Attachment_J.1_-_TBD_(010-17)_DD254.pdf

1. CLEARANCE AND SAFEGUARDING I

DEPARTMENT OF DEFENSE a. FACILITY CLEARANCE REQUIRED I CONTRACT SECURITY CLASSIFICATION SPECIFICATION SECRET

(The requirements of the DoD Industrial Security Manual apply

b. LEVEL OF SAFEGUARDING REQUIRED I to all security aspects of this effort.) SECRET

2. THIS SPECIFICATION IS FOR: (X and complete as applicable) 3. THIS SPECIFICATION IS: (X and complete as applicable) x a. PRIME CONTRACT NUMBER x DATE (YYYYMMDD)

BiddingOI0-17

a. ORIGINAL (Complete date m all cases)

20170419

b. SUBCONTRACT NUMBER b. REVISED (Supersedes all previous specs)

I REVISION NO. DATE(YYYYM DD)

c. SOLICITATION OR OTHER NUMBER DUE DATE (YYYYMMDD)

c. FINAL (Complete Item 5 in all cases)

DATE (YYYYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT? ~YES L_J NO. If Yes, complete the following:

Classified matenal received or generated under See B lock 13 (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? L_jYES LXJ NO. If Yes. complete the following I

In response to the contractor's request dated , retention of the classified material is authonzed for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

7. C>I •~ ·- A.f'TQ 11, - A l""'I lt r"\r"" r""I"\ ,... ~lr"\r"\I" · -

a. I J..IA~. M'.l~~!'. ""'in.I~ c.uut::" ·..., - ' ._

PURPOSES ONLY. AN ORIGINAL DD 2f

b. CAGE CODE

c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

WILL BE ISSUED UPON AWARD OF n I I o~r~ ONLY CONTRACT. ..

8. ACTUAL PERFORMANCE

a. LOCATION b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

DESIGN. BUILD, TEST AND DEPLOY A VARIETY OF INTEGRATED SYSTEM COMPONENTS FOR THE BMS, INCLUDING WEAPON

SYSTEM ASSEMBLIES, TRAINING PANEL ASSEMBLIES, CABLES, PRINTED WIRING ASSEMBLIES, ANTENNAS, CUSTOMlh D

TESTING EQUIPMENT, ENCLOSURES AND RACKS THAT PHYSICALLY SUPPORT THE AIRCRAFT DEPLOYABLE SYSTEM .

10. CONTRACTOR WILL REQUIRE ACCESS TO: YES NO 11 . IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION x a. 8~¥JT~8f8~·s 0&1L~f{J"15~ A'GO'VERNMENf1~bt1tln"'u I ncr< x

b. RESTRICTED DATA x b. RECEIVE CLASSIFIED DOCUMENTS ONLY x

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION x c. RECEIVE AND GENERATE CLASSIFIED MATERIAL x

d. FORMERLY RESTRICTED DATA x d. FABRICATE. MODIFY OR STORE CLASSIFIED HARDWARE x

e. INTELLIGENCE INFORMATION e. PERFORM SERVICES ONLY x

(1) Sens1t1ve Compartmented Information (SCI) x T. ~6~~fcr~Fc8. L~s~i>~~~~~/&'~s A'No~fRustT~WAlt~MH nc: U.:> ' x

(2) Non-SCI x 9 · 8~~+'~R'ro'Wc'iok0o¥~~Rs~~a~o'K~·?\~ls-rR'isu'TFc>N'&~te~AL .... ~" ... ~ .. ~ .. x

f. SPECIAL ACCESS INFORMATION x h. REQUIRE A COMSEC ACCOUNT x

g. NATO INFORMATION x I. HAVE TEMPEST REQUIREMENTS x

h. FOREIGN GOVERNMENT INFORMATION x J. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS x I. LIMITED DISSEMINATION INFORMATION x k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE x J. FOR OFFICIAL USE ONLY INFORMATION x I. OTHER (Speafy) x

k. OTHER (Specify) x

PII I

DD FORM 254, DEC 1999 PREVIOUS EDITION IS OBSOLETE. Adobe Professional X

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release ~ Direct ~ Through (Specify)

NONI:. AUTHORJZED

to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)' for review.

