Attachment_M_DD254_20160120.pdf

ATTACHMENT M

DD 254 Contract Security Classification

January 20, 2016

RFP NNG16551793R

CONTRACT TBD

DEPARTMENT OF DEFENSE

1. CLEARANCE AND SAFEGUARDING

CONTRACT SECURITY CLASSIFICATION SPECIFICATION a. FACILITY CLEARANCE REQUIRED:

SECRET

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort))

b. LEVEL OF SAFEGUARDING REQUIRED:

NONE

2. THIS SPECIFICATION IS FOR: (X and complete as applicable) 3. THIS SPECIFICATION IS: (X and complete as applicable)

a. PRIME CONTRACT NUMBER a. ORIGINAL (Complete date in all cases) Date (YYMMDD)

TBD

b. SUBCONTRACT NUMBER b. REVISED (Supersedes all previous specs) Revision No. Date (YYMMDD)

c. SOLICITATION OR OTHER NUMBER DUE DATE (YYMMDD) c. FINAL (Complete item 5 in all cases) Date (YYMMDD)

(Solicitation #

NNG16551793R)

4. IS THIS A FOLLOW-ON CONTRACT? YES NO, If yes, complete the following

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract

5. IS THIS A FINAL DD FORM 254? YES NO, If yes, complete the following:

In response to the contractors request dated , retention of the identified classified material is authorized for a period of:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

8. ACTUAL PERFORMANCE

a. LOCATION b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

NASA/Goddard Space Flight Center

Greenbelt, MD 20771 , other NASA Facilities, and

Contractor Site

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

Ground Systems and Mission Operations -2 (GSMO-2)

The purpose of this contract is to acquire engineering services for the Goddard Space Flight Center (GSFC) for ground systems and mission operations support in all phases of a mission life cycle. The scope encompasses concept studies, design, development, integration, test, verification, operations, and sustainment of mission operations systems and subsystems, and operations processes and procedures.

10. THIS CONTRACT WILL REQUIRE ACCESS TO: YES NO 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION X a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER CONTRACTORS FACILITY OR GOVERNMENT

ACTIVITY X

b. RESTRICTED DATA X b. RECEIVE CLASSIFIED DOCUMENTS ONLY X

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION X c. RECEIVE AND GENERATE CLASSIFIED MATERIAL X

d. FORMERLY RESTRICTED DATA

XX

d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE X

e. INTELLIGENCE INFORMATION e. PERFORM SERVICES ONLY X

(1) Sensitive Compartmented Information (SCI) X f. HAVE ACCESS TO US CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND

TRUST TERRITORIES X

(2) Non-SCI X g. BE AUTHORIZED TO USE THE SERVICES OF THE DEFENSE TECHNICAL INFORMATION CENTER (DTIC) OR

OTHER SECONDARY DISTRIBUTION CENTER X

f. SPECIAL ACCESS INFORMATION X h. REQUIRE A COMSEC ACCOUNT X

g. NATO INFORMATION X i. HAVE TEMPEST REQUIREMENTS X

h. FOREIGN GOVERNMENT INFORMATION X j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS X

i. LIMITED DISSEMINATION INFORMATION X k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE X

j. FOR OFFICIAL USE ONLY INFORMATION X l. OTHER (Specify) X

k. OTHER (Specify) Sensitive But Unclassified (SBU) X

DD Form 254, DEC 99 (EF) Previous editions are obsolete. (DISA IRXDTS, Inc.)

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release

DIRECT THROUGH (Specify)

NASA Goddard Space Flight Center, Public Affairs Office, Code 130, Greenbelt, MD 20771 to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

In performance of this contract, some personnel may require access to classified information up to and including SECRET. The contractor must have a sufficient number of cleared employees assigned duties under this contract to be able to complete all classified work assignments up to and including SECRET.

