RFP Amend 3 - Attachment 1 Draft DD 254.pdf

Please wait...

If this message is not eventually replaced by the proper contents of the document, your PDF viewer may not be able to display this type of document.

You can upgrade to the latest version of Adobe Reader for Windows®, Mac, or Linux® by visiting http://www.adobe.com/go/reader_download.

For more assistance with Adobe Reader visit http://www.adobe.com/go/acrreader.

Windows is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Mac is a trademark of Apple Inc., registered in the United States and other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.

PREVIOUS EDITION IS OBSOLETE.

Page of

DD FORM 254, APR 2018

NEEDS DD67

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the National Industrial Security Program (NISP) apply to all security aspects of this effort involving classified information.)

OMB No. 0704-0567 OMB approval expires:

June 30, 2025 The public reporting burden for this collection of information, 0704-0567, is estimated to average 70 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, at whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

RETURN COMPLETED FORM AS DIRECTED IN THE INSTRUCTIONS.

1. CLEARANCE AND SAFEGUARDING

2. THIS SPECIFICATION IS FOR: (X and complete as applicable.)

3. THIS SPECIFICATION IS: (X and complete as applicable.)

a. ORIGINAL (Complete date in all cases.)

b. REVISED (Supersedes all previous specifications.)

4. IS THIS A FOLLOW-ON CONTRACT?

If yes, complete the following:

Classified material received or generated under

5. IS THIS A FINAL DD FORM 254?

If yes, complete the following:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

7. SUBCONTRACTOR(S) (Click button if you choose to add or list the subcontractors -- but will still require a separate DD Form 254 issued by a prime contractor to each subcontractor)

8. ACTUAL PERFORMANCE (Click button to add more locations.)

10. CONTRACTOR WILL REQUIRE ACCESS TO: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

e. NATIONAL INTELLIGENCE INFORMATION:

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. See instructions. Provide details in Blocks 13 or 14 as set forth in the instructions.)

12. PUBLIC RELEASE

Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the National Industrial Security Program Operating Manual (NISPOM) or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified here with at least office and phone contact information and if available, an e-mail address. (See instructions)

13. SECURITY GUIDANCE

The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended.

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. The field will expand as text is added. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. Also allows for up to 6 internal reviewers to digitally sign. See instructions for additional guidance or use of the fillable PDF.)

List of Attachments (All Files Must be attached Prior to Signing, i.e., for any digital signature on the form)

14. ADDITIONAL SECURITY REQUIREMENTS

Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the CSO. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

15. INSPECTIONS

Elements of this contract are outside the inspection responsibility of the CSO.

If Yes, explain and identify specific areas and government activity responsible for inspections. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

17. CERTIFICATION AND SIGNATURES

Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. Upon digitally signing Item 17h, no changes can be made as the form will be locked.

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICIAL

9.0.0.2.20120627.2.874785 DD 254, "DoD Contract Security Classification Specification"

7115 S. Boundary Blvd Tampa, FL 33621

b.) Naval Support Activity Bahrain c.) Possible overseas temp locations in the CENTCOM AOR Enter location(s).: MARCENT 7115 S. Boundary Blvd Rm. 128 Tampa, FL 33621 Enter general unclassified description of this procurement.: The Performance Work Statement (PWS) provide professional services to support the United States Marine Corps Forces, Central Command (MARCENT) and subordinate commands. The Contractor must supply subject matter expertise in command element, manpower, intelligence, operations, logistics, planning, and communications efforts associated with efficient execution and management of the tasks specified in this PWS.

Contracting Officer Representative: LtCol. Jeffrey Kisla/ jeffrey.kisla@usmc.mil Contracting Officer: Mr. Christian Hernandez-Soto/ christian.hemandezsoto@usmc.mil

a. The Marine Corps Forces Central Command's Special Security Office (SSO) is the Cognizant Security Authority (CSA) for this level of effort within the contract. The Contractor is responsible for implementing the provisions of the DoDM 5105.21, and its Navy Supplement, in support of this effort. Failure of the contractor to maintain and administer a security program, fully compliant with these added security requirements, constitutes grounds for termination for default. If, subsequent to the date of this contract, the security requirements under this contract are changed by the Government, as provided in this clause, and the security costs or time required for delivery under this contract are thereby increased or decreased, the contract price, delivery schedule, or both, and any other provision of this contract which may be affected, shall be subject to an equitable adjustment. Any equitable adjustment required by virtue of this clause shall be accomplished in the same manner as equitable adjustments negotiated under the Changes clause of this contract. For SAP, USMC SAPCO is the CSA on this contract.

