Atch_2_-_DD254.pdf

1. CLEARANCE AND SAFEGUARDING

DEPARTMENT OF DEFENSE a. FACILITY CLEARANCE REQUIRED

CONTRACT SECURITY CLASSIFICATION SPECIFICATION TOP SECRET

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort.) b. LEVEL OF SAFEGUARDING REQUIRED

None

2. THIS SPECIFICATION IS FOR: (X and complete as applicable) 3. THIS SPECIFICATION IS: (X and complete as applicable)

a. PRIME CONTRACT NUMBER x DATE (YYYYMMDD)

a. ORIGINAL (Complete date in all cases)

20 15 11 25 b, SUBCONTRACTNUMBER b. REVISED I REVISION NO. .. DA TE (YYYYMMDD)

(Supersedes all previous specs) x c. SOLICITATION OR OThER NUMBER DUE DA TE (YYYYMMDO) DATE {YYYYMMOO)

HTC71 l-16-R-DOOI 20 16 100 1 c. FINAL (Complete Item 5 in all cases)

4. IS THIS A FOLLOW-ON CONTRACT? L_jYES L1Ll NO. II Yes. complete the following:

Classified material received or genera1ed under (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? L_jYES L.1Ll NO. II Yes. complete the following:

In response lo the contractofs request dated . retention of the classified material is au1horized for the period of

6. CONTR.ACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME. ADDRESS. AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name. Address. and Zip Code)

7. SUBCONTRACTOR

a. NAME. ADDRESS. AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name. Address, and Zip Code)

8. ACTUAL PERFORMANCE

a. LOCATION b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

USTRANSCOM Defense Security Service (DSS) St. Louis f ield Office ( IOFSL) 508 Scott Drive 303 fountains Parkway. Sui te 303 Scon A FR. IL 62225 Fairview Heights. IL 62208

Main: 6 18-206-7220

Fax: 6 18-622-9 146

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

The United States Transportation Command (USTRANSCOM) J6 has a cont inued need to provide support for selected Command. Control, Communications. and Cyber (C4) Systems and support functions to the Commander. USTRANSCOIVI in !he perfonnance of the command's mission to mee1 national security objectives. In addi tion. TCJ6 requires support to provide and maintain the most modem, full y mission capable

C4 systems for USTRANSCOM and 10 ensure suitability for and interopcrnbili!y among its compom.:nts imd the supported Commanders in peace and war. Continued on page 3 Tracking No: USTRANSCOM-FP-0145-1 S

10. CONTRACTOR WILL REQUIRE ACCESS TO: YES NO 11 . IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (CCMSECI INFORMATION x a. ~~¥Mk~f8~·J%M'3Wb'W A'"'XvfR'rJi.1'EN¥~H1~trY"v ~t:t< x

b. RESTRICTED DATA x t>. RECEIVE CLASSIFIED DOCUMENTS ONLY x

c. CRITICAL NUCLEAR WEAPON DE$1GN INFORMATION x c. RECEIVE AND GENERATE CLASSIFIEO MATERIAL x

d. FORMERLY RESTRICTED OATA x d. FABRICATE. MODIFY, OR STORE CLASSIFIED HARDWARE x

• INTELLIGENCE INFORMATION e. PERFORM SERVICES ONLY x

(1 J Son5'bvo Compartmented lnformabon (SCI) x 1 ' ~~~~fd°~fc"8. L°sui>soi~'E'ssio'N'S ANDufRMu"sr'fe~Mt~fi'1%$ nc u.s' x

(2)Non.SCI x g ~M.Pl~PD1¥R:W,h()o¥~~~~~fri~~~~~ 8t~.Pil\~t,~~NT&~~~~AL INFUHMATIUN x I. SPECIAL ACCESS INFORMATION x h. REQUIRE A COMSEC ACCOUNT x

g. NATO INFORMATION x I. HAVE TEMPEST REQUIREMENTS x

h. FOREIGN GOVERNMENT INFORMATION x i HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS x ' LIMITED DISSEMINATION INFORM'-TION x k , BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE x I· FOR OFFICIAL USE ONcY INFORMl\TION x I. OTHER (Specify) x

k. OTHER (Specify/ x Contractor employees, designated by the con tracting Officer, will

Sec USTC Pamphlel 31-3 (Controlled Unclassified have access to classified areas and systems in USTRANSCOM lnfomiation) regarding FOUO. fcicili tics at Scott AFB, IL.

