Attachment_0002_Contract_Security_Classification_Specification_DD_254.pdf

DD Form 254, Continuation Solicitation #: W52P1J-15-R-0051 Contract #: TBD

10a. Classified COMSEC material is not releasable to contractor employees who have not received a FINAL clearance at the appropriate security level. COMSEC access shall be IAW DoD 5220.22-M, Chapter 9, Section 4, AR 380-40 and Additional Security Guidelines for COMSEC, Appendix A. When access is required at Government facilities, contractor personnel will adhere to COMSEC rules and regulations as mandated by Command policy and procedures. Concurrence of the KO is required prior to subcontractors working on the program. Copies of the subcontract DD254 will be forwarded to the KO for the Contract file and to CECOM G2 for DD254 tracker information.

Per AR 380-40, Chapter 4: Contractor personnel are subject to the Department of Army Cryptographic Access Program (DACAP).

10j. Safeguarding "For Official Use Only” (FOUO) information, Appendix D. FOUO Information generated and/or provided under this contract shall be safeguarded and marked as specified in AR 25-55 and DoD 5200.1- M (Marking is in Volume 2)

11a. Contractor performance is restricted to Government facility(ies). Government agency or activity will provide security classification guidance for performance of this contract. Submit visit request to the KO and/or Security Management Office for need-to-know verification.

11l. IT Sensitive Duties Required

13a. Contractor personnel performing IT sensitive duties are subject to investigative and assignment requirements IAW AR 25-2, AR 380-67, DoD 8570.0 and affiliated regulations. Army regulation available at www.apd.army.mil

13b. Foreign subcontractors, foreign vendors and/or visitors that are not cleared US Companies, participating in Army foreign disclosure issues will be handled in accordance with AR 380-10, Appendix G, para G-4.

Foreign subcontractor participation will be handled in accordance with AR 380-10 (Technology Transfer, Disclosure of Information & Contacts with Foreign Representatives), (DTM) 09-019 - “Policy Guidance for Foreign Ownership, Control, or Influence (FOCI)”, September 2, 2009, National Disclosure Policy, and affiliated regulations and/or supplements.

All disclosures (i.e. oral, visual, briefing, documents) to foreign nationals require prior approval by the foreign disclosure officer.

All requests for non-US cleared Foreign subcontractor and/or Foreign own companies to perform on this contract must be requested from the Prime Contract to the KO through Program Office and approved by Foreign Disclosure Officer.

13c. Classified information will be protected IAW the NISPOM, Chapter 5. All security incidents involving classified information will be reported to the CECOM G2 Industrial Security Office, and DSS Industrial Security Representative. Information will be forwarded to KO and the PM for a program damage assessment to be conducted IAW AR 380-49.

http://www.apd.army.mil/

DD Form 254, Continuation Solicitation #: W52P1J-15-R-0051 Contract #: TBD

13d. All subcontractor DD254s and subcontractor tier DD254s will be sent to the KO. Any Contractors/subcontractors owned by Foreign Companies and that have a clearance issued by the Defense Security Service under a Special Security Agreement need to have a National Interest Determination (NID) approved if access is required to: Top Secret; COMSEC; Restricted Data; SCI and/or SAP. NID requirements and justification must be sent through CECOM G2 to be forwarded to the approving agencies. Only after a NID approval is received will a FOCI contracting firm be authorized to work on the program.

13e. The contractor FSO will include Threat Awareness and Reporting Program (TARP) requirements in their initial and refresher training IAW AR 381-12, paragraph 1-14 and Chapter 2.

13f. The contractor must submit subcontracts to DD254’s to the KO for the contract file and forward to CECOM G2 for review to insure Army requirements flow down to the subcontractor.

13g. All Facility Clearance sponsorships for subcontractors must have Government approval and certification on the subcontractor’s DD 254. Submit all requests to the CECOM G2 Industrial Security.

13h. AR 380-49 requires a record of security related training of contractors and imbedded contractors be available for review.