0528-15___WVU_Study_-_Bidding_DD254.pdf

Please wait...

If this message is not eventually replaced by the proper contents of the document, your PDF viewer may not be able to display this type of document.

You can upgrade to the latest version of Adobe Reader for Windows®, Mac, or Linux® by visiting http://www.adobe.com/go/reader_download.

For more assistance with Adobe Reader visit http://www.adobe.com/go/acrreader.

Windows is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Mac is a trademark of Apple Inc., registered in the United States and other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.

UNCLASSIFIED

BIDDING 021-19

CONTINUATION – DD FORM 254 ITEM 13

DODI 5210.02

3 JUN 2011

RESTRICTED DATA (RD)/ FORMERLY RESTRICTED (FRD)/ CRITICAL NUCLEAR WEAPONS

DESIGN INFORMATION (CNWDI)

1. DEFINITION: RESTRICTED DATA (RD) is defined as all data concerning;

a) Design, Manufacture, or Utilization of Atomic Weapons

b) Production of Special Nuclear Material

c) Use of Special Nuclear Material in the production of energy

This shall not include data declassified or removed from the Restricted Data category (Formerly Restricted Data and Transclassified Foreign Nuclear Information.

Major areas of Restricted Data:

a) Nuclear Weapons Design

b) Nuclear Material Production

c) Isotope Separation

d) Naval Reactors

2. ACCESS: Access to RD information within and between DoD Components, including contractor activities, will be governed by the same procedures and criteria that govern the access to other classified information in accordance with DoD Manual 5200.01, Volume 1, “Information Security Program: Overview, Classification, and Declassification,” February 24, 2010 and DoD 5200.02, “Procedures for the DoD Personnel Security Program (PSP),” April 3, 2017.and DoD 5220.22-R, “Industrial Security Regulation,” December 4, 1985. Individuals granted access shall:

(1) Require access in the performance of official duties (also known as “need to know”).

(2) Have a valid DoD security clearance at a level commensurate with the information concerned.

3. ACCOUNTABILITY: All CNWDI materials will be accounted for through the Classified Control Center in accordance with National Security Information Manual and the National Industrial Security Operating Manual.

4. MARKING: The following notation is placed on all classified data containing Restricted Data designated CNWDI. The notation is placed at the bottom of document covers (front and back), cover sheets, title page, first page of the data and reverse side of the back page. This notation is always accompanied by and is placed next to the preceding Restricted Data. For marking slides and other materials refer questions to the Office of Security or Regional Security Office.

CNWDI is an acronym and should not be mistaken for the portion/paragraph-marking symbol with is (N).

CRITICAL NUCLEAR WEAPON DESIGN INFORMATION

DOD INSTRUCTION 5210.02 APPLIES

FORMERLY RESTRICTED DATA

Unauthorized disclosure subject to administrative and criminal sanctions. Handle as Restricted Data in foreign dissemination, Section 144b, Atomic Energy Act, 1954.

Classified by:

5. STORAGE AND LOCK COMBINATIONS: CNWDI material will be stored in approved Security containers in the same manner as other classified material; however, knowledge of the lock combination for these containers will be limited to personnel who possess a current CNWDI Access Briefing and have established a need-to-know.

6. REPRODUCTION: CNWDI information WILL NOT be reproduced without prior authorization from the User Agency Contracting Officer or Government representative specified in the contract or DD254 for contractor personnel.

7. TRANSMISSION: CNWDI may be transmitted outside of our facility only to the Government Contracting Authority (GCA) or prime or subcontractor approved for access by the GCA. Prior to transmission to another facility, we must verify from the Cognizant Security Authority that the facility has been authorized access to CNWDI. The inner wrapping of CNWDI materials to be transmitted will contain the marking, “Critical Nuclear Weapons Design Information – DoD Directive 5210.2 Applies” in addition to the other prescribed security markings. When CNWDI is transmitted to another facility, the inner wrapper shall be addressed to the personal attention of the Facility Security Officer (FSO) or his/her alternate.

