DD_Form_254_-HQ0034-18-R-0278-Rev1.pdf

Please wait...

If this message is not eventually replaced by the proper contents of the document, your PDF viewer may not be able to display this type of document.

You can upgrade to the latest version of Adobe Reader for Windows®, Mac, or Linux® by visiting http://www.adobe.com/go/reader_download.

For more assistance with Adobe Reader visit http://www.adobe.com/go/acrreader.

Windows is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Mac is a trademark of Apple Inc., registered in the United States and other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.

REGISTRATION FOR SCIENTIFIC AND TECHNICAL INFORMATION SERVICES

(Read Privacy Act Statement and Instructions on back before completing this form.)

OMB No. 0704-0264 OMB approval expires Nov 30, 2010

SECTION I - GENERAL INFORMATION (All applicants must complete Section I.) FOR DTIC USE ONLY

PLEASE DO NOT RETURN YOUR FORM TO THE ABOVE ORGANIZATION. SEND YOUR COMPLETED FORM TO: DEFENSE TECHNICAL INFORMATION CENTER, ATTN: DTIC-BC, 8725 JOHN J. KINGMAN ROAD, SUITE 0944, FORT BELVOIR, VA 22060-6218.

The public reporting burden for this collection of information is estimated to average 25 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, Executive Services Directorate, Information Management Division, 1155 Defense Pentagon, Washington, DC 20301-1155 (0704-0264). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

1. ORGANIZATION NAME 2. SUBORGANIZATION NAME

3.a. CLASSIFIED/BUSINESS MAILING ADDRESS b. CITY c. STATE d. ZIP CODE

4. ATTENTION

a. NAME (Last, First, Middle Initial) c. POSITION/TITLE d. OFFICE SYMBOL

5. TELEPHONE NUMBER (Include area code)

a. COMMERCIAL b. DSN

6. FAX NUMBER (Include area code)

7. E-MAIL ADDRESS 8.a. PRIME CONTRACT NUMBER (Contractors only)

b. EXPIRATION DATE

(YYYYMMDD)

a. COMMERCIAL b. DSN

b. SSN

DTIC USER CODE

USER TYPE

CHARGE CODE

SERVICE LEVEL SPONSOR

FACILITY CLEARANCE

ENTITY CODE

SECURITY CLEARANCE

11. CAGE CODE

TYPE RD CNWDI NATO

12. DUNS NUMBER

9. CURRENT OR FORMER DTIC

USER (X one)

NO

YES (Enter DTIC user code)

10.a. MILITARILY CRITICAL TECHNICAL DATA AGREEMENT CERTIFICATION NUMBER (Contractors only)

b. EXPIRATION DATE

(YYYYMMDD)

13. TYPE OF ACCESS REQUESTED (X as applicable)

UNCLASSIFIED/LIMITED (Controlled distribution)

UNCLASSIFIED/UNLIMITED (Public release)

a. UNCLASSIFIED: c. SPECIAL ACCESSES:

RESTRICTED DATA

CNWDI

NATO UNCLASSIFIED

NATO CONFIDENTIAL

NATO SECRET

CNWDI DATE BRIEFED: NATO DATE BRIEFED:

SECTION II - SECURITY OFFICER (Complete Section II if requesting access to classified data.)

14. SECURITY OFFICER CERTIFICATION

I certify that the organization listed in Section I may receive and store classified data at the access level indicated in Section I, and the individual listed in Section I has been cleared and briefed for all requested special accesses.

a. NAME (Last, First, Middle Initial) b. ORGANIZATION NAME

e. TELEPHONE NUMBER (Include area code)

(1) COMMERCIAL (2) DSN

f. SIGNATURE g. DATE SIGNED (YYYYMMDD)

c. E-MAIL ADDRESS d. SSN

SECTION III - U.S. GOVERNMENT APPROVING OFFICIAL (DOD organizations requesting access to classified data, Non-DOD Government organizations requesting access to unclassified, limited or classified data, and all contractors requesting either unclassified or classified data must complete Section III. See Instructions for detailed explanation of Government Approving Official.)

