dd0254--Solicit_Sandblasters_R-0083_-_LMsigned.pdf

CLASSIFICATION (When filled in): Unclassified

PREVIOUS EDITION IS OBSOLETE. Page # of ##

AEM LiveCycle Designer DD FORM 254, APR 2018 PREVIOUS EDITION IS OBSOLETE. Page # of ##

AEM LiveCycle Designer

DD FORM 254, APR 2018

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the National Industrial Security Program (NISP) apply to all security aspects of this effort involving classified information.)

OMB No. 0704-0567 OMB approval expires:

October 31, 2020

The public reporting burden for this collection of information, 0704-0567, is estimated to average 70 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, at whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

RETURN COMPLETED FORM AS DIRECTED IN THE INSTRUCTIONS.

1. CLEARANCE AND SAFEGUARDING

a. LEVEL OF FACILITY SECURITY CLEARANCE (FCL) REQUIRED

(See Instructions)

Secret

b. LEVEL OF SAFEGUARDING FOR CLASSIFIED INFORMATION/

MATERIAL REQUIRED AT CONTRACTOR FACILITY

None (See instructions)

2. THIS SPECIFICATION IS FOR: (X and complete as applicable.)

a. PRIME CONTRACT NUMBER (See instructions.)

b. SUBCONTRACT NUMBER

c. SOLICITATION OR OTHER NUMBER

N32253-18-R-0082

DUE DATE (YYYYMMDD)

20180906

3. THIS SPECIFICATION IS: (X and complete as applicable.)

a. ORIGINAL (Complete date in all cases.)

DATE (YYYYMMDD)

20180829

b. REVISED (Supersedes all previous specifications.)

REVISION NO. DATE (YYYYMMDD)

c. FINAL (Complete Item 5 in all cases.) DATE (YYYYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT? No Yes If yes, complete the following:

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? No Yes If yes, complete the following:

In response to the contractor's request dated , retention of the classified material is authorized for the period of:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE

b. CAGE CODE c. COGNIZANT SECURITY OFFICE(S) (CSO) (Name, Address, ZIP Code, Telephone required; Email Address optional)

7. SUBCONTRACTOR(S) (Click button if you choose to add or list the subcontractors -- but will still require a separate DD Form 254 issued by a prime contractor to each subcontractor) Add Row Remove last Row Delete All Rows

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE(S) (CSO) (Name, Address, ZIP Code, Telephone required; Email Address optional)

8. ACTUAL PERFORMANCE (Click button to add more locations.) Add Row Remove last Row Delete All Rows

a. LOCATION(S) (For actual performance, see instructions.)

See Item 13.

b. CAGE CODE (If applicable, see Instructions.)

c. COGNIZANT SECURITY OFFICE(S) (CSO) (Name, Address, ZIP Code, Telephone required; Email Address optional)

9. GENERAL UNCLASSIFIED DESCRIPTION OF THIS PROCUREMENT

To supplement the Shipyard labor force during the personnel shortage based on workload, i.e. technically qualified Plastic Fabricator/ Woodcrafting personnel. Work will take place in PHNSY&IMF work spaces to include unescorted access onboard Surface Combatants, Virginia Class, and Los Angeles Class Submarines.

PREVIOUS EDITION IS OBSOLETE. Page # of ##

AEM LiveCycle Designer DD FORM 254, APR 2018 PREVIOUS EDITION IS OBSOLETE. Page # of ##

AEM LiveCycle Designer

DD FORM 254, APR 2018

10. CONTRACTOR WILL REQUIRE ACCESS TO: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION f. SPECIAL ACCESS PROGRAM (SAP) INFORMATION

b. RESTRICTED DATA g. NORTH ATLANTIC TREATY ORGANIZATION

(NATO) INFORMATION

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION (CNWDI) (If CNWDI applies, RESTRICTED DATA must also be marked.) h. FOREIGN GOVERMENT INFORMATION

d. FORMERLY RESTRICTED DATA i. ALTERNATIVE COMPENSATORY CONTROL MEASURES

(ACCM) INFORMATION

e. NATIONAL INTELLIGENCE INFORMATION:

(1) Sensitive Compartmented Information (SCI)

(2) Non-SCI

j. CONTROLLED UNCLASSIFIED INFORMATION (CUI) (See instructions.)

k. OTHER (Specify) (See instructions.)

Unclassified Naval Nuclear Propulsion Information (U-NNPI)

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. See instructions. Provide details in Blocks 13 or 14 as set forth in the instructions.)

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT

ANOTHER CONTRACTOR'S FACILITY OR A GOVERNMENT

ACTIVITY

(Applicable only if there is no access or storage required at contractor facility.

See instructions.)

b. RECEIVE AND STORE CLASSIFIED DOCUMENTS ONLY

c. RECEIVE, STORE, AND GENERATE CLASSIFIED

INFORMATION OR MATERIAL

d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. PERFORM SERVICES ONLY

f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE

THE U.S.,PUERTO RICO, U.S. POSSESSIONS AND TRUST

TERRITORIES

g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE

TECHNICAL INFORMATION CENTER (DTIC) OR OTHER

SECONDARY DISTRIBUTION CENTER

h. REQUIRE A COMSEC ACCOUNT

i. HAVE A TEMPEST REQUIREMENT

j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

k. BE AUTHORIZED TO USE DEFENSE COURIER SERVICE

l. RECEIVE, STORE, OR GENERATE CONTROLLED UNCLASSIFIED

INFORMATION (CUI).

