0608-01_-_VariGen_Simulator_-_Bidding_DD254.pdf

1. CLEARANCE AND SAFEGUARDING

DEPARTMENT OF DEFENSE a. FACILITY CLEARANCE REQUIRED

CONTRACT SECURITY CLASSIFICATION SPECIFICATION SECRET

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort.)

b. LEVEL OF SAFEGUARDING REQUIRED

NONE

2. THIS SPECIFICATION IS FOR: (X and complete as appHcable) 3. THIS SPECIFICATION IS: (X and complete as appHcable) x a. PRIME CONTRACT NUMBER x DATE (YYYYMMOO)

BIDDlNG 021-1 6 a. ORIGINAL (Complete date in all cases) 20160622 b . SUBCONTRACT NUMBER b. REVISED I REVISION NO. DATE (YYYYMMOO) (Supersedes all previous specs)

c. SOLICITATION OR OTHER NUMBER DUE DATE (YYYYMMDO)

c. FINAL (Complete Item 5 in all cases)

DATE (YYYYMMOD)

4. IS THIS A FOLLOW-ON CONTRACT? __j YES L_jNO. If Yes, complete the following :

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? L_j YES L_j NO. If Yes, complete the following:

In response to the contractor's request dated , retention of the classified material is authorized for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

Varilog Research, Inc. 9T345 Defense Security Service ( IOFCL2)

5020 Sunnyside Avenue 7556 Teague Road

Suite 203 5th Floor

Beltsville, MD 20705 Hanover. MD 2 1076

7. SUBCONTRACTOR -

a. NAME, ADDRESS, AND ZIP CODE b. CAGE cooir: ~llZnrwJT IA ~IOlll~~ 'IDf Pf(!

''"'""" -- -- """" --·- - ., , ~· t -..,, ., SOLE SOURCE p JRPOSES ONLY. AN ORIGINAL DD 254 fi " ILL BE ISSUED UPON AWARD OF c ONTRACT.

8. ACTUAL PERFORMANCE

a. LOCATION b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

Surface Combat Systems Center (SCSC)

Wallops I sland, VA

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

Installation, check-out, and training of the the AN/ SLQ-32(V)6 Electronic Warfare system VariGen simulator at SCSC Wallops Island, VA

10. CONTRACTOR WILL REQUIRE ACCESS TO: YES NO 11 . IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION x a. co~'tR'kff8~·$ UFXb'i'LIWo~ AG6'VER~NM'ENf'~~ri'VliY""'' ,"n x

b. RESTRICTED DATA x b. RECEIVE CLASSIFIED DOCUMENTS ONLY x

c. CRITICAL NUCLEAR ~PON DESIGN INFORMATION x c. RECEIVE AND GENERATE CLASSIFIED MATERIAL x

d. FORMERLY RESTRICTED DATA x d FABRICATE. MODIFY. OR STORE CLASSIFIED HARDWARE x a INTELLIGENCE INFORMATION a PERFORM SERVICES ONLY x

(1) Sensrtive Compartmented Information (SCI) x 1. ~o~~f'6~rd'6. T?s~~~~~~I&~~ .*fo TRUST l-'E~~1ToR'iEs"" u.s x

(2) Non-SCI x g 2~~fER0(cil'it'ioh0oY~~~'$~88~o'.K~r 8r~t'R'ie'EH~cfN CENTER

,.,.,...,,,m'"'''"''" x I. SPECIAL ACCESS INFORMATION h. REQUIRE A COMSEC ACCOUNT x

g. NATO INFORMATION x L HAVE TEMPEST REQUIREMENTS x

h. FOREIGN GOVERNMENT INFORMATION x J. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS x I, LIMITED DISSEMINATION INFORMATION x k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE x J, FOR OFFICIAL USE ONLY INFORMATION x I. OTHER {Specify) x

k. OTHER (Specify) x

PII

DD FORM 254, DEC 1999 PREVIOUS EDITIO N IS OBSOLETE. Adobe Professi onal X

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release CJ Direct CJ Through (Specify)

NONE AUTHORIZED

to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)" for review.

•1n the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security ciass~ication guidance needed for this classified effort is identified below. If any d~iculty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the class~ication assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

(!) National Industrial Security Operational Manual (NISPOM), dated March 20 13 applies to this contract.

(2) The contractor is not authorized to release any data to foreign nationals or foreign representatives without an approved export license.

