EWIRDD254SCIAddendum.pdf

This contract requires access to Sensitive Compartmented Information (SCI). The Commander, US Army Intelligence and Security Command (INSCOM), acting on behalf of the DA Deputy Chief of Staff (DCS), G-2 is the Cognizant Security Authority (CSA) for the US Army, has exclusive security responsibility for all SCI released to the contractor or developed under the contract and held within the Contractor's SCI Facility (SCIF) or Co-utilization Agreement (CUA).

(1)

(c) IC Tech Spec for ICD/ICS 705, Technical Specifications for Construction and Management of Sensitive Compartmented Information Facilities

(SI) (TK) (G) (HCS)

DD FORM 254 SCI ADDENDUM WORKSHEET

Reference: W911W5-18-R-0001 Date: 2 January 2018

The Defense Intelligence Agency (DIA) has security inspection responsibility for SCI and the Defense Security Service (DSS) retains responsibility for all collateral information released or developed under the contract and held within the DoD Contractor's SCIF. All DD Forms 254 prepared for contracts involving access to SCI under this contract must be processed through ACCS to the CM and Industrial Security Specialist for approval.

(2)

The manuals, regulations, and directives checked below provide the necessary guidance for physical, personnel, and information security for safeguarding SCI, and are part of the security classification specification for this contract:

(3)

(a) ICD 503, Intelligence Community Information Technology Systems Security Risk Management, Certification, and Accreditation

(b) ICD 704, Personnel Security Standards and Procedures Governing Eligibility for Access to Sensitive Compartmented Information and Other Controlled Access Program Information

(d) Signals Intelligence Security Regulations (SISR) (Available from the CM)

(e) Imagery Policy Series (Available from the CM)

(f) DoDM 5105 Vol 1 - 3, SCI Administrative Security Manual

(g) AR 380-28, DA Special Security System

(h) AR 25-2, Information Assurance

(i) AR 380-381, Special Access Programs

(j) Army Handbook for SCI Contracts

(k) Other:

(4) Contract estimated completion date (Period of Performance only): 25 September 2019

The name, telephone number, and email and mailing address of the Contract Monitor (CM) and alternate for the SCI portion of this contract are:(5)

(Note: Option years are not to be included, as an option is not valid until exercised by the Government.)

Boynton, Erik J., (434) 980-7268, erik.j.boynton.civ@mail.mil

Additionally, identify the Security POC, phone number, and email address at the contractor's/ subcontractor's location:TBD

The CM and the contractor security officer must be registered in the Army Centralized Contracts and Security (ACCS) Portal at the level of contract, in order to process SCI actions

All DD Forms 254 prepared for contracts involving access to SCI under this contract must be processed through ACCS to the CM and Industrial Security Specialist for approval and to Contractor Support Element, USAINSCOM, ACofS Security, G2 for review and concurrence of the awarded contract.

(6)

Visit certification to DoD locations is not required, as need to know and accesses is verified at the visiting facility. Non-DoD locations the contractor must process request for SCI visit certification(s) through ACCS to the CM for approval and to Contractor Support Element (CSE) for review and processing.

Visit certification request must be submitted at least ten (10) working days prior to the visit.

(7)

Debriefings: All FSOs/CSSOs must properly debrief all contractors from SCI through ACCS. FSOs/CSSOs must submit the debrief request NLT 7 days and NET 10 days before actual departure. FSOs/CSSOs will separate all contractors from JCAVS after completion of debriefing.

(8)

The contractor will not reproduce any SCI related material without prior written permission of the CM.(9)

Security Classification Guides or extracts are attached or will be provided under separate cover.(10)

Electronic processing of SCI requires accreditation of the equipment in accordance with ICD 503 and AR 25-2. (Note: NATO security awareness briefing is required for access to JWICS indicated in blocks 10k or 11l of the DD 254.)