(DoD Components: refer to DoDM 5200.01, Volume 4 only for specific CUI protection requirements. Non-DoD Components: see instructions.)

m. OTHER (Specify) (See instructions.)

Requires a Yellow Naval Shipyard badge

12. PUBLIC RELEASE

Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the National Industrial Security Program Operating Manual (NISPOM) or unless it has been approved for public release by appropriate U.S. Government authority.

Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified here with at least office and phone contact information and if available, an e-mail address. (See instructions)

DIRECT THROUGH (Specify below) Public Release Authority:

PHNSY & IMF CONGRESSIONAL AND PUBLIC AFFAIRS

OFFICER (Code 1160)

13. SECURITY GUIDANCE Add Signature Remove last Signature Delete All Signatures

The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract;

and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended.

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. The field will expand as text is added. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. Also allows for up to 6 internal reviewers to digitally sign. See instructions for additional guidance or use of the fillable PDF.)

-Item 8(a)- Geographic locations of work performance for authorized government facilities;

1) Pearl Harbor Naval Shipyard & Intermediate Maintenance Facility 667 Safeguard street, Suite 100

JBPHH, HI 96860-5033

2) Commander, Submarine Force Pacific, U.S. Pacific Fleet, Morton Street, JBPHH, HI 96860

3) Joint Base Pearl Harbor Hickam, JBPHH, HI 96860

-Item 10(k)1: (U) Security Controls on the Dissemination of NNPI Received or Generated Under NAVSEA Contracts 12/1/2011 -Item 10(k)2: OPNAVINST, N9210.3 (U) Safeguarding of Naval Nuclear Propulsion Information (NNPI) 6/7/2010

-Item 10(k)5: Prior to subcontracting access to NNPI approval of the official in Item 16 of this DD 254 is required.

-11(a) No classified and/or NNPI material will be removed from the Ship in the performance of this contract unless approved in

PREVIOUS EDITION IS OBSOLETE. Page # of ##

AEM LiveCycle Designer DD FORM 254, APR 2018 PREVIOUS EDITION IS OBSOLETE. Page # of ##

AEM LiveCycle Designer

DD FORM 254, APR 2018

writing by the ship's Commanding Officer and PHNSY & IMF's Security Manager (Code 1122). Contractor shall utilize security guidance from SECNAVINST 5510.36A and the DOD 5220.22-M (NISPOM).

-All security aspects of this contract fall under the cognizance of PHNSY & IMF. Contact the PHNSY & IMF Security Contracting Officer for any questions regarding the content of the DD form 254. -Classified or unclassified technical papers to be presented at a classified symposium must be approved by the PHNSY & IMF Contracting Officer's Representative (COR) prior to the presentation.

-Security classification guides and controlled unclassified information (CUI) (e.g., FOUO, distribution statement controlled) are not authorized for public release; therefore, they cannot be posted on a publicly accessible web-server or transmitted over the internet unless appropriately encrypted. Request for public release cannot be transmitted via the internet until the contractor receives final approval from PHNSY & IMF (Code 1160).

-The subsequent revisions of Security Classification Guide(s) apply to this contract. Subsequent revisions shall be provided by the Government Contracting Activity (GCA) as Government Furnished Information (GFI) and shall be executed by the Contractor at no additional cost to the government.

-Contractor must submit a request for sharing of classified and other sensitive information between prime contracts in writing to the PHNSY & IMF's Security Contracting Officer identified in Item 17 of this form.

-Personnel designated as derivative classifiers shall receive derivative classification training prior to access from the contractor's Facility Security Officer (FSO). The FSO shall ensure personnel receive initial and biennial training during the life of this contract. Evidence of completion, training certificates or equivalent, shall be provided to the Information Assurance Manager no later than the individual's due date.

-All classified documents must be destroyed using a National Security Agency (NSA) approved high security crosscut shredder listed on the NSA/CSS evaluated products list(EPL) for high security crosscut paper shredders, or other approved method for destroying classified information.

-All classified information involved in security incidents shall be retained and provided to the certifying official in Item 17 of this DD 254 for classification review.

-All reports of contractor security violations associated with this contract shall be sent by the Cognizant DSS field office directly to the certifying official in Item 17 of this DD254.

-Forward a copy of subcontractor DD 254s issued under this contract to the official shown in item 17 of this DD254.

-All security related issues, incidents, requests pertaining to this contract shall be presented in writing by the contractor’s Facility Security Officer (FSO) to the individual identified in Item 17 of this DD254. The contractor shall abide by other reporting requirements outlined in the NISPOM.

-This DD form 254 is for solicitation purposes only; therefore it must be returned to the official shown in item 17 of this DD254 to be updated before the contract DD form 254 can be issued to the contractor.

-Contractor must comply with Attachments (1) through (3).

ATTACHMENT (1)

SECURITY REQUIREMENTS APPLICABLE FOR ACCESS TO SUBMARINES INSIDE PEARL HARBOR NAVAL SHIPYARD &

INTERMEDIATE MAINTENANCE FACILITY’S CONTROLLED INDUSTRIAL AREAS

(Rev. OCT 2013)

1. The provisions of these security requirements are applicable to Shipyard & IMF areas including the areas listed below:

a. CIA-I (Controlled Industrial Area I) – The large fenced-in area encompassing the waterfront and industrial shops, extending from Building 1274 to include all of Bravo Pier 2.

b. CIA-II (Controlled Industrial Area II) - Dry Dock No. 4 Compound (including Building 1444).

