SLS Solicitation 254.pdf

Please wait...

If this message is not eventually replaced by the proper contents of the document, your PDF viewer may not be able to display this type of document.

You can upgrade to the latest version of Adobe Reader for Windows®, Mac, or Linux® by visiting http://www.adobe.com/go/reader_download.

For more assistance with Adobe Reader visit http://www.adobe.com/go/acrreader.

Windows is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Mac is a trademark of Apple Inc., registered in the United States and other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.

DRAFT

SAMPLE

PREVIOUS EDITION IS OBSOLETE.

Page of

DD FORM 254, APR 2018

NEEDS DD67

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the National Industrial Security Program (NISP) apply to all security aspects of this effort involving classified information.)

OMB No. 0704-0567 OMB approval expires:

May 31, 2022 The public reporting burden for this collection of information, 0704-0567, is estimated to average 70 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Washington Headquarters Services, at whs.mc-alex.esd.mbx.dd-dod-information-collections@mail.mil. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

RETURN COMPLETED FORM AS DIRECTED IN THE INSTRUCTIONS.

1. CLEARANCE AND SAFEGUARDING

2. THIS SPECIFICATION IS FOR: (X and complete as applicable.)

3. THIS SPECIFICATION IS: (X and complete as applicable.)

a. ORIGINAL (Complete date in all cases.)

b. REVISED (Supersedes all previous specifications.)

4. IS THIS A FOLLOW-ON CONTRACT?

If yes, complete the following:

Classified material received or generated under

5. IS THIS A FINAL DD FORM 254?

If yes, complete the following:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

7. SUBCONTRACTOR(S) (Click button if you choose to add or list the subcontractors -- but will still require a separate DD Form 254 issued by a prime contractor to each subcontractor)

8. ACTUAL PERFORMANCE (Click button to add more locations.)

10. CONTRACTOR WILL REQUIRE ACCESS TO: (X all that apply. Provide details in Blocks 13 or 14 as set forth in the instructions.)

e. NATIONAL INTELLIGENCE INFORMATION:

11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: (X all that apply. See instructions. Provide details in Blocks 13 or 14 as set forth in the instructions.)

12. PUBLIC RELEASE

Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the National Industrial Security Program Operating Manual (NISPOM) or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for review and approval prior to release to the appropriate government approval authority identified here with at least office and phone contact information and if available, an e-mail address. (See instructions)

13. SECURITY GUIDANCE

The security classification guidance for classified information needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended.

(Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. The field will expand as text is added. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. Also allows for up to 6 internal reviewers to digitally sign. See instructions for additional guidance or use of the fillable PDF.)

List of Attachments (All Files Must be attached Prior to Signing, i.e., for any digital signature on the form)

14. ADDITIONAL SECURITY REQUIREMENTS

Requirements, in addition to NISPOM requirements for classified information, are established for this contract.

If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the CSO. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

15. INSPECTIONS

Elements of this contract are outside the inspection responsibility of the CSO.

If Yes, explain and identify specific areas and government activity responsible for inspections. The field will expand as text is added or you can also use item 13. When removing any expanded text area, use delete key or backspace key, then click out of the text field for it to shrink after the text has been deleted. (See instructions for additional guidance or use of the fillable PDF.)

16. GOVERNMENT CONTRACTING ACTIVITY (GCA) AND POINT OF CONTACT (POC)

17. CERTIFICATION AND SIGNATURES

Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. Upon digitally signing Item 17h, no changes can be made as the form will be locked.

18. REQUIRED DISTRIBUTION BY THE CERTIFYING OFFICIAL

9.0.0.2.20120627.2.874785 DD 254, "DoD Contract Security Classification Specification" Hide Attachment Bar

Andover Field Office (IOFNW) 1 Tech Dr, Ste 335 Andover, MA 01810 978-682-3052 Enter cognizant security office(s) (Name, Address, ZIP Code, Telephone required; Email Address optional).: Defense Counterintelligence & Security Agency 2060 Briargate Parkway, Suite 220;

Colorado Springs, CO 80920

BULDING 2025

PETERSON SFB, CO 80914

Enter location(s).: BUILDING 1840

PETERSON SFB, CO 80914

**NO SCI/SAP Performance** Enter location(s).: 150 Vandenberg St (Bldg 1) Peterson SFB, CO **NO SAP Performance** Enter location(s).: 250 Vandenberg St (Bldg 2) Peterson SFB, CO **NO SCI/SAP Performance** Enter location(s).: Building 4010 Eareckson Air Station Shemya, AK **NO SCI/SAP Performance** Enter location(s).: 11 Barksdale Street Building 1614 Hanscom AFB, MA 01731 **NO SCI/SAP Performance** Enter location(s).: Raytheon 235 Presidential Way Woburn, MA 01801 **NO SCI/SAP Performance** Enter location(s).: Raytheon 1330 Inverness Drive Suite 200 Colorado Springs, CO 80910 **NO SCI/SAP Performance**

SIPRNET Access

SSC SSO

SAF/AAZ (thru OSI/PJ)

SSC SAPMO

Transfer of documents to other IR&D efforts is not permitted.