8. DESTRUCTION: CNWDI material will be destroyed in the same manner as other material with the same classification.

See DODI 5210.02 for additional handling instructions of CNWDI information.

CONTINUATION – DD FORM 254 BLOCK 13

BLOCK 13 CONTINUATION STATEMENTS:

1. CLASSIFIED OR UNCLASSIFIED TECHNICAL PAPERS TO BE PRESENTED AT A

CLASSIFIED SYMPOSIUM MUST BE APPROVED BY THE NSWCDD CONTRACTING

OFFICER'S REPRESENTATIVE PRIOR TO THE PRESENTATION.

2. SECURITY CLASSIFICATION GUIDES (SCG’s) AND UNCLASSIFIED LIMITED DOCUMENTS

(E.G., FOUO, DISTRIBUTION STATEMENT CONTROLLED) ARE NOT AUTHORIZED

FOR PUBLIC RELEASE; THEREFORE, THEY CAN NOT BE POSTED ON A PUBLICLY

ACCESSIBLE WEB SERVER OR TRANSMITTED OVER THE INTERNET UNLESS

APPROPRIATELY ENCRYPTED. REQUEST FOR PUBLIC RELEASE CANNOT BE

TRANSMITTED VIA THE INTERNET UNTIL THE CONTRACTOR RECEIVES FINAL

APPROVAL FROM THE COR.

3. ALL CONTRACTOR REQUESTS FOR SHARING OF CLASSIFIED AND OTHER

SENSITIVE INFORMATION BETWEEN PRIME CONTRACTS MUST BE FORWARDED IN

WRITING TO THE NSWCDD SECURITY OFFICE POC IDENTIFIED IN BLOCK 16 OF THIS

FORM FOR APPROVAL.

4. PERSONNEL DESIGNATED AS DERIVATIVE CLASSIFIERS SHALL RECEIVE DERIVATIVE

CLASSIFICATION TRAINING PRIOR TO ACCESS FROM THE CONTRACTOR'S FACILITY

SECURITY OFFICER (FSO). THE FSO SHALL ENSURE PERSONNEL RECEIVE INITIAL AND

BIENNIAL TRAINING DURING THE LIFE OF THIS CONTRACT. EVIDENCE OF COMPLETION,

TRAINING CERTIFICATES OR EQUIVALENT, SHALL BE PROVIDED TO THE INFORMATION

ASSURANCE MANAGER NO LATER THAN THE INDIVIDUAL'S DUE DATE.

5. ALL CLASSIFIED DOCUMENTS MUST BE DESTROYED USING A NATIONAL SECURITY

AGENCY (NSA) APPROVED HIGH SECURITY CROSSCUT SHREDDER LISTED ON THE

NSA/CSS EVALUATED PRODUCTS LIST(EPL) FOR HIGH SECURITY CROSSCUT PAPER

SHREDDERS, OR OTHER APPROVED METHOD FOR DESTROYING CLASSIFIED

INFORMATION.

6. ALL CLASSIFIED INFORMATION INVOLVED IN SECURITY INCIDENTS SHALL BE RETAINED

AND PROVIDED TO THE CERTIFYING OFFICIAL IN ITEM 16 OF THIS DD 254 FOR

CLASSIFICATION REVIEW.

7. ALL SECURITY RELATED ISSUES, INCIDENTS, OR REQUESTS PERTAINING TO THIS

CONTRACT SHALL BE PRESENTED IN WRITING BY THE CONTRACTOR'S FACILITY

SECURITY OFFICER (FSO) TO THE INDIVIDUAL IDENTIFIED IN BLOCK 16(A) OF THIS

DD254. THE CONTRACTOR SHALL ABIDE BY OTHER REPORTING REQUIREMENTS

OUTLINED IN THE NISPOM.

8. FORWARD A COPY OF SUBCONTRACTOR DD 254S ISSUED UNDER THIS CONTRACT TO

THE OFFICIAL SHOWN IN ITEM 16 OF THIS DD254.