2. Performance of all work under this Contract is restricted to U.S. citizens and U.S. nationals only. U.S. citizen employees of a foreign owned, controlled, and/or influenced company (including a parent company) for access purposes are considered foreign nationals and

PREVIOUS EDITION IS OBSOLETE. Page # of ##

AEM LiveCycle Designer

DD FORM 254, APR 2018

special authorization would be required for escorted access to PHNSY & IMF spaces.

3. For issuance of Red or Yellow badges, a “classified contract” is required with a Contract Security Classification Specification (DD 254) that allows access to Restricted Data (for Red) and Naval Nuclear Propulsion Information (NNPI) (for both). Also in accordance with OPNAVINST N9210.3 (Safeguarding of NNPI) the contract or subcontract must incorporate all NNPI handling requirements.

4. Security requirements are applicable to the prime contractor as well as to all subcontractors and suppliers thereunder.

5. The period of proposed work to be performed on the submarine is subject to further approval of the Shipyard & IMF Commander depending on the sensitivity of Shipyard & IMF industrial operations in the affected areas.

6. Three weeks prior to the visit, the contractor, subcontractors, and suppliers shall complete applicable items on Part 1 of the Contractor Visit Request (VR) form (PH-SYD 5512/28) and submit it to the Government Contracting Activity (GCA) or COR for completion of Part

2. The GCA/COR will then forward the VR and DD 254, as applicable, to the Shipyard & IMF Sponsor for completion of Part 3 no later than two weeks prior to the visit. The Shipyard & IMF Sponsor will submit the VR to the Pass and Identification Office (Pass and ID) no later than one week prior to the visit. The VR must specify the areas to be accessed on the submarine. Entry into the CIA and access onboard a submarine for those listed on the VR may be authorized under the following conditions:

a. All contractors, subcontractors, and suppliers must have a DOD Facility Security Clearance and those contractors who need access to the submarine must have DOD security clearances granted by Defense Security Service (DSS) and the contractors’ clearance eligibility, access and affiliation data must be current and accurate in the DOD Joint Personnel Adjudication System. A Yellow or Red badge will be issued depending on the areas needed to be accessed onboard the submarine. Unescorted or escorted access for Yellow badged contractors onboard the submarine will depend on how the submarine is controlling access to the Nuclear Work Areas. For a Yellow (CNIA) badge, the contractor must have at least an Interim Confidential. For a Red (NWA) badge, the contractor must have a final security clearance.

b. Under no circumstances shall personnel sign, transmit or hand-carry their own VR. The VR should be mailed, e-mailed encrypted or password protected, or delivered by the GCA or Shipyard & IMF Sponsor.

c. Ensure that all contractor employees provide a valid (i.e. state or federally issued) photo identification card and proof of U.S.

citizenship to the Pass and ID Office prior to being issued a Shipyard & IMF badge, see Attachment (1) for a list of acceptable documents.

d. Ensure any derogatory or questionable information concerning contractor employees possessing a DOD security clearance or a Shipyard & IMF badge is immediately reported to the Security Office (Code 1125) so that access eligibility can be evaluated.

e. Ensure that contractor employees attend a 30-minute annual orientation on the safety, security, and radiological protection aspects of industrial operations within the Shipyard & IMF.

NOTE: The briefing, which is in the form of a video presentation, will be given at the Pass and ID Office in groups of 10, prior to the issuance of Shipyard & IMF badges. Special arrangements for larger groups can be scheduled upon request.

f. Ensure that all employees wear and display the Shipyard & IMF badge in the chest area at all times while entering, remaining in, and exiting Shipyard & IMF spaces.

g. Ensure that each badge is used only by the specific individual named on the badge.

h. Maintain strict accountability over identification badges and passes issued by the Pass and ID Office. Report immediately, to the Pass and ID Office, any badges/passes that are missing or lost and the circumstances. Return badges/passes to the GCA immediately upon termination of any employee, upon expiration, upon completion of the work, or when no longer required. The GCA will ensure that all badges/passes are returned and forwarded to the Shipyard & IMF Pass and ID Office (Code 1125.2).

i. Restrict hours of work to 0630 – 1500 hours Monday through Friday only. When operational needs require the contractor to schedule work before 0630 and/or after 1500 (Monday through Friday) or on weekends and holidays, provide written notification at least two weeks in advance to the GCA who will obtain approval from the respective Shipyard & IMF departments, offices, and shops. Such notifications will include the company name, type of work to be performed, location of work, specific dates, and hours of work. The POC will submit a request in writing to the Security Office (Code 1124) by Wednesday of each week to add the contractor to the “Non-Duty Hours Contractor Access List” that is prepared weekly. Emergency access for contractors not on the non-duty hours list may be authorized entry by the Security Officer or Security Operations Officer upon verification with the POC.

j. Restrict employees/representatives to the work site and control travel directly to and from the work site.

PREVIOUS EDITION IS OBSOLETE. Page # of ##

AEM LiveCycle Designer

DD FORM 254, APR 2018

7. The Pass and ID Office is located in Building 207 at Safeguard Street and Russell Avenue.

8. No vehicle will be permitted access to a work site in the CIA without a Shipyard & IMF CIA vehicle pass. The Shipyard & IMF CIA vehicle passes are issued for limited purposes by the Shipyard & IMF Pass and ID Office. Shipyard & IMF CIA vehicle passes will not be issued proof of vehicle registration to the contractor’s company has been presented to Shipyard & IMF Pass and ID. All vehicles are required to conform to Shipyard & IMF traffic regulations. The speed limit is 15 MPH in the CIA. Outside the CIA, the speed limit is as posted or marked.