15. APPROVING ORGANIZATION NAME 16.a. BUSINESS ADDRESS b. CITY c. STATE d. ZIP CODE

17.a. APPROVING OFFICIAL NAME (Last, First, Middle Initial) b. POSITION/TITLE

e. TELEPHONE NUMBER (Include area code) f. SIGNATURE g. DATE SIGNED (YYYYMMDD)

(1) COMMERCIAL (2) DSN

FOR DTIC USE ONLY

c. E-MAIL ADDRESS d. SSN

DD FORM 1540, NOV 2007 PREVIOUS EDITION IS OBSOLETE. Adobe Professional 7.0

FOR OFFICIAL USE ONLY

CONFIDENTIAL

SECRET

b. CLASSIFIED:

INSTRUCTIONS FOR COMPLETING DD FORM 1540,

REGISTRATION FOR SCIENTIFIC AND TECHNICAL INFORMATION SERVICES

DD FORM 1540 (BACK), NOV 2007

A. WHO IS ELIGIBLE

- Department of Defense (DoD) members and employees

- U.S. Government employees

- Government contractors

B. WHERE TO FILE

Mail completed DD Form 1540 to:

c. Section III - U.S. Government Approving Official. Signature required if access to Unclassified/Limited (controlled distribution) or classified data is requested.

NOTE: The Government Approving Official is a government employee in a supervisory or managerial position, who is knowledgeable of your eligibility to perform the official duties of your position, has official control and responsibility over you and the position you occupy.

3. Contractors, Subcontractors, Potential Contractors, CRDA Partners, and Grantees

a. Section I - General Information. Contractors complete Section I.

Enter the contract number and expiration date in blocks 8.a. and b.

(1) Submit a certified copy of your DD Form 2345, "Militarily Critical Technical Data Agreement", to DTIC for access to export controlled data.

(2) Enter the CAGE code in block 11 and DUNS number in block 12.

Contact your security officer if you need assistance in obtaining this information.

b. Section II - Security Officer. Your Facility Security Officers' (FSO) signature is required in block 14.f. in order for DTIC to grant access to classified data. Signature is confirmation that you are eligible to receive, and have the capability to store, the classified data at the access level requested in Section I (block 13, "Type of Access Desired").

(1) Security officer must enter date(s) briefed for access to: CNWDI and NATO in block 13.

c. Section III -- U.S. Government Approving Official. Complete Section III. Signature of Government Approving Official is required.

The government approving official must be one of the following:

- Primary Contracting Officer (PCO)

- Administrative Contracting Officer (ACO), when designated in writing by the PCO, to DTIC

- Contracting Officer's Technical Representative (COTR)

- Contracting Officer's Representative (COR)

- Program Manager

- Project Manager

D. AFTER REGISTRATION

1. DTIC will email a numeric user code to the user upon approval.

2. Registered DTIC users must notify DTIC, in writing, of any changes to their current DD Form 1540. Please send an e-mail with changes to reghelp@dtic.mil.

3. Registered users will receive a notice from DTIC 60 days prior to the scheduled expiration date of their service.

E. ADDITIONAL INFORMATION

Visit DTIC's web site for information on registering for online services. The URL is www.dtic.mil.

Defense Technical Information Center DTIC-BC, (Registration) 8725 John J. Kingman Road, Suite 0944 Fort Belvoir, VA 22060-6218

Telephone: (703) 767-8273 Fax: (703) 767-9459

E-mail: reghelp@dtic.mil

C. GENERAL INSTRUCTIONS

1. DoD Members/Employees.

a. Section I - General Information. For Unclassified/Limited data complete Section I only.

classified data. Signature is confirmation that you are eligible to receive, and have the capability to store, the classified data at the

c. Section III - U.S. Government Approving Official. Sign block 17.f. if access to classified data is requested.

NOTE: The Government Approving Official is a government employee in a supervisory or managerial position, who is knowledgeable of your eligibility to perform the official duties of your position, has official control and responsibility over you and the position you occupy.

2. U.S. Government Employees.

A current SF-50, or comparable personnel document, for the applicant, security officer and/or government approving official, is required for employment verification. Please send with the completed DD Form 1540.

a. Section I - General Information. For Unclassified/Unlimited (public release) data complete Section I only.

classified data. Signature is confirmation that you are eligible to receive, and have the capability to store, the classified data at the

PRIVACY ACT STATEMENT

AUTHORITY: 5 U.S.C. 301; E.O. 9397.

