Attachment 3 DD254.pdf

DD FORM 254

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort.)

1. CLEARANCE AND SAFEGUARDING

a. FACILITY CLEARANCE REQUIRED

Top Secret

b. LEVEL OF SAFEGUARDING REQUIRED

None

2. THIS SPECIFICATION IS FOR: (x and complete as applicable) 3. THIS SPECIFICATION IS: (x and complete as applicable)

a. PRIME CONTRACT NUMBER

TBD

X a. ORIGINAL (Complete date in all cases)

DATE (YYMMDD)

200109

b. SUBCONTRACT NUMBER

b. REVISED (Supersedes all previous specs)

Revision No.

c. SOLICITATION OR OTHER NUMBER

M68909-20-R-7600

DUE DATE (YYMMDD)

200302

c. FINAL (Complete Item 5 in all cases)

4. IS THIS A FOLLOW-ON CONTRACT? YES NO. If Yes, complete the following:

Classified material received or generated under ______________________ (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? YES NO. If Yes, complete the following:

In response to the contractor’s request dated , retention of the identified classified material is authorized for the period of ________________________________

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE

b. CAGE CODE

c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE

N/A

b. CAGE CODE

N/A

c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip code)

N/A

8. ACTUAL PERFORMANCE

a. LOCATION

SCIF - NV-02-015

Camp Pendleton, CA 92055

b. CAGE CODE

N/A

c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

Paul Hurst I Marine Expeditionary Force 11th and C Street Camp Pendleton, CA 92055

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT: The purpose is to provide technical and analytical expertise to perform Engineering, Testing, Laboratory Management, Configuration Management, Advanced Network Engineering, Data Sciences, Command & Control Systems, and Cybersecurity Services. In addition;

technical management, coordination of task activities, and administrative support are required.

10. THIS CONTRACT WILL REQUIRE

ACCESS TO:

YES NO 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER CONTRACTOR’S

FACILITY OR A GOVERNMENT ACTIVITY

b. RESTRICTED DATA b. RECEIVE CLASSIFIED DOCUMENTS ONLY

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION c. RECEIVE AND GENERATE CLASSIFIED MATERIAL

d. FORMERLY RESTRICTED DATA d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. INTELLIGENCE INFORMATION: e. PERFORM SERVICES ONLY

(1) Sensitive Compartmented information (SCI)

f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES

(2) Non-SCI g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL INFORMATION

CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER

f. SPECIAL ACCESS INFORMATION h. REQUIRE A COMSEC ACCOUNT

g. NATO INFORMATION i. HAVE TEMPEST REQUIREMENTS

h. FOREIGN GOVERNMENT INFORMATION j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

i. LIMITED DISSEMINATION INFORMATION k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

j. FOR OFFICIAL USE ONLY INFORMATION

l. OTHER (Specify)

Distribution Statements (see item 14)

k. OTHER (Specify)

SIPRNet

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the NISPOM or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release

Direct Through (Specify):

MCTSSA, P.O. Box 555171, Camp Pendleton, CA 92055-5171 to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

8a. The primary place of performance shall be Camp Pendleton. The Contractor shall travel to attend meetings, briefings, and joint test events, as required. The Contractor shall be expected to work 95 percent on-site at MCTSSA and no more than 5 percent off-site (to support travel requirements).

10a. Access to COMSEC information requires special briefings. Access to classified COMSEC information requires a U.S. Government Secret clearance. Publishing or releasing COMSEC information without written approval from Communications security, NSA, Fort George G. Meade, MD 20755 via Commanding Officer, MCTSSA, is prohibited. MCTSSA Security (Electronic Key Management System (EKMS) Manager) will provide COMSEC acknowledgement form and conduct brief. The Contractor will sign a Contractor Acknowledgement Form.

10g. If access to NATO information is required, it will be handled, marked, and controlled per the requirements of the NISPOM (DoD -5220.22M). Access to NATO information requires a final U.S.

Government Secret clearance and NATO brief. MCTSSA will provide the NATO brief. The Contractor will sign the NATO brief acknowledgment form.

