N00178-16-T-0053__DD254.pdf

1. CLEARANCE AND SAFEGUARDING

DEPARTMENT OF DEFENSE a. FACILITY CLEARANCE REQUIRED

CONTRACT SECURITY CLASSIFICATION SPECIFICATION SECRET

(The requirements of the DoD Industrial Security Manual apply

b. LEVEL OF SAFEGUARDING REQUIRED to all security aspects of this effort.)

NONE

2. THIS SPECIFICA TlON IS FOR: (X and complete as applicable) 3. THIS SPECIFICATION IS: (X and complete as applicable) x a . PRIME CONTRACT NUMBER x DATE (YYYYMMDD)

BIDDING 009-16 a. ORIGINAL (Complete date in all cases) 20 160 129

b. SUBCONTRACT NUMBER b. REVISED I REVISION NO. DATE (YYYYMMDD)

(Supersedes all previous specs) c . SOLICITATION OR OTHER NUMBER DUE DATE (YYYYMMDD) DATE (YYYYMMDD)

c. FINAL (Complete Item 5 in all cases)

4. IS THIS A FOLLOW-ON CONTRACT? __jYES LlLl NO. If Yes, complete the following:

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? L_jYES LlLl NO. If Yes, complete the following:

In response to the contracto~s request dated . retention of the dassified material is authorized for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code) a . NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c . COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

8. ACTUAL PERFORMANCE

a. LOCATION b. CAGE CODE c . COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

NSWC DAHLGREN DIVISION

DAI I LG REN, VA

9. GENERAL IDENTIFICA TlON OF THIS PROCUREMENT

The procurement is for consulting services regard to setting up a Real Time Innovations (RTI) Conext Data Distribution Services (DDS) at the

Naval Surface Warfare Center Dahlgren VA. No classified data will be exchanged, viewed or stored .

10. CONTRACTOR WILL REQUIRE ACCESS TO: YES NO 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR Will: YES NO a COMMUNICATIONS SECURITY (COMSEC) INFORMATION x 8 ffiN1R'X~f8~·s uFACILITY OR ii'Mile'ifNMENfl~bti~lfY'""'' ,"" x b RESTRICTED DATA x b RECEIVE CLASSIFIED DOCUMENTS ONLY x c CRITICAL NUCLEAR 'MOAPON DESIGN INFORMATION x c RECEIVE AND GENERA TE CLASSIFIED MATERIAL x d FORMERLY RESTRICTED DATA x d FABRICATE. MODIFY, OR STORE CLASSIFIED HARDWARE x e INTELLIGENCE INFORMATION e PERFORM SERV1CES ONLY x

(1) Sen51bve Compartmented lnfOfmabon (SCI) x 1 ~Oir~f6'~fc"8. TPsu~~~~1~~ ANDvfR'us'i1<t~~Mt~~1~s"" us · x

(2) Non-SCI x g ~~~·H:'RID'l'rt'i'6~uo¥~~R sf:mNDARY 8i~t'FfiefH~' CEN'terr~ ""'V"MA' IVl'I x f SPECIAL ACCESS INFORMATION x h REQUIRE A COMSEC ACCOUNT x g NATO INFORMATION x I HAVE TEMPEST REQUIREMENTS x h FOREIGN GOVERNMENT INFORMATION x j HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS x i LIMITED DISSEMINATION INFORMATION x k BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE x J FOR OFFICIAL USE ONLY INFORMATION x I. OTHER (Specify)

k. OTHER (Specify/ x

(I) Pll

DD FORM 254, DEC 1999 PREVIOUS EDITION IS OBSOLETE. Adobe Professional 7 O

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release C=:J Direct ~ Through (Specify)

NSWC Dahlgren Division (Code V33) 172 14 Avenue B; Suite 129 Dahlgren, VA 22448-5147

NSWC Dahlgren Division (Code 103) 6 149 Welsh Road; Suite 239 Dahlgren, VA 22448-5 130 to the Directorate for Freedom of Information and Security Review. Office of the Assistant Secretary of Defense (Public Affairs)* for review.

'In the case of non-DoD User Agencies. requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security dass~ication guidance needed for this dass~ied effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of class~ication assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

( I) National Industrial Security Program Operating Manual (NISPOM) March 2013, applies to this contract.

(2) The contractor is not authorized to release any data to foreign nationals or foreign representatives without an approved export license.

(3) This DD-254 is for solicitation purposes only. It must be returned to NSWCDD to be updated with a contract number and a

Contractor's name when a contractor is selected for this contract.

(4) Block I l e: Services to be performed include consulting services regarding the set-up ofa Real Time Innovations (RTJ) Conext

Data Distribution System (DDS).

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract.