DODM 5200.01, VOL IV

24 FEB 2012

CONTROLLED UNCLASSIFIED INFORMATION (CUI)

1. DEFINITION. Controlled Unclassified Information is defined as unclassified information meeting standards for safeguarding and dissemination controls pursuant to law, regulations, and government-wide policies under Executive Order 13556, which establishes a uniform program for designation of information meeting the standards for CUI, uses standardized marking, and ensures information is only controlled when needed.

2. CATERGORIES OF CUI. CUI consists of the following;

For Official Use Only (FOUO) information;

Privacy Act Information (See PII attachment);

Department of State Sensitive But Unclassified (SBU) information;

Department of Defense (DoD) and Department of Energy (DoE) Unclassified Controlled Nuclear Information (UCNI);

Drug Enforcement Administration (DEA) Sensitive Information;

Foreign Government Information (FGI);

Unclassified Navy Nuclear Propulsion Information (U-NNPI); and

National Geospatial Intelligence Agency Limited Distribution Information

3. GENERAL GUIDANCE: Controlled Unclassified Information (CUI) such as FOUO, Security Classification Guides (SCG), and other information with Distribution Statements B thru F, are not authorized for public release and cannot be placed on a publicly accessible web site or web server.

a. Distribution statements for classified documents will be determined by the Security Classification Guide used to mark the document.

b. All technical data provided to the contractor by the government will be protected from public disclosure in accordance with the markings contained therein.

c. Any material produced under the terms of this contract will be classified directly from the source document(s) from which it was obtained. It will be marked with the most restrictive downgrading/declassification statement contained in such documents.

4. TRANSMITTAL. All emails containing such information or attachments must be appropriately marked, and digitally signed and encrypted if being transmitted within Navy networks, or outside a Navy network to an approved contractor email address. All transmissions to personal email accounts (AOL, Yahoo, Hotmail, Comcast, etc.) are prohibited.

5. OFFSITE HANDLING. The contractor shall provide adequate physical protection to such information as to preclude access by any person or entity not authorized such access by the government.

6. DISCLOSURE POLICY: All other information relating to the items to be delivered or services to be performed under this contract may not be disclosed by any means without prior approval of the authorized representative of the contracting officer. Dissemination or public disclosure includes, but is not limited to, permitting access to such information by foreign nationals or by any other person or entity; publication of technical or scientific papers; advertising; or any other proposed public release. Due to the sensitivity of this program, no classified material received or generated under this contract will be transferred to any other contractor or agency without the approval of the Contracting Officer or Contracting Officer’s Representative (COR).

7. FACILITY VISITS: All visit requests for contractor personnel visiting NSWCDL shall meet the following requirements;

a. Requests must be sent through the Joint Personnel Adjudication System (JPAS), under SMO code 001785 for GENSER and 001783 for SCI.

b. Visit requests for Contractor Personnel not submitted via JPAS shall be faxed to the COR, TPOC or the respective department administrative office no later than five (5) working days prior to the intended visit for NEED-TO-KNOW certification. All requests shall contain the information required by Chapter 6, NISPOM, and shall not exceed 12 months.

c. Visit requests for subcontractors to other activities will have a NEED-TO-KNOW certified by the prime contractor.

d. Information on this contract is not releasable to personnel possessing limited (reciprocal) clearances without the written approval of NSWCDD.

Additional guidance can be found at DODM 5200.01, VOL IV.

View Notification

The following changes have occurred for 7F6D1 West Virginia University Innovation Corporation:

A verification request was created for this facility.

*This information is valid as of 05/29/2019

This is to advise you that the following information is current verification information for the facility.

