Attachment_3_DD-254_-_DOD_Contract_Security_Classification_Specification.pdf

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

1. CLEARANCE AND SAFEGUARDING

a. FACILITY CLEARANCE REQUIRED

(The requirements of the DoD National Industrial Security Program Operating Manual b. LEVEL OF SAFEGUARDING REQUIRED apply to all security aspects of this effort.)

2. THIS SPECIFICATION IS FOR: (X and complete as applicable) 3. THIS SPECIFICATION IS: (X and complete as applicable)

a. PRIME CONTRACT NUMBER a. ORIGINAL (Complete date in all cases) DATE (YYYYMMDD)

b. SUBCONTRACT NUMBER b. REVISED (Supersedes all previous specs) Revision Number DATE (YYYYMMDD)

c. SOLICITATION OR OTHER NUMBER DUE DATE (YYYYMMDD) c. FINAL (Complete Item 5 in all cases) DATE (YYYYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT? YES NO. If YES, complete the following:

Classified material received or generated under ________________________________ (preceding contract number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? YES NO. If YES, complete the following:

In response to the contractor's request dated retention of the identified classified material is authorized for the period of .

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

8. ACTUAL PERFORMANCE

a. LOCATION b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

10.THIS CONTRACT WILL REQUIRE ACCESS TO: YES NO 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER

CONTRACTOR'S FACILITY OR A GOVERNMENT ACTIVITY

b. RESTRICTED DATA b. RECEIVE CLASSIFIED DOCUMENTS ONLY

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION c. RECEIVE AND GENERATE CLASSIFIED MATERIAL

d. FORMERLY RESTRICTED DATA d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. INTELLIGENCE INFORMATION: e. PERFORM SERVICES ONLY

(1) SENSITIVE COMPARTMENT INFORMATION (SCI) f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO

RICO, U.S. POSSESSIONS AND TRUST TERRITORIES

(2) NON-SCI g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL

INFORMATION CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER

f. SPECIAL ACCESS INFORMATION h. REQUIRE A COMSEC ACCOUNT

g. NATO INFORMATION i. HAVE TEMPEST REQUIREMENTS

h. FOREIGN GOVERNMENT INFORMATION j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

i. LIMITED DISSEMINATION INFORMATION k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

j. FOR OFFICIAL USE ONLY INFORMATION l. OTHER (Specify).

k. OTHER (Specify) initiator:amanda.merritt@imagine-one.com;wfState:distributed;wfType:email;workflowId:571b3fd22d8e144b8831991190d31ea9

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except a provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. government authority. Proposed public releases shall be submitted for approval prior to release Direct Through (Specify):

to the Directorate for Freedom of Information and Security Review, Office of the Assistant Security of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to NISPOM requirements, are established for this contract. (If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements.

Provide a copy of the requirements to the cognizant security office. Use item 13 if additional space is needed.) YES NO

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. (If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspectors. Use item 13 if additional space is needed.) YES NO

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL b. TITLE c. TELEPHONE (Include Area Code)

d. ADDRESS (Include Zip Code) 17. REQUIRED DISTRIBUTION

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. SIGNATURE e. ADMINISTRATIVE CONTRACTING OFFICER

f. OTHERS AS NECESSARY carol.graham Typewritten Text carol.graham Typewritten Text carol.graham Typewritten Text 10e (2) - Access to Intelligence information required for performance. Non-SCI Intelligence Information is not releasable to contractor employees who have not received a final security clearance at the appropriate level. Contractor shall comply with Naval Air Warfare Center Aircraft Division Scientific and Technical Intelligence Liaison Officer Memo of 03 MAR 09 (attached). Reviewed by: ______________________________________________ Senior Intelligence Officer, Stephen Hendricks carol.graham Typewritten Text carol.graham Typewritten Text

SUPPLEMENTAL SHEET FOR

N/A

N/A b CAGE CODE_2:

N/A c COGNIZANT SECURITY OFFICE Name Address and Zip Code_2:

N/A a LOCATION: NAS PAX River Maryland See Block 13

COR: Julia M. Richard, 5.1.D, 301-757-4888 (voice) ACOR: Edward Steiner, 5.1.D, 301-995-3103 (voice) a TYPED NAME OF CERTIFYING OFFICIAL:

James W. Beck

22541 Millstone Road Patuxent River, MD 20670-1606 NAVAIR FORM 5720.10 must be completed and attached.

Text2: Technical papers, briefings, presentations, either classified or unclassified to be presented at classified symposia must be submitted to AIR-7.4.1 for approval prior to presentation. Unclassified material submitted for public release (that is not to be presented at classified symposia) shall be forwarded for review prior to release as stated in item 12 above. All controlled unclassified and classified technical information shall be appropriately marked with distribution statements as specified in DoDI 5230.24 (Distribution Statements on Technical Documents) http://www.dtic.mil/whs/directives/corres/pdf/523024p.pdf.

Determination of need-to-know in connection with a classified visit is the responsibility of the individual/host who will disclose the classified information.

8. Addition work locations may include: Washington DC, Pt. Mugu CA, China Lake, CA, Dallas Fort Worth, TX, Orlando, FL, West Palm Beach, FL, Huntsville, AL, Eglin Air Force Base, FL, and Lakehurst, NJ

10a – Classified COMSEC material is not releasable to contractor employees who have not received a FINAL security clearance at the appropriate level. Cryptologic keying materials and Controlled Cryptographic Items (CCI) are controlled by Department of the Navy, NISPOM, and National Security Agency (NSA) guidelines. The contractor shall be guided by NSA/CSS Policy Manual, 3-16 in the control and protection of COMSEC material/information at their facilities. When access is required at Government facilities, contractor personnel will adhere to COMSEC rules and regulations as mandated by DoD 5220.22-M, EKMS 1 (series) and Command policy and procedures. Written concurrence of the Contracting Officer Representative (COR) or Alt. Contracting Officer Representative (ACOR) , identified in Block 9, is required prior to subcontracting.

