17-R-7401_254_Continuation_Sheet.docx

UNCLASSIFIED

CONTINUATION SHEET FOR SOLICITATION M67854-17-R-7401

10e. Intelligence information will be handled and controlled as indicated in DoD 5105.21-M-1, NAVSUP to DoD 5105.21-M-1, the NISPOM, Chapter 5 and effective SSO Navy BANIFs. Access to Intelligence information requires a final U.S. Government clearance at the appropriate level.

10e(1). Access to Sensitive Compartmented Information (SCI) is strictly controlled. The contractor will not provide SCI access to anyone without the written approval of the MCSC SSO. In performance of this contract, the contractor will require access to SCI at the locations listed in Attachment A. Also:

a. SCI does not become the property of the contractor and may be withdrawn at any time. Upon expiration of the contract, all intelligence released and any material using data from the intelligence will be returned to the project officer or COR for final disposition.

b. Contractors will not release this information to any activity or person not directly engaged in providing services under the contract or to another contractor (including subcontractors), government agency, private individual, or organization without prior approval of the Director, Navy Special Security Office (SSO Navy) via Commander, MCSC (SSO).

c. Intelligence material will not be released to foreign nationals or immigrant aliens, who may be employed by the contractor, regardless of the level of their security clearance or access authorization, except with the specific permission of the Director, SSO Navy via Commander, MCSC (SSO).

d. Intelligence material will not be reproduced without prior approval of the Director, SSO Navy via Commander, MCSC (SSO). All intelligence material will bear a prohibition against reproduction while in the custody of the contractor.

e. Contractors will maintain records, which will permit them to furnish, on demand, the names of individuals who have access to intelligence material in their custody.

f. Reproduction and destruction of this material, regardless of the classification, is prohibited without written approval from Commander, MCSC (SSO) or higher authority.

10e(2). Contractor requires access to Non-SCI Intelligence Information, including the SIPRNET (at government activities) as certified by the COR via the MarCorSysCom CMCC. The contractor shall not intentionally access, download, or further disseminate intelligence information wthout the guidance and permission of the MarCorSysCom CMCC. Contractor shall comply with MarCorSysCom CMCC guidance. Written approval of the User Agency Contracting Officer is required prior to subcontracting. A final U.S. Government clearance, at the appropriate level, is required prior to access to Intelligence Information.

10g. There is no valid requirement for NATO access, however, inadvertant access may occur because NATO information is available on the SIPRNET. Access to NATO information requires a final U.S. Government clearance at the appropriate level and special briefings. MCSC CMCC will provide contractor NATO briefing confirmation. NATO information will be handled and controlled as indicated in the NISPOM. Prior approval from the Commander, MCSC (SSO) is required for subcontracting.

10j. The "For Official Use Only" information provided under this contract shall be safeguarded as specified in Attachment B.

10k. Joint Worldwide Intelligence Communications System (JWICS) and Secret Internet Protocol Router Network (SIPRNet) access are required. While accessing these systems, the contractor is limited to information for which there is a Need-To-Know, and shall not access, download or, further disseminate any special access data (i.e. intelligence, NATO, COMSEC, etc.) outside the execution of the defined contract requirements and, or without the guidance and written permission of the COR. In the event that any special access is required, the COR must modify the contract requirements for issuance of a new modified DD Form 254. A final U.S. Secret clearance and access is the minimum level where access to the SIPRNet is required by a contract employee. A NATO awareness brief is also required for all contractor employees where NATO access is not present in JPAS. NATO access for SIPRNet is not recorded in JPAS. SIPRNet Request Forms and training requirements must also be met prior to gaining a SIPRNet account. The contractor’s Facility Security Officer is responsible for ensuring (as a requirement) that all JPAS visit requests are submitted to each organization where classified information will be discussed or accessed.

11a. Contract performance is restricted to (locations outlined in Attachment A. Project Officer will provide security classification guidance for performance of this contract under separate cover.

11g. DTIC services required. DD Form 1540 will be prepared and processed in accordance with the NISPOM, contracting activity will be involved in certifying need-to-know to DTIC. Information extracted from classified reference material shall be classified according to the markings on such material. The DD Form 1540 prepared under this contract shall be forwarded trough Commanding General, MARCORSYSCOM (CT).

15. The Director, Navy Special Security Office (SSO Navy), 4251 Suitland Road, Washington, DC 20395-5720 has exclusive security responsibility for all SCI classified material released under this contract and held within the Sensitive Compartmented Information Facilities (SCIFs) listed in Attachment A. DSS has no security inspection responsibility for all such material but retains responsibility for all non-SCI classified material released to or developed under the contract and held within these facilities. SCI processing is NOT required or authorized in performance of this contract.

In addition to the reporting requirements directed by the NISPOM, the contractor will provide a concurrent report of loss or compromise of classified information to the Commander, Marine Corps Systems Command (MCSC) (Attn: SSO) 2200 Lester Street, Quantico VA 22134-6050.