CAGE Code: 7F6D1

Facility Name: West Virginia University Innovation Corporation

Physical Location: 886 Chestnut Ridge Rd

Morgantown WV 26506-6216

Classified Mailing Address:

Classified Hardware Mailing Address:

Classified Overnight Address:

Facility Clearance Status/Level: Active / Top Secret

Status Date: 10/24/2018

Document Safeguarding Level: None

Authorized Access to: COMSEC

FCL Limitations:

Special Limitation Notes:

Facility Security Officer: Satterfield, David

Facility Security Officer Phone Number: (304) 293-4916

DSS Field Office: Philadelphia Field Office

DSS Field Office Phone Number: 610-537-1060

You will be notified of changes in this information until 05/29/2022

Wednesday, May 29, 2019 FOR OFFICIAL USE ONLY Page 1 of 1

DoDM 52001.01, VOL 2 & 3

24 FEB 2012

FOREIGN GOVERNMENT INFORMATION (FGI)

1. DEFINITION: Foreign Government Information is;

a. Information provided to the U.S. Government by a foreign government or governments, an international organization of governments, or any element thereof, with the expectation that the information, the source of the information, or both, are to be held in confidence.

b Information produced by the U.S. Government pursuant to or as a result of a joint arrangement with a foreign government or governments, or an international organization of governments, or any element thereof, requiring that the information, the arrangement, or both, are to held in confidence.

2. MARKING: Most foreign governments use three classification markings that generally equate to U.S. TOP SECRET, SECRET, and CONFIDENTIAL. Many of the governments also have a fourth classification marking, RESTRICTED, for which there is no U.S. equivalent. Some governments also have unclassified information protected by law or national regulations that is treated, and provided to other governments, as “in confidence” information.

Bilateral security agreements and arrangements with other governments require that FGI retain its original foreign government classification markings, or be marked with a U.S. classification marking that results in a degree of protection equivalent to that provided by the foreign government.

Therefore, if the foreign government marking is in English, and the U.S. and foreign government protective measures for the classification are equivalent, the foreign government marking may be retained on the information. However, if the FGI is marked in a language other than English, a classification marking that results in equivalent protection will be applied to the FGI.

Enclosure 4 of DoDM 520001, VOL 2 provides specific guidance on marking.

3. SAFEGUARDING: The receiving DoD Components shall protect FGI to at least a degree equivalent to that required by the foreign government or international organization that provided the information. FGI shall be controlled and safeguarded in the same manner as prescribed for U.S. classified information. Enclosure 2 of DoDM 5200.01, VOL 3 provides further guidance on safeguarding FGI information. To the extent practical, FGI shall be stored separately from other information to facilitate its control. To avoid additional costs, separate storage may be accomplished by methods such as using separate drawers in the same container as other information or, for small amounts, the use of separate file folders in the same drawer.

4. TRANSMITTAL: The transmission of FGI within the United States among U.S. Government agencies and U.S. contractors and between U.S. contractors with a need to know must be in accordance with this DoDM 5200.01 VOL 1-4 and DoD 5220.22-M.

FOREIGN GOVERNMENT INFORMATION (FGI)

5. ACCESS: Security clearances issued by the U.S. Government are valid for access to classified

FGI of a comparable level.

6. DISCLOSURE POLICY: The international transfer of foreign government classified information must be by government officials through government-to-government channels, or channels agreed upon in writing by the originating and receiving governments (collectively “government-to-government transfer”). FGI shall not be disclosed to nationals of third countries, including foreign nationals who are protected individuals or permanent resident aliens, or to any other third party, or used for other than the purpose for which the foreign government provided it without the originating government’s written consent. Questions regarding releasability or disclosure should be directed to the U.S. originator, who will consult with the foreign government as required.

Contractors will submit their requests through the contracting U.S. Government agency for U.S.

contracts and the Defense Security Service for direct commercial contracts. Approval from the originating government does not eliminate the requirement for the contractor to obtain an export authorization as required by other regulations or policies. See DoDM 5200.01, VOL 3, Enclosure 4 and its Appendix for further guidance on transfer of classified information.

7. DESTRUCTION: FGI shall be destroyed in the same manner as U.S. classified information of the equivalent level, except where otherwise required by international treaty or agreement.