'In the case of non-DoD User Agencies. requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classlficabon guidance needed for this classified effort is identified below. If any difficulty 1s encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authonzed and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submtt any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, a1y documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

(I) National Industrial Security Program Operating Manual (NlSPOM), dated Mar 2013 applies to this contract.

(2) The contractor is not authorized to release any data to foreign nationals or foreign representatives without an approved export license.

(3) Block 4: N00178-13-0-1022 & NOOl78- 14-0-1009

(4) Block I le : SCG: USSOCOM SCG for The Precision Strike Package (PSP) Program, 18 Jul 2011.

(5) Block I Id: Contractor wi ll be required to store classified hardware (circuit boards with firmware, laptop computer, etc). Size of systems will not exceed 2 cubic feet storage capacity.

(6) See attached sheets for further security guidance.

"'*This 00254 is for solicitation purposes only. It must be returned to NSWCDD to be updated with a contract number and a Contractor's name when a Contractor is selected for the contract.**

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, 1n addrtion to ISM requirements, are established for this contract. Yes (If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the addibona requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

X No

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant secunty office. Yes X No (If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections Use Item 13 i f additional space is needed.)

16. CERTIFICATION AND SIGNATURE. Security requi rements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL b. TITLE c. TELEPHONE (Include Area Code)

Kelly L. Raley Security Contracting Officer (540) 653-6595

d. ADDRESS (Include Zip Code) 17. REQUIRED DISTRIBUTION

NSWC Dahlgren Division X a. CONTRACTOR

19008 Wayside Drive, Suite 341 (Code I 05) b. SUBCONTRACTOR

_1,,,;D~ah~l~~~~~~4~:::~6~2~=====~~------------+-~:....J c. COGNIZANT SECURITY OFFICE FOR PRIME ANO SUBCONTRACTOR d U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINIS RATION e ADMINISTRATIVE CONTRACTING OFFICER

r. OTHERS AS NECESSARY

CONTINUATION - DD FORM 254 BLOCK 13

Bidding 010-17

UNCLASSIFIED

BLOCK 13 CONTINUATION STATEMENTS:

1. CLASSIFIED OR UNCLASSIFIED TECHNICAL PAPERS TO BE PRESENTED AT A

CLASSIFIED SYM POSIUM MUST BE APPROVED BY THE NSWCDL CONTRACTING

OFFICER'S REPRESENTATIVE PRIOR TO THE PRESENTATION.

2. SECURITY CLASSIFICATION GUIDES (SCG's) AND UNCLASSIFIED LIMITED DOCUMENTS

(E.G., FOUO, DISTRIBUTION STATEMENT CONTROLLED) ARE NOT AUTHORIZED

FOR PUBLIC RELEASE; THEREFORE, THEY CAN NOT BE POSTED ON A PUBLICLY

ACCESSIBLE WEB SERVER OR TRANSMITTED OVER THE INTERNET UNLESS

APPROPRIATELY ENCRYPTED. REQUEST FOR PUBLIC RELEASE CAN NOT BE

TRANSMITTED VIA THE INTERNET UNTIL THE CONTRACTOR RECEIVES FINAL

APPROVAL FROM THE COR.

3. ALL CONTRACTOR REQUESTS FOR SHARING OF CLASSIFIED AND OTHER

SENSITIVE INFORMATION BETWEEN PRIME CONTRACTS MUST BE FORWARDED I~

WRITING TO THE NSWCDL SECURITY OFFICE POC IDENTIFIED IN BLOCK 16 OF THIS

FORM FOR APPROVAL.

4. PERSONNEL DESIGNATED AS DERIVATIVE CLASSIFIERS SHALL RECEIVE DERIVATIVE

CLASSIFICATION TRAINING PRIOR TO ACCESS FROM THE CONTRACTOR'S FACILITY

SECURITY OFFICER (FSO). THE FSO SHALL ENSURE PERSONNEL RECEIVE INITIAL AND

BIENNIAL TRAINING DURING THE LIFE OF THIS CONTRACT. EVIDENCE OF COMPLETION,

TRAINING CERTIFICATES OR EQUIVALENT, SHALL BE PROVIDED TO THE INFORMATION

ASSURANCE MANAGER NO LATER THAN THE INDIVIDUAL'S DUE DATE.

