DD_254_N00421-16-R-0018_Approved.pdf

L ,,b

DEPARTMENT OF DEFENSE 1. CLEARANCE AND SAFEGUARDING P'

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

a. FACILllY CLEARANCE REQUIRED

SECRET

(The requirements of the DoD National Industrial Security Program Operating Manual b. LEVEL OF SAFEGUARDING REQUIRED apply to all security aspects of chis effort.) SECRET

2. THIS SPECIFICATION IS FOR: fX and.comDlete as aoDlicableJ 3. THIS SPECIFICATION IS: IX and comalele as aoo/icab/e)

a. PRIME CONTRACT NUMBER a. ORIGINAL (Complete date in all cases) DATE (YYYYMMDD)

Request For Proposal, Not Valid For Performance x 20160119

b. SUBCONTRACT NIA1BER D. •«. V">t.U l:.upersedes all proviaw; specs) Revision Number DA TE {YYYYMMDD)

NIA NIA

c. SOLICITATION OR OTHER NUMBER DUE DATE (YYYYMMDD) c. FINAL (Complete hem 5 in all cases) DATE (YYYYMMDD) x N00421- 16-R-0018 NIA

4. IS THIS A FOLLOW-ON CONTRACT? l___ YES -~ NO. If YES, complete the following :

Classified material received or aenerated under (J)recedinq contract number) is transferred to this follow-on contract.

5. IS THIS A FINAL DO FORM 254? L_j YES L_XJ NO. lf YES, complete the following:

In response to the contra<:tor's reqtJest dated retention of the identified classified matertat ls authorited for the period of •.

6. CONTRACTOR (Include Commercial llfld Govemmenl Enlitv {CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, arid Zip Code)

Request For Proposal, Not Valid For Performance NIA NIA

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP COD_E b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

NIA NIA NIA

8. ACTUAL PERfORMANCE

a. LOCATION b. CAGECODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip_ Code)

Various US Military or U.S. Coast Guard Bases

NIA NIA

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

Contractor will provide propeller driven aircraft to perform various Fleet training exercises

COR: Donna McGuire, PMA 226, 252-466-5360, donna.mcguire@navy.mil 10.THIS CONTRACT WILL REQUIRE ACCESS TO: YES NO 11 . t; PERFORMING lttlS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION x x a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER x CONTRACTOR'S FACILllY OR A GOVERNMENT ACTIVITY

b. RESTRICTED"DATA x b. RECEIVE CLASSIFIED DOCUMENTS ONLY x

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION x c. RECEIVE ANO GENERATE CLASSIFIED MATERIAL x

d. FORMERLY RESTRICTED DATA x d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE x

e. INTELLIGENCE INFORMATION: . ~f~~~~~m~ ;m~mrn~- e. PERFORM SERVICES ONLY x !!?!~'!!~ ;);

(1) SENSmVE COMPARTMENT INFORMATION (SCI) x f. "HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S .. PUERTO x RICO, U.S. POSSESSIONS AND TRUST TERRITORIES

(2) NON-SCI ('tJ)v 1/~/1r,p x g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL INFORMATION CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER x

f. SPECIAL ACCESS INFORMATIOtl x h. REQUIRE A COMSEC ACCOUNT x

g. NATO INFORMATION x I. HAVE TEMPEST REQUIREMENTS x

h. FOREIGN GOVERt.NENT INFORMATION x j . HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS x j , LUTED DISSEMINATION INFORMATION x k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE x

j. FOR OFFICIAL USE ONLY INFORMATION x I. OTHER (Specify). x

k. OTHER (Specify) x STE and Secure FAx Authorized.

SIPRnet Authorized at Gov. Facility Only / /1/) .

i<.equest t'Or noposa1, Not vaua t'or l'errormance N00421-16-R-0018

Integrated Systems Evaluation, Experimentation and Test Department (ISEET)/Naval Test Wing Atlantic {NTWL), 2254 I Millstone Road Patuxent River, MD 20670-1606 NA VAIR FORM 5720.-10 must be completed and attached.

to th.e Directcrate for Freedom of Information and Security Review, Office or the Assistant Security or Defense (Public Affairs)" for review.

