A07-Solicitation_Attachment_0001-DD254.pdf

DEPARTMENT OF DEFENSE 1. CLEARANCE AND SAFEGUARDING

CONTRACT SECURITY CLASSIFICATION SPECIFICATION a. FACILITY CLEARANCE REQUIRED

TOP SECRET

(The requirements of the DoD Industrial Security Manual apply to all aspects of this effort) b. LEVEL OF SAFEGUARDING REQUIRED

NONE

2. THIS SPECIFICATION IS FOR: (X and complete as applicable) 3. THIS SPECIFICATION IS: (X and complete as applicable)

a. PRIME CONTRACT NUMBER a. ORIGINAL (Complete date in all cases) Date (YYYYMMDD)

b. SUBCONTRACT NUMBER b. REVISED (Supersedes all previous specs) Revision No. Date (YYYYMMDD)

Due Date (YYMMDD) c. FINAL (Complete Item 5 in all cases) Date (YYYYMMDD) c. SOLICITATION OR OTHER NUMBER

W56JSR-18-R-

0002 180115

4. IS THIS A FOLLOW-ON CONTRACT? YES NO. If Yes complete the following

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract

5. IS THIS A FINAL DD FORM 254? YES NO. If Yes complete the following

In response to the contractor's request dated , retention of the identified classified material is authorized for the period of .

6. CONTRACTOR (Include Commercial and Government Entity ( CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

TBD TBD TBD

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICES ( Name, Address, and Zip Code)

N/A N/A N/A

8. ACTUAL PERFORMANCE

a. LOCATION b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

See Block 13

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

CECOM Software Engineering Center Headquarters (SEC HQ) Engineering and Operations Support

10. THIS CONTRACT WILL REQUIRE ACCESS TO: YES NO 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (COMSEC)

INFORMATION

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER

CONTRACTOR’S FACILITY OR A GOVERNMENT ACTIVITY

b. RESTRICTED DATA b. RECEIVE CLASSIFIED DOCUMENTS ONLY

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION c. RECEIVE AND GENERATE CLASSIFIED MATERIAL

d. FORMERLY RESTRICTED DATA: d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. INTELLIGENCE INFORMATION: e. PERFORM SERVICES ONLY

(1) Sensitive Compartmented Information (SCI) f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES

(2) Non-SCI g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL

INFORMATION CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER

f. SPECIAL ACCESS INFORMATION h. REQUIRE A COMSEC ACCOUNT

g. NATO INFORMATION i. HAVE A TEMPEST REQUIREMENT

h. FOREIGN GOVERNMENT INFORMATION j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

i. LIMITED DISSEMINATION INFORMATION k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

j. FOR OFFICIAL USE ONLY INFORMATION

l. OTHER (Specify).

The contractor may serve as courier.

k. OTHER Specify)

SIPRNET/NIPRNET/JWICS/NSANet Access /SCG– Government facilities

Information Technology (IT) Sensitive duties required). In performing this contract, the contractor will have SCI IT Processing.

DD Form 254, DEC 1999 Previous editions are obsolete

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public release shall be submitted for approval prior to release

Direct Through (Specify):

Public release of SCI is NOT AUTHORIZED. Requests for release of other than SCI must be approved by the Contract Monitor, CECOM SEC, AMSEL-SEC-OSA, Bldg 6002, APG, MD 21005 XXXXX, (XXX) XXX-XXXX, XXX.civ@mail.mil;

SEC Security, AMSEL-SEC-OSB, Bldg 6002, APG, MD 21005 XXXXX, (XXX) XXX-XXX, XXX.civ@mail.mil; then sent through CECOM G2, OPSEC OFFICER, XXXXX, (XXX) XXX-XXXX, XXX.civ@mail.mil TO: APG Public Affairs to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes: to challenge the guidance or classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any document/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.

See DD Form 254 Block 13 Continuation Page.

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract. (If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

Yes No

See SCI Addendum, Appendix B.

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. (If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.