10j. See attachment A - For Official Use Only (FOUO) Information.

10k. SIPRNet access is required.

11a. Contract performance is restricted to the government activities listed above under 8a. The Contracting Officer’s Representative (COR) will provide security classification guidance necessary for performance of this contract.

11e. Classification markings on the material to be furnished will provide the classification guidance necessary for the performance of this contract. Additional guidance will be provided by the MCTSSA Security Manager.

11f. The Contractor will have access to U.S. classified material outside the U.S. within the confines of U.S. supporting establishments.

11j. OPSEC Requirements:

The practice of OPSEC prevents the inadvertent compromise of sensitive unclassified and classified activities, capabilities, or intentions at the tactical, operational, and strategic levels. The contractor’s staff must adhere to all Government OPSEC measures currently in place at the Government facility. See attachment B – Operations Security Requirements.

Camp Pendleton uses Defense Biometric Identification System (DBIDS) for base access. The vendor will need to call 760-763-7604 for information or go to the Las Pulgas gate to enroll. Failure to participate in the program will restrict access to the base and may not be used as a reason for late or non-performance of services. All vendors and their employees are required by MCB Camp Pendleton regulations to meet the requirement for installation access, pass a background check, and have their identity verified to receive unescorted access. No foreign nationals shall be permitted on MCB Camp Pendleton under this contract. See attachment C – Specific On-Site Security Requirements.

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to NISPOM requirements, are established for this contract. Yes No (If Yes, identify the pertinent contractual clauses in the contract document itself, or provide any appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

SECNAV M-5510.36, Exhibit 8A, procedures for assigning distribution statements on technical documents is at http://neds.nebt.daps.mil/5510.36.htm.

Attachments:

A - For Official Use Only (FOUO) Information B - Operations Security Requirements C - Specific On-Site Security Requirements

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. (If Yes, explain and identify specific Yes No areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.).

The Contractor Security Office (CSO) is relieved, in whole or in part, of the responsibility to conduct security reviews and provide oversight to contractor personnel. Security reviews and oversight will be provided by the MCTSSA Security Manager, COR, and Government Technical Lead for this contract.

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL

Alisa Munden Alisa.munden@usmc.mil

b. TITLE

SECURITY MANAGER

c. TELEPHONE (Include Area Code)

(760) 725-2365

DSN 365-2365

d. ADDRESS (Include Zip Code)

COMMANDING OFFICER

MCTSSA, BOX 555171

CAMP PENDLETON, CA 92055-5171

17. REQUIRED DISTRIBUTION

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER

f. OTHERS AS NECESSARY

e. SIGNATURE

DD FORM 254

ATTACHMENT A

FOR OFFICIAL USE ONLY (FOUO) INFORMATION

1. The For Official Use Only (FOUO) marking is applied to the information in a document upon creation. The FOUO marking is not a substitute for a security classification, but is used on official government information that may be withheld from the public under exemptions 2 through 9 of the Freedom of Information Act

(FOIA).

2. FOUO markings dictate that the information must be reviewed by MCTSSA prior to release to the public to determine whether a significant and legitimate government purpose is served by withholding the information or portions of the information.

3. An unclassified document containing FOUO information will be marked “FOR OFFICIAL USE ONLY” at the bottom of the first and last page and any interior pages containing FOUO information.

4. FOUO information released by MCTSSA is required to be marked with the following statement prior to transfer:

THIS DOCUMENT CONTAINS INFORMATION EXEMPT FROM MANDATORY DISCLOSURE UNDER THE FOIA.

EXCEPTION(S) _APPLY.

5. FOUO markings may only be removed by the originator or other authority. DO NOT

REMOVE ANY FOUO MARKING WITHOUT WRITTEN AUTHORIZATION FROM MCTSSA OR THE AUTHOR.

You will be notified when the FOUO status is terminated.

6. FOUO information may be disseminated to employees and subcontractors who have a need for the information, in respect to this contract.