Ref. 10a: If the contractor is authorized to receive Government furnished cryptographic equipment, the guidance will state that fact. Access to classified COMSEC information requires a final U.S. Government clearance at the appropriate level. Further disclosure of COMSEC information by a contractor, to include subcontracting, requires approval of the GCA. Non-accountable COMSEC information, though not tracked in the COMSEC material control system, may still require a level of control within a document control system. Refer to NSA/CSS Manual 3-16, “Control of Communications Security Material,” and the Committee on National Security Systems Instruction (CNSSI) 4001, “Controlled Cryptographic Items,” for guidance. If access to COMSEC information is required at Government facilities or the material is under Government control, contractor personnel will follow the security requirements of the host government activity.

Block 10b (Restricted Data): Access to RESTRICTED DATA (RD) requires a final U.S. Government clearance at the appropriate level.

Block 10d (Formerly Restricted Data): Access to FORMERLY RESTRICTED DATA (RD) requires a final U.S. Government clearance at the appropriate level.

Ref 10e(1) (Sensitive Compartmented Information): SCI security requirements apply, see SCI addendum for details.

Block 10e(2) Non-SCI: Contractor will require access to intelligence information and must comply with the directions provided by the COR. The Program Manager has determined that disclosure does not create an unfair competitive advantage for the contractor or a conflict of interest with the contractor's obligation to protect the information. The COR will identify what intelligence information is required for the contractor to satisfy the contract and will submit that information to the local SIO for approval prior to granting access. General Intelligence Material/Foreign Disclosure applies.

Block 10f: Special Access Program (SAP): SAP security requirements apply, see SAP continuation page for details.

Block 10g. To facilitate potential access to NATO classified information, all DoD military, civilian, and contractor personnel who are briefed on their responsibilities for protecting U. S. classified military information, shall also be briefed on the requirements for protecting NATO information. Access to classified NATO information requires a final U.S. Government clearance at the appropriate level. Written GCA approval is required before NATO access is granted to a subcontractor.

Ref 10j (CUI): The contractor shall comply with DoDI 5200.48_DAFI 16-1403, Controlled Unclassified Information and DoDM 5400.07-Air Force Manual 33-302, DoD Freedom of Information Act (FOIA) Program. The contractor shall monitor CUI aggregation and compilation based on the potential to generate classified information pursuant to security classification guidance addressing the accumulation of unclassified data or information. Contractors supporting this contract must complete Unauthorized Disclosure (UD) of Classified Information and Controlled Unclassified Information (CUI) training via the Center for Development of Security Training (CDSE) web site. (https://www.cdse.edu/index.html)

Ref 10k: PPP: The contractor shall participate with the Government in the development of a Program Protection Plan (PPP), to include the identification of Critical Program Information (CPI) and Critical Components, and shall also participate with the Government in determining countermeasures needed to safeguard the CPI throughout the acquisition process. Once the Government has a signed PPP, the contractor shall develop a Program Protection Implementation Plan (PPIP). The PPIP will be approved by the Government program office. The contractor shall execute program protection in accordance with the approved PPIP, program guidance, and future guidance from the Department of Defense.

Ref 11c.: For all performance locations identified in Block 8 on this DD Form 254, the contractor will abide by local policy and procedures for handling classified information. In the performance of this contract, the contractor will reference and abide by the appropriate security classification guidance when generating or deriving classified material or hardware. All classified information received or generated will be properly stored and handled according to the markings on the material. All classified information received or generated is the property of the U.S. Government. At the termination or expiration of this contract, the U.S. Government will be contacted for proper disposition instructions.

Cobra Dane Security Classification and Declassification Guide, 23 Dec 2015.

Block 11d: Contractor is required to provide adequate and approved storage for classified hardware or material to the level of Secret, which because of size cannot be safeguarded in an approved storage container.

Block 11j: OPSEC requirements apply. See block 14 for guidance.

Block 11l: Contractor is authorized to receive, store, generate Controlled Unclassified Information (CUI). CUI is not authorized for release without the approval of the sponsoring government activity (SSC/SZQ). See DODI 5200.48 for safeguarding, destruction, handling, marking, and transmission requirements.