Yes No

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL

XXXXX

b. TITLE

Industrial Security Specialist

c. TELEPHONE (Include Area

Code)

d. ADDRESS (Include ZIP Code) 17. REQUIRED DISTRIBUTION

HQ, US Army CECOM G2

ATTN: AMSEL-MI

6002 Combat Drive, D2-101 Aberdeen Proving Ground, MD 21005

a. CONTRACTOR. See block 6a.

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR See block 6c

e. SIGNATURE d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER

f. OTHERS AS NECESSARY: WORK LOCATIONS. See Block 8.

DD Form 254 Reverse, DEC 1999

DD Form 254, Continuation

Solicitation #: W56JSR-18-R-0002

Contract #: TBD

10a. Classified COMSEC material is not releasable to contractor employees who have not received a FINAL clearance at the appropriate security level. COMSEC access shall be IAW DoD 5220.22-M, Chapter 9, Section 4, AR 380-40 and Additional Security Guidelines for COMSEC, Appendix A. When access is required at Government facilities, contractor personnel will adhere to COMSEC rules and regulations as mandated by Command policy and procedures. Concurrence of the KO is required prior to subcontractors working on the program.

Copies of the subcontract DD Form 254 will be forwarded to the KO for the Contract file and to CECOM G2 for DD Form 254 tracker information. Per AR 380-40, Chapter 4: Contractor personnel are subject to the Department of Army Cryptographic Access Program (DACAP).

10e(1). SCI Access is required and is only authorized for contractors who require SCI access to perform their duties No public release of information authorized, public disclosure or confirmation of any subject related to the support contract is not authorized without first obtaining approval from the KO. Access to Intelligence information requires a U.S. Government clearance at the appropriate level. See US Army SCI Addendum to DD Form 254, Appendix B.

Access to SCI intelligence information requires a final U.S. Government clearance to TOP SECRET and indoctrinated for SCI access; which includes indoctrination to SI/TK/G/HCS and indoctrination to NATO Secret, as relayed by the Ground Intelligence Support Activity (GISA).

Contractor is not authorized to further disclose or release SCI (including release to a subcontractor) without prior written authorization of the releasing agency. The contractor shall gain authorization from DIA prior to downloading or destruction of any JWICS material. A copy of the written authorization will be sent to the Contracting Officer to be included in the file and a copy sent to CECOM G2 to be included in the tracker contract file under the Prime contract number.

10e(2) Non-SCI Intelligence Materials access required for performance by contractor. Non-SCI Information is not releasable to contractor employees who have not received a clearance at the appropriate security level. Written concurrence of the KO is required prior to subcontracting, Appendix C.

10g. Access to NATO information requires a final U.S. Government clearance and special briefings. Subcontracts that require access to NATO information require prior approval from the contracting Officer and must be IAW NISPOM. Chapter 10, Section 7. Indoctrination requirements for a JWICS userid and password) possess a FINAL TS Clearance, indoctrination to all SCI accesses (SI, TK, G, and HCS), and indoctrination to NATO Secret, as relayed by the Ground Intelligence Support Activity (GISA). All Contractor facilities approved for SCI Networks must send a copy of the Facility Checklist, Co-Use Agreements, MOA/MOUs and Facility and Network Accreditations documents to CECOM G2, Industrial Security.

10h. Foreign Government Information (FGI) is not releasable to contractor employees who have not received a FINAL clearance at the appropriate U.S. Government clearance at the appropriate level. Refer to AR 380-5, Chapter 4, Section VII for additional guidance. Written concurrence of the KO is required prior to subcontracting.

10j. Safeguarding "For Official Use Only” (FOUO) information, Appendix D. FOUO Information generated and/or provided under this contract shall be safeguarded and marked as specified in AR 25-55 and DoD 5200.1-M (Marking is in Volume 2).

Contract #: TBD

10k. Access to SIPRNet is required at Government facilities only. All contractors granted SIPRNet access must be aware that they are not authorized to download ANY classified material without the guidance and written permission of the Cognizant Security Agency.

10k. JWICS ACCESS: All contractors requiring access to JWICS MUST have a final Top Secret clearance and be indoctrinated for Sensitive Compartmented Information access. All individuals require SECRET NATO access and receive a COMSEC BRIEFING PRIOR TO BEING GRANTED ACCESS TO JWICS. Contractors requiring access to JWICS will be identified by the SCI Contract Monitor.

