HDTRA1-16-R-0011_DD_254.pdf

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort.)

1. CLEARANCE AND SAFEGUARDING

a. FACILITY CLEARANCE REQUIRED

Top Secret

b. LEVEL OF SAFEGUARDING REQUIRED

None

2. THIS SPECIFICATION IS FOR: (X and complete as applicable) 3. THIS SPECIFICATION IS: (x and complete as applicable)

a. PRIME CONTRACT NUMBER

X

a. ORIGINAL (Complete date in all cases)

DATE (YYYYMMDD)

20160125

b. SUBCONTRACT NUMBER

b. REVISED

(Supersedes all previous specs)

REVISION NO. DATE (YYYYMMDD)

X c. SOLICITATION OR OTHER NUMBER DUE DATE (YYYYMMDD)

c. FINAL (Complete item 5 in all cases)

DATE (YYYYMMDD)

HDTRA1618868

4. IS THIS A FOLLOW-ON CONTRACT?

YES X NO. If yes, complete the following:

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? YES X NO. If Yes, complete the following:

In response to the contractor’s request dated , retention of the identified classified material is authorized for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

8. ACTUAL PERFORMANCE

a. LOCATION b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

Advisory and Assistance Services (A&AS) for the DTRA in support of the Nuclear Enterprise Support Directorate.

10. CONTRACTOR WILL REQUIRE ACCESS TO: YES NO 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION X

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER

CONTRACTOR’S FACILITY OR A GOVERNMENT ACTIVITY X

b. RESTRICTED DATA X

b. RECEIVED CLASSIFIED DOCUMENTS ONLY X

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION X

c. RECEIVE AND GENERATE CLASSIFIED MATERIAL X

d. FORMERLY RESTRICTED DATA X

d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE X

e. INTELLIGENCE INFORMATION:

e. PERFORM SERVICES ONLY X

(1) Sensitive Compartmented Information (SCI) X f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO

RICO, U.S. POSSESSIONS AND TRUST TERRITORIES X

(2) Non-SCI X

g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL

INFORMATION CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER X

f. SPECIAL ACCESS INFORMATION X

h. REQUIRE A COMSEC ACCOUNT X

g. NATO INFORMATION X

i. HAVE TEMPEST REQUIREMENTS X

h. FOREIGN GOVERNMENT INFORMATION X

j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS X

i. LIMITED DISSEMINATION INFORMATION X

k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

X

j. FOR OFFICIAL USE ONLY INFORMATION X

l. OTHER (Specify) X

k. OTHER(Specify) X

DD Form 254, DEC 1999 PREVIOUS EDITION IS OBSOLETE.

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release Direct X Through (Specify):

Defense Threat Reduction Agency 8725 John J. Kingman Road, MS 6201 Ft. Belvoir, VA 22060-6201 to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DOD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

Item 13a: The contractor shall comply with the Security Agreement (DD Form 441) including the NISPOM and any revisions to that manual, notice of which has been furnished to the contractor.

Item13b: The contractor's employees performing work under this contract shall be U.S. citizens and been granted appropriate security clearance, based on the need for access to specific classified information. That is SECRET clearance based on favorably adjudicated National Agency Check with Law and Credit Check (NACLC) or a TOP SECRET clearance based on Single Scope Background Investigations favorably adjudicated by the Defense Security Service, DoD Central Adjudicative Facility, Fort Meade, Maryland 20755.

All contractors in privileged user positions must have a completed single scope background investigation (SSBI) in accordance with DOD I 8500.2, 6 February 2003, paragraph E3.4.8. and Table E3.T1, prior to filling the position. Privileged users are defined as but not limited to, persons in the following roles or positions: Information Assurance Managers/Officers, supervisors of IT positions, systems administrators, maintainers of IA-enabled products as routers, switches, firewalls, personnel performing system monitoring and testing, and personnel who issue classified PKI certificates.