(11)

This contract requires a contractor Controlled Space(12)

Request for Indoctrination/Debrief Authority(13)

This contract requires: (14)

(15) The contractor will perform SCI work under this contract at the following location (Name of government or contractor activity, SCI SMO or CAGE Code):

The contractor identified in Block 6 is a Multiple Facility Organization (MFO) and is authorized to submit DD254 and SCI Addendum for the following SCI locations (Facility Name and CAGE Code):

(16) or CUA

SCI Courier Requirement(17)

(insert information)

NGIC, Charlottesville, VA CAGE: WDKFAA

INSTRUCTIONS FOR THE DD 254 SCI ADDENDUM WORKSHEET

a. The User Agency and the appointed CM are responsible for coordinating with HQ INSCOM, ACofS Security, G2, and Contractor Support Element (CSE) for developing and incorporating the SCI addendum with an appropriate DD Form 254 for the prime contract. Those items that are pre- "X"d apply to all Army SCI contracts/subcontracts.

b. Based on the guidance provided in the DD Form 254 and SCI addendum for the prime contract, the prime contractor is responsible for coordinating with the CM and the CSE for developing and incorporating the SCI addendum with an appropriate DD Form 254 for all related subcontractors.

3. Regulations listed that are not marked, are to be marked with an "X" when they apply.

(a) ICD 503, Intelligence Community Information Technology Systems Security Risk Management, Certification, and Accreditation

(b) ICD 704, Personnel Security Standards and Procedures Governing Eligibility for Access to Sensitive Compartmented Information and Other Controlled Access Program Information

(c) ICD/ICS 705, Technical Specifications for Construction and Management of Sensitive Compartmented Information Facilities (SCIF): Required when the contractor is authorized a SCIF.

(d) Signals Intelligence Security Regulations (SISR) (Available from the CM)

(e) Imagery Policy Series (Available from the CM): Applies when the contract/subcontract requires TK level SCI (i.e., access, documents, etc.)

DCID 6/3, Protecting Sensitive Compartmented Information within Information Systems. Applies when AIS processing is involved.

(g) AR 380-28, DA Special Security System

(h) AR 25-2, Information Assurance: Applies when item 11I of the DD Form is marked yes.

(i) AR 380-381, Special Access Programs (SAPs): Applies when item 10f of the DD Form 254 is marked yes.

4. An estimated completion date must be annotated. Do not include proposed option years. An option is not official until it is exercised by the government.

5. The name, official organization address, email address and telephone number of the designated Contract Monitor (CM) and alternate CM by the User Agency (contracting agency/office). NOTE: The CM designated must be either military or a DA civilian, who possess the appropriate SCI access to the levels required by the contract. Further, the CM for the prime contract is always the CM for all related subcontractors. Additionally, in this item, identify the contractor security POC, with telephone number and email address, at the company to be awarded the contract/subcontract.

8. Cites the requirement for FSOs/CSSOs to debrief all contractors through ACCS.

General: The SCI addendum must be executed and accompany all DD Forms 254 prior to award of an Army SCI contract. It is designed for use on all Army SCI contractual efforts and their related subcontracts. This section contains specific instructions for preparation of the "SCI Addendum Worksheet."

9. Identifies the requirement for prior written authority to reproduce SCI and all related material.

6. Cites the requirement for DD Forms 254 to be processed through ACCS.

7. Cites the requirement for SCI visit certifications.

10. Identifies whether or not Security Classification Guide(s) or extract(s) exist for this specific contract and how they are to be obtained by the contractor.

11. Cites the requirement to have an accreditation of all electronic processing equipment prior to the processing of SCI by the contractor.

12. Identifies the requirement of the contractor to have their own accredited SCIF or co-utilized SCIF to execute the SCI portion of the contract.

13. Cites the requirement for the contractor to request indoctrination/debrief authority.

14. Cites the accesses required for execution of the contract. Mark what accesses are required for performance on the contract/subcontract.

Also allows the option of citing an estimated number of accesses required.

15. Requires identification, in addition to Item 8 of the DD Form 254, of any additional locations where SCI work for this specific contract will be conducted.

16. Identifies that the contractor is a Multiple Facility Organization. Also identifies for which location(s) the contractor is authorized to submit DD Forms 254 and SCI Addendums.

17. Identifies whether there is an SCI courier requirement for this specific contract.

1 and 2. Applies to all SCI contracts.