1. Space Network Security Classification Guide dated January 1, 2010

2. DOD 5220.22-M, National Industrial Security Program Operating Manual (NISPOM) (02/28/06)

3. NPR 1600.1A, NASA Security Program Procedural Requirements (08/12/2013)

4. NPR 1600.2 NASA Classified National Security Information (CNSI) w/Change 2 (2/12/2014)

5. NPR 1600.3 Personnel Security (Change 2, April 29, 2013)

6. NPR 1600.4 Identity and Credential Management (08/1/2012)

7. NPR 1620.2A Facility Security Assessments

8. NPR 1620.3A Physical Security Requirements for NASA Facilities and Property

9. NPR 1660.1B, NASA Counterintelligence (CI)/Counterterrorism (CT), (10/11/2011)

10. NPR 2810.1A, Security of Information Technology, (Revalidated w/Chg 1) (05/09/2011)

11. NPD 1600.2E, NASA Security Policy Revalidated, (04/01/2009)

12. NPD 1660.1B, NASA Counterintelligence (CI) Policy, (11/18/2008)

13. NPD 1600.4 National Security Programs

SEE PAGE #3

14. ADDITIONAL SECURITY. Requirements, in addition to NISPOM requirements, are established for this contract. (If Yes, identify the pertinent contractual clauses in X YES

NO

the contract document itself, or provide an appropriate statement which identifies additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is required.) See Page #3

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. (If yes, explain and identify specific areas or YES

NO

elements carved out and the activity responsible for inspections. Use Item 13 if more space is needed.)

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL b. TITLE c. TELEPHONE (Include Area Code)

Jeffrey W. Barrett Industrial/Information Security Specialist dfadfdfdfadfx

301.286.0725

d. ADDRESS (Include Zip Code)

NASA/GODDARD SPACE FLIGHT CENTER CODE

240 GREENBELT, MD 20771

17. REQUIRED DISTRIBUTION

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER

e. SIGNATURE f. OTHERS AS NECESSARY

DD FORM 254 Reverse, DEC 99 Previous editions are obsolete.

Item #13. Additional Security Requirements and/or Guidance

14. NPD 1600.2E NASA Security Policy (Revalidated 4/1/2009)

15. NPD 2810.1D NASA Information Security Policy, (05/09/2009)

16. NM 1600-55 Sensitive But Classified (SBU) Controlled Information

17. GPR 1600.1A, Goddard Security Requirements, (02/21/2014)

18. GPR 1600.2 NASA Classified National Security Information (CNSI) (12/11/2013)

19. GPR 1600.3 Protective Service Division Personnel Security (12/12/2013)

20. GPR 1600.4 Identity and Credential Management (12/04/2013)

21. Federal Information Security Management Act of 2002

22. OMB Circular A.130, Appendix III, Security of Federal Automated Information Resources

23. Conjunction Assessment Data Release ability Matrix for the Earth Science Constellation, July 31, 007 (FOUO) US Personnel Only

24. Memorandum of Agreement between the Department of Defense (DoD) and the National Aeronautics and Space Administration (NASA) for

Support to NASA Spaceflight Operations, March 15, 2005

25. Security Classification Guide for Space Operation, USSTRATCOM Directorate of Global Operations, July 15, 2006

NASA officials will provide additional security, technical, and/or classification guidance. Requests concerning clarification or interpretation regarding security requirements under this contract will be directed to the NASA/GSFC

Industrial Security Specialist. The place of performance will be at the contractor cleared facilities, GSFC and other locations were the requirement is covered by the obligations specified in Section C of the basic document.

Any employee, who observes or becomes aware of the deliberate or suspected compromise of classified national security information shall promptly report such information personally to the GSFC Counter Intelligence (CI) Office.

If unclassified but sensitive information appears compromised by or on behalf of foreign or domestic powers, organizations or persons, employees shall report such information to the GSFC CI Office. If an employee becomes aware of information pertaining to international or domestic terrorist activities, employees shall also report to the

GSFC CI Office. If the information indicates a computer compromise or other cyber intrusion, the Office of Inspector

General shall be promptly notified.