9. Only those contractor vehicles meeting all of the following criteria will be allowed to enter the CIA with the Shipyard & IMF CIA vehicle pass:

a. All vehicles must clearly display an authorized company sign or logo on both sides of the vehicles. The logo must be either painted or a magnetic sign. Paper or cardboard signs are not authorized. Lettering of the logo must not be less than 2-1/2 inches in height and 1/4 inch wide.

b. They must be company or commercial vehicles used by the contractor to transport heavy equipment and/or material to the job site.

In limited circumstances, contractor vehicles may be allowed entry to conduct on-site inspections at the job site.

NOTE: Contractor vehicles will not be used solely to transport employees to the job site. Privately owned vehicles will not be allowed in the CIA.

10. A limited number of CIA vehicles passes will be issued to each contractor, subcontractor and vendor to facilitate work requirements.

Every vehicle entering the CIA will display the pass on the dashboard or visor (facing outward). The pass will be visible at all times while in the CIA. Parking is limited to those areas that are specifically identified on the pass. If additional passes are required, adequate justification must be presented to the Pass and ID Office via the GCA.

11. Vehicles may enter and exit from gates located on Paul Hamilton Avenue or on Chosin Street, Monday through Friday, 0630 to 1500 hours. For access before 0630 and after 1500 hours, weekends, and holidays the contractors must comply with paragraph 6.i. After proper notification, contractors may enter and exit from either gate after hours, weekends, and holidays.

12. Parking is not permitted on any piers on any dry dock/waterfront areas. Contractors shall not park on or block the marked fire lanes at any time. Vehicles may stop on the piers of dry dock/waterfront areas for 15 minutes for loading or unloading. An exception may be made for vehicles which are part of the equipment needed to do the required work and are attached or connected to the pier or ship, i.e., a truck which uses a mounted generator, a vehicle with built-in equipment, etc. A written request for pier parking authorization for these types of vehicles with justification will be sent to the Shipyard & IMF Security Officer (Code 1120) via the GCA at least two weeks prior to the date the parking space is required. The following information is required:

a. The license number of the vehicle(s).

b. The type and size of the vehicle(s) (pickup truck, crane, forklift, etc.)

c. Parking location.

d. Purpose and duration.

13. Parking for privately-owned vehicles is available:

a. In the “N” parking lot on Central Avenue and “D” parking lot on Paul Hamilton Avenue, located between South Avenue and Safeguard Street or;

b. In the “C” parking lot on Lake Erie Street and Central Avenue.

14. All vehicles are subject to search while entering, remaining in, or leaving the Shipyard & IMF and/or JBPHH areas. A Property Pass (OP-7) issued and signed by the GCA must cover all government material being transported out of the CIA by contractors. Material found without a Property Pass will be confiscated and a police offense report issued.

15. Entry into shop/office/ship spaces covered by this contract will be subject to prior approval of the respective Shop Superintendent/ Office Head/Ship’s Commanding Officer. Contractors will coordinate action with the GCA for obtaining entry approval.

16. The Shipyard & IMF Security Officer will provide guard services on a reimbursable basis for contractors requiring guard services.

PREVIOUS EDITION IS OBSOLETE. Page # of ##

AEM LiveCycle Designer

DD FORM 254, APR 2018

The contractor must notify and obtain approval from the Shipyard & IMF Security Office via the GCA at least two weeks prior to the time guard services will be required. Notification in writing shall (include the purpose and number of hours guard services will be required.

17. Contractor personnel will not be permitted to enter Shipyard & IMF buildings, spaces, and areas not covered by this contract except on prior approval of the Shipyard & IMF department/office/shop having jurisdiction of the areas. Contractors will coordinate action with the GCA to obtain such entry approval.

18. Access to unclassified and classified U.S. Navy shipbuilding, conversion, or repair technology and related technical information manuals, documents, drawings, plans, specifications, etc., by the Contractor shall be restricted to an official need-to-know basis. This type of information shall be handled, controlled, and safeguarded to prevent oral, visual, and documentary disclosure to uncleared personnel, the public, to foreign sources, and to all personnel not having an official need-to-know. It shall be returned to the Pearl Harbor Naval Shipyard & IMF upon completion of contracted work, except when the GCA grants specific retention authorization.

19. Photography and photographic equipment are prohibited in Pearl Harbor Naval Shipyard & IMF, to include personal cellular phones with camera features. When operationally required, a written request containing specific justification and details will be submitted to the Security Office (Code 1125) via the GCA for consideration. If a Shipyard & IMF photographer is unable to take the photographs, authorization will only to be granted to the contractor if the contractor has a Shipyard & IMF Sponsor and is under continuous escort of a designated Shipyard & IMF employee. The designated escort shall be briefed by Code 1125. The escort will take the film or photographic media in his or her custody. The Sponsoring Shipyard Code/Office will mark and control the photographs as “For Official Use Only” and route the photographs in accordance with local regulations for review and approval of a Distribution Statement (prior to release from Shipyard & IMF).