PRINCIPAL PURPOSE(S): To register for scientific and technical information services provided by Defense Technical Information Center (DTIC).

DoD individuals must be verified through Defense Manpower Data Center (DMDC). This verification process is used to validate an individual's required affiliation with a DoD organization.

ROUTINE USE(S): None.

DISCLOSURE: Voluntary; however, failure to provide the requested personal information will result in the individual not being registered for scientific and technical information services.

org_name:

sub_name:

mail_addr:

att_name:

att_title:

att_symb:

comm_fax:

dsn_fax:

email:

prime_no:

xdtic: Off user_code:

cert_no:

prime_exp:

cage_code:

duns_no:

xunclass: Off xclass: Off xrestr: Off xcnwdi: Off cert_exp:

xnato_c: Off xnato_u: Off xnato_s: Off cnwdi_brief:

nato_brief:

att_ssn:

comm_phone:

comm_dsn:

app_org:

app_addr:

mail_city:

mail_state:

mail_zip:

app_city:

app_state:

app_zip:

sec_name:

sec_org:

sec_email:

sec_ssn:

sec_phone:

sec_dsn:

sec_sign:

sec_date:

app_name:

app_title:

app_email:

app_ssn:

app_phone:

app_dsn:

app_sign:

app_date:

dtic_user:

user_type:

entity:

charge_code:

svc_lvl:

fac_clear:

NATO:

clr_type:

rd:

CNWDI:

dtic_use:

Reset:

Continuation: DD 254

Solicitation: HQ0034-18-R0278

Contracting Officer’s Representative (COR): Emese Horvath

Ref 13:

- The Contractor will not reproduce any information/material related to this contract without the written approval of the COR.

- See continuation pages and FOUO Addendum for further guidance.

Ref 10b: The contractor is permitted access to Restricted Data (RD) in the performance of this contract. Access to RD requires a final U.S. Government clearance at the appropriate level.

Ref 10c: Contractor is permitted access to CNWDI in performance of this contract. Access to CNWDI requires a final U. S. Government clearance at the appropriate level. The government program manager or designated representative will ensure the contractor security supervisor is briefed for CNWDI.

Ref 10d: The contractor is permitted access to Formerly Restricted Data (FRD) in the performance of this contract. Access to FRD requires a final U.S. Government clearance at the appropriate level.

DD254 - Department of Defense

Security Classification Specification

Solicitation: HQ0034-18-R-0278 – Att 1

Page 3 of 10, 21 December 2018

Solicitation: HQ0034-18-R-0278

Ref 10g: The contractor is permitted access to North Atlantic Treaty Organization (NATO) information in performance of this contract. Access to NATO information requires a final U.S. Government clearance at the appropriate level. The government program/project manager is the designated representative that will ensure the contractor security manager and concerned employees are NATO briefed prior to access being granted. The contractor will maintain strict compliance in regards to NATO information IAW NISPOM Ch 10, Section 7. Prior approval from the contracting activity is required for subcontracting.

Ref 10h: The contractor is permitted access to Foreign Government information in the performance of this contract. Access to Foreign Government information requires a final U.S. Government clearance at the appropriate level. Contractor employees will be briefed, and acknowledge in writing, their responsibilities for handling foreign government information prior to being granted access. The contractor will maintain strict compliance with NISPOM Ch 10. Prior approval of the contracting activity is required for subcontracting.

Ref 10j: FOUO information/provided under this contract shall be safeguard as specified in the attached addendum, Protecting For Official Use Only (FOUO) Information. Controlled Unclassified Information (CUI)/material includes, but is not limited to, critical information, information marked FOR OFFICIAL USE ONLY (FOUO), Privacy Act of 1974, Personally Identifiable Information, and company proprietary. The following directives should be referred to for additional guidance: DoDD 5205.02, “DoD Operations Security (OPSEC) Program,” 06 Mar 2006; DoDD 5230.9, “Clearance of Information for Public Release,” 09 Apr 1996; and “DoD Web Site Administration Policies and Procedures,” 25 Nov 1998. FOUO information provided under this contract must also be safeguarded as specified in DoD 5400.7-R, “DoD Freedom of Information Act Program.”