See DoDM 5200.01,VOL 1-4 for additional guidance on marking, safeguarding, transmission, and destruction of FGI.

DAMAGED STATE MODELING AND SIMULATION SUPPORT

STATEMENT OF WORK (SOW)

1.0 BACKGROUND

The Naval Surface Warfare Center, Dahlgren Division (NSWCDD), Warfare Analysis and Digital Modeling Department (M) requires research in the area of threat engineering and damaged state modeling and simulation.

2.0 APPLICABLE DOCUMENTS

N/A

3.0 REQUIREMENTS

To facilitate the modeling of fault tolerant and intolerant threat missile behavior modeling and simulation (M&S), the Contractor shall perform 2520 hours of research, analysis, and testing into damaged state aerodynamic modeling and simulation.

3.1 UNCONVENTIONAL AERODYNAMICS ANALYSIS

3.1.1 The Contractor shall investigate the estimation of aerodynamic performance of guided missiles using a series of fundamental equations to produce an unsteady empirical data production plan for missiles that have been damaged or exhibit off-design geometric or control surface response characteristics.

3.1.2 The Contractor shall use Missile DATCOM methods to predict the change in missile performance due to changes in geometry or configuration due to damage.

3.1.3 The Contractor shall document preliminary results of their analysis of the unconventional aerodynamics of damaged missiles.

(CDRL A001)

3.2 EXPERIMENTAL TEST PLANNING

3.2.1 The Contractor shall provide preliminary experimental testing planning and execution to determine the static aerodynamic coefficients of any missile configuration, regardless of geometry.

3.2.2 The Contractor shall plan and conduct preliminary testing for controlled wind tunnel testing or free flight testing in a controlled environment for possible follow-on efforts.

3.2.3 Based on the proposed future testing, the Contractor shall produce an aerodynamic performance database development plan.

3.2.3 The Contractor shall document all test planning, results of any preliminary tests performed, and the performance database development plan. (CDRL A002)

3.3 ALGORITHM DEVELOPMENT

3.3.1 The Contractor shall perform research and development of algorithms and computational methods to incorporate unconventional aerodynamics into the Acquisitions Threat Engineering Product

(ATEP).

3.3.2 The Contractor shall research new algorithms and computational means within ATEP to incorporate unconventional aerodynamics, non-linear mass and inertia properties, damaged propulsive states, and configurable flight control systems.

3.3.3 The Contractor shall provide the preliminary results of an unsteady damaged state model and coefficients for incorporation into the ATEP model. (CDRL A003)

3.4 FAULT TOLERANT TECHNOLOGIES RESEARCH

The Contractor shall research existing literature and discoverable demonstrations of current fault tolerant technologies development and application. (CDRL A004)

4.0 DELIVERABLES

4.1 The Contractor shall provide Unconventional Aerodynamics

Analysis Report in accordance with (IAW) CDRL A001.

4.2 The Contractor shall provide an Experimental Testing Report IAW

CDRL A002.

4.3 The Contractor shall provide a Preliminary Results of Modified

ATEP Model and Report IAW CDRL A003.

4.4 The Contractor shall provide a Fault Tolerant Technologies

Research Report IAW CDRL A004.

5.0 TRAVEL

The contractor will be required to travel in performance of this contract. The number of trips and types of personnel traveling shall be limited to the minimum required to accomplish work requirements and shall be coordinated with the technical point of contact. All travel shall be conducted in accordance with the

Federal Travel Regulations (FTR). The following travel is anticipated: 2 personnel to the Baltimore, MD and Washington DC area 6 times during the period of performance.

6.0 SECURITY

All work under this SOW will be accomplished at the SECRET level.

The Department of Defense Contract Security Classification

Specification (DD Form 254) (Attachment J.1) provides the security classification requirements for this order. The contractor shall obtain facility and personnel security clearances at the Secret level required by the Department Industrial Security Program prior to starting to work on tasks requiring clearances. Access to classified spaces and material and generation of classified material shall be in accordance with the attached DD Form 254.

