ATTACHMENT_0003_-_DD_254.pdf

Solicitation # W56KGY-16-R-0004 DD Form 254 Block 13 Continuation

BLOCK 13. SECURITY GUIDANCE (Continuation Sheet)

Block 1b. The contractor will not store classified material at the contractor facility.

Classified information will not be transmitted to the contractor facility. All classified work and material will be performed and stored at the government designated locations (see 11a. below).

Block 10e2. The contractor will require access to Intelligence Information which will be handled IAW Intelligence Community Directive (ICD) 703, Protection of Classified national Intelligence, Including Sensitive Compartment Information, 21 June 2013.

Non-SCI Information is not releasable to contractor employees who have not received a clearance at the appropriate security level. Written concurrence of the KO is required prior to subcontracting. Access to intelligence information is needed in order to identify current threats, system vulnerabilities and develop solutions.

Block 10h. Foreign Government Information (FGI) is not releasable to contractor employees who have not received a FINAL clearance at the appropriate security level.

Written concurrence of the KO is required prior to subcontracting.

Block 10j. Contractor will comply with the requirements of DoDM 5200.01, DoD Information Security Program, Controlled Unclassified Information (CUI), Volume 4, February 24, 2012, Enclosure 3, Identification and Protection of CUI, Paragraph 2, FOUO INFORMATION (pages 11-18), for the processing of FOUO information in this contract.

Block 11a: Access to classified information, classified processing, and/or storage of classified information is not authorized at the Prime contractor location. Contractor performance is restricted to Product Manager Radars work sites and locations as directed by the KO. Submit visit request to the KO and/or Security Management Office for need-to-know verification. CONUS Temporary Duty locations include: New York;

New Jersey; Alabama; Oklahoma; Washington D.C.; Arizona; Pennsylvania and other locations as required.

Block 11e. Contract is for engineering, administrative and program management services. Classification markings on the material to be furnished to the contractor will provide the classification guidance necessary for performance of this contract.

Block 11f. Any classified information obtained, generated, or modified outside the United States will be given the same level of protection as stated within this document.

The contractor shall have access to classified information at the following OCONUS locations: Afghanistan; England; Germany; Korea; Israel and other locations as required.

Block 11g. Contractor access to DTIC information is restricted to contractual subject matter and SOW performance requirements. The Contracting Office or Program/Project Manager will verify contractor need-to-know via certification on the DD Form 1540.

Block 11j. The contractor shall comply with PdM Radars OPSEC Plan which will be provided upon award of the contract, and the AT/OPSEC requirements stipulated in the Security Requirements Clause of the PWS, or equivalent, for this contract and with AR 530-1, Operations Security in the performance of this contract.

GCA approval is required prior to imposing OPSEC requirements on a subcontractor.

Program Protection Plans (PPP) and supporting annexes will be provide as GFI, per DoDI 5200.39, dated 16 Jul 08. The contractor will follow guidance in the PPP and annexes to ensure protection identified CPI. Request for clarification will be made to the Program Manager not later than 30 days from receipt of the PPP, its annexes or updates. Any modifications or deviation to the PPP will be made in writing by the PM.

The contractor will, as requested by the government, provide input to the updates of the PPP and associated annexes to include participation in the CPI identification. Oversight of the PPP and annexes to include inspections will be provided by the RE security office. All other security inspections will remain with the CSO.

Block 11k. Contractor DCS account will be established and maintained in accordance with DoDI 5200.33, Defense Courier Operations, 3 June 2011.

Block 10k and 11l. Contractors requiring access to government Information Systems at government or contractor facilities will comply with AR 25-2 guidance.

Contractor access to SIPRNET via government accounts is restricted to only sites directly related to meeting the requirements of this contract as validated by the COR and/or the Statement of Work (SOW). The contractor will not access INTELLINK-S while on the SIPRNET without formal access authorization of the COR and AMSAM-ISI.

SIPRNET access via government accounts may not be subcontracted without prior written authorization of the Contracting Officer, COR and AMSAM-IS in accordance with DoD 5220.22-M, National Industrial Security Program Operating Manual (NISPOM), paragraph 9-304.