DD FORM 254, DEC 1999 PREVIOUS EDITION IS OBSOLETE. Adobe ProfesstenaJ X

12. PUBLIC RELEASE. Any information {classified or undassified} penaining to this contract shall not be released ror public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submiHed for approval prior to release [-=:J Direct CK] Through (Specify)

Office of Public Affairs (TCPA), USTRANSCOM. Scon AFB. IL 62225-5357, (6 18)-220-5102. The term "release" applies, but is not limited to. articles. speeches. photographs, brochures. advertisements. displays, presentations, diagrams, data, facility floor plan, etc. on any insrnllation.

to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary or Defense (Public Affairs)" for review.

·1n the case of non-DoD Use:r Agencies. requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. lhe security classification guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or i f any other contnbuting factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the gujdance or the classification assigned to any information or material furnished or generated under this contraci; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts refflrenced herein. Add additional pages as needed to provide complete guidance.)

a. The contractor shall comply with FAR 52.204-2 that includes responsibility for ensuring all security requirements outlined in the National Industrial Security Operating Manual (N ISPOM), TRANSFAR 5552.242.9000 (CAC's) and the Performance Work Statement (PWS) &re accG.i!iplished upon award of the contract.

b. UNCLASSIFI ED//FOR OFFICIAL USE ONLY (U//FOUO) INFORMATION may be accessed . U//FOUO information wi ll be safeguarded per DoDM 5200.0 I, Vol. 4. U//FOUO information will not be discarded in trash bins or recycle bins.

c. Contractor employees may derivatively classify information only if they have been trained on derivative classification within the past two years. USTRANSCOM can provide this training.

d. Contractors will comply with the fo llowing Instructions:

I. OPSEC requirements in USTRANSCOM instruction 3 1-1 2 that incl udes the Critical Information List.

2. DISA 300. 11 5.3 Circular: (S IPRNet Security Classification Guide)

3. USTRANSCOM fNSTRUCT ION 31-02 (USTRANSCOM Classi fi cation Guide)

4. DoDM 5200.01 , Voi. 2, (Marking of Classified In formation)

e. No DoD classified information wi ll be disseminated to anyone in the contractor company that is not performing on this contract.

f. Contractor employees wi ll comply with all USTRANSCOM security practices and policies.

g. Upon receipt of a contract, the designated contractor shall, within 60 days, provide the Cognizant Securi ty Office listed in block 6c, a copy of the award DD-254 with any continuation pages, attachments or enclosures and the contract PWS.

h. USTR.A..NSCOM will conduct a NATO indoctrinations for all on-site contractor employees and load that access in JPAS. FSO's may conduct annu:il refresl:er training for their personnel but are also responsible for updating JPAS.

i. The FSO will fam iliarize their employee(s) with chapter 10 (International Security Requirements) in advance of foreign work assignments (if any) that might occur. Block 13 continued on Page 3

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements. in addition to ISM requirements, are established for this contract. X Yes No (If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

Contractor will coordinate with the USTRANSCOM TCJ2-SSO for any issues associated with TS or TS-SCI infonnation. Contractor employee with NC2-ESI access wi ll direct ions of the USTRANSCOM's emergency actions NCOIC.

15. INSPECTIONS. Elements of this contraci are outside the inspection responsibility of the cognizant security office. X Yes No (If Yes. explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

All SCI locations at USTRANSCOM are covered by Defense Intelligence Agency (DIA) inspection programs. The TCJ2-SSO is responsible for classified releases developed under this contrnct; hence DSS is relieved of responsibility.

16. CERTIFICATION AND SIGllATURE. Security requirements stated herein are complete and adequate for safeguarding the classified

Information to be released or generated under this classified effort. All questions shall be referred to the official named b elow.

a, TYPED NAME OF CERTIFYING OFFICIAL b. TITLE c. TELEPHONE (Include Area Code)

STEVEN M. STRAIT

d. ADDRESS {Include Zip Code)

USTRANSCOM

ATTN: TCJ3-FP

CHIEF. Force Protection Branch

17. REQUIRED DISTRIBUTION

X a. CONTRACTOR

X b. SUBCONTRACTOR

(6 18) 220-653 1

e. COGNIZANT SECURITY OFFICE FOR PRIME ANO SUBCONTRACTOR 1-~,......,.~...,-.,...,,.~~~~~~-;-~~--1'1-~~~~~~~~~~_._......,.-1

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

X e. AOMINISTRATIVE CONTRACTING OFFICER

X f. OTHERS AS NECESSARY

Continuation Page DD-254 USTRANSCOM-FP-0145-15

9. General· ldentiJication of this Procurement (continued):

The selected C4 systems and support functions are comprised of informational services providing USTRANSCOM 24 hours per day, 7 days a week rapid access to information needed to plan, provide and control a wide range of air, land and sea transportation. USTRANSCOM C4