b. Whenever the contractor, in performance of the work under this contract, finds that the requirements of any of the clauses of the contract are in conflict with security instructions issued to the contractor, the contractor shall:notify the Contracting officer or duly authorized representative for security matters. The Contracting Officer shall: (I ) Modify or rescind such security requirements, or (2) issue to the contractor written instructions concerning compliance with the requirements of the clauses or provisions conflicting with such security requirements. Any waiver of compliance with the clauses or provisions of the contract issued by the Contracting Officer shall be in writing and approved by SSO Marine Forces Central Command in advance. In the event a conflict occurs between the various security manuals, the contractor will utilize the most restrictive guidance and immediately refer the matter to SSO Marine Forces Central Command. For issues related to SAP, refer the matter to the USMC SAPCO.

Item 7. The Contractor must coordinate with the COR/COTR prior to subcontracting any portion of the classified effort involved in this contract. A separate DD Form 254 for the Subcontractor shall be prepared by the Prime Contractor and approved by the COR/COTR, Contracting Officer (initialing by block 7), and Marine Forces Central Command SSO (signing in block 13) prior to the Subcontractor performing classified work under this contract. The Contractor is expressly prohibited from representing Subcontract employees as Prime Contract employees for the purpose of obtaining security clearances and/or access to classified materials for these individuals. Subcontracting of an SAP work can only be approved through HQMC SAPCO.

Item 8. All classified work accomplished on this contract will be done so within US Government accredited SCI facilities. Only unclassified work will be performed at contractor facilities. Items 8 (b) and 8 (c) are not applicable for SAP.

Item 10a. Communication Security (COMSEC) Information: Contractor must forward request for COMSEC material/information through Contracting Officer Representative (COR). The contractor is governed by NISPOM rule at 32 CFR Part 117 "National Industrial Security Program Operating Manual", Section 117.21 (COMSEC). Access to COMSEC material is restricted to US Citizens holding a final U.S. Government security clearance at the appropriate level. Prior approval from the Government Contracting Agency is required in order for a prime contractor to grant COM SEC access to a subcontractor. Non-accountable COM SEC information, though not tracked in the COM SEC material control system, may still require a level of control within a document control system. Refer to NSA/CSS Policy Manual 3-16, Control of Communications Security Material, and the Committee on National Security Systems Instructions (CNSSI) 400 I, Controlled Cryptographic Items, for guidance.

Item 10e(1).

a. Intelligence Information Sensitive Compartmented Information (SCI): See attached SCI Addendum for additional security requirements. Access to intelligence information requires a final Top Secret U.S. Government clearance and SCI indoctrination. Personnel are required to sign a SCI Non-Disclosure Agreement. The contractor must provide individuals who are able to achieve and maintain the eligibility standards for access to SCI and other controlled access program information as set forth in the Intelligence Community Directive (ICD) 704 Personnel Security Standards and Procedures Governing Eligibility for Access to SCI and Other Controlled Access Program Information, for continued employment. The GCA must provide prior approval before a subcontract involving access to intelligence information can be issues.

b. In the performance of this contract, access to Top Secret/Sensitive Compartmented information (TS/SCl) material may be required. Access to TS/SCI material is strictly controlled. Contractors must be nominated, screened, hold the appropriate clearance eligibility, and be approved by the local Senior Intelligence Officer before being indoctrinated and granted access to SCI. Upon approval for access, each Contractor will receive an indoctrination briefing, complete a series of required training courses, and are responsible for reporting personal status changes and/or security incidents to the Marine Corps Forces Central Command SSO.

c. Contractors cleared on an interim basis (eligibility) will not be eligible for access to SCI under this contract. Contractors specifically identified to perform duties requiring access to SCI must be eligible under the provisions of ICD 704 without exception, waiver or deviation, and adjudicated by the DoD Consolidated Adjudications Facility (DoD CAF).

d. Requests for SCI billets will originate from the contract program manager, routed through the government project officer, to the Marine Forces Central Command SSO (the format for such requests is provided under separate cover). Contractor personnel supporting this effort who require SCI access will be briefed by, and their personnel security records managed by the Marine Corps Forces Central Command SSO. Individuals briefed by the SSO are required to report changes in personal status, as defined by DoDM 5105.21 to SSO Marine Forces Central Command as well as the Contractor SSO (CSSO).

e. All SCI will be handled in accordance with DoDM 5105.2 1 and in designated Government approved and certified SCI Facilities (SCIFs).

f. SCI will not be released to contractor employees without specific release approval of the originator of the material as outlined in governing directives; based on prior approval and certification of "need-to-know" by the designated Contractor.