Execution of this effort under the SOW requires the Contractor to have access to classified information, systems, system data/products, and detailed analysis of systems up to SECRET. While working on classified tasks, the Contractor shall safeguard all classified materials in accordance with applicable Government and industrial security regulations. The Contractor may be required to use the Defense Technical Information Center (DTIC). The Contractor is responsible for taking Information Security Awareness training annually, via their Facility Security Officer (FSO), as part of the mandatory training requirements.

All personnel performing on-site must maintain the appropriate level security clearance. A security clearance is required in order to access Government computer systems. Access to and the preparation of classified material at another Contractor’s site or a Government activity may be required in the execution of tasking associated with this contract.

In order to successfully execute the tasking identified in this statement of work, the contractor may require access to Restricted

Data, Formerly Restricted Data, Foreign Government Information, and

Controlled Unclassified Information (CUI).

7.1 Portable Electronic Devices (PEDs): Non-Government and/or personally owned portable electronic devices (PEDs) are prohibited in all NSWCDD buildings with the exception of personally owned cell phones which are authorized for use in spaces up to and including

Controlled Access Areas. The contractor shall ensure the onsite personnel remain compliant with this PED policy. NSWCDD instruction defines PEDs as the following: any electronic device designed to be easily transported, with the capability to store, record, receive or transmit text, images, video, or audio data in any format via any transmission medium. PEDs include, but are not limited to, pagers, laptops, radios, compact discs and cassette players/recorders. In addition, this includes removable storage media such as flash memory, memory sticks, multimedia cards and secure digital cards, micro-drive modules, ZIP drives, ZIP disks, recordable CDs, DVDs, MP3 players, iPADs, digital picture frames, electronic book readers, kindle, nook, cameras, external hard dish drives, and floppy diskettes. PEDs belonging to an external organization shall not be connected to NSWCDD networks or infrastructure without prior approval from the NSWCDD Information Assurance and Compliance

Branch. This approval will be granted using the TARIS form and action tracker process. Personally owned hardware or software shall not be connected or introduced to any NSWCDD hardware, network or information system infrastructure.

7.2 Electronic Spillages: Electronic spillages (ES) are unacceptable and pose a risk to national security. An electronic spillage is defined as classified data placed on an information system (IS), media or hardcopy document possessing insufficient security controls to protect the data at the required classification level, thus posing a risk to national security (e.g., sensitive compartmented information (SCI) onto collateral, Secret onto Unclassified, etc.).

The contractor's performance as it relates to ES will be evaluated by the Government. ES reflects on the overall security posture of the Government and a lack of attention to detail with regard to the handling of classified information of IS security discipline and will be reflected in the contractor's performance rating. In the event that a contractor is determined to be responsible for an ES, all direct and indirect costs incurred by the Government for ES remediation will be charged to the contractor. NSWCDD Command

Security will continue to be responsible for the corrective action plan in accordance with the security guidance reflected on the DOD

Contract Security Classification Specification - DD254 (Attachment

J.1). Command Security will identify the contractor facility and contract number associated with all electronic spillages during the investigation that involve contractor support. Command Security will notify the Contracts Division with the contractor facility name and contract number, incident specifics and associated costs for cleanup. The Contracting Officer will be responsible to work with the Contractor Facility to capture the costs incurred during the spillage clean up. The Contractor is also responsible for taking

Information Security Awareness training annually, via their Facility

Security Officer (FSO), as part of the mandatory training requirements. If a spillage occurs additional training will be required to prevent recurrence.

7.3 Information Security and Computer System Usage: In accordance with U.S. Navy policy, any personnel, including the contractor, who utilizes DOD owned systems, shall assume responsibility for adherence to restrictions regarding internet and e-mail usage. Navy policy prohibits racist, sexist, threatening, pornographic, personal business, subversive or politically partisan communications. All personnel, including the contractor, are accountable and must act accordingly. DOD computer systems are monitored to ensure that the use is authorized, to facilitate protection against unauthorized access, and to verify security procedures, survivability and operational security. During monitoring, information may be examined, recorded, copied, and used for authorized purposes. All information, including personal information, placed on or sent over a DOD system may be monitored. Use of a DOD system constitutes consent to monitoring. Unauthorized use may result in criminal prosecution. Evidence of unauthorized use collected during monitoring may be used as a basis for recommended administrative, criminal or adverse action.