5. ALL CLASSIFIED DOCUMENTS MUST BE DESTROYED USING A NATIONAL SECURITY

AGENCY (NSA) APPROVED HIGH SECURITY CROSSCUT SHREDDER LISTED ON THE

NSA/CSS EVALUATED PRODUCTS LIST(EPL) FOR HIGH SECURITY CROSSCUT PAPER

SHREDDERS, OR OTHER APPROVED METHOD FOR DESTROYING CLASSIFIED

INFORMATION.

6. ALL CLASSIFIED INFORMATION INVOLVED IN SECURITY INCIDENTS SHALL BE RETAINEQ

AND PROVIDED TO THE CERTIFYING OFFICIAL IN ITEM 16 OF THIS DD 254 FOR

CLASSIFICATION REVIEW.

7. ALL SECURITY RELATED ISSUES, INCIDENTS, OR REQUESTS PERTAINING TO THIS

CONTRACT SHALL BE PRESENTED IN WRITING BY THE CONTRACTOR'S FACILITY

SECURITY OFFICER (FSO) TO THE INDIVIDUAL IDENTIFIED IN BLOCK 16(A) OF THIS

DD254. THE CONTRACTOR SHALL ABID E BY OTHER REPORTING REQUIREMENTS

OUTLINED IN THE NISPOM.

8. FORWARD A COPY OF SUBCONTRACTOR DD 254S ISSUED UNDER THIS CONTRACT TO

THE OFFICIAL SHOWN IN ITEM 16 OF THIS DD254.

UNCLASSIFIED

CONTINUATION - 00254 FORM 254 ITEM 13

Bidding 0 I 0-1 7

UNCLASSIFIED

NO-INTELLIGENCE · CONTINUATION SHEET · DD FORM 254 (revised 28 Feb 2013)

Controlled Unclassified Information (CUI) such as FOUO, Security Classification Guides (SCG}, and other information with Distribution Statements B thru F, are not authorized for public release and cannot be placed on a publicly accessible web site or web server. All emails containing such information or attachments must be appropriately marked, and digitally signed and encrypted if being transmitted within Navy networks, or outside a Navy network to an approved contractor email address. All transmissions to personal email accounts (AOL, Yahoo, Hotmail, Comcast, etc.) are prohibited.

Distribution statements for classified documents will be determined by the Security Classification Guide used to mark the document.

All technical data provided to the contractor by the government will be protected from public disclosure in accordance with the markings contained thereon. All other information relating to the items to be delivered or services to be performed under this contract may not be disclosed by any means without prior approval of the authorized representative of the contracting officer. Dissemination or public disclosure includes, but is not limited to, permitting access to such information by foreign nationals or by any other person or entity; publication of technical or scientific papers; advertising; or any other proposed public release. The contractor shall provide adequate physical protection to such information as to preclude access by any person or entity not authorized such access by the government.

Due to the sensitivity of this program, no classified material received or generated under this contract will be transferred to any other contractor or agency without the approval of the Contracting Officer or Contracting Officer's Representative (COR).

Information on this contract is not releasable to personnel possessing limited (reciprocal) clearances without the written approval of NSWCDD.

All visit requests for contractor personnel visiting NSWCDL shall be sent through the Joint Personnel Adjudication System (JPAS), under SMO code 001785 for GENSER and 001783 for SCI.

Visit requests for Contractor Personnel not submitted via JPAS shall be faxed to the COR, TPOC or the respective department administrative office no later than five (5) working days prior to the intended visit for NEED-TO-KNOW certification. All requests shall contain the information required by Chapter 6, NISPOM, and shall not exceed 12 months.

Visit requests for subcontractors to other activities will have a NEED-TO-KNOW certified by the prime contractor.

Any material produced under the terms of this contract will be classified directly from the source document(s) from which it was obtained. It will be marked with the most restrictive downgrading/declassification statement contained in such documents.

DD-254 Item 13 FOLIO

UNCLASSIFIED

FOR OFFICIAL USE ONLY (FOUO)

DOOM 5200.01 , VOL IV

24 FEB 2012

1. HANDLING: Access to FOUO material shall be limited to those employees needing the material to do their jobs. The FOUO marking is assigned to material created by a DoD user agency. FOUO is not a classification, but requires extra precaution to insure it is not released to the public.