20. Portable Electronic Devices (PEDs). PEDs include pagers, mobile/cellular telephones (with/without cameras), personal digital assistants/job performance aids, laptop/notebook/handheld computers, digital imagery (still/video) devices, analog/digital sound recorders (e.g. I-PODs), video game devices, USB devices, and devices of similar capability, functionality, or design. Privately-Owned PED devices such as those listed above are prohibited on Shipyard premises. Privately-Owned PEDs without camera devices are prohibited unless approved in writing by the local Information Assurance Authority (IAA) or Information Assurance Manager (IAM). Violations may result in the confiscation and sanitization of the PEDs. The only approved method of sanitizing most PEDs is physical destruction.

a. All personnel authorized to use PEDs in Shipyard & IMF workspaces, whether privately-owned (includes contractor-owned) or government-owned, are required to comply with NAVSHIPYD&IMFPEARLINST 5239.1(series), Activity Information Systems Security Plan (AISSP)

b. For Privately-Owned PEDs without camera devices approved for use in Shipyard & IMF spaces, the user shall follow:

(1) The PEDs will not handle, process, or store any U.S. Government information unless otherwise authorized by the IAM.

(2) The PEDs will not be connected to any Shipyard & IMF network, U.S. Government-Owned computers, or associated peripherals.

(3) The PEDs will operate in only approved locations. These PEDs are not allowed in spaces processing and/or handling classified information.

(4) Users shall comply with software copyright laws and agreements.

(5) Violations of the above may result in the confiscation of the PED.

(6) The U.S. Government will not be liable for the privately-owned PED hardware/software while on the Shipyard & IMF premises.

c. For U.S. Government-Owned PEDs approved for use in Shipyard & IMF spaces and issued for official government travel, the user shall follow:

(1) Government-Owned PEDs that are synchronized with desktop computers on Shipyard & IMF Local Area Network (LAN) shall follow the security measures in Enclosure (2) of NAVSHIPYD&IMFPEARLINST 5239.1(series).

(2) Use of Government-Owned PED equipment while on travel and performing official government business is allowed.

(3) Government-Owned PEDs shall not be checked as baggage, stored in airport or bus station lockers, or left with desk clerks at motels. PEDs with NNPI data shall not be left unattended in the motel room. If a PED with no NNPI data is left unattended in the motel room, it must be locked in a personally owned container (i.e., luggage, brief case, etc.).

PREVIOUS EDITION IS OBSOLETE. Page # of ##

AEM LiveCycle Designer

DD FORM 254, APR 2018

(4) Government-Owned PEDs shall not be taken out of the United States without an authorization letter from the IAM.

(5) Government-Owned PEDs will not be used to store passwords; safe and door combinations; personal identification numbers (PINs); as well as classified information.

(6) Government-Owned PEDs shall not be used for classified information processing unless specifically authorized in writing by the local IAA.

(7) Where feasible, Government-Owned PEDs shall employ up-to-date signature files that are used to profile and identify viruses, worms, and malicious code. As proven anti-virus clients for PEDs become available, these clients shall be deployed to the greatest possible extent in all PEDs that connect to the Shipyard & IMF LAN.

21. Ensure that yellow plastic material is not used for warning signs, covering material, etc.

22. Be responsible for control and security of all contractor-owned equipment and material at the work site. Report immediately, all missing/lost/stolen property to the Joint Base Pearl Harbor Hickam Security Detachment (phone 474-6751) as each case occurs.

23. Ensure that no material is stacked within ten (10) feet of the CIA perimeter. Remove from the work site, or secure, ladders or other such equipment, which could be used to climb the CIA perimeter fence. Ensure that no vehicles are parked within ten (10) feet of the CIA perimeter.

24. Provide written notification to the Commander, Pearl Harbor Naval Shipyard & IMF (Code 1120) via the GCA, two (2) weeks prior to actual start of work to allow for notification of the appropriate Shipyard & IMF departments, offices, and shops of the impact resulting from the contract work. Such notifications will include specific details such as work schedules (including actual start date for Shipyard & IMF entry), and impact statements concerning tasks to be done, e.g. specific parking spaces to be vacated, inclusive dates involved, traffic rerouting, changes to traffic and parking patterns, traffic/parking controls to be instituted by the contractor, barricades to be erected by the contractor, etc., along with sketches of the particular areas involved.

25. Two weeks prior to making any penetrations (i.e. tunneling under, cutting through a fence or building, etc.) in a restricted area (e.g.

CIA fence line, CNIA or NWA) the contractor shall contact Code 1120 via the GCA to make arrangements for a security guard or other measures required to meet all security requirements. The cost for the security guard will be charged to the contractor.

26. Any exceptions to these security requirements must be coordinated with the Security Office (Code 1120).

ATTACHMENT (2)

NARRATIVE: 9T-NNPI

REVISED: 1 DECEMBER 2011

SECURITY CONTROLS ON THE DISSEMINATION OF NAVAL NUCLEAR PROPULSION INFORMATION RECEIVED OR

GENERATED UNDER NAVSEA CONTRACTS

1. The provisions of the DOE-DOD Classification Guide for the Naval Nuclear Propulsion Program, CG-RN-1, Revision 3, and its Interpretive Guidance Bulletins and OPNAVINST N9210.3 are applicable to all Naval Nuclear Propulsion Information (NNPI) work done under this contract.

2. Disclosure of NNPI, classified or unclassified, to contractor employees who are granted Limited Clearances under the provisions of DOD 5220.22M, National Industrial Security Program Operating Manual (NISPOM) is not authorized without approval from the Naval Sea Systems Command (SEA 08).