(3) Block I le: Contractor to provide installation, check-out, and training of the the AN/SLQ-32(V)6 Electronic Warfare system VariGen simulator at SCSC Wallops Island, VA.

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract. Yes X No (If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additiona requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. Yes X No (If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL b. TITLE c. TELEPHONE (Include Area Code)

KELLY L. RALEY SECURITY CONTRACTING OFFICER (540) 653-6595

d. ADDRESS (Include Zip Code) 17. REQUIRED DISTRIBUTION

NSWC Dahlgren Division X a. CONTRACTOR

19008 Wayside Drive; Suite 341 (Code 105) b. SUBCONTRACTOR t-D_ah-::J'=re".-:nr.:,:::-V-:-::A:21r_2,,,24 ... 4=g-· ... s_1..,.6 ... 1.::::::=::....,,.---------------+-.C......:~ c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER

I. OTHERS AS NECESSARY

CONTINUATION - DD FORM 254BLOCK13

Bidding 021-16

UNCLASSIFIED

BLOCK 13 CONTINUATION STATEMENTS:

1. CLASSIFIED OR UNCLASSIFIED TECHNICAL PAPERS TO BE PRESENTED AT A

CLASSIFIED SYMPOSIUM MUST BE APPROVED BY THE NSWCDL CONTRACTING

OFFICER'S REPRESENTATIVE PRIOR TO THE PRESENTATION.

2. SECURITY CLASSIFICATION GUIDES (SCG's) AND UNCLASSIFIED LIMITED

DOCUMENTS (E.G., FOUO, DISTRIBUTION STATEMENT CONTROLLED) ARE

NOT AUTHORIZED FOR PUBLIC RELEASE; THEREFORE, THEY CAN NOT BE

POSTED ON A PUBLICLY ACCESSIBLE WEB SERVER OR TRANSMITTED OVER THE

INTERNET UNLESS APPROPRIATELY ENCRYPTED. REQUEST FOR PUBLIC RELEASE

CAN NOT BE TRANSMITTED VIA THE INTERNET UNTIL THE

CONTRACTOR RECEIVES FINAL APPROVAL FROM THE COR.

3. ALL CONTRACTOR REQUESTS FOR SHARING OF CLASSIFIED AND OTHER

SENSITIVE INFORMATION BETWEEN PRIME CONTRACTS MUST BE FORWARDED IN

WRITING TO THE NSWCDL SECURITY OFFICE POC IDENTIFIED IN BLOCK 16 OF THIS

FORM FOR APPROVAL.

UNCLASSIFIED

CONTINUATION- DD254 FORM 254 ITEM 13

Bidding 02 1-1 6

UNCLASSIFIED

NO-INTELLIGENCE ·CONTINUATION SHEET· DD FORM 254 (revised 28 Feb 2013)

Controlled Unclassified Information (CUI) such as FOUO, Security Classification Guides (SCG), and other information with Distribution Statements B thru F, are not authorized for public release and cannot be placed on a publicly accessible web site or web server. All emails containing such information or attachments must be appropriately marked, and digitally signed and encrypted if being transmitted within Navy networks, or outside a Navy network to an approved contractor email address. All transmissions to personal email accounts (AOL, Yahoo, Hotmail, Comcast, etc.) are prohibited.

Distribution statements for classified documents will be determined by the Security Classification Guide used to mark the document.

All technical data provided to the contractor by the government will be protected from public disclosure in accordance with the markings contained thereon. All other information relating to the items to be delivered or services to be performed under this contract may not be disclosed by any means without prior approval of the authorized representative of the contracting officer. Dissemination or public disclosure includes, but is not limited to, permitting access to such information by foreign nationals or by any other person or entity; publication of technical or scientific papers; advertising; or any other proposed public release. The contractor shall provide adequate physical protection to such information as to preclude access by any person or entity not authorized such access by the government.

Due to the sensitivity of this program, no classified material received or generated under this contract will be transferred to any other contractor or agency without the approval of the Contracting Officer or Contracting Officer's Representative (COR).

Information on this contract is not releasable to personnel possessing limited (reciprocal) clearances without the written approval of NSWCDD.

All visit requests for contractor personnel visiting NSWCDL shall be sent through the Joint Personnel Adjudication System (JPAS), under SMO code 001785 for GENSER and 001783 for SCI.

Visit requests for Contractor Personnel not submitted via JPAS shall be faxed to the COR, TPOC or the respective department administrative office no later than five (5) working days prior to the intended visit for NEED-TO-KNOW certification. All requests shall contain the information required by Chapter 6, NISPOM, and shall not exceed 12 months.