Ref Blk 12: Contractor is to submit public release requests through the Contracting Officer for OPSEC Program Manager review and authorization. The Contracting Officer will provide the contractor with written approval/disapproval. The Contracting Officer shall coordinate with appropriate Government officials, as required.

See SCI Annex Addendum and SAP Continuation Page.

Ref Blk 10e (1)/12: Public release of Sensitive Compartmented Information (SCI) is not authorized.

Ref Blk 10f/12: Public release of Special Access Program (SAP) related data is NOT authorized without prior coordination through the Air Force Office of Special Investigations (AFOSI), Office of Special Projects (PJ) Security Director and subsequent approval of the Original Classification Authority (OCA) and Air Force Special Access Program Central Office (AFSAPCO). Submit all proposed public disclosures related to SAP data to the Government Program Manager (GPM) and the Air Force Office of Special Investigations (AFOSI), Office of Special Projects (PJ) Program Security Officer (PSO).

Block 13:

Contract security supervision for performance on military installations resides with the host Information Protection Office (IPO) or Security Forces as required, dependent on locations.

Contractor will abide by all applicable security regulations, procedures, and requirements while performing in facilities listed in block 8a.

The Contractor will notify the Government Contracting Activity and the Government Security Manager within 48 hours of any incident involving the actual or suspected compromise/loss of classified information to enable the Government to conduct immediate assessment of potential impact pending formal inquiry/investigation. Actual or suspected compromise of Covered Defense Information will be reported IAW DFARS 252.204-7012.

Program Manager: Lt Col David Ho, SSC/SZQC, david.ho@spaceforce.mil

Contracting Officer or Contracting Officer Representative: Keith Jense, 719-554-0285, SSC/SZQC, keith.jense.1@spaceforce.mil

Security Manager: David Stapleton, SSC/SZQOS, 719-554-9088, david.stapleton@spaceforce.mil

Access to SIPRNET is authorized. Identified system users shall be briefed to NATO Secret IAW 32 CFR Part 117 section 117.19 (g) (7).To facilitate potential access to NATO classified information, all DoD military, civilian, and contractor personnel who are briefed on their responsibilities for protecting U. S. classified military information, shall also be briefed on the requirements for protecting NATO information. NATO briefing required prior to granting access. See 32 CFR Part 117 section 117.19 (g) (7) for details. NATO access shall be documented by the Facility Security Officer in DISS.

COR

rep: DAVID M. STAPLETON, CIV Chief, SSC/SZQ Information Protection rep: SHARON M. JONES, NH-03

SSC/S2S SSO

rep: MALCOLM L. JONES, GS-14, DAF Program Security Officer rep: ANDREW BEER, CIV Chief, Industrial Security

SAP security requirements apply, see SAP continuation page for details.

OPSEC, Block 11j

GENERAL:

1. PURPOSE: This section outlines the requirements and procedures necessary to protect Critical Information for Operations Security (OPSEC).

2. MISSION: To maintain a continuing awareness of adversary interest in center actions and adversary intelligence collection capabilities. To understand the need to identify and protect classified and unclassified indicators, which occur, reveal sensitive information. To evaluate the effectiveness of OPSEC measures taken to preclude or reduce adversary acquisition and exploitation of sensitive information.

3. DEFINITION: OPSEC is the process of analyzing friendly actions attendant to military operations and other activities to:

a. Identify those actions that can be observed by adversary intelligence systems.

b. Determine indicators hostile intelligence systems might obtain that could be interpreted or pieced together to derive critical information in time to be useful to adversaries.

c. Select and execute measures that eliminate or reduce to an acceptable level the vulnerabilities of friendly actions to adversary exploitation.

4. OBJECTIVES:

a. To protect planned operational center activities by preventing the inadvertent disclosure of unclassified information relating to or revealing a possible classified operation.

b. To preserve secrecy concerning specific scenario events and a NORAD response to these events.

c. To identify OPSEC vulnerabilities and recommend protective measures which will serve to enhance the security of future operations.

5. TASKS: Task requirements are outlined in the Statement of Work for this effort and at a minimum must include:

a. Release of the organizations Critical Information List to the contractor.

b. Threat information available (Threat Working Group Minutes).

c. Contractor receiving OPSEC training from the sponsoring organization.

d. Specific OPSEC countermeasures as needed.

Explain and identify specific areas and government activity responsible for inspections.: a. SCI security requirements apply, see SCI addendum for details.

b. AFOSI PJ retains security cognizance for all SAR performance under this contract.

c. DCSA is relieved of inspection responsibility for all classified material that is released to or developed by the contractor while on a military installation.

1050 E. Stewart Ave Peterson AFB, Co., 80914 Enter address (include zip code).: SSC/SZQC 130 Paine St Peterson SFB, CO, 80914