DD Form 254 (NGTS Solicitation).pdf

Please wait...

If this message is not eventually replaced by the proper contents of the document, your PDF viewer may not be able to display this type of document.

You can upgrade to the latest version of Adobe Reader for Windows®, Mac, or Linux® by visiting http://www.adobe.com/go/reader_download.

For more assistance with Adobe Reader visit http://www.adobe.com/go/acrreader.

Windows is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Mac is a trademark of Apple Inc., registered in the United States and other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.

DRAFT

SAMPLE

PREVIOUS EDITION IS OBSOLETE.

Page of AEM LiveCycle Designer

DD FORM 254, APR 2018

NEEDS DD67

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the National Industrial Security Program (NISP) apply to all security aspects of this effort involving classified information.)

OMB No. 0704-0567 OMB approval expires:

May 31, 2022 The public reporting burden for this collection of information, 0704-0567, is estimated to average 70 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, at whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

RETURN COMPLETED FORM AS DIRECTED IN THE INSTRUCTIONS.

1. CLEARANCE AND SAFEGUARDING

2. THIS SPECIFICATION IS FOR: (X and complete as applicable.)

3. THIS SPECIFICATION IS: (X and complete as applicable.)

a. ORIGINAL (Complete date in all cases.)

b. REVISED (Supersedes all previous specifications.)

4. IS THIS A FOLLOW-ON CONTRACT?

If yes, complete the following:

Classified material received or generated under

5. IS THIS A FINAL DD FORM 254?

If yes, complete the following:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

7. SUBCONTRACTOR(S) (Click button if you choose to add or list the subcontractors -- but will still require a separate DD Form 254 issued by a prime contractor to each subcontractor)

8. ACTUAL PERFORMANCE (Click button to add more locations.)

10. CONTRACTOR WILL REQUIRE ACCESS TO: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

e. NATIONAL INTELLIGENCE INFORMATION:

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. See instructions. Provide details in Blocks 13 or 14 as set forth in the instructions.)

12. PUBLIC RELEASE

Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the National Industrial Security Program Operating Manual (NISPOM) or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified here with at least office and phone contact information and if available, an e-mail address. (See instructions)

13. SECURITY GUIDANCE

The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended.

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. The field will expand as text is added. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. Also allows for up to 6 internal reviewers to digitally sign. See instructions for additional guidance or use of the fillable PDF.)

List of Attachments (All Files Must be attached Prior to Signing, i.e., for any digital signature on the form)

14. ADDITIONAL SECURITY REQUIREMENTS

Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the CSO. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

15. INSPECTIONS

Elements of this contract are outside the inspection responsibility of the CSO.

If Yes, explain and identify specific areas and government activity responsible for inspections. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

17. CERTIFICATION AND SIGNATURES

Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. Upon digitally signing Item 17h, no changes can be made as the form will be locked.

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICIAL

9.0.0.2.20120627.2.874785 DD 254, DoD Contract Security Classification Specification

P. O. BOX 5000, Corona, CA 92878-5000

including the level identified in Item 1.a. of this DD Form 254. Contractor will reference the appropriate security classification guidance when generating or deriving classified material or hardware. All classified information received or generated will be properly stored and handled according to the markings on the material. Classified material generated in support of this contract will be classified in accordance with the source material of the Navy Security Classification Guidance, which will be provided by the GCA. Automated Information Systems must be certified and accredited by the CSA prior to processing classified information from Corona Division. All classified information received or generated is the property of the U.S. Government. At the termination or expiration of this contract, the U.S. Government will be contacted for proper disposition instructions.

REF ITEM 10.k. SIPRNET: Personnel assigned to this contact that require access to SIPRNET and/or SIPRNET backbone equipment require a final or interim U.S.

Government clearance, must receive a NATO security briefing and derivative classification training prior to access from the contractor's FSO. The FSO will ensure all personnel receive an initial and annual NATO security briefing along with initial and annual derivative classification training during the life of this contract. Evidence of completion (training certificates or equivalent) will be provided to the Corona Division Security Division and the Information Assurance Manager no later than the DD Form 254 Handbook individual's due date. Access to SIPRNET does not grant access to True NATO information; the contractor will not use the SIPRNET for anything except that which is required for this contract.

Defense Information System Network (DISA) requires that DoD 8570.01 certification requirements

REF ITEM 10.j.: CUI must be protected per DoD M-5200.01, Volume 4, DoD Information Security Program: CUI of 2/24/2012 and NSWCCORDIV M-5510.2 or subsequent revisions. It is emphasized that unencrypted transmission of CUI via the Internet is strictly prohibited and provides guidance on Distribution Statements amongst other Corona Division safeguarding measures. Request for public release cannot be transmitted via the internet until the contractor receives final approval from the Corona Division Public Affairs Office listed in item 12. Public Release.

