Att_(16)_DD254_08_Sept_2016.pdf

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort.)

1. CLEARANCE AND SAFEGUARDING

a. FACILITY CLEARANCE REQUIRED

SECRET

b. LEVEL OF SAFEGUARDING REQUIRED

SECRET

2. THIS SPECIFICATION IS FOR: (X and complete as applicable) 3. THIS SPECIFICATION IS: (x and complete as applicable)

a. PRIME CONTRACT NUMBER

X

a. ORIGINAL (Complete date in all cases) Date (YYYYMMDD)

FOR BIDDING PURPOSES ONLY

NOT VALID FOR PERFORMANCE

20160908

b. SUBCONTRACT NUMBER

b. REVISED (Supersedes all previous specs) Revision No. Date (YYYYMMDD)

N/A

c. SOLICITATION OR OTHER NUMBER Due Date (YYYYMMDD)

c. FINAL (Complete Item 5 in all cases) Date (YYYYMMDD)

N00019-16-R-3001

4. IS THIS A FOLLOW-ON CONTRACT? YES X NO If Yes, complete the following:

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract)

5. IS THIS A FINAL DD FORM 254? YES X NO If Yes, complete the following:

In response to the contractor’s request dated retention of the identified classified material is authorized for the period of .

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

FOR BIDDING PURPOSES ONLY

NOT VALID FOR PERFORMANCE

Defense Security Services (DSS)

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

8. ACTUAL PERFORMANCE

a. LOCATION b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

Defense Security Services

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

Request for Proposal is for the effort required to manufacture, test, deliver, manager and support AN/SRQ-4 (KU) Radio Terminal Sets (RTSs), for ship small surface

TPOC: Francisco Fernandez, 4.11.3.5, (301)757-5308

10. THIS CONTRACT WILL REQUIRE ACCESS TO: YES NO 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION

X

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER CONTRACTOR’S

FACILITY OR A GOVERNMENT ACTIVITY X

b. RESTRICTED DATA

X

b. RECEIVE CLASSIFIED DOCUMENTS ONLY

X

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION

X

c. RECEIVE AND GENERATE CLASSIFIED MATERIAL

X

d. FORMERLY RESTRICTED DATA

X

d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. INTELLIGENCE INFORMATION

e. PERFORM SERVICES ONLY

(1) Sensitive Compartmented Information (SCI)

X

f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S

PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES X

(2) Non-SCI

X

g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL INFORMATION

CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER X

f. SPECIAL ACCESS INFORMATION

X

h. REQUIRE A COMSEC ACCOUNT

X

g. NATO INFORMATION

X

i. HAVE TEMPEST REQUIREMENTS

X

h. FOREIGN GOVERNMENT INFORMATION

X

j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

X

i. LIMITED DISSEMINATION INFORMATION

X

k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

X

j. FOR OFFICIAL USE ONLY INFORMATION

l. OTHER (SPECIFY)

OTHER (Specify) STE and Secure Fax Access

Authorized

DD FORM 254, DEC 1999 PREVIOUS EDITIONS ARE OBSOLETE

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to the contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public release shall be submitted for approval prior to release.

Direct Through (Specify)

Transmission by non-secure facsimile or unencrypted E-mail is NOT authorized (by Prime or sub contractor(s))

Commander, PMA-299 (ATTN : PAO) Bldg. 2272 Suite 154, 47123 Buse Road, Patuxent River, MD 20670 -

NAVAIR FORM 572011 must be completed and attached.

to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosures shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract, and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort.

Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

- Technical papers, briefings, presentations, either classified or unclassified to be presented at classified symposia must be submitted to AIR-7.4.3 for approval prior to presentation. Unclassified material submitted for public release (that is not to be presented at classified symposia) shall be forwarded for review prior to release as stated in item 12 above. Transmission by non-secure facsimile of technical papers, briefings or presentations is NOT authorized.

-Visit requests shall have “need to know” certified by the TPOC listed in block 9. All visit requests to Military Installations for classified or unclassified visits from subcontractors will be sent via the prime contractor who will certify the need-to know.

If additional security classification is required, contact the COSR.

10.a & 11.h: Classified COMSEC material is not releasable to contractor employees who have not received a FINAL Clearance at the appropriate security level. Cryptologic Keying materials and Controlled Cryptographic Items (CCI) are controlled by Department of the Navy, NISPOM, and National Security Agency (NSA) guidelines. COMSEC information and materials are subject to the controls of and restrictions specified in the National Security Agency NSA/CSS Policy Manual, 3-

16. When access is required at government facilities, contractor personnel will adhere to COMSEC rules and regulations as mandated by EKMS 1A (or applicable series) and command policy and procedures. Written concurrence of the Contracting Officer’s Security Representative (COSR) is required prior to subcontracting.