3. Access to Navy ships, or Navy or commercial shipyards where Navy ships are located, is subject to the requirements of NAVSEAINST 5500.3A of 2 March 1988, Subj: Control of Access to Vessels by NON-US Citizens.

4. All Naval Nuclear Propulsion Information, classified or unclassified shall be marked in accordance with Chapter (2) of OPNAVINST N9210.3.

5. Critical Technology (also referred to as militarily critical technology) is defined as follows:

a. Arrays of design and manufacturing know-how (including technical data);

PREVIOUS EDITION IS OBSOLETE. Page # of ##

AEM LiveCycle Designer

DD FORM 254, APR 2018

b. Keystone equipment (including manufacturing, inspecting and testing equipment) is the equipment specifically necessary for the effective application of a significant array of technical information and know-how;

c. Keystone materials are materials specifically necessary for the effective application of a significant array of technical information and know-how; and

d. Goods accompanied by sophisticated operation, application or maintenance know-how that would make a significant contribution to the military potential of any country or combination of countries and that may prove detrimental to the security of the United States.

ATTACHMENT (3)

DoDM 5200.01-V4, February 24, 2012 Change 1, 05/09/2018 (Excerpt from Enclosure 3, page 10, paragraph 1.f.)

f. ALL DoD unclassified information MUST BE REVIEWED AND APPROVED FOR RELEASE through standard DoD Component processes before it is provided to the public (including via posting to publicly accessible websites) in accordance with DoDD 5230.09 (Reference (j)), Deputy Secretary of Defense Memorandum (Reference (k)), and other applicable regulations. Unclassified information previously approved for release to the public may be shared with any foreign government or organization.

(Excerpt from Enclosure 3, page 17, paragraph 2.e.)

e. Protection of FOUO Information

(1) During working hours, reasonable steps shall be taken to minimize the risk of access by unauthorized personnel (e.g., not reading, discussing, or leaving FOUO information unattended where unauthorized personnel are present). After working hours, FOUO information may be stored in unlocked containers, desks, or cabinets if Government or Government-contract building security is provided. If such building security is not provided or is deemed inadequate, the information shall be stored in locked desks, file cabinets, bookcases, locked rooms, etc.

(2) FOUO information and material may be transmitted via first class mail, parcel post, or, for bulk shipments, via fourth class mail.

Whenever practical, electronic transmission of FOUO information (e.g., data, website, or e-mail) shall be by approved secure communications systems or systems utilizing other protective measures such as Public Key Infrastructure (PKI) or transport layer security (e.g., https). Use of wireless telephones should be avoided when other options are available. Transmission of FOUO by facsimile machine (fax) is permitted; the sender is responsible for determining that appropriate protection will be available at the receiving location prior to transmission (e.g., machine attended by a person authorized to receive FOUO; fax located in a controlled government environment).

(3) FOUO information may only be posted to DoD websites consistent with security and access requirements specified in Reference (k).

(4) Additional guidance regarding FOUO information that may also require protection pursuant to the Privacy Act of 1974, as amended, may be found in Reference (r).

(5) Record copies of FOUO documents shall be disposed of according to provisions of chapter 33 of title 44, U.S.C. (Reference (v)) and the DoD Component records management directives. Non-record FOUO documents may be destroyed by any of the means approved for the destruction of classified information or by any other means that would make it difficult to recognize or reconstruct the information.

(6) The originator or other competent authority (e.g., initial FOIA denial and appellate authorities) shall terminate the FOUO status of specific information when circumstances indicate that the information no longer requires protection from public disclosure. When the FOUO status of information is terminated in this manner, all known holders shall be notified, to the extent practical. Upon notification, holders shall efface or remove the FOUO markings, but records in file or storage need not be retrieved solely for that purpose. Information whose FOUO status has been terminated shall not be released to the public without the review and approval required by paragraph 1.f of this enclosure.

PREVIOUS EDITION IS OBSOLETE. Page # of ##

AEM LiveCycle Designer

DD FORM 254, APR 2018

List of Attachments [3] (All Files Must be Attached Prior to Signing, i.e., for any digital signature on the form)

Attachment (1) SECREQS SUBS REV OCT 2013.doc

Add Attachment View Selected Attachment Remove Selected Attachment

Item 10(k): Access to U-NNPI and NNPI NSI is authorized for this contract.

NAME & TITLE OF REVIEWING OFFICIAL

Tina J. Williams (SEA 08) Program Manager, Security Oversight

SIGNATURE

See item 14 for OPSEC guidance.

NAME & TITLE OF REVIEWING OFFICIAL

Angelo McDuffie, OPSEC Program Manager

SIGNATURE

14. ADDITIONAL SECURITY REQUIREMENTS

Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

No Yes If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the CSO. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted.

(See instructions for additional guidance or use of the fillable PDF.)

The Contractor may be exposed to Critical Information (CI), therefore an OPSEC Plan is required. The OPSEC Plan will be forwarded to the Contractor by encrypted email, U. S. Army Aviation and Missile Research Development and Engineering Safe Access File Exchange (AMRDEC SAFE) or by U. S. Postal Service. All Contractor (including subcontractor) personnel assigned to this contract will accomplish the following requirements in support of Pearl Harbor Naval Shipyard & IMF (PHNSY&IMF) OPSEC Program.