Item 10e(2).

a. Intelligence Information (Non-SCI). All contractor personnel assigned under this contract must possess a current Top Secret security clearance. Personnel are required to sign a non-disclosure agreement. The GCA must provide prior approval before a subcontract involving access to non-intelligence information can be issued.

b. Contractor may require access to the Secret Internet Protocol Router Network (SIPRNet) (at the government activity). Although intelligence data is available on SIPRNet, and could be inadvertently accessed, there is no valid requirement for intelligence data at this time. Therefore, Contractors shall not intentionally access or download intelligence data from the SIPRNET. In the event, intelligence data is required, the COR or Project Lead/Officer will modify this requirement for submission to the Marine Forces Central Command SSO. A final U.S. Government clearance, at the appropriate level, is required prior to access to Intelligence information.

Item 10f. Access to Special Access Program (SAP) information requires a FINAL Secret clearance, based on a National Agency Check Law Enforcement Credit (NACLC), Tier 3 (T3), T3 Reinvestigation (T3R), the required reinvestigation was DEFERRED to enrollment in the Continuations Evaluation (CE) Program (Reason block in the Defense Information Systems for Security (DISS) MUST state "DEFERRED") or higher investigation conducted within the last 5-years. All SAP access is requested using the Personal Action Request (PAR) submitted with Special Access Program Nomination Process (SAP:--JP) package, found at https://wv.w.dcsa.mil/mc/ctp/special/ templates/ completed and forwarded to the Program Security Officer (PSO). Personnel must be approved for access to SAP information by the USMC SAPCO and sign a SAP Indoctrination Agreement prior to being afforded to any SAP information or material.

a. Department of Defense Directive (DODD) 5205.07, Volume 2, Special Access Program (SAP) Security Manual: Personal Security shall be utilized in the execution of this contract. A series of Security Classification Guides (SCG), specific to the program to include collateral classification guides, if applicable, will be provided to the contractor under separate cover. Other non-contract related SAP information is not authorized for use in the performance without prior written authorization of the Government Program Manager (GPM) and the cognizant PSO.

b. This contract imposes strict application of the need-to-know principle. Program access is strictly limited to an absolute minimum number of individuals essential to the fulfillment of this contract. Prospective candidates for performance on this contract shall not be informed of their consideration for access to a SAP. They may however, be advised of their consideration to a position requiring access to classified information. Nominees for access to program information will require written approval by the cognizant access approval authority, or designated representative prior to gaining knowledge of or access to any codeword or program related information. Access approvals are valid for 30 days following official notification, unless the PSO has approved an extension in writing. Persons approved for access will execute a Special Access Program Indoctrination Agreement (SAPIA) prior to receiving indoctrination briefings into the SAP. Executed SAPIA's shall be forwarded to the PSO within five (5) working days.

Item 10g. There is no valid requirement for access; however, inadvertent access may occur because NATO information is available on SIPRNet. A final U.S. Government clearance, at the appropriate level, is required for access to NATO information.

Item 10h. The contractor requires access to Foreign Government information in performance of this contract. Access to Foreign Government information requires a final U.S. Government clearance at the appropriate level.

Item 10i. The contractor requires access to Additional Compensatory Control Measures (ACCMs) in the performance of this contract. Access to ACCM information requires a final U.S. Government clearance at the appropriate level. Prior approval from the COR is required for subcontracting.

Item 10j. Controlled Unclassified Information (CUI): The Contractor is authorized access to Controlled unclassified Information (CUI) and it must be marked, protected, stored, destroyed, transmitted, and transported, as specified in DoDM 5200. 01, Volumes 1-3 and DoDI 5200.48. The contractor is prohibited from disclosing or disseminating this information without the expressed written authorization of the COR. USMC SAPCO, and USMC SSO approval as appropriate. In addition, contractors or subcontractors must obtain approval from the GCA and USMC SAPCO prior to posting any unclassified information on any Web Site or the Internet.