Visit requests for subcontractors to other activities will have a NEED-TO-KNOW certified by the prime contractor.

Any material produced under the terms of this contract will be classified directly from the source document(s) from which it was obtained. It will be marked with the most restrictive downgrading/declassification statement contained in such documents.

DD-254 Item 13 FOUO

UNCLASSIFIED

FOR OFFICIAL USE ONLY (FOUO)

DOOM 5200.01 , VOL IV

24 FEB 2012

1. HANDLING: Access to FOUO material shall be limited to those employees needing the material to do their jobs. The FOUO marking is assigned to material created by a DoD user agency. FOUO is not a classification, but requires extra precaution to insure it is not released to the public.

2. MARKING: Mark unclassified documents containing FOUO "FOR OFFICIAL USE ONLY" at the bottom of each page and the back cover (if any). In a classified document, mark:

a. An individual paragraph that contains FOUO, but not classified material, by placing "(U//FOUO)" at the beginning of the paragraph.

b. The top and bottom of each page that has both FOUO and classified material with the highest security classification of the material on that page.

c. "Unclassified//For Official Use Only" at the bottom of each page that has FOUO but not classified material.

d. When a classified document or portion thereof is declassified, FOUO markings may be applied, if applicable, to protect the information.

e. Mark other records such as computer print outs, photographs, films, tapes, or slides "FOR OFFICIAL USE ONLY" so the receiver or viewer know the record contains FOUO material.

f. Portion mark each part of a message that contains FOUO material. Unclassified messages containing FOUO material must show the abbreviation "(FOUO)" or "(U//FOUO)" before the text begins.

g. Insure documents that transmit FOUO material call attention to any FOUO attachments.

h. FOUO material released to a contractor by a DoD user agency must have the following statement on the front page or cover: "THIS DOCUMENT CONTAINS MATERIAL

EXEMPT FROM MANDATORY DISCLOSURE UNDER THE FREEDOM OF

INFORMATION ACT."

3. FOUO STORAGE: During normal duty hours, place FOUO material in an out-of-sight location if your work area is accessible to persons who do not have a valid need for the material. After normal duty hours, store FOUO material to prevent unauthorized access. File with other unclassified records in unlocked files or desk when internal building security is provided. When there is not internal security, locked buildings or rooms usually provide adequate after-hours protection. For additional protection, store FOUO material in locked containers such as file cabinets, desk or bookcases. Expenditure of funds for security container solely for the protection of FOUO material is prohibited.

4. TRANSMISSION: FOUO material shall be transmitted via U.S. Postal Service First Class mail or standard mail for bulk shipments. Electronic transmissions of FOUO information (i.e. voice, data, facsimile) shall be by approved secure communications system whenever practical. All means used shall preclude unauthorized public disclosure.

5. RELEASE: FOUO information may be disseminated within the DoD components and between officials of the DoD components, cleared DoD contractors, consultants, and grantees in the conduct of official business for the DoD and DON provided that dissemination is not further controlled by a distribution statements (per NAVSEA M-5510.36 Jun 2006).

6. DESTRUCTION: Per the NAVSEA ALL-SHRED POLICY, SER 09P/103 of 7 May 2012, FOUO material shall be destroyed by using one of the following approved options:

a. any cross-cut paper shredder,

b. an authorized commercial shredding company,

c. a central destruction facility, or

d. incineration.

DD-254 Item 13 Pll

UNCLASSIFIED

NSWCDDINST 5211 .1 E

18JUL2013

PERSONALLY IDENTIFIABLE INFORMATION (Pll)

1. Definition: Pll is defined as Information about an individual that identifies, links, relates, or is unique to, or describes him or her, e.g., a social security number; age; military rank; civilian grade;

marital status; race; salary; home phone numbers; other demographic, biometric, personnel, medical, and financial information, etc.

2. HANDLING: Personal information shall be collected, maintained, used and/or disclosed to ensure that it is relevant and necessary to accomplish a lawful DON/DOD purpose. Only collect, maintain and use Pll needed to support official business.

3. MARKING: Any document, whether it's a paper document, electronic file, etc. that contains Pll should be marked: "For Official Use Only (FOUO) - Privacy Sensitive. Any misuse or unauthorized disclosure can result in both civil and criminal penalties". This marking applies to but is not limited to: e-mails, spreadsheets, reports, electronic records, etc... The Privacy Act Data Cover Sheet (Form DD 2923) should always be used when any Pll information is being stored or hand-carried.