10.j: For Official Use Only information generated and/or provided under this contract shall be marked and safeguarded as specified in DoD 5200.1-R Vol. 4, Information Security Regulation Enclosure 3 (specifically pages 11-17) available at http://www.dtic.mil/whs/directives/corres/pdf/520001_vol4.pdf and DoD 5400.7-R, Freedom of Information Program Chapter 3 (pages 31-42) available at http://www.dtic.mil/whs/directives/corres/pdf/540007r.pdf All For Official Use Only (FOUO) and program sensitive data transmitted and stored via electronic means shall use approved encryption. The contractor shall ensure that when transmitting FOUO that the transmissions are encrypted using Department of Defense Public Key Infrastructure (PKI), or an approved DoD External Certificate Authority, IAW Public Key Infrastructure & Public Key Enabling, DoDI 8520.02

See Additional Data Sheet of this DD Form 254 for additional Security Guidance

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract. (if Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identified the additional requirements. Provide a copy of the requirements to the cognizant security office. Use item 13 if additional space is needed.)

X Yes No

OPSEC CDRL in contract

15. INSPECTIONS: Elements of this contract are outside the inspection responsibility of the cognizant security office. (If Yes, explain and identify specific areas of elements carved out and the activity responsible for inspection. Use item 13 if additional space is needed.)

Yes X No

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL b. TITLE c. TELEPHONE (Include Area Code)

Andra King

Contracting Officer’s Security Representative

(COSR)

301-757-6580

d. Address (Include Zip Code) 17. REQUIRED DISTRIBUTION

Program Executive Officer (A) Attn: PMA 290 Bldg 2185, Rm 3190 Att: A.King, P-8A Program Security Manager 22347 Cedar Point Road Patuxent River, MD 20670

X a. CONTRACTOR b SUBCONTRACTOR.

X c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

SIGNATURE d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER

X f. OTHERS AS NECESSARY (See Item 13 Above) COR, TPOC

DD FORM 254 (BACK), DEC 1999

http://www.dtic.mil/whs/directives/corres/pdf/520001_vol4.pdf http://www.dtic.mil/whs/directives/corres/pdf/540007r.pdf

ADDITIONAL DATA SHEET FOR DD254 –– N00019-16-R-3001 PAGE 3____

10.k: Use of Secure Terminal Equipment (STE) for transmission of classified U.S. Government information is authorized.

Secure Facsimile: Receipt and transmission of classified information is authorized. Secret Internet Protocol Network (SIPRnet) access authorized. Written concurrence of the Technical Point of Contact/Contracting Officer Representative is required prior to subcontracting.

11.c – Classification guidance and all updates will be provided to the contractor. If additional classification guidance is required, contact the COSR identified in Block 16.

Contractor is required to be in compliance with the latest edition of or update to the following Security Classification

Guides including the latest edition of or update to all references within these guides:

02-235.02 MH-60R Multi-Mission Helicopter, dated 11 April 2013

USAF Anti-Tamper Security Classification Guide, dated 17 Mar 2010 (to include Change 1 and Change 2)

Change 1, dated 18 April 2011 and Change 2, dated 19 May 2014

If additional security/classification is required, contact the COSR

11.g: The contractor is authorized to use DTIC To use DTIC services, the contractor must register for an account at http://www.dtic.mil/dtic/registration/contractors/index.html.

11.i: TEMPEST information is not releasable to contractor employees who have not received a final security clearance at the appropriate level. The TEMPEST Requirements Questionnaire shall be submitted to the SPAWAR TEMPEST IPT in accordance with OPNAVINST C5510.93F, Navy Implementation of National Policy on Control of Compromising Emanations.

Written concurrence of the Contracting Officer’s Security Representative (COSR) is required prior to subcontracting.

11.j: OPSEC: The contractor shall develop, implement and maintain a facility level OPSEC program to protect critical information to be used at the contractor facility during the performance of this contract. Contract Data Requirements List (CDRL) and data item description (DID-DI-MGMT-80934C) are component of the contract. A draft OPSEC Plan must be submitted to the Program Office for which this contract is in support of within 90 days of contract award. A Final OPSEC Plan is due 45 days from the date that the draft OPSEC Plan is approved. The Contractor shall be responsible for the subcontractor implementation of the OPSEC requirements. While performing aboard NAVAIR or other U.S. military sites, the contractor shall comply with the provisions of OPNAVINST 3432.1, the local Command/Facility 3432 Instruction Series (OPSEC) as well as any procedures identified in Program Specific Operations Security Plans, and Program Protection Plans (PPP) as applicable. The contractor shall comply with any and all additional OPSEC security plans and requirements of the Hosting Command.

*************************************END OF ADDITIONAL DATA SHEET FOR DD FORM 254**********************************

DD FORM 254 DEC 1999

http://www.dtic.mil/dtic/registration/contractors/index.html