2. MARKING: Mark unclassified documents containing FOUO "FOR OFFICIAL USE ONLY" at the bottom of each page and the back cover (if any). In a classified document, mark:

a. An individual paragraph that contains FOUO, but not classified material, by placing "(U//FOUO)" at the beginning of the paragraph.

b. The top and bottom of each page that has both FOUO and classified material with the highest security classification of the material on that page.

c. "Unclassified//For Official Use Only" at the bottom of each page that has FOUO but not classified material.

d. When a classified document or portion thereof is declassified, FOUO markings may be applied, if applicable, to protect the information.

e. Mark other records such as computer print outs, photographs, films, tapes, or slides "FOR OFFICIAL USE ONLY" so the receiver or viewer know the record contains FOUO material.

f. Portion mark each part of a message that contains FOUO material. Unclassified messages containing FOUO material must show the abbreviation "(FOUO)" or "(U//FOUO)" before the text begins.

g. Insure documents that transmit FOUO material call attention to any FOUO attachments.

h. FOUO material released to a contractor by a DoD user agency must have the followi~g statement on the front page or cover: "THIS DOCUMENT CONTAINS MATERl.A:L

EXEMPT FROM MANDATORY DISCLOSURE UNDER THE FREEDOM OF

INFORMATION ACT."

3. FOUO STORAGE: During normal duty hours, place FOUO material in an out-of-sight location if your work area is accessible to persons who do not have a valid need for the material. After normal duty hours, store FOUO material to prevent unauthorized access. File with other unclassified records in unlocked files or desk when internal building security is provided. When there is not internal security, locked buildings or rooms usually provide adequate after-hours protection. For additional protection, store FOUO material in locked containers such as file cabinets, desk or bookcases. Expenditure of funds for security container solely for the protection of FOUO material is prohibited.

4. TRANSMISSION: FOUO material shall be transmitted via U.S. Postal Service First Class mail or standard mail for bulk shipments. Electronic transmissions of FOUO information (i.e. voice, data, facsimile) shall be by approved secure communications system whenever practical. All means used shall preclude unauthorized public disclosure.

5. RELEASE: FOUO information may be disseminated within the DoD components and between officials of the DoD components, cleared DoD contractors, consultants, and grantees in the conduct of official business for the DoD and DON provided that dissemination is not further controlled by a distribution statements (per NAVSEA M-5510.36 Jun 2006).

6. DESTRUCTION: Per the NAVSEAINST 5510.19 of 2 Feb 2015, FOUO material shall be destroyed by using one of the following approved options:

a. any cross-cut paper shredder,

b. an authorized commercial shredding company,

c. a central destruction facility, or

d. incineration.

DD-254 Item 13 Pll

UNCLASSIFIED

NSWCDDINST 5211 .1 E

18 JUL 2013

PERSONALLY IDENTIFIABLE INFORMATION (Pll)

"~ 1. Definition: Pll is defined as lnformaflon about an individual that identifies, links, relates, or is unique to, or describes him or her, e.g., a social security number; age; military rank; civil ian grade;

marital status; race; salary; home phone numbers; other demographic, biometric, personnel, medical, and financial information, etc.

2. HANDLING: Personal information shall be collected, maintained, used and/or disclosed to ensure that it is relevant and necessary to accomplish a lawful DON/DOD purpose. Only collect, maintain and use Pll needed to support official business.

3. MARKING: Any document, whether it's a paper document, electronic file, etc. that contains Pll should be marked: "For Official Use Only (FOUO) - Privacy Sensitive. Any misuse or unauthorized disclosure can result in both civil and criminal penalties". This marking applies to but is not limited to: e-mails, spreadsheets, reports, electronic records, etc... The Privacy Act Data Cover Sheet (Form DD 2923) should always be used when any Pll information is being stored or hand-carried.

4. Pll STORAGE: During normal duty hours, place Pll material in an out-of-sight location if your work area is accessible to persons who do not have a valid need for the material. After normal duty hours, store Pll material to prevent unauthorized access. File with other controlled unclassified information (CUI) records in locked files or desks.