Contractors will conduct a security review and comply with MARCORSYSCOM 5239.2, 'WEB SITE ADMINISTRATION' prior to entering government information on a home page (contractor or government web page site). The project officer will provide a copy of this order under separate cover to the contractor.

Per DoD Memorandum dtd 1 April, 2005 and Defense Security Service Industrial Security Letter (ISL 05L-1) dtd 18 January 2005, effective 14 February 2005, all contractors under DoD security cognizance will use JPAS for all personnel security Actions. If you have not requested a JPAS account, you must do so within 90 days after contract award.

Visit requests to activities, other than those listed in the Statement Of Work or this DD-254 shall have "Need to Know" certified by MCSC Project Officer. All requests shall contain the information required by the NISPOM and shall not exceed a 12 month period. Contractors will notify the MCSC SSO at least 5 working days prior to any travel requiring an SCI Visit Certification.

All Government Badges issued under this contract will be returned immediately to the MCSC CENTRAL SECURITY STATION upon termination of contract, or individual terminations. When an individual contractor is terminated, for any reason, it is the responsibility of the Facility Security Officer to immediately notify the Command Security Manager, MCSC 2200 Lester Street, Quantico VA 22134-6050. Failure to comply could result in the suspension of all contractor proximity key and NT accounts.

ATTACHMENT A CLASSIFIED ACCESS LOCATIONS

The contractor facility IS NOT authorized for SCI Discussions, Processing or Storage. Access may occur at the locations and levels identified below.

ADDITIONAL LOCATIONS AS DETERMINED BY THE COR / PROJECT OFFICER

ATTACHMENT B PROCEDURES FOR ‘FOR OFFICIAL USE ONLY’

The following procedures will be used to protect FOR OFFICIAL USE ONLY (FOUO) information:

1. HANDLING: Access to FOUO material shall be limited to those employees who need the material to do their jobs. The FOR OFFICIAL USE ONLY marking is assigned to information when created by a DoD User Agency. FOR OFFICIAL USE ONLY is not a classification, but requires extra precautions to ensure it is not released to the public.

2. MARKING:

a. Mark an unclassified document containing FOUO information “FOR OFFICIAL USE ONLY’ at the bottom of each page containing FOUO information and on the bottom of the front cover (if any) and on the back of the last page and on the back cover (if any).

b. In a classified document, mark:

- An individual paragraph that contains FOUO, but not classified information, by place ‘(FOUO)’ at the beginning of the paragraph.

- The top and bottom of each page that has both ‘FOR OFFICIAL USE ONLY’ and classified information, with the highest security classification of information on that page.

- If a classified document also contains FOUO information or if the classified material becomes FOUO when declassified, place the following statement on the bottom of the cover or the first page, under the classification marking: NOTE: If declassified, review the document to make sure material is not FOUO and no exempt from Freedom of Information Act before public release.

c. Mark other records, such as computer print outs, photographs, films, tapes, or slides ‘FOR OFFICIAL USE ONLY’ so that the receiver or viewer knows the record contains FOUO information.

d. Mark each part of a message that contains FOUO information, Unclassified messages containing FOUO information must show the abbreviation ‘FOUO’ before the text begins.

e. Ensure documents, which transmit FOUO materials, call attention to any FOUO attachments.

f. Any FOUO material released to a contractor by a DoD User Agency must have the following statement on the front page or cover:

THIS DOCUMENT CONTAINS INFORMATION EXEMPT FROM MANDATORY DISCLOSURE

UNDER THE FREEDOM OF INFORMATION ACT. EXEMPTION(S)____APPLY.

3. STORAGE: To safeguard FOR OFFICIAL USE ONLY records during normal duty hours, place them in an out-of-sight location if your work area is accessible to persons who do not have a valid need for the information. After normal duty hours, store FOUO records to prevent unauthorized access. File them with other unclassified records in unlocked files or desks when internal building security is provided. When there is no internal security, locked buildings or rooms usually provide adequate after-hours protection. For additional protection, store FOUO material in locked containers such as file cabinets, desks, or bookcases. Expenditure of funds for security containers or closed areas solely for the protection of FOUO data is prohibited.

4. TRANSMISSION: FOUO material shall be transported via first class mail, parcel post, or fourth class mail for bulk shipments. Transmit FOUO message traffic via approved secure communication system.

Discussion of FOUO material over a secure telephone is authorized if necessary for performance of the contract. FOUO information shall be transmitted over telephone lines with encryption.

5. RELEASE: FOUO information shall not be released outside the contractor’s facility except to representatives of the DoD, via the Government Contracting Officer.

6. DESTRUCTION: When no longer needed, FOUO information may be disposed of by any method, which will preclude its disclosure to unauthorized individuals.