7. FOUO information shall be placed out-of-sight during working hours, if the work area is accessible to persons who do not have a need for the information. During off hours, the information shall be stored to prevent unauthorized access. Filing FOUO material in unlocked files or desks with other unclassified records is adequate when internal building security is provided during off hours. When internal security is not available, locked buildings or rooms provide adequate off hours protection. Additionally, material may be stored in locked receptacles, such as file cabinets, desks, or bookcases.

8. FOUO information may be sent via first-class mail or parcel post. Bulky shipments may be sent via fourth-class mail.

9. FOUO information created at a government site will be disposed of when no longer needed ONLY by using a government-provided cross-cut shredder or the shred bin provided in each government facility.

10. The releasing agency should be informed of any unauthorized disclosure of FOUO information. The unauthorized disclosure of FOUO is not a security violation, but the releasing agency should be informed of any unauthorized disclosure.

ATTACHMENT B

OPERATIONS SECURITY REQUIREMENTS

All work will be performed in accordance with DoD and Navy Operations Security (OPSEC) requirements, per the following applicable documents:

National Security Decision Directive 298, National Operations Security Program, 28 July 1992.

DoDD 5205.02E, DoD Operations Security (OPSEC) Program, 20 June 2012.

OPNAVINST 3432.1A, Operations Security, 4 August 2011.

SECNAVINST 5239.2

MCTSSA Operations Security Policy

The Contractor will accomplish the following minimum requirements in support of the MCTSSA OPSEC Program:

The Contractor will practice OPSEC and implement OPSEC countermeasures to protect DoD Critical Information. Critical Information includes facts (individually or in aggregate) that reveal sensitive details about MCTSSA, contractor security, or operations related to the support or performance of this Performance Work Statement (PWS), and require a level of protection from adversarial collection or exploitation not normally afforded to unclassified information.

The Contractor must protect Critical Information and other sensitive unclassified information and activities, especially those which could compromise classified information, operations, or degrade the planning and execution of military operations performed or supported by the Contractor. Protection of Critical Information includes adherence to and execution of countermeasures provided by MCTSSA for Critical Information related to the PWS.

Sensitive unclassified information is information marked FOR OFFICIAL USE ONLY (or FOUO), Privacy Act of 1974, COMPANY PROPRIETARY, and information identified by MCTSSA.

MCTSSA has identified the following Critical Information items that may be related to this PWS:

Known or probable vulnerabilities to any U.S. system and direct support systems.

Details of capabilities or limitations of any U.S. system and direct support systems.

Details about military operations (e.g., numbers of systems deployed, deployment timelines, locations, effectiveness, unique capabilities).

Operational characteristics for new or modified weapon systems (e.g., Probability of Kill (Pk), countermeasures, survivability).

Required performance characteristics of U.S. systems using leading edge or greater technology (e.g., new, modified, existing).

Telemeter or data-linked data or information from which operational characteristics may be inferred or derived.

Test or evaluation information pertaining to schedules of events during which Critical Information might be captured.

Details of MCTSSA’s unique Test and Evaluation (T&E) capabilities (disclosure of unique capabilities).

Existence or details of intrusions into, or attacks against, the DoD networks or information systems, including tactics, techniques and procedures used, network vulnerabilities exploited, and data targeted for exploitation.

Network user identification (ID) and passwords.

Counter-Improvised Explosive Device (IED) capabilities and characteristics, including success or failure rates, damage assessments, and advancements to existing or new capabilities.

Vulnerabilities in Command processes, the disclosure of which could allow someone to circumvent security, financial, personnel safety, or operational procedures.

Force Protection specific capabilities or response protocols (e.g., timelines, equipment, number of personnel, training received).

Command leadership and VIP agendas, reservations, plans, and routes.

Detailed facility maps or installation overhead photography (photos with annotations of Command areas or of greater resolution than commercially available).

Details of MCTSSA emergency evacuation procedures, or emergency recall procedures.

Government personnel information that reveals force structure and readiness (e.g., recall rosters, deployment lists).