Ref 11c: The contractor requires access to classified source data up to and including SECRET in support of the work effort. Any extracts or use of such data requires the contractor to apply derivative classifications and markings consistent with the source documents. Use of “Multiple Sources” on the “Derived From” line necessitates compliance with the NISPOM, paragraph 4-208a, and the use of a bibliography.

Ref 11g: The contractor will need to submit a DD Form 1540, Registration for Scientific and Technical Information Services to the Defense Technical Information Center (DTIC) in accordance with the NISPOM.

Page 4 of 10, 21 December 2018

Ref 11i: The contractor shall ensure that compromising emanations related to this contract are kept to a minimum. Contractors will provide information required to perform an accurate Emanation Security Vulnerability Assessment to the contracting officer, to be provided to the appropriate government Emanation Security authority.

Ref 11j: OPSEC. Certain aspects concerning the customer will be unclassified; however, compilation of information as well as links between the customer and various components of the program are sensitive and require protection as FOUO information. The contractor will document those items of critical information, applicable to operations. Items of critical information are those facts, which individually, or in the aggregate, reveal sensitive details about the mission, operation, etc., and thus require protection from adversarial collection or exploitation. The contractor will protect sensitive unclassified information and activities which could compromise classified information or operations, or degrade the planning and execution of operations performed by the contractor in support of the mission.

Ref 11l: Use Of and Interface with Non-U.S. Citizens:

(1) Prior approval to use non-U.S. citizens on this contract must be obtained from DTIC. However, if approval is granted, U.S. Export Laws still apply and the contractor must obtain required export authorizations. When requesting non-U.S. citizen access to the contract include the individual’s full name, country of citizenship, and official status within the US. The contractor will include this requirement in all subcontracts awarded in support of this procurement effort.

(2) The contractor is not authorized to release any data to foreign nationals or foreign representatives without prior written approval from DTIC and the Contracting Officer.

(3) Sub-contracting with foreign industry is not allowed unless approved by Contracting Officer. Foreign sub-contractors must agree that only U.S. citizens will be allowed to perform on the contract. The U.S. Contractor is responsible for obtaining export authorization and providing the license number (where applicable) to DTIC.

(4) The contractor is not authorized to release information (orally, visually, or documentary) to anyone not associated with this contract. The foreign nationals and other non-U.S. citizens identified by the U.S. government in the paragraph above shall be considered associated with the contract for any authorized interaction.

Page 5 of 10, 21 December 2018

Ref 14: While performing at Department of Defense owned and/or operated locations/facilities, the contractor will adhere to the respective Military Service: Information Security Program, ADP Programs, Physical Security Program, and Industrial Security Program. Appropriate local service/component command security directives, regulations, and standard operating procedures will be provided by the requiring agency (as needed) at these locations/facilities. Prior approval of the contracting activity is required for subcontracting. Access to intelligence information requires special briefings and a US Government clearance at the appropriate level.

-- ATTACHMENT 1 LAST ITEM --

Page 6 of 10, 21 December 2018

ATTACHMENT 2:

SAFEGUARDING UNCLASSIFIED CONTROLLED TECHNCIAL INFORMATION (CTI)

1. DISTRIBUTION STATEMENT: All DoD Unclassified CTI provided to the contractor shall be marked with the appropriate Distribution Statement E in accordance with DoDI 5230.24, Table 3 listed below:

Reasons to Assign Distribution Statement E

Direct Military Support

The document contains export-controlled technical data of such military significance that release for purposes other than direct support of DoD-approved activities may jeopardize an important technological or operational military advantage of the United States, another country, or a joint U.S.-foreign program. Designation of such data is made by competent authority in accordance with Reference (d). Assigned pursuant to section 2751 of title 22, U.S.C.

Administrative or Operational Use

Same as Distribution Statement B.

Contractor Performance Evaluation

Same as Distribution Statement B.

Critical Technology

Same as Distribution Statement B.

Export Controlled

Same as Distribution Statement B.

Foreign Government Information

Same as Distribution Statement B.

Operations Security

Same as Distribution Statement B.

Premature Dissemination

Same as Distribution Statement B.

Proprietary Information

Same as Distribution Statement B.

Software Documentation

Same as Distribution Statement B.

Specific Authority

Same as Distribution Statement B.