4. Pll STORAGE: During normal duty hours, place Pll material in an out-of-sight location if your work area is accessible to persons who do not have a valid need for the material. After normal duty hours, store Pll material to prevent unauthorized access. File with other controlled unclassified information (CUI) records in locked files or desks.

5. TRANSMISSION: Pll material should always be safeguarded and should only be e-mailed via secure means. When e-mailing Pll ensure the file is encrypted, password or otherwise protected, and properly marked. If Pll is sent via mail, ensure the material has the appropriate cover sheet (Form DD 2923) and is appropriately packaged to avoid inadvertent disclosure or breach. When transmitting Pll material via fax, use the appropriate cover sheet (DD Form 2923). Immediately follow up via phone contact to confirm that the intended recipient received the fax.

6. DESTRUCTION: When no longer needed, Pll material shall be destroyed in accordance with the SECNAV M-5210.1, January 2012, Department of the Navy Records Management Program.

DD-254 Block k.(Other) Controlled Unclassified Information (CUI) Bidding 021-16

CONTROLLED UNCLASSIFIED INFORMATION (CUI)

DOOM 5200.01 I VOL IV

24 FEB 2012

1. DEFINITION. Controlled Unclassified Information is defined as unclassified information meeting standards for safeguarding and dissemination controls pursuant to law, regulations, and government-wide policies under Executive Order 13556, which establishes a uniform program for designation of information meeting the standards for CUI, uses standardized marking, and ensures information is only controlled when needed.

2. CATERGORIES OF CUI. CUI consists of the following;

• For Official Use Only (FOUO) information;

• Privacy Act Information (See Pll attachment);

• Department of State Sensitive But Unclassified (SBU) information;

• Department of Defense (DoD) and Department of Energy (DoE) Unclassified Controlled

Nuclear Information (UCNI);

• Drug Enforcement Administration (DEA) Sensitive Information;

• Foreign Government Information (FGI);

• Unclassified Navy Nuclear Propulsion Information (U-NNPI); and

• National Geospatial Intelligence Agency Limited Distribution Information

3. GENERAL GUIDANCE: Controlled Unclassified Information (CUI) such as FOUO, Security Classification Guides (SCG), and other information with Distribution Statements B thru F, are not authorized for public release and cannot be placed on a publicly accessible web site or web server.

a. Distribution statements for classified documents will be determined by the Security Classification Guide used to mark the document.

b. All technical data provided to the contractor by the government will be protected from public disclosure in accordance with the markings contained therein.

c. Any material produced under the terms of this contract will be classified directly from the source document(s) from which it was obtained. It will be marked with the most restrictive downgrading/declassification statement contained in such documents.

4. TRANSMITTAL. All emails containing such information or attachments must be appropriately marked, and digitally signed and encrypted if being transmitted within Navy networks, or outside a Navy network to an approved contractor email address. All transmissions to personal email accounts (AOL, Yahoo, Hotmail, Comcast, etc.) are prohibited.

5. OFFSITE HANDLING. The contractor shall provide adequate physical protection to such information as to preclude access by any person or entity not authorized such access by the government.

6. DISCLOSURE POLICY: All other information relating to the items to be delivered or services to be performed under this contract may not be disclosed by any means without prior approval of the authorized representative of the contracting officer. Dissemination or public disclosure includes, but is not limited to, permitting access to such information by foreign nationals or by any other person or entity; publication of technical or scientific papers; advertising; or any other proposed public release. Due to the sensitivity of this program, no classified material received or generated under this contract will be transferred to any other contractor or agency without the approval of the Contracting Officer or Contracting Officer's Representative (COR).

7. FACILITY VISITS: All visit requests for contractor personnel visiting NSWCDL shall meet the following requirements;

a. Requests must be sent through the Joint Personnel Adjudication System (JPAS), under SMO code 001785 for GENSER and 001783 for SCI.

b. Visit requests for Contractor Personnel not submitted via JPAS shall be faxed to the COR, TPOC or the respective department administrative office no later than five (5) working days prior to the intended visit for NEED-TO-KNOW certification. All requests shall contain the information required by Chapter 6, NISPOM, and shall not exceed 12 months.

c. Visit requests for subcontractors to other activities will have a NEED-TO-KNOW certified by the prime contractor.

d. Information on this contract is not releasable to personnel possessing limited (reciprocal) clearances without the written approval of NSWCDD.

Additional guidance can be found at DOOM 5200.01, VOL IV.