Attachment_0001-_DD_Form_254.pdf

DEPARTMENT OF DEFENSE 1. CLEARANCE AND SAFEGUARDING

CONTRACT SECURITY CLASSIFICATION SPECIFICATION a. FACILITY CLEARANCE REQUIRED

SECRET (PEO-AMMO-18-004-S)

(The requirements of the DoD Industrial Security Manual apply to all aspects of this effort)

b. LEVEL OF SAFEGUARDING REQUIRED

NONE

2. THIS SPECIFICATION IS FOR: (X and complete as applicable) 3. THIS SPECIFICATION IS: (X and complete as applicable)

a. PRIME CONTRACT NUMBER

DATE (YYYYMMDD)

THIS SOLICITATION DD254 IS FOR PLANNING

PURPOSES ONLY. A PRIME CONTRACT DD254 WILL

BE PROVIDED UPON CONTRACT AWARD.

X a. ORIGINAL (Complete date in all cases) 20180323

b. SUBCONTRACT NUMBER b. REVISED REVISION NO. DATE (YYMMDD)

(Supersedes all previous specs)

c. SOLICITATION OR OTHER NUMBER DUE DATE (YYMMDD) DATE (YYMMDD)

X W15QKN-18-R-01BW c. FINAL (Complete Item 5 in all cases)

4. IS THIS A FOLLOW-ON CONTRACT? YES X NO. If Yes complete the following

Classified material received or generated under __________N/A______________ is transferred to this follow-on contract

5. IS THIS A FINAL DD FORM 254? YES X NO. If Yes complete the following

In response to the contractor's request dated ____________ , retention of the identified classified material is authorized for the period of __________

6. CONTRACTOR (Include Commercial and Government Entity ( CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code) This Solicitation DD Form 254 is for planning purposes only. A Prime Contract DD254 will be provided upon contract award.

N/A N/A

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICES ( Name, Address, and Zip Code)

N/A

8. ACTUAL PERFORMANCE

a. LOCATION b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

Ft. Benning, GA

Ft. Benning Security Office - TBD

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

The Program support services shall consist of three (3) support services areas: Armor Brigade Combat Team (ABCT)/Current 120mm Subject Matter Expert (SME), Stryker Brigade Combat Team (SBCT) SME, and Next Generation Combat Vehicle (NGCV) Cross Functional Team (CFT) Ammunition SME to assist PM MAS with assigned Army missions.

10. THIS CONTRACT WILL REQUIRE ACCESS TO: YES NO 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION X a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER

CONTRACTOR’S FACILITY OR A GOVERNMENT ACTIVITY X

b. RESTRICTED DATA X b. RECEIVE CLASSIFIED DOCUMENTS ONLY X

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION X c. RECEIVE AND GENERATE CLASSIFIED MATERIAL X

d. FORMERLY RESTRICTED DATA: X d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE X

e. INTELLIGENCE INFORMATION: e. PERFORM SERVICES ONLY X

(1) Sensitive Compartmented Information (SCI) X f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO

RICO, U.S. POSSESSIONS AND TRUST TERRITORIES X

(2) Non-SCI X g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL

INFORMATION CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER X

f. SPECIAL ACCESS INFORMATION X h. REQUIRE A COMSEC ACCOUNT X

g. NATO INFORMATION X i. HAVE A TEMPEST REQUIREMENT X

h. FOREIGN GOVERNMENT INFORMATION X j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS X

i. LIMITED DISSEMINATION INFORMATION X k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE X

j. FOR OFFICIAL USE ONLY INFORMATION X l. OTHER (Specify)

k. OTHER Specify) Controlled Unclassified Information (CUI)

X

See Block 13 X

DD Form 254, DEC 1999 Previous editions are obsolete

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public release shall be submitted for approval prior to release

Direct X

Through (Specify):

Request for release of material requires approval through Project Manager Maneuver Ammunition Systems (POC:

jessica.m.vanaman.civ@mail.mil), SFAE-AMO-MAS-LC, Buidling 354, Picatinny Arsenal, NJ 07806-5000 to the Picatinny Public Affairs Office. Non-SCI intelligence information is not authorized for public release.

to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes: to challenge the guidance or classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any document/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

Classified material must be handled in accordance with the current National Industrial Security Program Operating Manual (NISPOM DoD 5220.22M) requirements, and source documents. No classified information/materials will be provided to contractor prior to verification of company’s facility clearance and storage capability.

Only U.S. citizens are authorized to work on this effort. The contractor will only receive classified material at the actual performance location(s) as identified in the DD254. Contractor personnel shall have the appropriate level of investigation and/or security clearance for each site of performance of work. The Contractor will observe and comply with all security provisions in effect at each selected site. The COR must ensure the contractor complies with the DD Form 254 and any special clauses into the contract. The contractor shall return all classified/sensitive material, to include program material, to the Government at the completion of this contract. Information Disclosure: A Certificate of Non-Disclosure shall be signed and returned to the COR prior to contract award. Copies will be maintained by the COR for the life of the contract

Block 11l(1): Be issued a Common Access Card (CAC) Block 11l(2): Need access to USG IT Systems & Networks, SIPRNet accounts required at Ft. Benning, GA only.

SEE DD254, BLOCK 13, CONTINUATION SHEETS FOR SECURITY GUIDANCE.

Ref 13a: Army regulations available at: www.apd.army.mil.

Ref 13b: Classified information transmitted under this agreement is authorized to be submitted directly to/from: COMMANDING GENERAL, US ARMY Program Executive Officer AMMUNITION, ATTN: SFAE-AMO, Bldg. 1 Buffington Rd., Picatinny Arsenal, NJ 07806-5000.

Ref 13c: TECHNICAL LEAD ACKNOWLEDGEMENT AND SIGNATURE: The undersigned has reviewed this Security Specification, understands the security provisions outlined therein, and will ensure that the prime contractor complies with them as best possible within the limits of his/her responsibility, and that any violations are brought to the attention of the PCO and certifying security official identified in block 16.

Susana Cruz, Contracting Officer Representative susana.cruz.civ.civ@mail.mil (973) 724-6115

Ft. Benning COR/POC (To Be Identified by Contract Award)

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract. (If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

X Yes No

OPSEC Requirements; See Block 13 Continuation Sheet

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. (If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.

Yes X No

DSS does not conduct security reviews for Sensitive Compartmented Information (SCI) but is still responsible for security reviews involving Non-SCI (collateral classified information) in the possession of a contractor or subcontractor.

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL

b. TITLE Security Specialist Program Executive Office Ammunition c.TELEPHONE (Include Area Code)

(973) 724-9877/-9775

d. ADDRESS (Include ZIP Code) 17. REQUIRED DISTRIBUTION

Program Executive Office – Ammunition X a. CONTRACTOR

Buffington Road, Building 1 b. SUBCONTRACTOR

Picatinny Arsenal, NJ 07806-5000 X c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

e. SIGNATURE d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY

ADMINISTRATION

X e. ADMINISTRATIVE CONTRACTING OFFICER

X f. OTHERS AS NECESSARY

DD Form 254 (Back), DEC 1999 jason.hayman Typewritten Text Jason Hayman

Attachment A Page 1 of 10

PEO Ammunition Attachment A (PEO-AMMO-18-004-S)

SOLICITATION NUMBER: W15QKN-18-R-01BW

Attachment DD254, Block 13 Continuation Sheet :

SECURITY GUIDANCE

SECURITY CLASSIFICATION GUIDES (SCGs) will be supplied to the contractor by the COR, as needed and under separate cover, depending on which programs the contractor will be performing on in support of this contract. The SCGs applicable to this contract are:

• Cartridge, 120mm, M829A4, Armor Piercing, Fin Stabilized, Discarding Sabot with Tracer

(APFSDS-T), Security Classification Guide,16 Sep 2014

• M908 High-Explosive Obstacle Reduction with Tracer (120mm HE-OR-T), 6 Aug 2013

• Advanced Multi-Purpose XM1147 High Explosive Multi-Purpose with Tracer AMP (120mm), 23 July 2014

• Cartridge, 120mm APFSDS-T with Tungsten Penetrator, 4 Jan 2016

• Cartridge, 120mm High Explosive Anti-Tank, Multi-Purpose with Tracer (HEAT-MP)

M830A1, 16 Nov 1996

• Cartridge, 120mm, APFSSDS-T, M829A3, 11 Mar 2004

• Cartridge, 120mm APFSDS-T, M829A2, 1 Jul 1998

• Cartridges, 105mm, APFSDS-T-, M735, M774, 21 Nov 85

• Cartridge, 105mm, APFSDS-T, M900 Mar 1993

Ref 10a: Communications Security (COMSEC): Access to COMSEC material and/or equipment will be required in the performance of this contract. Classified COMSEC material is not releasable to contractor employees who have not received a FINAL clearance at the appropriate security level.

COMSEC access shall be IAW DoD 5220.22-M and AR 380-40. When access is required at Government facilities, contractor personnel will adhere to COMSEC rules and regulations as mandated by Command policy and procedures.

The prime contractor must submit a written request (on company letterhead) to the Contracting Officer (PCO) for authorization to grant COMSEC access to a subcontractor. The request must be approved by the PCO prior to prime contractors granting subcontractor access to COMSEC.

Ref 10e(2): Intelligence Information. Non-SCI Information is not releasable to contractor employees who have not received a clearance at the appropriate security level. Written concurrence of the PCO is required prior to subcontracting. The Director of National Intelligence (DNI) has jurisdiction and control of intelligence information and additional security requirements for controlling and protecting intelligence are outlined in “Section 10e(2) Continuation Sheet: Non-SCI Intelligence Information Guidance (from ARDEC SIO)”.

Ref 10h: Foreign Government Information (FGI): This is information that is provided to the U.S.

Government by a foreign government(s), an international organization, or any element thereof, and can be classified or unclassified. This does not include NATO information. Access to classified foreign government information requires a final U.S. Government clearance at the appropriate security level. The prime contractor must receive written approval from the PCO prior to subcontracting and granting access to a subcontractor. AR 380-5, Chapter 4, Section VII applies.

Attachment A Page 2 of 10

Ref 10g: Personnel not assigned to a NATO staff position, but requiring access to NATO classified information, NATO COSMIC, NATO Secret or access to the NATO accredited SIPRNET terminals, must possess the equivalent FINAL or Interim U.S. Security Clearance based upon the appropriate personnel security investigation required. Personnel with access to NATO ATOMAL information must have the appropriate level FINAL U.S. Security Clearance. The government program/project manager is the designated representative that will ensure the contractor security manager and concerned employees are NATO briefed prior to access being granted. The contractor will maintain strict compliance in regards to NATO information IAW NISPOM Ch 10, Section 7.

Prior written approval from the PCO is required for subcontracting.

Ref 10j and Ref 10k: SEE DD254, BLOCK 13, CONTINUATION SHEET FOR FOUO/CUI

GUIDANCE.

Ref 11a: Contractor access to classified information/materials is restricted to U.S. Government facilities, either the primary duty location (Ft. Benning, GA) or other facilities visited in performance of duties, as outlined in PWS. The COR or hosting government agency or activity will provide security classification guidance for performance of this contract. FSO will submit visit requests for all personnel working on this contract through JPAS (or successor system) to hosting government activity prior to start work date, or as needed to support contractor personnel visits to other activities or agencies. Submit visit request to the PCO and/or Security Management Office for need-to-know verification.

Ref 11j: This contract requires the application of Operations Security (OPSEC) IAW AR 530-1, and/or the local User Agency policies and programs (unclassified technology). Classified material must be handled in accordance with the National Industrial Security Program Operating Manual (NISPOM), DoD 5220.-22-M. User Agency will provide OPSEC guidance/requirements. The contractor is not required to write an OPSEC Plan in support of this effort but all personnel performing work on this contract must complete Level I OPSEC training within 30 calendar days of the reporting for duty and OPSEC Awareness Training annually thereafter.

Ref 11l(1): Common Access Card (CAC) Issuance. Before CAC issuance, the contractor employee requires, at a minimum, a favorably adjudicated Tier 1 (T1) investigation or an equivalent or higher investigation in accordance with Army Directive 2014-05. The contractor employee will be issued a CAC only if duties involve one of the following: (1) both physical access to a DoD facility and access, via logon, to DoD networks on-site or remotely; (2) remote access, via logon, to a DoD network using DoD-approved remote access procedures; or (3) physical access to multiple DoD facilities or multiple non-DoD federally controlled facilities on behalf of the DoD on a recurring basis for a period of 6 months or more. The Contractor and subcontractor(s) (when applicable) shall account for all forms of Government-provided identification credentials issued to contractor personnel under the contract or subsequent task orders. The Contractor shall return the CAC to the COR as soon as possible after the occurrence of one or more of the following circumstances:

- When no longer needed for contract performance.

- Upon completion/termination of the Contractor employee’s employment.

- Upon task completion or termination.

- Revocation of CAC eligibility.

Attachment A Page 3 of 10

The PCO may delay final payment under the contract or subsequent task orders, if the Contractor (or subcontractor) fails to comply with these requirements.

Ref 11l(2): Access to SIPRNet required at Ft. Benning location only. The contractor shall not access, download, or futher disseminate any special access data (i.e. intelligence, NATO, COMSEC, etc.) outside the execution of the defined contract requirements and without guidance and written permission of the PCO. In the event that any special access is required, the PCO must modify the requirements of the DD Form 254.

The SIPRnet backbone, now accredited to transport NATO Secret information, has resulted in additional precautionary measures as all SIPRnet enclaves, not NATO accredited, still have capability to receive such information. OUSD Memo dated 5 December 2001, Subj: Facilitating Necessary Access to NATO Classified Information, directs that all Department of Defense (DoD) military, civilian, and contractor personnel briefed on their responsibilities for protecting U.S.classified military information, shall be briefed simultaneously on the requirements for protecting NATO classified information. The Contractor FSO shall provide a NATO awareness briefing to cleared contractor personnel (who have not been granted access to NATO) and shall maintain a written acknowledgement of the individual's receipt of the awareness briefing along with statement of understanding of responsibilities for safeguarding NATO classified information. The NATO awareness briefing is not a NATO access briefing and does not constitute approval for access to NATO. The NATO awareness briefing shall not be entered in Joint Personnel Adjudication System (JPAS).

Additional Training Requirements:

Antiterrorism Training. All contractor employees requiring access to any Federally-controlled facility and logical access to Federally controlled information systems except for national security systems as defined by 44 U.S.C. 3542(b)(2), shall be certified in Level 1 Anti Terrorism Training.

The training is accessible from any computer with access to the World Wide Web and is available at https:/atlevel1.dtic.mil/at. The contractor is responsible for ensuring that the training has been satisfactorily completed within 30 calendar days after contract award and that valid certificates of completion have been submitted to the Contracting Officers Representative (COR) with a copy furnished to the Contracting Officer. The Certificates are valid for one year; therefore, training shall be completed every year for the duration of the contract. AT level I awareness training is available at the following website: http://jko.jten.mil/courses/atl1/launch.html.

Access to Government Information Systems. All contractor employees with access to a government information system shall be registered in the Army Training Certification Tracking System (ATCTS) at the commencement of any services, and shall successfully complete the DoD Information Assurance (IA) awareness training before issuance of network access and annually thereafter.

iWATCH Training. The contractor and all associated sub-contractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity ATO). This local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within http://jko.jten.mil/courses/atl1/launch.html

Attachment A Page 4 of 10

30 calendar days after contract award and within 30 calendar days of new employees commencing performance. The contractor is responsible for ensuring that the training has been satisfactorily completed with the results reported to the COR.

Threat Awareness Reporting Program (TARP). Contractor personnel assigned to work on this contract, especially those with a security clearance, must receive annual TARP training by a CI agent or other trainer as specified in AR 381-12 (see para. 2-4b).

Additional Concurrence Signatures:

The persons identified below are also associated with this contracting effort. Each has reviewed the security requirements outlined in this DD Form 254 and concurs with requirements stated herein.

TBD

Attachment B Page 5 of 10

PEO Ammunition Attachment B (PEO-AMMO-18-004-S)

SOLICITATION NUMBER: W15QKN-18-R-01BW

DD254, Block 13, Section 10e(2) Continuation Sheet:

Non-SCI Intelligence Information Guidance (from TBD)

As defined in Executive Order 12333 of December 4, 1981, "United States Intelligence Activities", foreign intelligence is defined as" ... information relating to the capabilities, intentions and activities of foreign powers, organizations or persons including information on international terrorist activities."

In accordance with DCID 6/6, pursuant to the provisions and definitions of Executive Order 12333, the following guidance is provided to you regarding the release, control, dissemination and use of intelligence information in support of ARDEC contracts:

1. All intelligence material, reproductions thereof, and all other material generated based on, or incorporating data there from (including authorized reproductions), will be controlled in the same manner as the originals, and remain the property of the US Government and may be withdrawn at any time.

2. You must maintain a record of all intelligence material, regardless of classification, released to your custody.

3. You must accomplish a verification of all materials, if held for at least one year, released under the contract. Further, such verification will be conducted upon the anniversary date of the contract, or on a mutually agreed date, and the Senior Intelligence Officer, ARDEC, will be furnished a copy of the verification list. The objective of this requirement is not only to afford the required security for intelligence data, but should be viewed as an opportunity to return documents no longer needed or superseded.

4. You will not reproduce intelligence material released to your custody without the express written permission of the Senior Intelligence Officer, ARDEC.

5. When written permission is received to reproduce intelligence materials, you will control and account for such reproductions in the same manner as pertains to the originals.

6. Prior to granting an employee access to the intelligence materials, you will brief the employee on his obligation to safeguard the information. The appropriate portion of SF312, "Classified Information Non-Disclosure Agreement", will be executed at the time of briefing.

7. You and the Project Officer will jointly determine those employees who require access to the intelligence material and you will maintain records to identify completely by name and title all employees so authorized. Requests for additions or personnel changes should be provided to the Project Officer prior to access. Additionally, you will maintain records of authorized visitors who have had access to the intelligence material.

Attachment B Page 6 of 10

8. You will not release intelligence material to any activity, employee or other person not directly engaged in providing services under the contract unless specific written authorization for such release is received from this office. This prohibition precludes release without authority to another contractor, including a sub-contractor, government agency, private individual or organization.

9. The intelligence materials will not be released to foreign nationals or non-US citizens except with the specific written authorization from the Senior Intelligence Officer, ARDEC, whether or not they are also consultants, U.S. contractor employees, and regardless of the level of their access authorization.

10. The intelligence materials released to you will not be destroyed unless written authorization for such destruction is received from the Senior Intelligence Officer, ARDEC.

In the event such authorization is received, you will effect such destruction in accordance with Chapter 5, Section 7 of the National Industrial Security Program Operating Manual, DoD 5220.22-M, dated February 2006.

11. If access to SIPRnet and INTELINK-S is granted, the following guidelines apply:

a. The computer account will be used in support of an official government project.

b. You will not willfully compromise the account password.

c. You will notify the Project Officer when the account is no longer needed, or account information needs revising, or the account password has been knowingly compromised.

d. The account will be used in accordance with all existing instructions, policy directives, and guidelines to ensure no improper or fraudulent use.

e. Data and files associated with this account are subject to random review.

f. The account password will be changed in accordance with current Army policy.

g. You are responsible for not only safeguarding the classified contents of this account, but also the physical configuration of the network.

12. Upon expiration of a contract, all substantive intelligence materials released to you, all reproductions thereof, and all other materials incorporating material there from will be returned to this office for disposition. In the event that the contract is extended, or that a new similar contract requiring the released data is negotiated, it is the responsibility of the Project Officer to affect an extension or document transfer with the Senior Intelligence Officer, ARDEC.

13. The name and address of the Senior Intelligence Officer, ARDEC, is as follows:

Commander, U.S. Army ARDEC Intelligence and Technology Protection Office Attn: RDAR-CIS (Mr. Michael Santaspirt) Senior Intelligence Officer, Bldg. 93 Picatinny Arsenal, NJ 07806-5000

Attachment C Page 7 of 10

PEO Ammunition Attachment C (PEO-AMMO-18-004-S)

SOLICITATION NUMBER: W15QKN-18-R-01BW

DD254, Block 13, Section 10j and 10k Continuation Sheet:

For Official Use Only (FOUO) and Controlled Unclassified Information (CUI)

10j. FOR OFFICIAL USE ONLY (FOUO)

1. The “FOR OFFICIAL USE ONLY” marking is assigned to information at the time of its creation in a DOD User Agency. It is not authorized as a substitute for a security classification marking but it is used on official government information that may be withheld from the public under exemptions 2 through 9 IAW Army Regulation 25-55, The Department of the Army Freedom of Information Act Program.

2. Control, marking, and protection of FOUO information will be in accordance with this document and DoD Manual 5200.01, Vol. 4.

3. Specific Handling Instructions: All emails containing (FOUO) will be digitally encrypted in accordance with AR 25-1, para. 4-1 f.(1)(b), dated 25 June 2013. There are several encryption tools available for use to accomplish this requirement: The AMRDEC Safe Access File Exchange (SAFE) website (https://safe.amrdec.army.mil/SAFE/) and/or the Encryption Wizard (http://spi.dod.mil/).

4. FOR OFFICIAL USE ONLY is restricted to personnel with a valid need to know unless public release authorization has been obtained. Information marked as FOUO, in any media format, may only be disseminated to those individuals or organizations with direct affiliation with the given program or project. Further dissemination of such information will be at the discretion of the Contracting Officer (PCO) or Contracting Officer’s Representative (COR).

Personnel no longer requiring access to FOUO must destroy or surrender any materials in their possession and terminate future access to it. The contractor may disseminate “FOR OFFICIAL USE ONLY” (FOUO) information to their employees who have a need to know for the information in connection with this contract.

5. When no longer needed, all FOUO material will be destroyed by shredding. Electronic media will be purged with approved software or destroyed through a physical process.

6. Use of the above marking does not mean that the information cannot be released to the public, only that it must be reviewed by the Government prior to its release to determine whether a significant and legitimate government purpose is served by withholding the information, or portions of it, from the public.

7. An unclassified document containing FOUO information will be marked IAW with DoD Manual 5200.01, Vol. 4, Enclosure 3, paragraph 2c.

https://safe.amrdec.army.mil/SAFE/

Attachment C Page 8 of 10

8. Within a classified document, an individual page that contains both FOUO and classified information will be marked at the top and bottom with the highest security classification of the information appearing on the page, as outlined in the NISPOM, AR 380-5, and DoD Manual 5200.01.

9. Removal of the “For Official Use Only” marking can only be accomplished by the originator or other competent authority. When the “For Official Use Only” status is terminated, all known holders will be notified to the extent practical.

10. During working hours, “For Official Use Only” information shall be placed in an out-of-sight location if the work area is accessible to persons who do not have a need for the information. During non-working hours, the information shall be stored to preclude unauthorized access. Filing such material with other unclassified records in unlocked files or desks is adequate when internal building security is provided during non-working hours. When such internal security is not exercised, locked buildings or rooms will provide adequate after-hours protection or the material can be stored in locked receptacles such as file cabinets, desks, or bookcases. “For Official Use Only” information may be sent via First Class US Mail or by parcel post. Bulky shipments may be set by Fourth Class US Mail.

11. Unauthorized disclosure of “For Official Use Only” information does not constitute a security violation but the Government Customer should be informed of any unauthorized disclosure. The unauthorized disclosure for FOUO information protected by the Privacy Act may result in criminal sanctions and disciplinary action may be taken against those responsible.

