Atch 2 - DD254.doc

W91260-09-R-0002

Attachment 2

a. PRIME CONTRACT NUMBER

080815

b. SUBCONTRACT NUMBER

4. IS THIS A FOLLOW-ON CONTRACT? X YES NO, If yes, complete the following

Classified material received or generated under W91260-04-D-0001, W91260-04-D-0002, and W91260-04-D-0003 is transferred to this follow-on contract

5. IS THIS A FINAL DD FORM 254? FORMCHECKBOX

YES FORMCHECKBOX

NO, If yes, complete the following:

In response to the contractors request dated ,retention of the identified classified material is authorized for a period of:

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

Industrial Security (S41DS)

5540 N. Academy Blvd., Suite 150

Colorado Springs, CO 80918-3696

7. SUBCONTRACTOR

8. ACTUAL PERFORMANCE

Industrial Security (S41DS)

5540 N. Academy Blvd., Suite 150

Colorado Springs, CO 80918-3696

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

Scientific and Engineering Technical Assistance (SETA) Space and Missile Defense Initiative Support for USASMDC/ARSTRAT

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER CONTRACTORS FACILITY OR GOVERNMENT ACTIVITY

X

b. RECEIVE CLASSIFIED DOCUMENTS ONLY

X

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION

d. FORMERLY RESTRICTED DATA

e. INTELLIGENCE INFORMATION

e. PERFORM SERVICES ONLY

X

f. HAVE ACCESS TO US CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST

TERRITORIES

X

(2) Non-SCI

X

g. BE AUTHORIZED TO USE THE SERVICES OF THE DEFENSE TECHNICAL INFORMATION CENTER (DTIC) OR OTHER

SECONDARY DISTRIBUTION CENTER

X

i. HAVE TEMPEST REQUIREMENTS

X

k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

X

l. OTHER (specify) See item 13

X

SCI Program Billets for support on future satellitearchitechtures (e.g. TSAT, AEHF, WGS, GBS)

DD Form 254-E, JAN 95 Previous editions are obsolete

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release

THROUGH (Specify)

USASMDC/ARSTRAT, ATTN: Public Affairs Office, 350 Vandenberg Street, Peterson AFB, CO 80914 to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency. PUBLIC RELEASE OF SCI INFORMATION NOT AUTHORIZED.

13. SECURITY GUIDANCE. The security classification guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

Contract Completion Date: July 31, 2014.

Reference Block 10e: SCI security guidance provided as attached addendum.

Reference Block 10f: SAP security guidance provided as attached addendum.

Reference Block 10e & f: Individuals requiring access to SAP information must be SCI eligible IAW DCID 6/9 standards and met JAFAN 6/4 tier review requirements

This DD 254 has been reviewed and approved by the following Government personnel:

VICTORIA A BIEN TRACY HANKINSON CSE OPERATIONS

Program Security Manager Alt SCI Contract Monitor

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to NISPOM requirements, are established for this contract. XX YES FORMCHECKBOX

NO

(If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies additional requirements.

Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is required.)

See item 13 above, continuation sheet, SCI addendum, and SAP addendum

15. INSPECTIONS. ELEMENTS OF THIS CONTRACT ARE OUTSIDE THE INSPECTION RESPONSIBILITY OF THE COGNIZANT SECURITY OFFICE. (If yes, explain and YES FORMCHECKBOX

NO

identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if more space is needed.)

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL Theresa Hornung Title:

Industrial Specialist Phone:

256-955-1726 DSN 645

U.S. Army Space and Missile Defense Command (USASMDC)/ Army Forces Strategic Command (ARSTRAT)

ATTN: SMDC-IN-SH

Bldg 5220, Rm 3B135 Redstone Arsenal, AL

17. REQUIRED DISTRIBUTION

XX a. CONTRACTOR

XX b. SUBCONTRACTOR

XX c. COGNIZANT SECURITY OFFICE FOR PRIME & SUBCONTRACTOR

XX d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

XX e. ADMINISTRATIVE CONTRACTING OFFICER

DD Form 254-E, Reverse, JAN 95

CONTRACT NUMBER W91260-09-D-000X

DD254 Continuation Sheet

Additional security guidance is provided:

a. Classified information shall only be disclosed to individuals who have an official need-to-know for the performance of this contract and who have a Personnel Security Clearance at least equal to the classification of the information involved.

b. Classified information pertaining to this contract shall be protected in accordance with the National Industrial Security Program Operating Manual (NISPOM). Detailed instructions for safeguarding classified information are contained in the NISPOM, Chapter 5.

c. All cases in which it is known or there is reason to suspect, that classified information provided or generated pursuant to this contract has been lost or disclosed to unauthorized persons, shall be reported immediately to the activity reflected in item 12 above (phone 719-554-1884).

d. Intelligence information will not be released under this contract.

e. Unclassified intelligence information/material will be treated as “FOR OFFICIAL USE ONLY.”

f. Immediately upon approval of this DD Form 254, the contractor will contact USAINSCOM Contractor Support Element, Fort Meade, MD to establish an account for the “Army Contractor Automated Verification System (ACAVS) and begin to populate the data base with individuals requiring SCI Access. Phone (301) 677-4622 or 4621.

g. Item 8: Secret storage of collateral information is authorized at this location

h. Item 10K: Access for the following programs required for select contractor personnel: Wideband Global Satellite (WGS), Global Broadcasting Service (GBS), Transformational Satellite Communications System (TSAT), and Advanced EHF (AEHF).