SECURITY CLASSIFICATION GUIDANCE AS FOLLOWS:

(1) The following SCG(s) or subsequent revisions apply to this contract. Subsequent revisions will be provided by the GCA as Government Furnished Information and will be executed by the Contractor at no additional cost to the government. Classified SCGs associated with the contract will be forwarded under separate cover.

(2) List all associated SCGs for this contract.

(3) If additional programs or SCGs become involved and are required during the lifecycle of the contract, they will be provided by the GCA as Government Furnished Information and will be executed by the Contractor at no additional cost to the government.

ADDITIONAL FACILITY CLEARENCE GUIDANCE

FACILITY IS NOT CLEARED AND NOT CLEARED FOR SAFEGUARDING:

Contractor cannot have access to or store classified material/information until DSS has granted them a facility clearance and safeguarding capability. Classification guides will be issued once the facility is cleared.

General Requirements:

(1) All contractors embedded in government work spaces shall comply with all DoD, DON, NAVSEA, NSWC Corona Division, and local security instructions, policies, procedures and guidance as they apply to the contractor both on and off Government property.

a. This includes all training requirements outlined in the Command Security Education Program per NSWCCORDIVINST 5510.2E Corona Division Information and Personnel Security Manual or subsequent revisions. Personnel designated as derivative classifiers will receive derivative classification training prior to access from the contractor’s FSO or taken via the Total Workforce Management System (TWMS) or equivalent. Evidence of completion, training certificates or equivalent, will be provided to the Security Division or verified by the Security Division in TWMS or equivalent no later than the individual’s due date. Contractors with a Secret or above security clearance must attend a local Naval Criminal Intelligence Service counterintelligence briefing annually.

b. Contractors shall comply with the Corona Division NSWCCORDIVINST 5530.2B and 5510.2E or subsequent revisions for personal identity verification procedures.

c. Contractors personnel embedded in government work spaces comply with the Corona Division NSWCCORDIVINST 3010.2, or subsequent revisions for Emergency Management.

(2) Contractors responsible for unauthorized disclosure of Personally Identifiable Information may be held accountable for any costs associated with breach mitigation, including those incurred as a result of having to notify personnel.

(3) Classified IS processing must be performed on accredited automated information systems approved by DSS.

(4) Classified or unclassified technical papers to be presented at a classified symposium must be approved by the Corona Division COR prior to the presentation.

(5) SCGs (OPNAVINST 5513 series) and CUI (e.g., FOUO, distribution statement controlled) are not authorized for public release; therefore, they cannot be posted on a publicly accessible web-server or transmitted over the internet unless appropriately encrypted. Request for public release cannot be transmitted via the internet until the contractor receives final approval from the Corona Division Public Affairs Office identified in ITEM 12.

(6) Contractor must submit a request for sharing of classified and other sensitive information between prime contractors in writing to the certifying official identified in Item 17 of this form for approval.

(7) All classified documents must be destroyed using an NSA approved high security crosscut shredder listed on the NSA/CSS evaluated products list for high security crosscut paper shredders, or other approved method for destroying classified information.

(8) All security related issues, incidents, or requests pertaining to this contract shall be presented in writing by the contractor's Facility Security Officer (FSO) to the individual identified in item 17.a. of this DD254. The contractor shall abide by other reporting requirements outlined in the NISPOM. Additionally, a copy will be provided to the COR per the Security Incident Report CDRL.

(9) All classified information involved in security incidents will be retained and provided to the certifying official in Item 17.a. of this DD Form 254 for classification review.

DD Form 254 Handbook

(10) The contractor may award subcontracts in furtherance of this effort. If access to classified information is required, the prime contractor is responsible to ensure compliance by the subcontractor for all security requirements. Prior to access granted to subcontractor, copies of all subcontractor DD254s issued under this contract shall be forwarded to the COR and NSWC Corona Security Division via the individual identified in item 17.a. of this section.

(11) The COR for this contract is: Mr./Ms. <Insert Name and Code> at (XXX)XXX-XXXX or (email address).

(12) Add the current industrial security specialist and SSO information:

For non SCI: Contact Virginia Gookin, Industrial Security Specialist, at 951-393-4091or Virginia.Gookin@navy.mil for any security questions related to this contract.

PO BOX 5000

CORONA, CA 92878-5000

Address: NSWC CORONA DIVISION

PO BOX 5000

CORONA, CA 92878-5000