M00264-21-R-0001 Attachment 2- DD254 Continuation.docx

CONTINUATION OF ITEM 13 OF THE DD FORM 254

Contract # TBD Item 10k: Secret Internet Protocol Network (SIPRNet) access is required and provided by the contracting agency. While accessing the SIPRNet, the contractor is limited to information for which there is a Need-To-Know and shall not access, download or, further disseminate any special access data (i.e. intelligence, NATO, COMSEC, etc.) outside the execution of the defined contract requirements and, or without the guidance and written permission of the COR. In the event that any special access is required, the COR must modify the requirements for the DD Form 254.

Note: Final U.S. Secret clearance and access is the minimum where access to the SIPRNet is required by a contract employee. A NATO awareness brief (attached) is also required for all contractor employees where NATO access is not present in JPAS. SIPRNet Request Forms and training requirements must also be met prior to gaining a SIPRNet account. The contractor’s security Manager is responsible for ensuring that all JPAS visit requests are submitted to each organization where classified information will be discussed or accessed.

Item 11.a: When access to classified information and systems is required in the fulfillment of this contract, the Contractor worksite is restricted to the location listed in Item 8. At no time will the contractor be authorized to remove anything classified from the worksite. The government agency or hosting activity will provide security classification guidance and applicable security references for this contract.

Item 14: In addition to the reporting requirements directed by the NISPOM, the contractor will provide a concurrent report of loss or compromise of classified and CUI information to:

The government organization identified in Item 15 as having inspection oversight carved-out and the DSS, CSO identified in Item 6.c.

Visit requests to activities not listed in the contract, SOW/PWS or this DD 254 should not be excepted at any additional worksites until the "Need to Know" and authorization for such a visit has been certified in writing by the COR or Project Officer. All requests shall contain the information required by the NISPOM and shall not exceed a 12 month visit period.

All Government CAC, access badges, and tokens issued under this contract will be returned immediately upon termination of the contract, or individual termination. When an individual contractor is terminated, for any reason, it is the responsibility of the Facility Security Officer to immediately notify the Command Security Manager, MCCDC (C 054) and to recover and turn in all government items issued.