10k. NSANET access required. All contractors requiring access to NSANET MUST have a final Top Secret clearance and be indoctrinated for Sensitive compartmented Information access.

Contractors and/or Subcontractors requiring access to the NSANET will require a successfully completed Full Scope (Lifestyle) or Counterintelligence Polygraph. Contractors requiring access to NSANET receive a COMSEC briefing prior to being granted access to NSA NET. All Contractor facilities approved for SCI Networks must send a copy of the Facility Checklist, Co- Use Agreements, MOA/MOUs and Facility and Network Accreditations documents to CECOM G2, Industrial Security.

11a. Contractor performance is restricted to Government facility(ies). Government agency or activity will provide security classification guidance for performance of this contract. Submit visit request to the KO and/or Security Management Office for need-to-know verification.

11h. See 10a/11h paragraph above.

11j. OPSEC requirements are IAW the following Program OPSEC Plan: Operations Security, Standard Operating Procedure, and SEC SOP # S-12, DATE: 7-February 2013.

11j. Level I OPSEC training is available at the following website:

http://cdse.edu/catalog/elearning/GS130.html (Duration: 45 minutes).

13a. Contractor personnel performing IT sensitive duties are subject to investigative and assignment requirements IAW AR 25-2, AR 380-67, DoD 8570.0 and affiliated regulations. Army regulation available at www.apd.army.mil. Contractor personnel performing IT sensitive duties are subject to investigative and assignment requirements IAW DoD 8570.0 and Service/Agency regulations.

13b. Foreign subcontractors, foreign vendors and/or visitors that are not cleared US Companies, participating in Army foreign disclosure issues will be handled in accordance with AR 380-10, Foreign Disclosure and Contacts with Foreign Representatives, dated 4

DEC 2013.

approval by the foreign disclosure officer.

-US cleared Foreign subcontractor and/or Foreign own companies to perform on this contract must be requested from the Prime Contract to the KO through Program Office and approved by Foreign Disclosure Officer.

13c. Classified information will be protected IAW the NISPOM, Chapter 5. All security incidents involving classified information will be reported to the CECOM G2 Industrial http://cdse.edu/catalog/elearning/GS130.html http://www.apd.army.mil/

Contract #: TBD

Security Office, and DSS Industrial Security Representative. Information will be forwarded to KO and the PM for a program damage assessment to be conducted IAW AR 380-49.

13d. All subcontractor DD Form 254s and subcontractor tier DD Form 254s will be sent to the KO. Any Contractors/subcontractors owned by Foreign Companies and that have a clearance issued by the Defense Security Service under a Special Security Agreement need to have a National Interest Determination (NID) approved if access is required to:

Top Secret; COMSEC; Restricted Data; SCI and/or SAP. NID requirements and justification must be sent through CECOM G2 to be forwarded to the approving agencies.

Only after a NID approval is received will a FOCI contracting firm be authorized to work on the program.

13e. Security Training and Briefing: IAW AR 380-49 Chapter 3, the FSO will provide Threat Awareness and Reporting Program (TARP) training in addition to initial and refresher security training IAW AR 381-12, paragraph 1-14 and Chapter 2 for contractors working in contractor facilities.Contractors may be exempt from such security training if they can provide documentation they have had similar training from their FSO. The FSO will forward Certificates and/or a signed Letter of Certification for Training to the COR for verification of required training to be included in the contract folder.

Integrated/embedded contractors will receive security training from the assigned CECOM Security Manager/Representative. Some Security training provided to integrated/embedded contractors will include:

--TARP Training: Live training provided by 902d – Annual training requirement --Initial Security Orientation: Online training available on the Army Learning Management System (ALMS) site, reference ALARACT 207-2103 – Initial training --Annual Security Orientation: Online training available on the Army Learning Management System (ALMS) site, reference ALARACT 207-2103

– Annual training requirement Derivative Classification Training, reference DoD 5200.01- V3-Biennial training requirement --Operations Security Training, reference AR 530-1-Annual training requirement --Foreign travel training, AR 525-13 – Required when traveling abroad

The previous listing includes some training requirements that are provided. Any training requirements that the installation or tenant facilities require of the contractors must be added to the DD 254 and the security section of the contract document.