Item 10k. Other:

a. SIPRNet access is required. While accessing SIPRNet, the Contractor is limited to information for which there is a need-to-know, and shall not access, download or, further disseminate any special access data (i.e. intelligence, NATO, COM SEC, etc.) outside the execution of the defined contract requirements and/or without the guidance and written permission of the COR. In the event that any special access is required, the COR must modify the contract requirements for issuance of a new modified DD Form 254. A final U.S. Secret clearance and access is the minimum level where access to the SIPRNet is required by a contract employee. A NATO awareness brief is also required for all contractor employees where NATO access is not present in JPAS. SIPRNet Request Forms and training requirements must also be met prior to gaining a SIPRNet account. The Contractor's Facility Security Officer is responsible for ensuring (as a requirement) that all JPAS visit requests are submitted to each organization where classified information will be discussed or accessed.

b. The contractor requires access to Compartmented Access Programs (CAPs) and Integrated Joint Special Technical Operations (IJSTO) programs and information in the performance of this contract. Contactors shall comply with provisions of ICD-906 (CAPs) and CJSCI 3120.08D (IJSTO).

Item 11a. Only applies to SAP work on this contract.

Item 11c. Receive, store and generate classified information or material:

a. All classified information received and/or generated under this contract is the property of the U.S. Government. Upon completion or termination of this contract, the COR and USMC SAPCO will be contacted for destruction or disposition instructions. All information classified by the contractor must be derived from existing Security Classification Guides which the Government will provide via the appropriate security channels. The contractor cannot act as an Original classification Authority. The contractor is not authorized to release U.S. Government classified material to any activity or person, including subcontractors without the COR, USMC SAPCO's and USMC SSO approval as appropriate. All classified information received and generated will be properly stored and handled according to the markings on the material and protected IA W NISPOM rule at 32 CFR Part 117 "National Industrial Security Program Operating Manual". Section 117 .14 (Marking Requirements), DoDM 5205 .07 Vols 1-4 and DoDM 5105.21, VI.

b. Classified contract performance is restricted to the locations in Item 8 and/or the individual task orders. Security classification guidance will be provided on site.

c. The contractor is not required to provide storage for classified information or material, the government will provide.

Item 11d. Fabricate, Modify, or Store Classified Material: Classified contract performance is restricted to the locations in Item 8 and/or the individual task orders. Security classification guidance will be provided on site. The contractor is not required to provide storage for classified hardware, the government will provide.

Item 11f. The contractor and subcontractors, when performing or traveling outside the United States under this contract shall:

a. Affiliate with the Overseas Security Advisory Council, if the contractor or subcontractor is a U.S. entity.

b. Ensure personnel who are in-country on a non-transitory basis, register with the U.S. Embassy, and the contractor and subcontractor personnel who are third country nationals comply with any security related requirements of the Embassy of their nationality.

c. Provide all personnel with Anti-terrorism/Force Protection Awareness Information commensurate with which the DOD provides to its military and civilian personnel, to the extent such information can be made available prior to travel outside the United States.

d. Obtain and comply with the most current Anti-Terrorism/Force Protection guidance for contractor personnel and the DOD Foreign Clearance Program, DODD 4500.54E, updated regularly in the Foreign Clearance Guide (FCG), which can be found at these URLs: NIPR: https://www.fcg.pentagon.mil/fcg.cfm SlPR: https://www.fcg.pentagon.smil.mil/index.html and all other requirements imposed by the visited country, MARCENT. CENTCOM, and/or the DOD.

e. Overseas places of performance are expected to include cities/countries as identified in Item 8 and/or the individual task orders.

Item 11h. Contractor must forward request for COMSEC material/information through the COR. The contractor is governed by NISPOM rule at 32 CFR Part 117 "National Industrial Security Program Operating Manual", Section 117.21 (COMSEC) and NSACSS Policy Manual 3-16. Access to COMSEC material is restricted to US Citizens holding a final US Government security clearance. Such information is not releasable to personnel holding only reciprocal clearance. Prior written approval from the GCA is required in order for a prime contractor to grant COMSEC access to a subcontractor. The contractor is not required to provide COMSEC material/information, the government will provide.