Compilations of information that directly disclose Command Critical Information.

The above Critical Information and any developed by the Contractor, regardless if electronic or hardcopy, must be protected by the following countermeasures, at a minimum:

Critical Information may not be sent via unclassified fax.

Critical Information may not be discussed via non-secure phones.

Critical Information may not be provided to individuals that do not have a need to know to complete their assigned duties.

Critical Information may not be disposed of in recycle bins or trash containers.

Critical Information may not be left unattended in uncontrolled areas.

Critical Information should be treated with the same care as FOUO or proprietary information.

Critical Information must be destroyed in the same manner as FOUO.

Critical Information must be destroyed upon termination of the contract or returned to the Government at the government’s discretion.

The Contractor shall document Critical Information items applicable to operations involving information on, or related to, the PWS. Determinations of Critical Information will be completed using the DoD OPSEC 5-step process described in the National Security Decision Directive (NSDD) 298, National Operations Security Program.

OPSEC training must be included as part of the Contractor’s ongoing security awareness program conducted in accordance with Chapter 3, Section 1, of the NISPOM. The NSDD 298, DoD 5205.02E, DoD Operations Security (OPSEC) Program, and OPNAVINST 3432.1A, Operations Security should be used to assist in the creation or management of training curriculum.

If the Contractor cannot resolve an OPSEC issue, they will contact the MCTSSA COR/Government Technical Lead, who will consult with the MCTSSA OPSEC Manager.

All above requirements must be passed on to all subcontractors.

ATTACHMENT C

SPECIFIC ON-SITE SECURITY REQUIREMENTS

1. GENERAL

a. Contractor Performance

The following security services and procedures are incorporated as an attachment to DD Form 254. The Contractor will conform to the requirements of DoD 5220.22-M (NISPOM). When visiting MCTSSA, the Contractor will comply with the security directives regarding the protection of classified and sensitive unclassified information, SECNAVINST 5510.36 (series), and SECNAVINST 5510.30 (series).

b. Security Supervision

MCTSSA will exercise security supervision over all Contractors onboard MCTSSA and provide security support to the Contractor, as noted below. The Contractor will identify the on-site point of contact (POC) for interfacing with the Government.

2. HANDLING CLASSIFIED MATERIAL OR INFORMATION

a. Control and Safeguarding

Contractor personnel at MCTSSA are responsible for controlling and safeguarding classified material in their possession. Contractor personnel will be briefed by the Facility Security Officer (FSO) on the responsibility to safeguard classified material. In addition, all contractor personnel are invited to attend MCTSSA security briefings. In the event of a possible or actual loss or compromise of classified material, the on-site Contractor at MCTSSA will immediately report the incident to the MCTSSA Security Manager and the Contractor’s FSO. A MCTSSA representative will investigate the circumstances, determine culpability when possible, and report the results to the FSO and the Cognizant Field Office of the Defense Security Service (DSS). On-site contractor personnel will promptly correct any deficient security conditions identified by the MCTSSA representative.

b. Storage

Classified material may be stored in containers authorized by the MCTSSA Security Manager. The MCTSSA Commanding Officer must preapprove, in writing, the use of open areas for storage or for the processing of classified material.

The MCTSSA Security Manager will provide specific supplemental security controls for open storage areas, when required.

c. Transmission of Classified Material

i. All classified material transmitted by registered mail for use by long-term visitors will be addressed to COMMANDING OFFICER, MCTSSA, ATTN: CMCC, Box 555171, CAMP PENDLETON, CA 92055-5171. The inner envelope will be addressed to the attention of the COR/Government Technical Lead for this contract.

ii. All classified material hand carried to MCTSSA by contractor personnel must be delivered to the MCTSSA Classified Material Control Center (CMCC).

iii. All MCTSSA classified material transmitted by contractor personnel from MCTSSA will be sent via the MCTSSA CMCC.

d. Information Systems (IS) Security

Contractors using IS networks, or computer resources to process classified, sensitive unclassified, or unclassified information will comply with the provisions of the NISPOM and SECNAVINST 5239.2 and local policies and procedures. Contractor personnel must contact the Information System Security Officer (ISSO) to ensure the systems used at MCTSSA have been granted a formal letter of approval to operate.

3. VISITOR CONTROL PROCEDURES

a. Contractor personnel assigned to MCTSSA will be considered long-term visitors for the purpose of this contract.

b. Per DoD Memorandum dated April 1, 2005, Subject: Facilitating Classified Visits within the Department of Defense and the National Industrial Security Program Operating Manual (NISPOM), as amended by Industrial Security Letter (ISL) 02-X, mandates industry use of Joint Personnel Adjudication System (JPAS). JPAS Industry Sub Committee Doc 004 Rev 000; all Contractors under DoD security cognizance will use JPAS for all personnel security actions. You must request a JPAS account within 90 days after the contract has been awarded. Prior to setting up a JPAS account, visit requests to activities shall have need to know certified by the MCTSSA COR/Government Technical Lead. All requests shall contain the information required by the NISPOM and shall not exceed a 12-month period. Visit notifications may be sent via JPAS to the MCTSSA Security Management Office (SMO) number 304256.

c. Visit requests for long-term visitors must be received prior to the expected arrival of the visitor to ensure necessary processing of the request.

d. MCTSSA security personnel will issue temporary identification badges to contractor personnel following receipt of a valid JPAS Visit Notification from the contractor’s security office. The Government may request that picture badges be issued for the length of the basic contract or option period.

Identification badges are the property of the U.S. Government and will be worn and used for official business only. Unauthorized use of a MCTSSA badge will be reported to the DSS. Identification badges will be worn above the waist in plain sight at all times at MCTSSA.

e. Prior to departing MCTSSA (after official business has concluded) contractor personnel will check-out with MCTSSA security personnel. The check-out process will ensure security-related items issued to contractor personnel are retrieved.

f. Foreign nationals may only visit MCTSSA by complying with the authorized methods set forth within:

i. SECNAVINST 5510.34

ii. Foreign Clearance Guide at https://www.fcg.pentagon.mil

g. Prior to the termination of a contractor employee with a MCTSSA badge or active visit notification on file, the FSO must:

i. Notify the MCTSSA Security Manager, COR, and Government Technical Lead in writing, that the contractor employee is being terminated. In emergency situations, a facsimile or telephone notification may be used. The telephone notification must be followed up within five working days, in writing.

ii. Confiscate any MCTSSA identification/access badges and return them to the MCTSSA Security Officer no later than five working days after the effective date of termination.

4. PHOTOGRAPHY/RECORDING CONTROL

No photography, video, or audio recordings are authorized aboard or around the MCTSSA compound without the written permission of the Commanding Officer or their representative. If there is an official requirement for any photography, video, or audio recordings, the MCTSSA COR/Government Technical Lead will submit the MCTSSA Photography/Recording Request form to the MCTSSA Security Manager, via the CMCC, building 31337.

5. INSPECTIONS

MCTSSA security personnel will conduct periodic inspections of the security practices of the on-site Contractor. All contractor personnel will cooperate with MCTSSA security representatives during these inspections. The Contractor will be responsive to the MCTSSA security representative’s findings.

6. REPORTS

As documented by the NISPOM (Chapter 1 – Section 3), Contractors are required to report events impacting the status of the facility clearance (FCL), the status of an employee’s personnel clearance (PCL), the proper safeguarding of classified information, or an indication that classified information has been lost or compromised. The Contractor will ensure that information pertaining to assigned contractor personnel or operations is reported to the MCTSSA Security Manager, COR, and Government Technical Lead.

This reporting will include the following:

a. The denial, suspension, or revocation of security clearance of any assigned personnel.

b. Any adverse information that would cast doubt on an assigned employee’s suitability for continued access to classified materials.

c. Any instance of loss or compromise, or suspected loss or compromise, of classified information.

d. Actual, probable, or possible espionage, sabotage, or subversive information.

e. Any other circumstances relating to security that would affect contractor operations at MCTSSA.