'In the case of non-DoD User A encies, re uests for discloSll'e shall be submitted lo lhal en .

II

. . e security c ass1 1ca11on gui ance ne e or 1s c ass1 ie e ort 1s nt1 1 e ow. any 1cu 1s encoun er in app ying 1s gu ance or 1 any o er contributing factor indicates a need for chan~ in this guidance, lhe conb'actor is aulhoriZed and encourag!'(I to provide recommended changes; to challenge the guidance or the classification assigned to any_ information or material furniShed or generated under this contract; and to ueslions for interpretation or this guidance to the offiCial identified below. Pending final decision, the in1ormation involved shall be handled aiid PfOlected at the higl)est level of cl signed or recommended. (fill in as aP.propriate for !fie classified effort. Attach, or fQrward under sepllfllte correspondence, any documentS/guideslextracts referenced herein. Add a iona1 pages as needed to provide complete guidance.)

Technical papers, briefings, presentations, either classified or unclassified to be presented at classified symposia must be submitted to AIR-7.4.1 for approval prior to presentation. Unclassified material submitted for public release (that is not to be presented at classified symposia) shall be forwarded for review prior to release as stated in item I 2 above. All controlled unclassified and classified technical information shall be appropriately marked with distribution statements as specified in DoDI 5230.24 (Distribution Statements on Technical Documents) http://www.dtic.mil/whs/directives/corres/pdf/523024p.pdf.

Determination of need-to-know in connection with a classified visit is the responsibility of the individual/host who will disclose the classified information.

I Oa & 1 lh- Classified COMSEC material is not releasable to contractor employees who have not received a FINAL security clearance at the appropriate level. Cryptologic keying materials and Controlled Cryptographic Items (CCI) are controlled by Department of the Navy, NISPOM, and National Security Agency {NSA) guidelines. The contractor shall be guided by NSA/CSS Policy Manual, 3-16 in the control and protection of COMSEC material/information at their facilities. When access is required at Government facilities, contractor personnel will adhere to COMSEC rules and regulations as mandated by DoD 5220.22-M, EK.MS I (series) and Command policy and procedures. Written concurrence of the Technical Point of Contact/Contracting Officer Representative, identified in Block 9, is required prior to subcontracting

1 Og. - To facilitate potential access to NATO classified information, to include NATO accredited STPRnet terminals, all DoD military, civilian, and contractor personnel who are briefed on their responsibilities for protecting U.S. classified military information, shall also be briefed on the requirements for protecting NA TO information, per Deputy Under Secretary of Defense Policy Security Memo of 5 Dec 01. Written concurrence of the Contracting Officer!fechnical Point of Contact, identified in Block 9, required prior to subcontracting.

SEE ADDITIONAL DAT A SHEET FOR DD FORM 254

10e {2) - Access to Intelligence information required for performance. Non-SCI Intelligence Information is not releasable to contractor employees who have not received a final s~urity ciearance at the appropriate level. Contractor shall co pl h Naval Ait,. Warfare Center Aircraft Division Scientific and Technical Intelligence Liaison Officer Memo of 03 MAR 09 (attached).

James W. Beck Contracting Officer Representative for Security

d. ADDRESS (Include Zip C-Ode)

Commander, Naval Air Warfare Center Aircraft Division Bldg. 2272, Rm. 074, Attn: 7.4.1 Security 47123 Buse Road Patuxent River, MD 20670

17. REQUIRED DISTRIBUTION x a. CONTRACTOR

b. SUBCONTRACTOR

c. COGMZANT SECURITY OFFICE FOR PRlllE AND SUBCONTRACTOR

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER

f. OTHERS AS NECESSARY

NO

NO

IS

SUPPLEMENTAL SHEET FOR Request For Proposal, Not Valid Fj

I O.j : For Official Use Only information generated and/or provided under this contract shall be marked and safeguarded as specified in DoDM

5200.01 (DoD Information Security Program: Controlled Unclassified Information (CUI)) Vol. 4 (enclosure 3 pages 11-18) available at http://www.dric.mil/whs/directives/corres/pdf/52000l _ vol4.pdf and DoD 5400.7-R, Freedom oflnformation Program Chapter 3 (pages 31-42) available at http://www.dtic.mil/whs/directives/corres/pdf/540007r.pdf.