5. TRANSMISSION: Pll material should always be safeguarded and should only be e-mailed via secure means. When e-mailing Pll ensure the file is encrypted, password or otherwise protected, and properly marked. If Pll is sent via mail, ensure the material has the appropriate cover sheet (Form DD 2923) and is appropriately packaged to avoid inadvertent disclosure or breach. When transmitting Pll material via fax, use the appropriate cover sheet (DD Form 2923). Immediately follow up via phone contact to confirm that the intended recipient received the fax.

6. DESTRUCTION: When no longer needed, Pll material shall be destroyed in accordance with the SECNAV M-5210.1, January 2012, Department of the Navy Records Management Program.

DD-254 Block k.(Other) Controlled Unclassified Information (CUI) Bidding 010-17

CONTROLLED U~SSIFIED INFORMATION (CUI)

DOOM 5200.01 , VOL IV

24 FEB 2012

1. DEFINITION. Controlled Unclassified Information is defined as unclassified information meeting standards for safeguarding and dissemination controls pursuant to law, regulations, and government-wide policies under Executive Order 13556, which establishes a uniform program for designation of information meeting the standards for CUI, uses standardized marking, and ensures information is only controlled when needed.

2. CATERGORIES OF CUI. CUI consists of the following;

• For Official Use Only (FOUO) information;

• Privacy Act Information (See Pll attachment);

• Department of State Sensitive But Unclassified (SBU) information;

• Department of Defense (DoD) and Department of Energy (DoE) Unclassified Controlled

Nuclear Information (UCNI);

• Drug Enforcement Administration (DEA) Sensitive Information;

• Foreign Government Information (FGI);

• Unclassified Navy Nuclear Propulsion Information (U-NNPI); and

• National Geospatial Intelligence Agency Limited Distribution Information

3. GENERAL GUIDANCE: Controlled Unclassified Information (CUI) such as FOUO, Security Classification Guides (SCG), and other information with Distribution Statements B thru F, are not authorized for public release and cannot be placed on a publicly accessible web site or web server.

a. Distribution statements for classified documents will be determined by the Security Classification Guide used to mark the document.

b. All technical data provided to the contractor by the government will be protected from public disclosure in accordance with the markings contained therein.

c. Any material produced under the terms of this contract will be classified directly from the source document(s) from which it was obtained. It will be marked with the most restrictive downgrading/declassification statement contained in such documents.

4. TRANSMITTAL. All emails containing such information or attachments must be appropriately marked, and digitally signed and encrypted if being transmitted within Navy networks, or outside a Navy network to an approved contractor email address. All transmissions to personal email accounts (AOL, Yahoo, Hotmail, Comcast, etc.) are prohibited.

5. OFFSITE HANDLING. The contractor shall provide adequate physical protection to such information as to preclude access by any person or entity not authorized such access by the government.

6. DISCLOSURE POLICY: All other information relating to the items to be delivered or services to be performed under this contract may not be disclosed by any means without prior approval of the authorized representative of the contracting officer. Dissemination or public disclosure includes, but is not limited to, permitting access to such information by foreign nationals or by any other person or entity; publication of technical or scientific papers; advertising; or any other proposed public release. Due to the sensitivity of this program, no classified material received or generated under this contract will be transferred to any other contractor or agency without the approval of the Contracting Officer or Contracting Officer's Representative (COR).

7. FACILITY VISITS: All visit requests for contractor personnel visiting NSWCDL shall meet the following requirements;

a. Requests must be sent through the Joint Personnel Adjudication System (JPAS), under SMO code 001785 for GENSER and 001783 for SCI.

b. Visit requests for Contractor Personnel not submitted via JPAS shall be faxed to the COR, TPOC or the respective department administrative office no later than five (5) working days prior to the intended visit for NEED-TO-KNOW certification. All requests shall contain the information required by Chapter 6, NISPOM, and shall not exceed 12 months.

c. Visit requests for subcontractors to other activities will have a NEED-TO-KNOW certified by the prime contractor.

d. Information on this contract is not releasable to personnel possessing limited (reciprocal) clearances without the written approval of NSWCDD.

Additional guidance can be found at DOOM 5200.01, VOL IV.