STE and secure facsimile use in the performance of this contract are authorized.

Government agency or activity will provide security classification guidance for performance of this contract. The following security classification guides, and subsequent revision/updates are required for performance of this contract and will be provided to the contractor by the Program TPOC, listed in block 13, upon request, under separate cover:

Security Classification Guide (SCG) for the Enhanced AN/TPQ-36 (EQ-36), dated 12 July 2010

SCG for the Lightweight Counter Mortar Radar (LCMR) Family of Systems, dated 18 Sep 12

SCG for the Mortar Locating Radar Set, AN/TPQ-36 and Artillery Locating Radar Set, AN/TPQ, dated 11 Jun 12

IAW AR 381-12, Threat Awareness and Reporting Program (TARP), 4 Oct 10, Contractors will report threat-related incidents, behavioral indicators and other matters of Counter Intelligence (CI) interest specified in Chapter 3, to the Facility Security Office, (FS), the nearest military CI office, the FBI or the DSS. Contractor employees working as an integral part of the Army organization ARE REQUIRED TO COMPLETE ANNUAL Threat Awareness training. Contractor FSOs will ensure that all applicable AR 381-12 requirements are implemented for personnel who work at contractor facilities.

In addition to the DoD 5220.22-M, National Industrial Security Program Operating Manual (NISPOM), and the International Traffic in Arms Regulations (ITAR) for non-US citizens, Information Security Program, AR 380-5, Information Security Program, AR 381-12, Threat Awareness and Reporting Program, and AR 380-67, Personnel Security.

Contractor personnel performing IT sensitive duties are subject to investigative and assignment requirements IAW AR 25-2, AR 380-67, DoD 8570.0 and affiliated regulations. Army regulation available at www.apd.army.mil. Information Assurance Contractor Training and Certification (Reference Federal Register/Vol 73, No 7, Paragraph 252.239-7001):

The Contractor shall ensure that personnel accessing information system have the proper and current information assurance certification to perform information assurance functions in accordance with DoD 8570.01-M, Information Assurance Workforce Improvement requirements, including:

• DoD-approved information assurance workforce certifications appropriate for each category and level as listed in the current version of DoD 8570.01-M; and

• Appropriate operating system certification for information assurance technical positions as required by DoD 8570.01-M.

Upon request by the Government, the Contractor shall provide documentation supporting the information assurance certification status of personnel performing information assurance functions.

Contractor personnel who do not have proper and current certification shall be denied access to DoD information systems for the purpose of performing information assurance functions.

http://www.apd.army.mil/

General:

Concurrence of the Contracting Officer and PEO Missiles and Space Foreign Disclosure Officer will be obtained prior to issue of a Limited Access Authorization to a non-US citizen in compliance with the NISPOM. Controlled Unclassified Information as defined in DoD 5200.01, Vol 4, DoD Information Security Program: Controlled Unclassified Information (CUI), Feb 24, 2012, may be disclosed to US persons who are employed by the prime contractor or subcontractors or to such employees who are foreign persons when requirements of export control and other laws are met. The contractor is responsible for compliance with all applicable laws and regulations governing access to classified information or controlled unclassified information.

The contractor is not authorized to release any data to foreign nationals or foreign representatives without an approved export license.

Prior to sub-contracting with a foreign industry, the US contractor will consult with the Contracting Officer and PEO Missiles and Space Foreign Disclosure Officer. Foreign subcontractors must agree that only citizens of their country or the US will be allowed to perform on the contract. The US contractor is responsible for complying with the regulations outlined in the International Traffic Arms Regulations (ITAR).

Questions concerning any aspects of security will be referred to the PM Radars Security Manager, 443-861-3109 for resolution.

Estimated Completion Date: 30 June 2019.

The technical point of contact is James Iverson, Technical Director, james.d.iverson.civ@mail.mil, 443-861-2744

Certification and Signature: Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

Leon G. Van Syckle, Contracting Officer Representative, leon.g.vansyckle.civ@mail.mil, 443-861-2614.

*******************END OF DD FORM 254 ADDITIONAL DATA SHEET*************

mailto:james.d.iverson.civ@mail.mil mailto:leon.g.vansyckle.civ@mail.mil