Item 11i: TEMPEST

a. When applicable, the contractor shall comply with all DOD physical security requirements in accordance with the Intelligence Community Standard (ICS) 705-0 1. The contractor will not expend any funds to achieve TEMPEST compliance until proposed actions have been evaluated by a Navy Certified TEMPEST Technical Authority (CTTA) and compliance countermeasure direction has been received in writing from the cognizant security officer.

b. The contractor shall not process classified information by electrical means prior to a CSO TEMPEST evaluation of the equipment/systems and facility, and written CSO certification that the facility meets TEMPEST criteria. In order to expedite the TEMPEST evaluation, the contractor shall provide a list of equipment, to include model number, which is associated with the processing of classified information. In addition, the estimated percentage of classified information processed, cable/conduit runs, a floor plan layout that depicts placement of equipment in relation to other rooms, equipment distances from walls or uncontrolled areas, and physical security being afforded the equipment both during processing and after hours.

c. The contractor is not required to provide the equipment/systems and facility required to achieve TEMPEST compliance, the government will provide.

Item 11j. Operations Security (OPSEC):

a. OPSEC protection is required for classified and sensitive unclassified information (as defined in Public Law 100-236, 9 January 1988) developed or used in the performance of this contract. While performing aboard Navy/USMC installations, the Contractor shall comply with the provisions of OPNAVINST 3432.1 and the local Command 3070 instruction series for Operations Security; at all other sites the Contractor shall comply with local command and/or program OPSEC plans. OPSEC requirements are contained in National Security Decision Directive 298 dated 23 January 1988, DoD 5205.2 and OPNAVINST 3432.1.

b. The contractor will apply OPSEC to enhance protection for classified and unclassified critical information. While the documents identified in references below provide details on the development of OPSEC programs and implementation of OPSEC analyses, the requirements below provide the minimum standards for OPSEC application directed in this contract.

c. Personnel will comply with OPSEC measures and program requirements established by the Government.

d. All personnel supporting the contract will receive initial and recurring (at least annually) OPSEC awareness training that identifies relevant threat information including techniques used by adversaries to obtain classified and unclassified critical information, directed OPSEC measures, and reporting requirements.

Item 11k. Defense Courier Service:

a. Classified contract performance is restricted to MARCENT 7115 S. Boundary Blvd. DCS guidance contained in Item 11m (b).

b. The USMC Regional Contracting Office-NCR will or has requested DCS services from:

Commander, Defense Courier Service Attn: Operations Division United States Transportation Command 508 Scott Drive Scott AFB, IL 62225

c. The contractor is not required to provide DCS, the government will provide.

Item 11l. Receive, Store and Generate Controlled unclassified Information (CUI): The Contractor is authorized access to Controlled unclassified Information (CUI) and it must be marked, protected, stored, destroyed, transmitted, and transported, as specified in DoDM 5200. 01, Volumes 1-3 and DoDI 5200.48. The contractor is prohibited from disclosing or disseminating this information without the expressed written authorization of the COR and the USMC SAPCO. In addition, contractors or subcontractors must obtain approval from the GCA and USMC SAPCO prior to posting any unclassified information on any Web Site or the Internet. Before an employee departs, the contractor will ensure the employee arranges for and is debriefed from all categories of information they have access to (e.g., SCI, SAP) . In the event of a suspected or verified security violation associated with this contract or pre-award effort. the Contractor Program Security Officer must notify the USMC SAPCO and USMC SSO within 24-hours of their knowledge of the incident.

Item l1m. Other:

a. Contractor requires access to JVE, SIPRNet, JWICS, MCEN, MCEN-S, C-Net, PDAS, SIC, Secure VTC, vIPer, Facsimile and communication equipment required at Government and Contractor locations.

b. The contractor will adhere to the following instructions and all subsequent revisions to this guidance:

- DoDI 0-2000.16 Volume 1 DoD Antiterrorism (AT) Program Implementation: DoD AT Standards (only applicable to contractors in Government Facilities)

- DoDM 5105.21 Volume 1 - Sensitive Compartmented Information (SCI) Administrative Security Manual: Administration of Information and Information System Security

- DoDM 5105.21 Volume 2 - Sensitive Compartmented Information (SCI) Administrative Security Manual: Administration of Physical Security, Visitor Control and Technical Security

- DoDM 5105.21 Volume 3 - Sensitive Compartmented Information (SCI) Administrative Security Manual: Administration of Personnel Security, Industry Security and Special Activities

- DoDD 5148.13 Intelligence Oversight

- DoD 5200.08-R DOD Physical Security Program

- DoDD 5205.07 - SAP Policy

- DoD 5220.22-M, Change 2, National Industrial Security Program Operating Manual

- DoD 5240.1-R, Procedures Governing the Activities of DoD Intelligence Components that Affect U.S. Persons