(If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

Yes X No

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. Yes X No (If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL b. TITLE c. TELEPHONE (Include Area Code)

KELLY L. RALEY SECURITY CONTRACTING OFFICER (540) 653-6595

d. ADDRESS (Include Zip Code) 17. REQUIRED DISTRIBUTION

NSWC DAI ILGREN DIVISION X a CONTRACTOR

19008 WAYSIDE DRIVE; SUITE 341 (CODE I 05) b SUBCONTRACTOR t-D_A-:-::-:11-:oL.,.-G,.,.RE-=-' N...,......., _v_A_2_2_4_4_8_-5_1_6_o _______________ _.__:_.:._i c COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR d US ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION e ADMINISTRATIVE CONTRACTING OFFICER f OTHERS AS NECESSARY

CONTINUATION - DD FORM 254 BLOCK 13

Bidding 009-16

UNCLASSIFIED

BLOCK 13 CONTINUATION STATEMENTS:

1. CLASSIFIED OR UNCLASSIFIED TECHNICAL PAPERS TO BE PRESENTED AT A

CLASSIFIED SYMPOSIUM MUST BE APPROVED BY THE NSWCDL CONTRACTING

OFFICER'S REPRESENTATIVE PRIOR TO THE PRESENTATION.

2. SECURITY CLASSIFICATION GUIDES (SCG's) AND UNCLASSIFIED LIMITED

DOCUMENTS (E.G., FOUO, DISTRIBUTION STATEMENT CONTROLLED) ARE

NOT AUTHORIZED FOR PUBLIC RELEASE; THEREFORE, THEY CAN NOT BE

POSTED ON A PUBLICLY ACCESSIBLE WEB SERVER OR TRANSMITTED OVER THE

INTERNET UNLESS APPROPRIATELY ENCRYPTED. REQUEST FOR PUBLIC RELEASE

CAN NOT BE TRANSMITTED VIA THE INTERNET UNTIL THE

CONTRACTOR RECEIVES FINAL APPROVAL FROM THE COR.

3. ALL CONTRACTOR REQUESTS FOR SHARING OF CLASSIFIED AND OTHER

SENSITIVE INFORMATION BETWEEN PRIME CONTRACTS MUST BE FORWARDED IN

WRITING TO THE NSWCDL SECURITY OFFICE POC IDENTIFIED IN BLOCK 16 OF THIS

FORM FOR APPROVAL.

UNCLASSIFIED

CONTINUATION - 00254 FORM 254 ITEM 13

Bidding 009-16

NO-INTELLIGENCE - CONTINUATION SHEET - DD FORM 254 (revised 28 Feb 2013)

Controlled Unclassified Information (CUI) such as FOUO, Security Classification Guides (SCG), and other information with Distribution Statements B thru F, are not authorized for public release and cannot be placed on a publicly accessible web site or web server. All emails containing such information or attachments must be appropriately marked, and digitally signed and encrypted if being transmitted within Navy networks, or outside a Navy network to an approved contractor email address. All transmissions to personal email accounts (AOL, Yahoo, Hotmail, Comcast, etc.) are prohibited.

Distribution statements for classified documents will be determined by the Security Classification Guide used to mark the document.

All technical data provided to the contractor by the government will be protected from public disclosure in accordance with the markings contained thereon. All other information relating to the items to be delivered or services to be performed under this contract may not be disclosed by any means without prior approval of the authorized representative of the contracting officer.

Dissemination or public disclosure includes, but is not limited to, permitting access to such information by foreign nationals or by any other person or entity; publication of technical or scientific papers; advertising; or any other proposed public release. The contractor shall provide adequate physical protection to such information as to preclude access by any person or entity not authorized such access by the government.

Due to the sensitivity of this program, no classified material received or generated under this contract will be transferred to any other contractor or agency without the approval of the Contracting Officer or Contracting Officer's Representative (COR).

Information on this contract is not releasable to personnel possessing limited (reciprocal) clearances without the written approval of NSWCDD.

All visit requests for contractor personnel visiting NSWCDL shall be sent through the Joint Personnel Adjudication System (JPAS), under SMO code 001785 for GENSER and 001783 for SCI.

Visit requests for Contractor Personnel not submitted via JPAS shall be faxed to the COR, TPOC or the respective department administrative office no later than five (5) working days prior to the intended visit for NEED-TO-KNOW certification. All requests shall contain the information required by Chapter 6, NISPOM, and shall not exceed 12 months.

Visit requests for subcontractors to other activities will have a NEED-TO-KNOW certified by the prime contractor.

Any material produced under the terms of this contract will be classified directly from the source document(s) from which it was obtained. It will be marked with the most restrictive downgrading/declassification statement contained in such documents.

CONTINUATION - DD FORM 254 ITEM 13

Bidding 009-16

FOR OFFICIAL USE ONLY (FOUO ADDENDUM) (updated 29 Nov 2012)

The following procedures will be used to protect FOR OFFICIAL USE ONLY (FOUO) material:

l. HANDLING: Access to FOUO material shall be limited to those employees needing the material to do their jobs. The FOUO marking is assigned to material created by a DoD user agency. FOUO is not a classification, but requires extra precaution to insure it is not released to the public.