In accordance with DOD and DON cybersecurity workforce (CSWF) requirements, contractors assigned to an IT Level-I designated position with SECRET access will be required to have a favorably adjudicated Single Scope Background Investigation (SSBI) completed every 5 years. Contractors supporting IT Level-I designated positions must have a final Secret clearance on the day the Period of Performance (PoP) starts. The SSBI will be requested, via the emergency appointment process, and will be initiated by NSWCDD

Command Security (if the contract is Secret) or the FSO (if the contract is Top Secret). Once the SSBI is submitted, the contractor may begin working at the IT Level-I.

7.4 Use of Information System (IS) Resources: Contractor Provision of IS Resources. Except in special circumstances explicitly detailed elsewhere in this document, the contractor shall provide all IS resources needed in the performance of this contract. This includes, but is not limited to computers, software, networks, certificates, and network addresses.

7.5 Contractor Use of NSWCDD IS Resources: In the event that the contractor is required to have access to NSWCDD IS resources, the login name used for access shall conform to the NMCI login naming convention. If the contractor requires access to applications/systems that utilize client certificates for authentication, the contractor is responsible for obtaining requisite certificates from a DOD or External Certificate Authority.

If this contract requires that the contractor be granted access and use of NSWCDD IS resources (at any site), the IS shall be accredited for contractor use in accordance with procedures specified by the

Information Assurance Office.

Connections between NSWCDD and Contractor Facilities. If there is a requirement (specifically delineated elsewhere in this contract) for interconnection (e.g., link level or Virtual Private Network (VPN)) between any facilities and/or ISs owned or operated by the contractor and ISs owned or operated by NSWCDD, such interconnection shall take place only after approval from the Information Assurance

Office. All such connections as well as the ISs connected thereto will be accredited in accordance with DOD policy (DODI 5200.40) by the cognizant Designated Approving Authority (DAA) and comply with the requirements of CJCSI 6211.02B regarding Memorandums of

Agreement. All such connections will be made outside the appropriate

NSWCDD firewall.

7.6 Operations Security (OPSEC): All Contractors (including Sub-contractors) shall supplement their current security practices by requiring any personnel involved in executing this Contract to complete Government-sponsored and administered Operations Security

(OPSEC) training. In addition, all Contractors should be aware of the Critical Information List (CIL) for the department they are supporting as well as the OPSEC plan for NSWCDD. Upon Contract award, all identified Contractors (including Sub-contractors) shall sign a Contractor's conformance statement and submit it to the

NSWCDD COR named in block 13 of the attached DD-254 thereby acknowledging that they will meet the requirements of this Contract.

The COR shall contact their Department Training Coordinator to schedule key employees to attend the Government sponsored OPSEC training. The Contractor must immediately notify the Government upon the discovery of any nonconformance with the OPSEC Plan.

7.7 Privacy Program Training: Privacy training is mandatory for all

NSWCDD personnel (military, civilian, and contractor) and must be completed annually. Total Workforce Management Services (TWMS) is the official database for workforce training and is the tool for taking and recording privacy act training. The contractor responsible for ensuring individual annual privacy training requirements are met.

7.0 TECHNICAL POINT OF CONTACT

Warren Boord

NSWCDD/ M20

Phone: 443-393-4645

Email: warren.boord@navy.mil

DRAFT

SAMPLE

PREVIOUS EDITION IS OBSOLETE.

Page of AEM LiveCycle Designer

DD FORM 254, APR 2018

NEEDS DD67

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the National Industrial Security Program (NISP) apply to all security aspects of this effort involving classified information.)