13f. The contractor must submit subcontracts to DD Form 254’s to the KO for the contract file and forward to CECOM G2 for review to insure Army requirements flow down to the subcontractor.

13g. All Facility Clearance sponsorships for subcontractors must have Government approval and certification on the subcontractor’s DD Form 254. Submit all requests to the CECOM G2 Industrial Security.

13h. Records of security related training of contractors and imbedded contractors must be available for review.

Contract #:

Certification and Signature: Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

DATE XXXXX

Contract Monitor

(XXX) XXX-XXXX

TBD

Security Specialist _________

(XXX) XXX-XXXX DATE

CONTRACT # TBD

SOLICITATION # W56JSR-18-R-0002

APPENDIX A

ADDITIONAL SECURITY GUIDELINES FOR COMSEC

Provided by the CECOM LCMC Director of Intelligence & Security/G2

(Updated: 14 July 2008)

Contractor Generated Communications Security (COMSEC) Material: Any material generated by the contractor (including, but not limited to: correspondence, drawings, models, mockups, photographs, schematics, status programs and special inspection reports, engineering notes, computations and training aids) will be classified according to its own content.

Classification guidance will be taken from other elements of this Contract Security Classification Specification, DD Form

254, Government furnished equipment or data, or special instructions issued by the Contracting Officer, or his/her duly appointed representative.

REQUIREMENTS:

1. The requirements of DoD 5220.22-M and NSA/CSS Policy Manual 3-16 are applicable to this effort.

2. All contractor personnel to be granted access to classified COMSEC information must be U.S. citizens granted FINAL clearance by the government prior to being given access. Immigrant aliens, interim cleared personnel, or personnel holding a contractor granted CONFIDENTIAL clearance are not eligible for access to classified COMSEC information released or generated under this contract without the express permission of the Director, NSA.

3. Contractor employees or cleared commercial carriers shall not carry classified COMSEC material on commercial passenger aircraft anywhere in the world without the approval of the procuring contracting officer.

4. No contractor generated COMSEC or government furnished material may be provided to the Defense Technical

Information Center (DTIC). Contractor generated technical reports will bear the statement "Not Releasable to the Defense

Technical Information Center per DoD Directive 5100-38."

5. Classified paper COMSEC material may be destroyed by burning, disintegration, chopping or high security crosscut shredding. Cryptographic key tapes must be “terminally” destroyed (destroyed to the point where it cannot be reconstructed) utilizing devices listed on the Evaluated Products List (EPL) for Punched Tape Destruction Devices or the EPL for High-

Security Disintegrators. A listing of EPLs can be found at http://www.nsa.gov/ia/government/mdg.cfm. When a method other than burning is used, all residue must be reduced to pieces 5mm or smaller in any dimension. When classified

COMSEC material other than paper is to be destroyed, specific guidance must be obtained from the User Agency.

6. Unclassified COMSEC information released or generated under this contract shall be restricted in its dissemination to personnel involved in the contract. Release in open literature or exhibition of such information without the express written permission of the Director, NSA, is strictly prohibited.

7. Recipients of COMSEC information under this contract may not release information to subcontractors without permission of the User Agency.

8. Additional notices to be affixed to the cover and title or first page of contractor generated COMSEC documents:

a. "COMSEC MATERIAL - ACCESS BY CONTRACTOR PERSONNEL RESTRICTED TO U.S. CITIZENS

HOLDING FINAL GOVERNMENT CLEARANCE."

b. "THIS PUBLICATION OR INFORMATION IT CONTAINS MAY NOT BE RELEASED TO FOREIGN

NATIONALS WITHOUT PRIOR SPECIFIC APPROVAL FROM THE DIRECTOR, NSA. ALL APPROVALS WILL

IDENTIFY THE SPECIFIC INFORMATION AND COPIES OF THIS PUBLICATION AUTHORIZED FOR RELEASE

TO SPECIFIC FOREIGN HOLDERS. ALL REQUESTS FOR ADDITIONAL ISSUANCES MUST RECEIVE PRIOR

SPECIFIC APPROVAL FROM THE DIRECTOR, NSA."

9. Point of contact is CECOM LCMC G2, ATTN: AMSEL-MI.

http://www.nsa.gov/ia/government/mdg.cfm

APPENDIX B

US ARMY SCI ADDENDUM TO DD FORM 254, 31 May 2005

XXX (1) This contract requires access to Sensitive Compartmented Information (SCI). The Commander, US Army

Intelligence and Security Command (INSCOM), acting on behalf of the DA Deputy Chief of Staff (DCS), G-2 as the Cognizant

Security Authority (CSA) for the US Army, has exclusive security responsibility for all SCI released to the contractor or developed under the contract and held within the Contractor's SCI Facility (SCIF) or Co-utilization Agreement (CUA) SCIF.

The Defense Intelligence Agency (DIA) has security inspection responsibility for SCI and the Defense Security Service (DSS) retains responsibility for all collateral information released or developed under the contract and held within the DoD

Contractor's SCIF. The manuals, regulations and directives checked below provide the necessary guidance for physical, personnel, and information security for safeguarding SCI, and are part of the security classification specification for this contract:

XXX DoD 5105.21-M-1, SCI Security Manual, Administrative Security

XXX Signals Intelligence Security Regulations (SISR) (Available from the CM)

Imagery Policy Series (Available from the CM)

DCID 6/3, Protecting Sensitive Compartmented Information within Information Systems

______ DCID 6/9, Physical Security Standards for Sensitive Compartmented Information Facilities

AR 25-2, Information Assurance

XXX AR 380-28, DA Special Security System

AR 380-381, Special Access Programs (SAPS).

XXX Army Handbook for SCI Contracts.

Other

XXX (2) Contract estimated completion date: (NOTE: Section “F” of the contract normally provides the Period of

Performance. Option years are not to be included, as an option is not valid until exercised by the government.)

XXX (3) The name, telephone number, email address and mailing address of the Contract Monitor (CM) for the SCI portion of this contract is:

CM:

SCTY POC: (Identify the Security POC & phone number and email address at the contractor’s/subcontractor’s location)

(The Contract Monitor and the contractor security officer must be registered in the Army Contractor Automated Verification

System (ACAVS) in order to process SCI actions)

XXX (4) All DD Forms 254 prepared for subcontracts involving access to SCI under this contract must be forwarded to the

CM for approval and then to HQ INSCOM, ACofS Security, G2, Contractor Support Element (CSE) for review and concurrence prior to award of the subcontract.

XXX (5) The contractor will submit the request for SCI visit certifications through the CM for approval of the visit. The certification request must arrive at the Contractor Support Element at least ten (10) working days prior to the visit. Visit certification requests will be processed through ACAVS.

XXX (6) The contractor will not reproduce any SCI related material without prior written permission of the CM.

(7) Security Classification Guides or extracts are attached or will be provided under separate cover.

(8) Electronic processing of SCI requires accreditation of the equipment in accordance with DCID 6/3 and AR 25-2

(Note: Check only if item 11l indicates that a requirement exists for SCI IS processing.)

(9) This contract requires a contractor SCIF.

XXX (10) This contract requires ___ (SI) ___ (TK) ___ (G) ___ (HCS) (Add others as required)

XXX (11) The contractor will perform SCI work under this contract at the following locations:

APPENDIX C

INTELLIGENCE MATERIALS ACCESS REQUIREMENTS

Provided by CECOM LCMC G2

(Updated: 14 July 2008)

1. No Intelligence materials are to be provided in support of the contract without the prior approval of the CECOM Life Cycle Management Command (CECOM LCMC) G2

Director of Intelligence and Security. Any intelligence materials so provided will be disseminated solely by the CECOM LCMC G2, and will be accompanied by both a

Letter of Instruction governing control of the materials provided, and a Letter of

Transmittal, identifying the materials loaned and the duration of the loan. This service only pertains to elements supported by the CECOM LCMC G2.