7. PHYSICAL SECURITY

a. The Contractor will comply with all emergency rules and procedures established for MCTSSA.

b. All personnel onboard MCTSSA and Marine Corps Base Camp Pendleton are subject to random inspections of their vehicles, personal items and of themselves. Consent to these inspections is given when personnel enter Camp Pendleton.

8. ITEMS PROHIBITED ONBOARD MCTSSA

a. Dangerous weapons, instruments, or devices including, but not limited to, the following:

i. Rifles, automatic rifles, machine guns, submachine guns, pistols, machine pistols, flare pistols, starter pistols, shotguns, compressed gas, air or spring fired pellet or BB guns, sling shots, blow guns, or any other device which uses gun powder, compressed gas or air, or spring tension to forcefully eject a projective or other device that could cause injury.

ii. Daggers, switchblades, bow and arrows, spear guns, Hawaiian slings, power heads, fishing knives, scuba knives, or knifes with a blade longer than 2.5 inches.

iii. Martial arts devices (throwing stars, nunchakus), stun guns, Tasers, brass knuckles, billy clubs, night sticks, pipes, bars, mallets, or other similar devices capable of being used as a weapon.

iv. Poison, acids, caustic chemicals, or items not specifically authorized by a proper authority that may be used to inflict serious injury or death to another person or temporarily blind, disable, or cause individual injury.

b. Explosive articles or compounds including, but not limited to, ammunition for small arms weapons mentioned as dangerous weapons, including blank ammunition, gun powder, Molotov cocktails, pipe bombs, grenades, pyrotechnics, fireworks, or any other compound or article which might violently react and cause injury not specifically authorized by proper authority.

9. ESCORTING POLICY

All personnel within the MCTSSA fenced perimeter, with the exception of emergency personnel, such as fire, ambulance, or hazardous materials responding to an emergency, must wear a MCTSSA issued badge. Personnel without the required security clearance require a MCTSSA escort at all times.

10. COMMON ACCESS CARD (CAC) REQUIREMENT

The COR will identify and approve contractor employees that require a CAC to perform their job. In accordance with Headquarters, United States Marine Corps issued guidance relative to Homeland Security Presidential Directive – 12 (HSPD- 12), all personnel must meet eligibility criteria to be issued a CAC. To meet the eligibility criteria, contractor employees requiring a CAC must obtain and maintain a favorably adjudicated Personnel Security Investigation (PSI). Prior to authorizing a CAC, the employee’s JPAS record must indicate a completed and favorably adjudicated PSI or (at a minimum) that a PSI has been submitted and accepted (opened). The minimum acceptable investigation is a National Agency Check with Written Inquiries (NACI). If a contractor employee’s open investigation closes and is not favorably adjudicated, the CAC must be immediately retrieved and revoked.

The FSO is responsible for notifying the MARCORSYSCOM Security Director if any Contractor on this contract receives an unfavorable adjudication after being issued a CAC. The FSO must also notify the MARCORSYSCOM Security Director of any adverse or derogatory information associated with the 13 Adjudicative Guidelines/Factors concerning any Contractor issued a CAC, regardless of whether a JPAS Incident Report is submitted.

Each CAC is issued with a ctr.usmc.mil e-mail account the individual Contractor must keep active by logging in on a regular basis (at least twice a month), sending an e-mail, and clearing unnecessary e-mails. Contractors are prohibited from auto-forwarding .mil e-mail to a personal .com account. If the ctr.usmc.mil e-mail account is not kept active, the S-6 will deactivate the account and the CAC will lose its functionality.

CACs will only be issued to Contractors authorized by the COR. If a Contractor loses eligibility for a CAC due to an adverse adjudicative decision, they also lose eligibility to work on MCTSSA contracts. CACs are not issued for convenience.

The CAC and MCTSSA access badge must be returned to the COR, Government Technical Lead, or MCTSSA Security representative prior to leaving the compound on the last business day of the contract, upon the expiration of the CAC, or in the event of a contractor employee resigning or being fired.