10g. – To facilitate potential access to NATO classified information, to include NATO accredited SIPRnet terminals, all DoD military, civilian, and contractor personnel who are briefed on their responsibilities for protecting U.S. classified military information, shall also be briefed on the requirements for protecting NATO information, per Deputy Under Secretary of Defense Policy Security Memo of 5 Dec 01. Written concurrence of the COR or ACOR identified in Block 9, required prior to subcontracting.

10.h: Foreign Government Information (FGI) is not releasable to contractor employees who have not received a final security clearance at the appropriate level. Written concurrence of the Contracting Officer Representative (COR) or ACOR identified in Block 9, is required prior to subcontracting.

SEE ADDITIONAL DATA SHEET FOR DD FORM 254

Text3: Commander, Naval Air Warfare Center Aircraft Division Bldg. 2272, Rm. 074, Attn: 7.4.1 Security 47123 Buse Road Patuxent River, MD 20670

10.j: For Official Use Only information generated and/or provided under this contract shall be marked and safeguarded as specified in DoDM 5200.01 (DoD Information Security Program: Controlled Unclassified Information (CUI)) Vol. 4 (enclosure 3 pages 11-18) available at http://www.dtic.mil/whs/directives/corres/pdf/520001_vol4.pdf and DoD 5400.7-R, Freedom of Information Program Chapter 3 (pages 31-42) available at http://www.dtic.mil/whs/directives/corres/pdf/540007r.pdf.

All For Official Use Only (FOUO) and program sensitive data transmitted and stored via electronic means shall use approved encryption. The Contractor shall ensure that when transmitting FOUO, over non-secure e-mail (e.g. not connected to the Navy Marine Corps Intranet through Broadband Unclassified Remote Access System / Virtual Private network), those transmissions are encrypted using Department of Defense Public Key Infrastructure (PKI), or an approved DoD External Certificate Authority, in accordance with Public Key Infrastructure & Public Key Enabling, DoDI 8520.02, 24 May 2011.

10.k – Secret Internet Protocol Network (SIPRNET) access authorized. The contractor shall not access, download, or further disseminate any information or data that falls outside the scope and execution of the defined contract requirements. In the event any additional access is required, the Technical Point of Contact/Contracting Officer Representative, identified in Block 9, must modify the requirements for DD Form 254 revision. Contractor shall prepare and submit all required documentation as required by Command policy prior to receiving access. Written concurrence of the COR/ACOR identified in Block 9, is required prior to subcontracting.

11c- Automated Information Systems (AIS) shall be protected in compliance to the guidance in the DoD 5220.22-M, National Industrial Security Operating Manual (NISPOM).

11j –OPSEC: While performing aboard NAVAIR or other U.S. military sites, the contractor shall comply with the provisions of OPNAVINST 3432.1, the local Command/Facility 3432 Instruction Series (OPSEC), as well as any procedures identified in Program-Specific Operations Security Plans and Program Protection Plans (PPP) as applicable. The contractor shall comply with any and all additional OPSEC security plans and requirements of the Hosting Command. All applicable OPSEC Plans will be provided by TPOC identified in Blk 9.The prime contractor is responsible for subcontractor implementation of Operations Security

11.j - OPSEC: The contractor shall develop, implement, and maintain a facility level OPSEC Program to protect critical information to be used at the contractor facility during the performance of this contract. Contract data requirements list (CDRL) and data item description (DID-DI-MGMT-80934C)) are a component of the contract. A draft OPSEC Plan must be submitted to: Commander, Naval Air Systems Command, ATTN: Program/User Agency mailing address), within 90 days of contract award. A final OPSEC Plan is due 45 days from the date that the draft OPSEC Plan is approved. The Contractor shall be responsible for subcontractor implementation of the OPSEC Program requirements for this contract.

11.l. – Use of Secure Terminal Equipment (STE) for transmission of classified U. S. Government information is authorized. Secure Facsimile: Receipt and transmission of Classified Information authorized via Secure Facsimile. Written concurrence of the Contracting Officer Representative/Technical Point of Contact, identified in Block 9, is required prior to subcontracting.

The following security classification guide (s), and subsequent upgrades/revision(s), apply to classified performance on this contract. Subsequent updates shall be provided by the COR/ACOR identified in Blk 9, as Government Furnished Information (GFI), and shall be executed by the Contractor without obligation to modify this DD Form 254.

(02-235.02) - MH-60R MULTI MISSION HELICOPTER - dated 11 April 2013 (02-265.03) - MH-60S FLEET COMBAT SUPPORT HELICOPTER - dated 24 May 2010 (02-071.04) - TOMAHAWK CRUISE MISSLE - dated 11 June 2014

(02-257.01) - P-8A MULTI MISSION AIRCRAFT

(02-041.02) - P-3C (ORION) MARITIME PATROL AIRCRAFT - dated 07 June 2010 (02-018.05) - E-2C/D HAWKEYE - dated 12 August 2013

If additional security classification is required, contact the COR/ACOR Identified in block 9

**********************************END ADDITIONAL DATA SHEET FOR DD FORM 254**********************************

Text4: