Attachment 4 DD254 Continuation.docx

SP3300-12-R-0030

Attachment 4

ITEM 13 Continuation Reference 10j - For Official Use Only (FOUO) Information.

(1) Contractors may disseminate “For Official Use Only” information to their employees and subcontractors who have a need for the information in connection with this contract.

(2) Removal of the “For Official Use Only” (FOUO) marking or release of FOUO material to the public can only be accomplished by the Government Cognizant Authority (GCA).

(3) “For Official Use Only” information shall be stored in locked receptacles such as file cabinets, desks, or bookcases. When such internal security control is not exercised, locked buildings or rooms will provide adequate after-hours protection. During working hours, the information shall be placed in an out-of-sight location if the work area is accessible to persons who do not have a need for the information.

(4) “For Official Use Only” information may be sent via first-class mail or parcel post. Facsimile communications marked FOUO may be transmitted by non-secure terminals with the FOUO marking intact between U.S. Department of Defense, and other U.S. Government agencies, and U.S. Government support contractors for official purposes.

(5) When no longer needed, FOUO information will be destroyed by burning (Use of burn bags and an authorized burn facility), cross-cut shredding (shredders must be listed on the NSA Evaluated Products List), or any method approved for the destruction of classified material.

(6) Unauthorized disclosure of “For Official Use Only” information does not constitute a security violation, but the GCA shall be informed of any unauthorized disclosure. The unauthorized disclosure of FOUO information protected by the Privacy Act may result in criminal sanctions. Specific guidance may be found in DOD Regulation 5400.7, DOD Freedom of Information Act Program.

Reference 11 a –

(1) Government performance for this contract will be at DLA Distribution locations and other government approved facilities as designated. Security guidance for this contract is provided in the DoD 5220.22-M, "National Industrial Security Program Operating Manual" (NISPOM), DoDM 5200.01, DLA Information Security Handbook and the DLA Physical Security Guidebook. Upon completion of the contract, the contractor may be authorized to retain classified material until such time as the final contract audit is conducted and/or final payment is received. Any classified material is then returned to the Government Contracting Agency (GCA)(ATTN: Security Officer). All classified material that was received or generated under this contract must be returned to the Government Agency, destroyed, or retention/transfer authority by request per DoD 5220.22-M.

Reference 11 e -

(1) The Contractor will provide support to maintain and enhance the existing network, ensure availability of mission applications and troubleshoot and resolve problems with all IT equipment. Classified material will be handled in accordance with DoD 5200.01, "Information Security Program" and the DLA Information Security Handbook. Sensitive material will be handled in accordance with applicable DoD and DLA policies that shall be provided to the contractor upon request.

(2) At the termination or expiration of this contract, the contractor shall request disposition instructions for all project material. The contractor may be directed to properly destroy the material or return it. If project material is to be retained by the contractor, every effort should be taken to transfer it to a follow-on contract or similar effort, if applicable. This must be done, however, with Contracting Officer (CO) approval. Unless written authorization by the CO to retain specific material for a specific period of time is received, the material shall be returned or destroyed as instructed. A “Final” DD 254 will be issued if the contractor is authorized to retain classified material.

11 l – Other.

(1) The contractor is not authorized to release information, orally, visually, or documentary to anyone not associated with this contract.

(2) All questions regarding security requirements indicated herein will be referred to the Contract Technical Monitor, if one is designated, or the Contracting Officer.

(3) Personnel Security Requirements are listed in paragraph 2.5 of the Performance Work Statement.

(4) Contractor employees will be required to comply with all Government security regulations and requirements.

(5) Initial and periodic refresher security training and briefings must be provided by the Contractor as required by regulations.

(6) Supplemental security training may be provided by Government security personnel.

(7) Failure to comply with security requirements can be cause for termination of employment.

(8) If employment is terminated due to unfavorable personnel security actions or failure to comply with security requirements, the contractor shall assign qualified personnel to any vacancy(s) thus created within 10 working days.