Test and Evaluation

Same as Distribution Statement B.

Vulnerability Information

Same as Distribution Statement B.

--ATTACHMENT 2 LAST ITEM--

Solicitation: HQ0034-18-R-0278 – FOUO Addendum

Page 7 of 10, 21 December 2018

FOUO Addendum

Item 10j: PROTECTING “FOR OFFICIAL USE ONLY” (FOUO) INFORMATION

1. GENERAL:

a. The "For Official Use Only" (FOUO) marking is assigned to information at the time of its creation in a DoD User Agency. It is not authorized as a substitute for a security classification marking but is used on official government information that may be withheld from the public under exemptions 2 through 9 of the Freedom of Information Act (FOIA).

b. Other non-security markings, such as "Limited Official Use" and "Official Use Only" are used by non-DoD User Agencies for the same type of information and should be safeguarded and handled in accordance with instruction received from such agencies.

c. Use of the above markings does not mean that the information cannot be released to the public under FOIA, only that it must be reviewed by the Government prior to its release to determine whether a significant and legitimate government purpose is served by withholding the information or portions of it.

2. MARKINGS:

a. An unclassified document containing FOUO information will be marked "For Official Use Only" at the bottom of the front cover (if any), on the first page, on each page containing FOUO information, on the back page, and on the outside of the back cover (if any). No portion markings will be shown.

b. Within a classified document, an individual page that contains both FOUO and classified information will be marked at the top and bottom with the highest security classification of information appearing on the page. If an individual portion contains FOUO information but no classified information, the portion will be marked, "FOUO."

Page 8 of 10, 21 December 2018

c. Any "'For Official Use Only" information released to a contractor by a DoD User Agency is required to be marked with the following statement prior to transfer.

“This document contains information

EXEMPT FROM MANDATORY DISCLOSURE

UNDER THE FOIA. Exemptions apply.”

d. Removal of the "For Official Use Only" marking can only be accomplished by the originator or other competent authority. When the "For Official Use Only" status is terminated, all known holders will be notified to the extent practical.

3. DISSEMINATION: Contractors may disseminate "For Official Use Only" information to their employees and subcontractors who have a need for the information in connection with a classified contract. Contractors must ensure employees and subcontractors are aware of the special handling instructions detailed below.

4. STORAGE: During working hours, "For Official Use Only" information shall be placed in an out-of-sight location if the work area is accessible to persons who do not have a need for the information. During nonworking hours, the information shall be stored to preclude unauthorized access. Filing such material with other unclassified records in unlocked files or desks, is adequate when internal building security is provided during nonworking hours. When such internal security control is not exercised, locked buildings or rooms will provide adequate after- hours protection or the material can be stored in locked receptacles such as file cabinets, desks, or bookcases.

5. TRANSMISSION: "For Official Use Only" information may be sent via first-class mail or parcel post. Bulky shipments may be sent by fourth-class mail. DoD components, officials of DoD components, and authorized DoD contractors, consultants, and grantees send FOUO information to each other to conduct official DoD business. Tell recipients the status of such information, and send the material in a way that prevents unauthorized public disclosure. Make sure documents that transmit FOUO material call attention to any FOUO attachments. Normally, you may send FOUO records over facsimile equipment. To prevent unauthorized disclosure, consider attaching special cover sheets, the location of sending and receiving machines, and whether authorized personnel are around to receive FOUO information. FOUO information may be passed to officials in other departments and agencies of the executive and judicial branches to fulfill a government function. Mark the records "For Official Use Only" and tell the recipient the information is exempt from public disclosure under the FOIA and requires special handling.

Page 9 of 10, 21 December 2018

Electronic transmission of FOUO information between the government and contractors must be encrypted using PKI infrastructure. The transmission of FOUO information between contractors must be encrypted using PKI infrastructure or other means specifically approved by the government. FOUO information accessible via the World Wide Web must be protected, at a minimum, through access control and 128bit secure sockets layer (SSL) encryption.

6. DISPOSITION: When no longer needed, FOUO information must be destroyed using an approved means of destruction which effectively inhibits the recreation of the information.