Systems environment is in critical need of standardized processes, doctrine, technology implementation, and metrics. Information Technology Service Management (ITSM) based on the IT Infrastructure Library (ITIL) framework offers a coherent, adaptable, and flexible approach to USTRANSCOM C4, warfighting use, and life cycle sustainment. Future processes must be designed and implemented with a holistic view of C4 based on the ITIL framework-treating all applicable resources as a single integrated team equally resourced for success

The scope of the !TSM effort is to provide a broad range C4S expertise to support the

USTRANSCOM mission. IT technical skills will be required to support the USTRANSCOM C4 environment, which interface with numerous on-site and remote commercial, DOD, service, and common-user networks (i.e ., Secret Internet Protocol Router Network (SIPRNET), Non secure Internet Protocol Router Network (NIPRNET), and the Scott AFB Local Area Network

(LAN), Wide Area Network (WAN) or Metropolitan Area Network (MAN)). Additionally skills will be required to support a myriad of applications that make use of the USTRANSCOM C4 infrastructure by providing access and services to the USTRANSCOM user community.

Sources shCJll be knowledgeable of ITIL concepts, best practices in managing IT services through the lifecycle, policy and procedures, standards, and possess technical knowledge of managing IT infrastructure/networks to ensure interoperabi lity with automated systems in DOD, and commercial industry partners.

lO(a) and ll(h): Communications Security (COMSEC)

The cont ractor requires access to COMSEC during the course of the contract. Since COMSEC wi ll be accessed solely at a Government faci lity, the Governments facility COMSEC account will provide support. The contractor will not need an account.

Continuation Page 00-254 USTRANSCOM-FP-0145-15 lO(e): Sensitive Compartmented Information (SCI)

The contractor requires access to Sensitive Compartmented Information (SCI), in the performance of this contract. On-site contractor employees working in the USTRANSCOM buildings on Scott AFB, IL, are required to hold a Final TOP SECRET security clearance which reflects SCl-DCID 6/4 Eligibility, granted by the appropriate CAF. The contract requires up to seven (7) persons on this contract. SCI will not be released to contractor employees without specific approval of the originator and the USTRANSCOM Special Security Office (SSO), on all such releases. Prior approval and certi fication of need-to-know (NTK) shall be obtained from the appropriate Government Program Manager or designated Contract Monitor (CM) and the

USTRANSCOM SSO, on all such releases. SCI materials furnished in support of this contract remain the property ofthe U.S. Government user agency that released it. SCI wi ll be protected

IAW applicable Government Directives. Upon completion or cancellation of the contract, SCI materials previously furnished will be returned to the direct custody of the agency having cognizance or the USTRANSCOM SSO. Inquiries pertaining to classification guidance on SCI wi ll be directed to the responsible CM and the USTRANSCOM SSO. Contractor personnel will accomplish annual SCI Security Awareness Training fu rnished by t he USTRANSCOM SSO. Any

SCI or SCI derived material, generated under this contract wi ll be reviewed by the CM for proper classification, prior to final publication and distribution. USTRANSCOM TCJ2-SSO wi ll provide SCI security cognizance for this contract.

07 311 !\l I h

Date

John 0 . Patten, USTRANSCOM SSO

Continuation Page DD-254 USTRANSCOM-FP-0145-15 llk. Be Authorized the use of the Defense Courier Service.

Defense Couriers (dedicated couriers} provide secure, timely, and efficient end-to-end global distribution of highly classified and sensitive material, to include TOP SECRET and Special

Compartmented Information (SCI} material. Support via the USTRANSCOM Defense Courier

Division can be arranged by the contractor by setting up an account through the fo llowing office: Defense Courier Station - Wright Patterson, (937} 257-4641.

Routine on-base courier requirements (designated couriers) for material at or be low the

SECRET level will be coordinated through the USTRANSCOM Security Service Center

(Information Security 618-220-6538}. Couriers through this office will be limited to one primary and three alternate persons who have been approved and issued a DD-2501 (Courier Card}.

Courier activities off-base requires special approval from the SSC, a DD-Form 2501 and a

USTRANSCOM 3108 (aka: Courier Mission Lett er}.

Courier missions involving Special Compartmented Information (SCI} or Special Access Programs

(SAP} will obtain authorizations through those respective offices.

13j. Notes:

Contractors will be made aware that the term "NOFORN" is identified as classified

INTELLIGENCE information that may not be released to foreigners, without permission of the originator. AUTHORIZED FOR RELEASE (REL TO} identifies classified information that an originator has predetermined to be releasable or has been re leased, through established foreign disclosure_procedures and channels, t o the foreign county(ries}/international organizations(s) indicated.