- DoDM 5200.01 Volumes 1-4, DoD Information Security Program

- DoDM 5200.02 Procedures for the DoD Personnel Security Program (PSP)

- DoDM 5205.07 - SAP Security Manual: General Procedures

- DoDM 5205.07 Volume 4 - SAP Security Manual: SAP Security Markings

- DoDM 5240.01, Procedures Governing the Conduct of DoD Intelligence Activities

- DoDD 5240.06 Counterintelligence Awareness and Reporting

- DoDD 8140.01 Cyberspace Workforce Management

- DoDI 5200.48 - Controlled Unclassified Information (CUI)

- DoDI 5205.11 - Management, Administration, and Oversight of DoD SAPs

- DoDI 8500.1 Cybersecurity

- DoD 8570.01-M Information Assurance Workforce Improvement Program

- DoDIIS DJSIG. DoD Intelligence lnformation System (DoDIIS) Joint Security Implementation Guide (DJSIG)

- ICD 119, Media Contacts

- ICD 403, Foreign Disclosure and Release of Classified National Intelligence

- ICD 503 - Information Technology System Security Risk Management, Certification, and Accreditation and the DoDIIS Joint Security Implementation Guide (JSIG)

- ICS 500-18, Removable Media Management;

- ICD 700 - Protection of National Intelligence

- ICD 701 - Security Policy Directive for Unauthorized Disclosures of Classified Information

- ICD 703 - Protection of Classified National Intelligence Including Sensitive Compartmented Information

- ICD 703-02, Reporting Requirements for Individuals with Access to Sensitive Compartmented Information

- ICD 703-03, Protection of Classified National Intelligence Including Sensitive shared with entities Outside the Intelligence Community

- ICD 704 - Personnel Security Standards and Procedures for Governing Eligibility for access to Sensitive Compartmented Information and other controlled access information

- ICS 704-01, 1C Badge System; and the Security Markings Program (SMP) Register and Manual (current editions)

- ICD/ICS 705 - Technical Specifications for Construction and Management of Sensitive Compartmented Information Facilities

- ICS 705-01, Physical and Technical Security Standards for Sensitive Compartmented Information Facilities

- ICD 706, Security Standards For Protecting Domestic IC Facilities

- ICD 710 - Classified Management and Control Marking System

- ICD 710.1, Application of Dissemination Controls; Originator Control

- ICD-906, Controlled Access Programs

- CJCSI 3120.08D, Joint Special Technical Operations

- JSIG - Joint SAP Implementation Guide

- NISPOM rule at 32 CFR Part 117 "National Industrial Security Program Operating Manual"

- OPNAVINST 222.5D Release of Communications Security Material to U.S. Industrial Firms Under Contract to the Department of the Navy

- SECNAVINST 3070.2 Operations Security

- SECNAVINST 5510.36B Department of the Navy Information Security Program

- SECNAVINST 5510.37 Department of the Navy Insider Threat Program

- SECNAVM-5510.36 Department of the Navy Information Security Program (only applicable to contractors in Government Facilities)

- SECNAVM-5510.30 Department of the Navy Personnel Security Program (only applicable to Consultants)

- DODI 5000.83, July 2020 Technology and Program Protection to Maintain Technological Advantage

- U.S. Transportation Command Defense Courier Division, Customer Service Guide, November 2022

- MCO 5239.2B - Marine Corps Cybersecurity

- MCO 5510.18B - USMC Information and Personnel Security Program

- MCO 5530.14A - Marine Corps Physical Security Program

- MCINCR-MCBQO 5200.1, Photography Policy

- MCINCR-MCBQO 5530.2, Access Control Policy

Additionally: Any assigned KO/COR without SCI or SAP access will perform at the Unclassified level. All SCI and SAP questions and oversight shall be referred to the USMC SAPCO and USMC SSO as appropriate.

Item 12. Regardless of classification level, the Government considers the existence of the access approval to be sensitive. Contractor personnel should discuss or disclose information regarding the contract only to individuals with need to know. It is a material condition of this contract that the contractor shall not use, or allow to be used, any aspect of this contact for publicity, advertisement, reference or any other public purposes without specific approval. This includes statements of "SCI work" in corporate marketing tools or personal resume's. The Contractor agrees not to use or allow to be used any aspect of this contract for publicity, advertisement, references or any other public purposes. It is further understood that this obligation shall not expire upon completion of this contract, but will continue until rescinded by the U.S. Government. The Contractor may request a waiver or release from the foregoing but shall not deviate there/from unless authorized to do so in writing by the Contracting Officer or CSA. Unless otherwise stated in this contract, the Contractor is not prohibited from identifying the existence of a Government contract pursuant to federal statute or regulations, e.g., Securities Exchange Commission filings, if consistent with security requirements. A copy of all such filings or disclosures shall be promptly forwarded to the Contracting Officer.