2. MARKING: Mark unclassified documents containing FOUO "FOR OFFICIAL USE ONLY" at the bottom of each page and the back cover (if any). In a classified document, mark:

a. An individual paragraph that contains FOUO, but not classified material, by placing "FOUO" at the beginning of the paragraph.

b. The top and bottom of each page that has both FOUO and classified material with the highest security classification of the material on that page.

c. "FOUO" at the bottom of each page that has· FOUO but not classified material.

d. If a classified document also contains FOUO material or if the classified material becomes FOUO when declassified, place the following statement on the bottom of the cover or the first page under the classification marking:

"NOTE: If declassified, review the document to make sure material is not FOUO before public release."

e. Mark other records such as computer print outs, photographs, films, tapes, or slides" FOR OFFICIAL USE ONLY" so the receiver or viewer know the record contains FOUO material.

f. Mark each part of a message that contains FOUO material. Unclassified messages containing FOUO material must show the abbreviation "FOUO" before the text begins.

g. Insure documents that transmit FOUO material call attention to any FOUO attachments.

h. FOUO material released to a contractor by a DoD user agency must have the following statement on the front page or cover: "THIS DOCUMENT

CONTAINS MATERIAL EXEMPT FROM MANDATORY DISCLOSURE UNDER

THE FREEDOM OF INFORMATION ACT."

3. FOUO STORAGE: During normal duty hours, place FOUO material in an out-of-sight location if your work area is accessible to persons who do not have a valid need for the material. After normal duty hours, store FOUO material to prevent unauthorized access. File with other unclassified records in unlocked files or desk when internal building security is provided. When there is not internal security, locked buildings or rooms usually provide adequate after-hours protection. For additional protection, store FOUO material in locked containers such as file cabinets, desk or bookcases. Expenditure of funds for security container solely for the protection of FOUO material is prohibited.

4 . TRANSMISSION: FOUO material shall be transmitted via U.S. Postal Service First Class mail or standard mail for bulk shipments. Electronic transmissions of FOUO information (i.e. voice, data, facsimile) shall be by approved secure communications

CONTINUATION - DD FORM 254 ITEM 13

Bidding 009-16 system whenever practical. All means used shall preclude unauthorized public disclosure.

5. RELEASE: FOUO information may be disseminated within the DoD components and between officials of the DoD components, cleared DoD contractors, consultants, and grantees in the conduct of official business for the DoD and DON provided that dissemination is not further controlled by a distribution statements (per NAVSEA M-5510.36 Jun 2006).

6. DESTRUCTION: Per the NA VS EA ALL-SHRED POLICY, SER 09P /103 of 7 May 2012, FOUO material shall be destroyed by using one of the following approved options:

a . any cross-cut paper shredder,

b. an authorized commercial shredding company,

c. a central destruction facility, or

d. incineration.

CONTINUATION - 00254 ITEM 13

Bidding 009-16

UNCLASSIFIED

PERSONALLY IDENTIFIABLE INFORMATION (PII ADDENDUM)

(Revised 20130103)

The following procedures will be used to protect PERSONALLY IDENTIFIABLE INFORMATION (Pll) material:

1. What is Personally Identifiable Information (PU): Pll is defined in NSWCDDINST 5211.lD, "Privacy Act Program," 18 Mar 2011 as: Information about an individual that identifies, links, relates, or is unique to, or describes him or her, e.g., a social security number; age; military rank; civilian grade; marital status; race; salary;

home phone numbers; other demographic, biometric, personnel, medical, and financial information, etc.

2. HANDLING: Personal information shall be collected, maintained, used and/or disclosed to ensure that it is relevant and necessary to accomplish a lawful DON/DOD purpose. Only collect, maintain and use Pll needed to support official business.

3. MARKING: Any document, whether it's a paper document, electronic file, etc. that contains PII should be marked: "FOUO Privacy Sensitive". This marking applies to but is not limited to : e-mails, spreadsheets, reports, electronic records, etc... The Privacy Act Data Cover Sheet (Form DD 2923) should always be used when any Pll information is being stored or hand-car~ied.

4. Pll STORAGE: During normal duty hours, place Pll material in an out-of-sight location if your work area is accessible to persons who do not have a valid need for the material. After normal duty hours, store Pll material to prevent unauthorized access. File with other controll ed unclassified information (CUI) records in locked files or desks.

5. TRANSMISSION: PI! material should always be safeguarded and should only be transmitted by secure means. If Pll is to be e-mailed, ensure the file is encrypted, password or otherwise protected, and properly marked. If Pll is to be sent via mail, ensure the material has the appropriate cover sheet (Form DD 2923) and is appropriately packaged to avoid inadvertent disclosure or a breach.

6. DESTRUCTION: When no longer needed, PII material shall be destroyed in accordance with the SECNAV M-5210.1, January 2012, Department of the Navy Records Management Program.

UN CLASSIFIED