OMB No. 0704-0567 OMB approval expires:

October 31, 2020 The public reporting burden for this collection of information, 0704-0567, is estimated to average 70 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, at whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

RETURN COMPLETED FORM AS DIRECTED IN THE INSTRUCTIONS.

1. CLEARANCE AND SAFEGUARDING

2. THIS SPECIFICATION IS FOR: (X and complete as applicable.)

3. THIS SPECIFICATION IS: (X and complete as applicable.)

a. ORIGINAL (Complete date in all cases.)

b. REVISED (Supersedes all previous specifications.)

4. IS THIS A FOLLOW-ON CONTRACT?

If yes, complete the following:

Classified material received or generated under

5. IS THIS A FINAL DD FORM 254?

If yes, complete the following:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

7. SUBCONTRACTOR(S) (Click button if you choose to add or list the subcontractors -- but will still require a separate DD Form 254 issued by a prime contractor to each subcontractor)

8. ACTUAL PERFORMANCE (Click button to add more locations.)

10. CONTRACTOR WILL REQUIRE ACCESS TO: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

e. NATIONAL INTELLIGENCE INFORMATION:

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. See instructions. Provide details in Blocks 13 or 14 as set forth in the instructions.)

12. PUBLIC RELEASE

Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the National Industrial Security Program Operating Manual (NISPOM) or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified here with at least office and phone contact information and if available, an e-mail address. (See instructions)

13. SECURITY GUIDANCE

The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended.

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. The field will expand as text is added. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. Also allows for up to 6 internal reviewers to digitally sign. See instructions for additional guidance or use of the fillable PDF.)

14. ADDITIONAL SECURITY REQUIREMENTS

Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the CSO. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

15. INSPECTIONS

Elements of this contract are outside the inspection responsibility of the CSO.

If Yes, explain and identify specific areas and government activity responsible for inspections. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

17. CERTIFICATION AND SIGNATURES

Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. Upon digitally signing Item 17h, no changes can be made as the form will be locked.

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICIAL

9.0.0.2.20120627.2.874785 DD 254, DoD Contract Security Classification Specification List of Attachments (All Files Must be Attached Prior to Signing, i.e., for any digital signature on the form)

886 Chestnut Ridge Rd Morgantown WV 26506-6216 Name:

*************SOLE SOURCE********************

2 International Plaza, Suite 340 Philadelphia PA 19113

(610) 537-1060 dss.dss-northern.dss-isfo.mbx.philadelphia-field-office@mail.mil

THIS DD254 IS FOR BIDDING PURPOSES ONLY

contract.

2. The contractor is not authorized to release any data to foreign nationals or foreign representatives without an approved export license.

3. Block 10b: Access to RESTRICTED DATA requires a final U.S. Government clearance at the appropriate level.

4. Block 10h: Access to FGI is limited to specific foreign countries to be named at a later date.

5. Block 10j: CUI encompasses what was previously stated as FOUO and PII. DoD components refer to DoDM 5200.Ql, VOL 4, "DoD Information Security Program: Controlled Unclassified Information (CUI)," available at http://www.esd.whs.mil/DD/DoD-Issuances/ when considering protection for CUI.

6. Block 11a: Contract performance is restricted to another contractor facility or Government activity as indicated in the contract. The Government activity will provide security classification guidance under separate cover for performance of this contract.

7. Block 11g: Contractor shall prepare and process DD Forms 1540 and 2345 prior to requesting these services.

8. Block 11l: CUI encompasses what was previously stated as FOUO and PII. DoD components refer to DoDM 5200.01, VOL 4, "DoD Information Security Program: Controlled Unclassified Information (CUI)," available at http://www.esd.whs.mil/DD/DoD-Issuances/ when considering protection for CUI.

9. See attachments for additional security guidance.

Alt OPSEC Program Manager

Dahlgren VA 22448-5147 Address: Naval Surface Warfare Center, Dahlgren Division 6146 Tisdale Rd, STE 237 Dahlgren, VA 22448-5158