7. UNAUTHORIZED DISCLOSURE: Unauthorized disclosure of "For Official Use Only" information does not constitute a security violation but the releasing agency will be informed of any unauthorized disclosure. The unauthorized disclosure of FOUO information protected by the Privacy Act may result in criminal sanctions and disciplinary action may be taken against those responsible.

-- FOUO ADDENDUM LAST ITEM --

Page 10 of 10, 21 December 2018

DRAFT

SAMPLE

PREVIOUS EDITION IS OBSOLETE.

Page of AEM LiveCycle Designer

DD FORM 254, APR 2018

NEEDS DD67

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the National Industrial Security Program (NISP) apply to all security aspects of this effort involving classified information.)

OMB No. 0704-0567 OMB approval expires:

October 31, 2020 The public reporting burden for this collection of information, 0704-0567, is estimated to average 70 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, at whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

RETURN COMPLETED FORM AS DIRECTED IN THE INSTRUCTIONS.

1. CLEARANCE AND SAFEGUARDING

2. THIS SPECIFICATION IS FOR: (X and complete as applicable.)

3. THIS SPECIFICATION IS: (X and complete as applicable.)

a. ORIGINAL (Complete date in all cases.)

b. REVISED (Supersedes all previous specifications.)

4. IS THIS A FOLLOW-ON CONTRACT?

If yes, complete the following:

Classified material received or generated under

5. IS THIS A FINAL DD FORM 254?

If yes, complete the following:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

7. SUBCONTRACTOR(S) (Click button if you choose to add or list the subcontractors -- but will still require a separate DD Form 254 issued by a prime contractor to each subcontractor)

8. ACTUAL PERFORMANCE (Click button to add more locations.)

10. CONTRACTOR WILL REQUIRE ACCESS TO: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

e. NATIONAL INTELLIGENCE INFORMATION:

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. See instructions. Provide details in Blocks 13 or 14 as set forth in the instructions.)

12. PUBLIC RELEASE

Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the National Industrial Security Program Operating Manual (NISPOM) or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified here with at least office and phone contact information and if available, an e-mail address. (See instructions)

13. SECURITY GUIDANCE

The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended.

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. The field will expand as text is added. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. Also allows for up to 6 internal reviewers to digitally sign. See instructions for additional guidance or use of the fillable PDF.)

14. ADDITIONAL SECURITY REQUIREMENTS

Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the CSO. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

15. INSPECTIONS

Elements of this contract are outside the inspection responsibility of the CSO.

If Yes, explain and identify specific areas and government activity responsible for inspections. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

17. CERTIFICATION AND SIGNATURES

Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. Upon digitally signing Item 17h, no changes can be made as the form will be locked.

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICIAL

9.0.0.2.20120627.2.874785 DD 254, DoD Contract Security Classification Specification List of Attachments [2] (All Files Must be Attached Prior to Signing, i.e., for any digital signature on the form) A05 DD254 Continuation Pages - DS Warehouse-HQ0034-18-R-0278.doc dd1540.pdf

8725 John J. Kingman Rd Fort Belvoir, VA 22060

- Appropriate local service/component command security directives, regulations, and standard operating procedures will be provided by the requiring agency (normally through the Performance Monitor or component command COR). Upon completion or termination of the classified contract, or sooner when the purpose of the release has been served, the contractor will return all classified information (furnished or generated) to the source from which received unless retention or other disposition instructions are authorized in writing by the DTIC Government Contracting Activity.

- All development databases, hardware, and graphics (when conducted at the contractor's location) will be done upon Defense Security Service approved automated information security (AIS) equipment. This process will be verified by the Facility Security Officer (FSO). Any classified information developed will be classified pursuant to derivative classification procedures or as any applicable classification guides so dictates (NISPOM Ch 4, Section 2) and Executive Order 12958 as amended. Meetings or visits conducted by the contractor will be done IAW NSIPM CH. 6 . All classified material generated under this contract will be derivatively classified IAW Executive Order 12958 as amended, on based on existing source documents or applicable classification guides.

- All transportation or transmission of classified information/materials to and from government/contractor facilities shall be conducted IAW NISPOM and DoDM 5200.01, Volume 3, dated 2/24/12. The Contracting Officer will be notified to any portion of this contract being subcontracted out.

See Continuation Sheet: COR: Emese Horvath

Fort Belvoir, VA 22060