2. All requests for access to intelligence materials will adhere to the following guidelines:

a. Prime contractor requests for intelligence materials access will be sent to the

Program/Project Manager (PM) of the User Activity on official business letterhead with an enclosed copy of the approved DD Form 254.

b. Subcontractor requests for access to intelligence materials will be forwarded by the prime contractor to the PM on official business letterhead with an enclosed, approved DD

Form 254 for the relevant subcontract.

c. PM of the User Activity will forward request through the Contracting Officer (KO) on official letterhead with the appropriate DD Form 254 and all substantiating documents attached, to be forwarded to the CECOM LCMC G2 for review and concurrence.

3. Point of contact is CECOM LCMC G2, AMSEL-MI (ATTN: Current Intelligence).

APPENDIX D

SAFEGUARDING “FOR OFFICIAL USE ONLY” (FOUO) INFORMATION

Provided by the CECOM Director of Intelligence & Security/G2

(Updated: 14 July 2008)

Reference: AR 25-55, Chapter IV

1. The “FOR OFFICIAL USE ONLY” marking is assigned to information at the time of its creation in a DOD User Agency. It is not authorized as a substitute for a security classification marking but it is used on official Government Information that may be withheld from the public under exemptions 2 through 9 of the Freedom of Information Act.

2. Other non-security markings such as “Limited Official Use” and “Official Use Only” are used by non-DOD User Agencies for the same type of information and should be safeguarded and handled in accordance with instructions received from such agencies.

3. Use of the above markings does not mean that the information cannot be released to the public, only that it must be reviewed by the Government prior to its release, to determine whether a significant and legitimate Government purpose is served by withholding the information or portions of it.

4. IDENTIFICATION MARKINGS:

a. An unclassified document containing FOUO information shall be marked “For Official Use Only” in bold letters at least

3/16 of an inch high at the bottom of the front cover (if any), on each page containing FOUO information, and on the outside of the back cover (if any). No portion marking will be shown.

b. Within a classified document, an individual page that contains both FOUO and classified information will be marked at the top and bottom with the highest security classification appearing on the page. If an individual portion contains FOUO information but no classified information, the portion will be marked ‘FOUO.’

c. Any “FOR OFFICIAL USE ONLY” information released to a contractor by a DOD User Agency is required to be marked with the following statement prior to transfer:

THIS DOCUMENT CONTAINS INFORMATION EXEMPT FROM MANDATORY DISCLOSURE UNDER THE

FOIA. EXEMPTIONS APPLY.

d. Removal of the “FOR OFFICIAL USE ONLY” marking can only be accomplished by the originator or other competent authority. When “FOR OFFICIAL USE ONLY” status is terminated, all known holders will be notified to the extent possible.

5. DISSEMINATION: Contractors may disseminate “FOR OFFICIAL USE ONLY” information to their employees and subcontractors who have a need for the information in connection with a classified contract.

6. STORAGE: During normal working hours “FOR OFFICIAL USE ONLY” information shall be placed in an out-of-sight location if the work area is accessible to persons who do not have a need for the information. During non-working hours, the information shall be stored to preclude unauthorized access. Filing such material with other unclassified records in unlocked files or desks is adequate when internal building security is provided during non-working hours. When such internal security control is not exercised, locked buildings or rooms will provide adequate after hours protection or the material can be stored in locked receptacles such as file cabinets, desks or bookcases.

7. TRANSMISSION: “FOR OFFICIAL USE ONLY” information may be sent via first-class mail or parcel post. Bulky shipments may be sent fourth-class mail.

8. DISPOSITION: When no longer needed, FOUO information may be disposed of by tearing each copy into pieces to preclude reconstructing, and placing it in a trash container or as directed by the User Agency.

9. UNAUTHORIZED DISCLOSURE: Unauthorized disclosure of “FOR OFFICIAL USE ONLY” information does not constitute a security violation but the releasing agency should be informed of any unauthorized disclosure. The unauthorized disclosure of FOUO information protected by the Privacy Act may result in criminal sanctions.

10. Point of contact is CECOM LCMC Director of Intelligence & Security/G2, ATTN: AMSEL-MI.

Text1: 20171113