10k. CONTROLLED UNCLASSIFIED INFORMATION (CUI)

1. The definition of CUI is unclassified information that requires safeguarding or dissemination controls pursuant to and consistent with law, regulations, and Government-wide policies. It does not include information that is classified pursuant to Executive Order 13526, dated December 29, 2009, or the Atomic Energy Act, as amended (References (m) and (n)). Within the Department of Defense, examples of CUI include materials marked as “For Official Use Only (FOUO)”, “Law Enforcement Sensitive (LES),” or any unclassified technical documents with a Distribution Statement B-F.

2. When CUI is to be provided to or generated by DoD contractors, the controls and protective measures to be applied shall be described in the pertinent contract documents (e.g., contract clause; statement of work; or DD Form 254, “Department of Defense Contract Security Classification Specification”). Solicitations and contracts shall use a non-disclosure of information clause that prohibits release of unclassified information to the public without approval of the contracting activity.

3. The Contractor shall not release to anyone outside the Contractor's organization any unclassified information, regardless of medium (e.g., film, tape, document), pertaining to any

Attachment C Page 9 of 10 part of this contract or any program related to this contract without prior approval from the government.

4. Technical Data is any recorded information related to experimental, developmental, or engineering works that can be used to define an engineering or manufacturing process or to design, procure, produce, support, maintain, operate, repair, or overhaul program material. The data may be graphic or pictoral delineations in media, such as computer software, drawings, or photographs, text in specifications, or related performance or design documents, or computer printouts. Examples of technical data include research and engineering data, engineering drawings, and associated lists, specifications, standards, process sheets, manuals, technical reports, catalog-item identifications, and related information, and computer software documentation.

5. GOVERNMENT DISTRIBUTION STATEMENTS: Will be added to all technical data generated during the execution of this contract, in accordance with DoD Directive 5230.24.

6. The contractor shall protect CUI from unauthorized disclosure by appropriately marking, safeguarding, disseminating, and destroying such information.

7. CUI may be identified in security classification guides to ensure the information receives appropriate protection.

8. For unauthorized disclosures of CUI, no formal security inquiry or investigation is required.

However, appropriate management action shall be taken to fix responsibility for unauthorized disclosure of CUI whenever feasible or required by other guidance, and appropriate disciplinary action shall be taken against those responsible. The DoD Component that originated the CUI shall be informed of its unauthorized disclosure.

Attachment D Page 10 of 10

PEO Ammunition Attachment D (PEO-AMMO-18-004-S)

SOLICITATION NUMBER: W15QKN-18-R-01BW

DD254, Block 17, Required Distribution

PLEASE ENSURE ALL PARTIES LISTED ON THIS DISTRIBUTION RECEIVE A

COPY OF THE DD254 WITH ALL ATTACHMENTS

SECTION 17: REQUIRED DISTRIBUTION:

a. CONTRACTOR (all locations listed in Block 8a):

c. COGNIZANT SECURITY OFFICE FOR PRIME CONTRACTOR:

**In the event of a possible compromise of classified information under the control of the contractor, the contractor will immediately notify:

Defense Security Service Insert Appropriate Field Office Information

e. CONTRACTING OFFICER:

Kristen Rounsaville Army Contracting Command – New Jersey Phipps Road, Building 10 Picatinny Arsenal, NJ 07806-5000

(973) 724-2843 kristen.a.rounsaville.civ@mail.mil

CONTRACTING OFFICER

REPRESENTATIVE:

Susana Cruz SFAE-AMO-MAS-LC, Building 354 Picatinny Arsenal, NJ 07806-5000

(973) 724-6115 susana.cruz.civ@mail.mil

f. OTHERS AS NECESSARY:

Naomi Griggs or Jason Hayman Industrial Security Specialist PEO Ammunition, SFAE-AMO Picatinny Arsenal, NJ 07806-5000 (973)724-9877 or (973) 724-9775 naomi.j.griggs.civ@mail.mil and/or jason.j.hayman.civ@mail.mil mailto:kristen.a.rounsaville.civ@mail.mil mailto:susana.cruz.civ@mail.mil mailto:naomi.j.griggs.civ@mail.mil mailto:jason.j.hayman.civ@mail.mil