Item 13c: Should the contractor visit or perform work in support of this contract at any DTRA facility, the contractor shall submit proof of clearance (Visit Authorization Letter) to the DTRA Security and Counterintelligence Office (ATTN: Visitor Control). Visit Authorization Letters (VALs) shall contain the information specified in paragraph 6-104 of the NISPOM.

VALs may be tele-faxed to (703) 767-7857. The term of the VAL shall be for the period of contract performance. All classified visit request by contractors should be forwarded to the Program Manager for approval and need-to-know.

(See continuation page for additional Security Guidance instructions.)

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract. X Yes No

(If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

See block 13; Item 10j.

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. Yes X No

(If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL b. TITLE c. TELEPHONE (Include Area Code)

d. ADDRESS (Include Zip Code) 17. REQUIRED DISTRIBUTION Defense Threat Reduction Agency 8725 John J. Kingman Road, MS 6201 Ft. Belvoir, VA 22060-6201

X a. CONTRACTOR

b. SUBCONTRACTOR X c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

e. SIGNATURE d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

X e. ADMINISTRATIVE CONTRACTING OFFICER

f. OTHERS AS NECESSARY

DD Form 254 (BACK), DEC 1999

BLOCK 13 (CONTINUED)

HDTRA1618868

Item 10b: Restricted Data (RD). This contract requires access to RD and FRD material and information. This information is classified and is controlled under the Atomic Energy Act of 1954. Overall security oversight for RD and FRD is under the cognizance and control of the Department of Energy. Contractor personnel given access to RD and FRD shall be knowledgeable of requirements in 10CFR1045, "Nuclear Classification and Declassification," and DoD Directive 5210.2, "Access to and Dissemination of Restricted Data," and shall be trained in accordance with 10CFR1045.35(a).

Item 10d: Formerly Restricted Data (FRD). This contract requires access to RD and FRD material and information. This information is classified and is controlled under the Atomic Energy Act of 1954. Overall security oversight for RD and FRD is under the cognizance and control of the Department of Energy. Contractor personnel given access to RD and FRD shall be knowledgeable of requirements in 10CFR1045, "Nuclear Classification and Declassification," and DoD Directive 5210.2, "Access to and Dissemination of Restricted Data," and shall be trained in accordance with 10CFR1045.35(a).

Item 10g: Contractor access to North Atlantic Treaty Organization (NATO) and Foreign Government Information requires a final U.S.

Government clearance at the appropriate level.

Reference: DTRA Memorandum, North Atlantic Treaty Organization (NATO) Security Briefing for Secure Internet Protocol Router Network (SIPRNET) Users.

All DTRA's contractors that require a SIPRNET account must be briefed on NATO.

Item 10h: Contractor access to Foreign Government Information requires a final U.S. Government clearance at the appropriate level.

Individuals should be briefed on NATO at the appropriate locations.

Item 10j: All "For Official Use Only" information shall be marked, safeguarded, transmitted, and disclosed in accordance with DoD Manual 5200.01, Volume 3, Protection of Classified Information.

Item 11a: The location for contract performance is at another contractor address, or Defense Threat Reduction Agency (DTRA) 8725 John J. Kingman Road, Fort Belvoir, Virginia and other DTRA sites.

Item 11f: Access to classified information OCONUS shall only take place at NATO, SHAPE, and approved US Government facilities.

Item 11g: The contractor shall prepare and submit DD Forms 1540 and 1541 to the Contracting Officer for certification of "need-to-know", before access will be granted to the Defense Technical Information Center (DTIC).

Item 11j: OPSEC requirements apply. All contractors supporting this effort will receive initial and annual refresher OPSEC training and will be reminded of their continued responsibility to protect sensitive information.

At a minimum the contractor will adhere to the guidelines set forth in the Agency's OPSEC Policy Statement and Critical Information List. Additionaly, the contractor will develop a Critical Information List specific to their portion of the contract work which will identify any sensitive/unclassified information which if disclosed may tip an adversary as to our intentions and/or capabilities.