During the period of this contract, the Contractor personnel may be exposed to, use, or produce, U.S. Government CI and observables indicators which may lead to discovery of CI.

The following CI shall be controlled and will not be distributed to unauthorized third parties, including foreign governments or Foreign Ownership Control, or Influence (FOCI) companies without PHNSY&IMF's Security Manager (Code 1122) approval. The Contractor shall not post to company websites, publications, newsletters or other media (e.g. unencrypted email, telephones, cell phones) any images, data or information that reveal sensitive government operations, personnel, equipment, and/or classified or controlled unclassified information

(CUI).

Information related to this contract, to include; classified and unclassified Naval Nuclear Propulsion Information (NNPI) and material, will not be removed from the ship in the performance of this contract unless approved in writing by the Commanding Officer and Code 1122.

Production schedules, names and personal information of company and government subject matter experts, technical leads, descriptions, drawings, technical papers, components, data, or equipment designed specifically for specialized production shall be safeguarded at all times to prevent unauthorized disclosure.

The Contractor and its personnel shall not divulge any information about files, data, processing activities or functions, user IDs, passwords or other knowledge that may be gained to anyone who is not authorized to have access to such information. Furthermore, such conduct may be cause for criminal prosecution and imposition of criminal and civil penalties.

15. INSPECTIONS

Elements of this contract are outside the inspection responsibility of the CSO.

No Yes If Yes, explain and identify specific areas and government activity responsible for inspections. The field will expand as text is added or you can also use item

13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted.

(See instructions for additional guidance or use of the fillable PDF.)

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

a. GCA NAME

Commander, PHNSY & IMF (Code 410)

b. ACTIVITY ADDRESS CODE (AAC) OF THE CONTRACTING OFFICE (See Instructions)

N32253

c. ADDRESS (Include ZIP Code)

667 Safeguard Street, Suite 100

JBPHH, HI 96860-5033

d. POC NAME

Robert Jones, ext. 5303

e. POC TELEPHONE (Include Area Code)

+1 (808) 473-8000

f. EMAIL ADDRESS (See Instructions) robert.d.jones11@navy.mil

17. CERTIFICATION AND SIGNATURES

Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. Upon digitally signing Item 17h, no changes can be made as the form will be locked.

PREVIOUS EDITION IS OBSOLETE. Page # of ##

AEM LiveCycle Designer

DD FORM 254, APR 2018

a. TYPED NAME OF CERTIFYING OFFICIAL (Last, First, Middle Initial) (See Instructions)

McMillan, Laura F., ext. 3328

b. TITLE

Security Contracting Officer

c. ADDRESS (Include ZIP Code) Commander, PHNSY & IMF (Code 1122LM) 667 Safeguard Street, Suite 100

JBPHH, HI 96860-5033

d. AAC OF THE CONTRACTING OFFICE (See Instructions)

N32253

e. CAGE CODE OF THE PRIME CONTRACTOR

(See Instructions.)

f. TELEPHONE (Include Area Code)

+1 (808) 473-8000

g. EMAIL ADDRESS (See Instructions) laura.mcmillan@navy.mil

h. SIGNATURE

i. DATE SIGNED (See Instructions)

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICIAL

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND

SUBCONTRACTOR

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY

ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER

f. OTHER AS NECESSARY (If more room is needed, continue in Item 13 or on additional page if necessary.)

SEA 08

DoDM 5200.01-V4, February 24, 2012

Change 1, 05/09/2018

(Excerpt from Enclosure 3, page 10, paragraph 1.f.)

f. ALL DoD unclassified information MUST BE REVIEWED AND APPROVED FOR RELEASE through standard DoD Component processes before it is provided to the public (including via posting to publicly accessible websites) in accordance with DoDD 5230.09 (Reference (j)), Deputy Secretary of Defense Memorandum (Reference (k)), and other applicable regulations. Unclassified information previously approved for release to the public may be shared with any foreign government or organization.

(Excerpt from Enclosure 3, page 17, paragraph 2.e.)

e. Protection of FOUO Information

(1) During working hours, reasonable steps shall be taken to minimize the risk of access by unauthorized personnel (e.g., not reading, discussing, or leaving FOUO information unattended where unauthorized personnel are present). After working hours, FOUO information may be stored in unlocked containers, desks, or cabinets if Government or Government-contract building security is provided. If such building security is not provided or is deemed inadequate, the information shall be stored in locked desks, file cabinets, bookcases, locked rooms, etc.

(2) FOUO information and material may be transmitted via first class mail, parcel post, or, for bulk shipments, via fourth class mail. Whenever practical, electronic transmission of FOUO information (e.g., data, website, or e-mail) shall be by approved secure communications systems or systems utilizing other protective measures such as Public Key Infrastructure (PKI) or transport layer security (e.g., https). Use of wireless telephones should be avoided when other options are available. Transmission of FOUO by facsimile machine (fax) is permitted; the sender is responsible for determining that appropriate protection will be available at the receiving location prior to transmission (e.g., machine attended by a person authorized to receive FOUO; fax located in a controlled government environment).

(3) FOUO information may only be posted to DoD websites consistent with security and access requirements specified in Reference (k).

(4) Additional guidance regarding FOUO information that may also require protection pursuant to the Privacy Act of 1974, as amended, may be found in Reference (r).

(5) Record copies of FOUO documents shall be disposed of according to provisions of chapter 33 of title 44, U.S.C. (Reference (v)) and the DoD Component records management directives. Non-record FOUO documents may be destroyed by any of the means approved for the destruction of classified information or by any other means that would make it difficult to recognize or reconstruct the information.