Item 13.

a. In the performance of this contract, access to Top Secret/Sensitive Compartmented informational (TS/SCI) material may be required . Access to TS/SCI material is strictly controlled. Contractors must be nominated, screened, hold the appropriate clearance eligibility, and be approved by the local Senior Intelligence Officer before being indoctrinated and granted access to SCI. Upon approval for access, each Contractor will receive an indoctrination briefing, complete a series of required training courses, and are responsible for reporting personal status changes and/or security incidents to the Marine Forces Central Command SSO.

b. Contractors cleared on an interim basis (eligibility) will not be eligible for access to SCI under this contract. Contractors specifically identified to perform duties requiring access to SCI must be eligible under the provisions of ICD 704 without exception, waiver or deviation, and adjudicated by the DoD Consolidated Adjudications Facility (DoD CAF).

c. The Contractor will notify the Marine Forces Central Command SSO when detection of possible or actual compromise of government related data occurs.

d. All Contractor personnel assigned to this contract shall possess security clearances issued by the DoD Consolidated Adjudication Facility (DoD CAF) commensurate with the level of required access to classified information that is directly in support of this contract. Contractors must be nominated, screened, hold the appropriate clearance eligibility, and approved by the local Senior Intelligence Officer before being granted access to classified material. Contractors granted access to classified information are required to comply with the "Personal Status Change" reporting criteria identified in the ICD 704, and report any personal status changes to the MCIA SSO and GSSO.

e. Marine Forces Central Command SSO restricts access to only those individuals who possess the necessary security clearance and to those who are actually providing services under this contract. Further dissemination to other contractors, sub-contractors, other government agencies, private individuals or organizations is prohibited unless authorized in writing by the releasing agency.

f. The Contractor will establish and maintain an access list of those employees working on this contract. A copy of this list will be furnished to the COR/COTR and Marine Forces Central Command SSO on a quarterly basis. The Contractor will advise the Marine Forces Central Command SSO through the COR/COTR immediately upon reassignment of personnel to other duties not associated with this contract.

g. Classified material will not be released to Contractor employees without a need-to-know identified in the performance work established in this contract. Release of classified information, documentation or other material concerning this contract will not be discussed with or released to any individual, subcontractor, agency (including Federal Government agencies and employees), and contractor employees not working on the contract without prior written approval from the COR/COTR, Further classified material will not be released to foreign nationals or immigrant aliens, who may be employed by the contractor, regardless of the level of their security clearance or access authorization, except with the specific permission of the Marine Forces Central Command SSO.

h. All classified information developed under this contract, to include working papers, presentations, final reports, and other classified documents extracted from information provided to the Contractor, will be properly classified, controlled, protected, transmitted and accounted for in accordance with the provisions listed in item 14. Any classified information generated under this contract classified using derivative source material will retain the same classification and handling caveats as originally source information. Inquiries pertaining to classification guidance will be directed to the local Special Security Officer.

i. All classified material received, generated, fabricated, or modified by this contract remains the property of the U.S. Government agency or component originator. Upon completion or cancellation of the contract, all material will be returned to the direct custody of the supporting SSO or destroyed in accordance with instructions outlined by this office.

Navy Regional SSO Jacksonville, Curtis Coleman 904-542-2834 curtis.coleman.civ.@us.navy.mil USMC Special Security Office, Charlene R. Baer. 703-693-6005 charlene.baer@usmc.mil USMC SAPCO Director, Jason Potter. 703-692-5934. jason.p.potter@usmc.mil

DoD 5220.22-M (NISPOM), DoD Manual SIOS.21 (SCI Admin. Security Manual) Vol 1-3, DoDM 520S.07 Volumes l-4, "O" and "H" clauses to the basic contract. Executive Order 13526, DoDM 5200.1 Vol 2, and DoDD 5205.07 Vol 2.

2010 Henderson Road Marine Corps Base Quantico, VA 22134 Enter address (include zip code).: 7115 S Boundary Blvd MacDill AFB Tampa, FL 33621