Attachment_J10_DD_254_Continuation_Sheet-1.0.pdf

UNCLASSIFIED

CONTINUATION SHEET FOR SOLICITATION M67854-18-R-7800

10a. Contractor is authorized to receive Government furnished cryptographic equipment.

Access to COMSEC information, per DoD 5220.22-A, requires a final U.S. Government clearance and special briefings at the appropriate level. Subcontracting COMSEC information by a contractor requires prior approval from the Commander, MARCORSYSCOM

(WMS-S)."

10e. Intelligence information will be handled and controlled as indicated in DoD 5105.21- M-1, NAVSUP to DoD 5105.21-M-1, the NISPOM, Chapter 5 and effective SSO Navy BANIFs. Access to Intelligence information requires a final U.S. Government clearance at the appropriate level.

10e(1). Access to Sensitive Compartmented Information (SCI) is strictly controlled. The contractor will not provide SCI access to anyone without the written approval of the MCSC SSO. In performance of this contract, the contractor will require access to SCI at the locations listed in Attachment A. Also:

a. SCI does not become the property of the contractor and may be withdrawn at any time. Upon expiration of the contract, all intelligence released and any material using data from the intelligence will be returned to the project officer or COR for final disposition.

b. Contractors will not release this information to any activity or person not directly engaged in providing services under the contract or to another contractor (including subcontractors), government agency, private individual, or organization without prior approval of the Director, Navy Special Security Office (SSO Navy) via Commander, MCSC

(SSO).

c. Intelligence material will not be released to foreign nationals or immigrant aliens, who may be employed by the contractor, regardless of the level of their security clearance or access authorization, except with the specific permission of the Director, SSO Navy via Commander, MCSC (SSO).

d. Intelligence material will not be reproduced without prior approval of the Director, SSO Navy via Commander, MCSC (SSO). All intelligence material will bear a prohibition against reproduction while in the custody of the contractor.

e. Contractors will maintain records, which will permit them to furnish, on demand, the names of individuals who have access to intelligence material in their custody.

f. Reproduction and destruction of this material, regardless of the classification, is prohibited without written approval from Commander, MCSC (SSO) or higher authority.

10e(2). Contractor requires access to Non-SCI Intelligence Information, including the SIPRNET (at government activities) as certified by the COR via the MarCorSysCom CMCC.

The contractor shall not intentionally access, download, or further disseminate intelligence information wthout the guidance and permission of the MarCorSysCom CMCC. Contractor shall comply with MarCorSysCom CMCC guidance. Written approval of the User Agency Contracting Officer is required prior to subcontracting. A final U.S. Government clearance, at the appropriate level, is required prior to access to Intelligence Information.

10f. To execute this contract, additional security requirements in addition to DoD 5220.22M will be required. The contractor shall comply with the security provisions of these programs. Marking and/or classification guidance for material originated or generated under this contract will be provided through the MARCORSYSCOM Command Special Access Program Control Officer (CMDSAPCO) under separate cover. Any material generated by the contractor (including correspondence, drawings, models, mockups, photographs, schematics, progress, special and inspection reports, engineering notes, computations and training aids) shall be classified according to content. Guidance for classification shall be derived from the applicable Security Classification Guides, Government furnished equipment or data, or special instructions. Such material shall not contain contractor logos or similar identifiers which identify the specific contractor or team members. Prior approval from the (owner of SAP) via Commander, MARCORSYSCOM (CMDSAPCO) is required for subcontracting. SAP activities are governed by Revision 1 Department of Defense Overprint to the National Industrial Security Program Operating Manual Supplement, 1 APR 04.

10g. There is no valid requirement for NATO access, however, inadvertant access may occur because NATO information is available on the SIPRNET. Access to NATO information requires a final U.S. Government clearance at the appropriate level and special briefings.

MCSC CMCC will provide contractor NATO briefing confirmation. NATO information will be handled and controlled as indicated in the NISPOM. Prior approval from the Commander, MCSC (SSO) is required for subcontracting.

10h. Access to Foreign Government Information requires a final U.S. Government clearance at the appropriate level. This information will not be released to any activity or person not directly engaged in this contract or to another contractor (including subcontractors), government agency, private individual, or organization without prior approval of the Commander, MARCORSYSCOM (CMCC).

10j. The "Controlled Unclassified Information” (i.e., For Official Use Only (FOUO), Personally Identifiable Information (PII), etc.,) provided under this contract shall be safeguarded as specified in DoDM 5200.01 (vol 4).