(6) The originator or other competent authority (e.g., initial FOIA denial and appellate authorities) shall terminate the FOUO status of specific information when circumstances indicate that the information no longer requires protection from public disclosure. When the FOUO status of information is terminated in this manner, all known holders shall be notified, to the extent practical. Upon notification, holders shall efface or remove the FOUO markings, but records in file or storage need not be retrieved solely for that purpose. Information whose FOUO status has been terminated shall not be released to the public without the review and approval required by paragraph 1.f of this enclosure.

Attachment (3) to DD 254

SECURITY REQUIREMENTS APPLICABLE FOR ACCESS TO SUBMARINES INSIDE PEARL HARBOR NAVAL SHIPYARD & INTERMEDIATE MAINTENANCE FACILITY’S CONTROLLED INDUSTRIAL AREAS

(Rev. OCT 2013)

1. The provisions of these security requirements are applicable to Shipyard & IMF areas including the areas listed below:

a. CIA-I (Controlled Industrial Area I) – The large fenced-in area encompassing the waterfront and industrial shops, extending from Building 1274 to include all of Bravo Pier 2.

b. CIA-II (Controlled Industrial Area II) - Dry Dock No. 4 Compound (including Building 1444).

2. Performance of all work under this Contract is restricted to U.S. citizens and U.S. nationals only. U.S. citizen employees of a foreign owned, controlled, and/or influenced company (including a parent company) for access purposes are considered foreign nationals and special authorization would be required for escorted access to PHNSY & IMF spaces.

3. For issuance of Red or Yellow badges, a “classified contract” is required with a Contract Security Classification Specification (DD 254) that allows access to Restricted Data (for Red) and Naval Nuclear Propulsion Information (NNPI) (for both). Also in accordance with OPNAVINST N9210.3 (Safeguarding of NNPI) the contract or subcontract must incorporate all NNPI handling requirements.

4. Security requirements are applicable to the prime contractor as well as to all subcontractors and suppliers thereunder.

5. The period of proposed work to be performed on the submarine is subject to further approval of the Shipyard & IMF Commander depending on the sensitivity of Shipyard & IMF industrial operations in the affected areas.

6. Three weeks prior to the visit, the contractor, subcontractors, and suppliers shall complete applicable items on Part 1 of the Contractor Visit Request (VR) form (PH-SYD 5512/28) and submit it to the Government Contracting Activity (GCA) or COR for completion of Part 2. The GCA/COR will then forward the VR and DD 254, as applicable, to the Shipyard & IMF Sponsor for completion of Part 3 no later than two weeks prior to the visit. The Shipyard & IMF Sponsor will submit the VR to the Pass and Identification Office (Pass and ID) no later than one week prior to the visit. The VR must specify the areas to be accessed on the submarine. Entry into the CIA and access onboard a submarine for those listed on the VR may be authorized under the following conditions:

a. All contractors, subcontractors, and suppliers must have a DOD Facility Security Clearance and those contractors who need access to the submarine must have DOD security clearances granted by Defense Security Service (DSS) and the contractors’ clearance eligibility, access and affiliation data must be current and accurate in the DOD Joint Personnel Adjudication System. A Yellow or Red badge will be issued depending on the areas needed to be accessed onboard the submarine. Unescorted or escorted access for Yellow badged contractors onboard the submarine will depend on how the submarine is controlling access to the Nuclear Work Areas. For a Yellow (CNIA) badge, the contractor must have at least an Interim Confidential. For a Red (NWA) badge, the contractor must have a final security clearance.

b. Under no circumstances shall personnel sign, transmit or hand-carry their own VR. The VR should be mailed, e-mailed encrypted or password protected, or delivered by the GCA or Shipyard & IMF Sponsor.

c. Ensure that all contractor employees provide a valid (i.e. state or federally issued) photo identification card and proof of U.S. citizenship to the Pass and ID Office prior to being issued a Shipyard & IMF badge, see Attachment (1) for a list of acceptable documents.

d. Ensure any derogatory or questionable information concerning contractor employees possessing a DOD security clearance or a Shipyard & IMF badge is immediately reported to the Security Office (Code 1125) so that access eligibility can be evaluated.

e. Ensure that contractor employees attend a 30-minute annual orientation on the safety, security, and radiological protection aspects of industrial operations within the Shipyard & IMF.

NOTE:

The briefing, which is in the form of a video presentation, will be given at the Pass and ID Office in groups of 10, prior to the issuance of Shipyard & IMF badges. Special arrangements for larger groups can be scheduled upon request.

f. Ensure that all employees wear and display the Shipyard & IMF badge in the chest area at all times while entering, remaining in, and exiting Shipyard & IMF spaces.

g. Ensure that each badge is used only by the specific individual named on the badge.

h. Maintain strict accountability over identification badges and passes issued by the Pass and ID Office. Report immediately, to the Pass and ID Office, any badges/passes that are missing or lost and the circumstances. Return badges/passes to the GCA immediately upon termination of any employee, upon expiration, upon completion of the work, or when no longer required. The GCA will ensure that all badges/passes are returned and forwarded to the Shipyard & IMF Pass and ID Office (Code 1125.2).

i. Restrict hours of work to 0630 – 1500 hours Monday through Friday only. When operational needs require the contractor to schedule work before 0630 and/or after 1500 (Monday through…