPSEC is to promote mission effectiveness by preserving essential secrecy about US intentions, capabilities, and current activities. Refer to DoD 5220.22-R, Industrial Security Regulation; DoD 5220.22-M, National Industrial Security Program Operating Manual; DoD 5205.02-M, DoD Operations Security (OPSEC) Program Manual; DoDD 5205.02E, DoD Operations Security (OPSEC) Program.

OPSEC is directed to the protection of UNCLASSIFIED intelligence on classified or sensitive programs of such nature that the disclosure of the indicators may lead to the compromise of classified or sensitive information Security essential to defense activities may be compromised whenever open sources (such as technical articles, press releases, national publications, the congressional records, or contract awards) and detectable activities (such as communications, logistics actions, or research, development and test activities) provide information that hostile intelligence services (HOIS) can piece together resulting in actions harmful to the US interest. OPSEC is concerned with all sources of exploitable information. It covers the total problem by addressing vulnerabilities and countermeasures weakness in a program which could lead to the disclosure of classified information. Unlike other security programs, OPSEC does not readily lend itself to complete identification of security requirements (countermeasures) during initial contract preparation. Input from the contractor in the form of an initial OPSEC plan must be developed and provided by the contractor. OPSEC countermeasures and plans must be flexible to address changes in the threat environment.

DD FORM 254 (CONTINUATION) Page 3 of 4

FOR OFFICIAL USE ONLY

BLOCK 13. SECURITY GUIDANCE (Continued) Contract # TBD The contractor shall provide a written OPSEC plan to the COR for review and approval by the OPSEC Officer prior to commencement of work. The plan must contain detailed procedures and actions to be taken by the prime and/or sub-contractor for the protection of classified information, controlled unclassified information, or other sensitive but unclassified information. The plan shall address protection of hard copy and electronic information as well as physical security of the contractor facilities, access control procedures, etc., that afford protection to the information.

The following standard expectations are included in all work.

a. The contractor supporting RRMC and specific event-oriented activities will develop OPSEC Plans/ Annexes as directed by the supported program, or comply with the program's OPSEC Plan/ Annex.

b. Personnel assigned will receive OPSEC Awareness Education and Training as deemed necessary by the Government or program supported. The contractor shall familiarize all new employees and conduct refresher sessions as needed.

c. OPSEC Awareness Education and Training will be provided or coordinated through government channels and OPSEC protective measures (countermeasures) will be applied as directed by government or program sponsors.

All contractors performing work on this contract must have completed DoD Operational Security training within the previous 12 months. Training is available online at: http://cdsetrain.dtic.millopsec/index.htm.

INFORMATION TECHNOLOGY:

For access to systems at RRMC, contractor personnel must have a favorably adjudicated "in scope" background investigation, clearance access verified, RRMC Permanent Badge and Common Access Card. The contractor shall not install or operate wireless access points (e.g. hot spots, routers) or any other radio frequency (RF) installation without written approval from the RRMC Security Office. The contractor personnel shall not bring personal electronic devices (e.g. cell phones, tablets, IPOD) into any secure facilities.

Contractor laptops with (camera installed) video recording or still image capture capabilities are strictly prohibited. Contractor vehicles with cameras installed on the vehicles are prohibited (excluding factory installed back-up cameras).

SITE ACCESS:

RRMC is a controlled access area and requires personnel be United States citizens and have eligibility for access to classified information at the Secret level for non-escorted access. Non-U.S. Citizens are not allowed access to the installation.

PERSONNEL SECURITY:

The prime contractor's Facility Security Officer shall provide the RRMC Security Office, on company letterhead, a visit authorization letter (VAL), containing the prime contract number, individual's full name (last, first, middle), social security number, date of birth, place of birth, and citizenship, for all personnel (prime and sub-contractors) performing on the contract with an eligibility for access to classified information. Failure to provide security eligibility information shall delay and/or deny the individuals access to the facilities and classified information.

The VAL must be kept current at all times.

Industrial Security Program Manager Pentagon Force Protection Agency

************************************ NOTHING FOLLOWS **********************************

DD FORM 254 (CONTINUATION) Page 4 of 4

FOR OFFICIAL USE ONLY

Blue Ridge Summit, PA 17214

ATTN: Security Office 243 Beasley Drive, Suite 100 Fort Detrick, MD 21702-9229

RRMC Principal Deputy Commander (717) 878-2771 security: 1) All contractor employees performing on this contract must be United States Citizens; those that will require access to classified information must hold an Industrial Personnel Security Clearance at the SECRET level.

2) The following Security Classification Guide applies. The Alternate Joint Communications Center (AJCC) SGC, 13 Aug 93. Additional classification guidance will be provided by the on-site Government representative. Classified information will be handled IAW the National Industrial Security Program, DoD 5220.22-M (Change 1 March 28, 2013).

3) All contractors involved in this project will follow RRMC Security Requirements and entry control procedures. Government issued identification (Common Access Card (CAC) and RRMC Badges) are the property of the U.S. Government and shall not be retained by the cardholder upon completion of contract, termination of employment, or removal from contract performance. All identification will be turned into the RRMC Security Office when no longer required for performance on the contract or upon expiration. Unauthorized possession of Government issued identification can be prosecuted under Section 701, Title 18, USC.

4) The Contractor or Subcontractor shall not release unclassified information pertaining to any part of this contract or any program related to this contract, regardless of medium (e.g., disc, film, tape, and document) to anyone outside the Contractor's organization. Reproduction of official contract documentation pertaining to RRMC by contractors is prohibited. At conclusion of contract, all documents and drawings will be returned per the Contracting Officer's direction.

5) Information about this contract or details about this facility will only be released to authorized personnel with an official "need to know" and will not be discussed with unauthorized persons, discarded as unclassified trash, posted on web pages or released to the public without approval from the RRMC Security Office.

6) Transmission of Controlled Unclassified information (CUI) on this project shall be protected through the use of DoD Public Key Infrastructure (PKI) encryption or equivalent facility systems. The Government shall provide Common Access Cards (CAC) to contractor personnel for this purpose on government systems. At no time shall CUI or classified information be transmitted electronically by means other than approved government or facility approved systems and methods. (SEE CONTINUATION PAGES 3 through 4)