Additionally, Critical Program Information (CPI) must be identified and protected IAW DoD Instruction 5200.39, Critical Program Information Protection Within the Department of Defense, July 16, 2008. CPI is the classified, highly sensitive information pertaining to a program which if compromised could cause significant degradation in mission effectiveness; shorten the expected life span of the program; significantly alter program direction; or enable an adversary to defeat, counter, copy, or reverse engineer the technology or capability

Item 13e: In accordance with DTRA Policy and DTRA Instruction 5240.06, DTRA Counterintelligence Awareness, Briefing, and Reporting Programs, dated Feb 6, 2004, section 4 under Policy, all contractors working under DTRA contracts are required to comply with the following:

4.1. All DTRA contractors will receive a CI Awareness Briefing upon in-processing at DTRA. All DTRA contractors will receive an annual update of the CI Awareness Briefing.

4.2 Prior to any official travel outside the Continental United States (OCONUS) or while attending domestic or overseas meetings, conferences or symposiums where meetings with foreign nationals are expected, all DTRA contractors and personnel contracted by

DTRA traveling via agency sponsored or supported activities or another DoD component, will contact the BDC or the local SC Field Office to receive a AOR Specific Travel Briefing, no more than 90 days prior to any OCONUS travel in accordance with DoD Directive 2000.16 (reference (b).

In accordance with DODI 2000.16, Antiterrorism (AT) Standards, Standard 19; and DTRA Directive 2000.12, DTRA Antiterrorism Program, Standard 19 requires all DTRA employees and on-site DOD contractors at all DTRA locations to be provided AT Level I Training. The Security and Counterintelligence Directorate will be responsible for ensuring completion of annual AT Level I Training.

All personnel at DTRA (civilian, military, contractor or other government agency personnel), in accordance with DTRA instructions and policies, the use of personally owned electronic devices are prohibited in the DTRA facility . Unauthorized introduction of such devices into the DTRA facility constitutes a security incident; which will be followed with a security incident inquiry/report for corrective action. Unless issued/approved by DTRA, all electronic devices which require access into the DTRA facility must be coordinated and approved through the Security and Counterintelligence, Technical Security Branch.

The use of the public world-wide web/internet services is not authorized to discuss, disseminate, produce or transmit "For Official Use Only" information and classified information

All personnel at DTRA (military, civilian, contractor or other government agency personnel) that require a permanent DTRA badge or access to the DTRA LAN must receive an in-processing security brief before issuance of a DTRA badge or access to the DTRA LAN.

Contractors or other government agency employees working at or supporting DTRA must be in DTRA spaces a minimum of three days per week for a DTRA permanent badge to be issued to them. Some contractors or other government agency employees working at or supporting DTRA may be required to have a DTRA LAN account. Contractors or other government agency employees working at or supporting DTRA that will be issued a DTRA permanent badge or a DTRA LAN account must in-process and receive a security briefing.

All personnel that possess a DTRA permanent badge or have access to the DTRA LAN must receive an out-processing security debrief in the event they are terminating employment, retiring, no longer supporting DTRA, being reassigned to another government agency, or will be absent from duty or employment for more than 60 consecutive days. Failure to do so may adversely affect departing personnel’s security clearance and future employment.

This sentence relates to full time DTRA contractors, and personnel who are contracted by DTRA that are located in other regions, academia, etc.

All contractors that will be working in DTRA space and/or having access to the Local Area Network are required to in and out process through Personnel Security.

The signatures below indicate this contract has been coordinated with the DTRA, Program Manager and Security Operations Branch.

For assistance on the contract, please contact the Program Manager listed below.

Program Manager:

DAUBACH, Anthony _______________DATE: 25 Jan 2016______Phone: x4573_________ Printed Name

1/25/2016

X Anthony D. Daubach Anthony D. Daubach

COR

Signed by: DAUBACH.ANTHONY.D.1089267621

Security Operations Branch:

____________________________________DATE:________________Phone:_______________ Printed Name

____________________________________ (Signature) grayp Typewritten Text Pamela D. Gray 25 JAN 2016 grayp Typewritten Text 703.767.7853