10k. Secret Internet Protocol Router Network (SIPRNet) access is required. While accessing the SIPRNet, the contractor is limited to information for which there is a Need- To-Know, and shall not access, download or, further disseminate any special access data (i.e. intelligence, NATO, COMSEC, etc.) outside the execution of the defined contract requirements and, or without the guidance and written permission of the COR. In the event that any special access is required, the COR must modify the contract requirements for issuance of a new modified DD Form 254. A final U.S. Secret clearance and access is the minimum level where access to the SIPRNet is required by a contract employee. A NATO awareness brief is also required for all contractor employees where NATO access is not present in JPAS. NATO access for SIPRNet is not recorded in JPAS. SIPRNet Request Forms and training requirements must also be met prior to gaining a SIPRNet account. The contractor’s Facility Security Officer is responsible for ensuring (as a requirement) that all JPAS visit requests are submitted to each organization where classified information will be discussed or accessed.

11a. Contract performance is restricted to (see locations prescribed in Attachment A).

Project Officer will provide security classification guidance for performance of this contract under separate cover.

11f. The contractor may be required to travel to overseas locations in support of this contract. Classified access outside the U.S. will occur at U.S. Government SCIF locations identified in Attachment A.

11g. DTIC services required. DD Form 1540 will be prepared and processed in accordance with the NISPOM, contracting activity will be involved in certifying need-to-know to DTIC. Information extracted from classified reference material shall be classified according to the markings on such material. The DD Form 1540 prepared under this contract shall be forwarded trough Commanding General, MARCORSYSCOM (CT).

11j. Operations Security (OPSEC) protection is required for classified and sensitive unclassified information (as defined in Public Law 100-236, 9 January 1988) developed or used in performance of this contract. While performing aboard NAVY/USMC installations, the contractor shall comply with the provisions of OPNAVINST 3432.1 and the local command 3070 instruction series for Operations Security; at all other sites the contractor shall comply with local command and/or program OPSEC plans. OPSEC requirements are contained in National Security Decision Directive 298 dated 23 January 1988, DoD 5205.2 and OPNAVINST 3432.1.

15. The Director, Navy Special Security Office (SSO Navy), 4251 Suitland Road, Washington, DC 20395-5720 has exclusive security responsibility for all SCI classified material released under this contract and held within the Sensitive Compartmented Information Facilities (SCIFs) listed in Attachment A. DSS has no security inspection responsibility for all such material but retains responsibility for all non-SCI classified material released to or developed under the contract and held within these facilities. SCI processing is required or authorized in performance of this contract.

In addition to the reporting requirements directed by the NISPOM, the contractor will provide a concurrent report of loss or compromise of classified information to the Commander, Marine Corps Systems Command (MCSC) (Attn: SSO) 2200 Lester Street, Quantico VA 22134-6050.

Contractors will conduct a security review and comply with MARCORSYSCOM 5239.2, 'WEB SITE ADMINISTRATION' prior to entering government information on a home page (contractor or government web page site). The project officer will provide a copy of this order under separate cover to the contractor.

Per DoD Memorandum dtd 1 April, 2005 and Defense Security Service Industrial Security Letter (ISL 05L-1) dtd 18 January 2005, effective 14 February 2005, all contractors under DoD security cognizance will use JPAS for all personnel security Actions. If you have not requested a JPAS account, you must do so within 90 days after contract award.

Visit requests to activities, other than those listed in the Statement Of Work or this DD-254 shall have "Need to Know" certified by MCSC Project Officer. All requests shall contain the information required by the NISPOM and shall not exceed a 12 month period. Contractors will notify the MCSC SSO at least 5 working days prior to any travel requiring an SCI Visit Certification.

All Government Badges issued under this contract will be returned immediately to the MCSC CENTRAL SECURITY STATION upon termination of contract, or individual terminations. When an individual contractor is terminated, for any reason, it is the responsibility of the Facility Security Officer to immediately notify the Command Security Manager, MCSC 2200 Lester Street, Quantico VA 22134-6050. Failure to comply could result in the suspension of all contractor proximity key and NT accounts.

ATTACHMENT A

SCI LOCATIONS

The contractor’s facility IS NOT authorized for SCI Discussions, Processing or Storage. All SCI Access will occur at the locations identified below. These accredited SCIFs will be utilized for the purpose of SCI research, development, and storage in support of this contract. These facilities are under the exclusive responsibility of the designated Special Security Officers.

LOCATION GENSER SCI

Headquarters, USMC X X

NORTHCOM X X

USCENTCOM X X

MARCENT X X

MARFORPAC X X

MARFOREUR/AF X X

MARSOC X X

MARFORRES X X

MARCORSYSCOM, Quantico, VA X X MCCDC, Quantico, VA X X MCIA, Quantico, VA X X MSTP, Quantico, VA X I MEF Commands/Units, Camp Pendleton, CA X X II MEF Commands/Units, Camp Lejeune, NC X X III MEF Commands/Units, Okinawa Japan X X III MEF Commands/Units, MCB K-Bay, HI X X MCOTEA, Quantico, VA X X MCTSSA, Camp Pendleton, CA X X MCNOSC, Quantico, VA X X MTNOC, Quantico, VA X X NMITC, Dam Neck, VA X X MCTOG, MCB 29 Palms, CA X MCLOG, MCB 29 Palms, CA X Other Government Locations Certified by the COR X X