All For Official Use Only (FOUO) and program sensitive data transmitted and stored via electronic means shall use approved encryption. The Contractor shall ensure that when transmitting FOUO, over non-secure e-mail (e.g. not connected to the Navy Marine Corps Intranet through Broadband Unclassified Remote Access System I Virtual Private network), those transmissions are encrypted using Department of Defense Public Key Infrasnucture (PKI), or an approved DoD External Certificate Authority, in accordance with Public Key Infrastructure & Public Key Enabling, DoDI 8520.02, 24 May 2011.

10.k - Secret Internet Protocol Network (SIPRNET) access authorized. The contractor shall not access, download, or further disseminate any information or data that falls outside the scope and execution of the defined contract requirements. In the event any additional access is required, the Technical Point of Contact/Contracting Officer Representative, identified in Block 9, must modify the requirements for DD Form 254 revision.

Contactor shall prepare and submit all required documentation as required by Command policy prior to receiving access. Written concurrence of the Contracting Officer Representativerrechnical Point of Contact, identified in Block 9, is required prior to subcontracting.

11 c- Automated Information Systems (AIS) shall be protected in compliance to the guidance in the DoD 5220.22-M, National Industrial Security Operating Manual (NISPOM).

11 d- Contractor shall provide adequate storage at their facility for classified hardware. Classified shipments are not to exceed two cubic feet.

Larger size shipments require prior coordination with the Facility Security Officer (FSO) to confirm facility storage capacity. Preparation and transmission of material for shipment will be in accordance the DoD 5220.22-M, NISPOM, and the DoD 52001 .01 V3, DoD Information Security Program Manual.

l lj -OPSEC: While performing aboard NA VAIR or other U.S. military sites, the contractor shall comply with the provisions of OPNAVINST 3432.1, the local Command/Facility 3432 Instruction Series (OPSEC), as well as any procedures identified in Program-Specific Operations Security Plans and Program Protection Plans (PPP) as applicable. The contractor shall comply with any and all additional OPS EC security plans and requirements of the Hosting Command. All applicable OPSEC Plans will be provided by TPOC identified in Blk 9.The prime contractor is

· responsible for subcontractor implementation of Operations Security.

11.j - OPSEC: The contractor shall develop, implement, and maintain a facility level OPSEC Program to protect critical information to be used at the contractor facility during the perfornJance of this contract. Contract data requirements list (CDRL) and data item description (DID-DI-MGMT-80934C)) are a component of the contract. A draft OPSEC Plan must be submitted to: Commander, Naval Air Systems Command, ATTN: Program/User Agency mailing address), within 90 days of contract award. A final OPSEC Plan is due 45 days from the date that the draft OPSEC Plan is approved. The Contractor shall be responsible for subcontractor implementation of the OPSEC Program requirements for this contract.

11 .1. - Use of Secure Terminal Equipment (STE) for transmission of classified U. S. Government information is authorized. Secure Facsimile:

Receipt and transmission of Classified Information authorized via Secure Facsimile. Written concurrence of the Contracting Officer Representativerrechnical ·Point of Contact, identified in Block 9, is required prior to subcontracting.

If additional security classification is required, contact the CORI ACOR Identified in block 9

••• .,.,.,.,.,., ••• .,.,.,.,,.••••"END ADDITIONAL DATA SHEET FOR DD FORM 254 •••••••••• •• •• •••••.µ.•••