SEE ADDITIONAL US ARMY ADDENDUM TO DD FORM 254, 31 May 05

CONTRACT NUMBER W91260-09-D-000X

E-2 - US ARMY SCI ADDENDUM TO DD FORM 254, 31 May 05

XXX (1) This contract requires access to Sensitive Compartmented Information (SCI). The Commander, USAINSCOM or its successor organization, acting on behalf of the DA Deputy Chief of Staff for Intelligence (DCSINT), as the Cognizant Security Authority (CSA) for the US Army, has exclusive security responsibility for all SCI released to the contractor or developed under the contract. The manuals, regulations and directives checked below provide the necessary guidance for physical, personnel, and information security for safeguarding SCI, and are part of the security classification specification for this contract:

XXX DoD 5105.21-M-1, SCI Security Manual, Administrative Security

XXX DoD TS-5105.21-M-2, SCI Manual, COMINT Policy

XXX DoD TS-5105.21-M-3, TK policy

NA DCID 1/21, Physical Security Standards for Construction of SCIF(s)

XXX DIAM 50-4, DoD Intelligence Information Systems (DoDIIS) Information System Security Program.

NA DIAM 50-24, Security for Using Communications Equipment in a SCIF.

XXX AR 380-19, Information System Security

XXX AR 380-28, DA Special Security System

NA AR 380-381, Special Access Programs (SAPS).

XXX Army Handbook for SCI Contracts.

NA Other

XXX (2) Contract estimated completion date: 30 August 09 (Note: Section "F" of the contract normally provides the Period of Performance. Option years are not to be included, as an option is not valid until exercised by the government

XXX (3) The name, telephone number and address of the Contract Monitor (CM) for the SCI portion of this contract is: David P. McAdam, 719-554-1832, david.mcadam@smdc-cs.army.mil, SMDC/ARSTRAT, 350 Vandenberg St., Peterson AFB CO 80914. Alternate SCI CM: Ms Tracy Hankinson, SSO, SMDC phone: 719-554-1884 fax: 1872 tracy.hankinson@smdc-cs.army.mil. Additionally, identify the Security POC and phone number at the contractor’s location: Contractor POC Name, Phone:(719) XXX-XXX ext XX; email: contractor POC email.

XXX (4) All DD Forms 254 prepared for subcontracts involving access to SCI under this contract must be forwarded to the CM for approval and then to the CSE for review and concurrence prior to award of the subcontract.

XXX (5) The contractor will submit the written request for SCI visit certifications through the CM for approval of the visit. The certification request must arrive at the appropriate Contractor Support Detachment (CSD) at least ten (10) working days prior to the visit.

XXX (6) The contractor will not reproduce any SCI related material without prior written permission of the CM.

XXX (7) Security Classification Guides or extracts will be provided under separate cover by the User Agency.

NA (8) Electronic processing of SCI requires accreditation of the equipment in accordance with DIAM 50-5, Volume I, DIAM 50-4, and AR 380-19 (Note: Check only if item 11l indicates that a requirement exists for SCI AIS processing.)

NO (9) This contract requires a contractor SCIF.

XXX (10) This contract requires access to ___ (SI) _ _ (SI/TK) __(SI/TK/G) _X_(SI/TK/G/HCS) information.

XXX (11) The contractor will perform SCI work under this contract at the following locations: US Army Strategic Command, 350 Vandenberg Street, Peterson AFB, Colorado 80914-4904 and at other locations when approved by the SMDC SCI Contract Monitor, as designated by individual task orders and confirmed by designated Technical Monitors.

CONTRACT NUMBER W91260-09-D-000X

Special Access Program (SAP) Supplement to CONTRACT NUMBER W91260-09-D-000X

1. Item 10f:

a. The policy documents identified in Item 13 (below) will be provided to the contractor named in Item 6a if they do not possess a copy. The United States Army Space and Missile Defense Command/Army Forces Strategic Command (USASMDC/ARSTRAT) Program Security Manager will provide detailed, SAP-specific guidance to the contractor under separate cover.

b. Access to SAP information or material shall be at government facilities and contractor locations only as identified and approved by the USASMDC/ARSTRAT Program Security Manager (PSM). Access to SAP information requires a final U.S. Government Top Secret clearance based upon a Single Scope Background Investigation (SSBI) investigation completed within the last five years, a SAP nomination, and a special access non-disclosure briefing/Special Access Program Indoctrination Agreement prior to access. Candidates may also be subject to counter-intelligence polygraph exams and random urinalysis testing. Failure of selected individual to submit to the polygraph examination and/or random urinalysis test may result in his or her access to SAP information being suspended. The Government PSM will contact the contractor Facility Security Officer (FSO) to obtain security information on personnel identified for nomination, to include a current, updated SF-86 or Electronic Questionnaire for Investigations Processing (e-QIP) and other documentation necessary to complete the Program Access Request (PAR) package.

2. Items 11a – c:

a. Any access to SAP information or data in regard to this Contract will be conducted in USASMDC-accredited SAP Facilities (SAPFs) or other accredited SAPFs as authorized by USASMDC. The contractor must have office/technical laboratory space suitable to be accredited at the Top Secret level and able to meet SAP level IAW DCID 6/9 and JAFAN 6/9 requirements. This requirement applies to the contractor’s Colorado Springs, CO, location.

b. Any facility that stores, processes or discusses SAP information or data in regard to this contract will be designated as an USASMDC-accredited SAPF. SAPFs will be accredited by USASMDC/ ARSTRAT prior to any discussions or receipt and/or generation of any classified material.

c. If the proposed SAPF is already accredited by another sponsor, and/or located within an accredited Sensitive Compartmented Information Facility (SCIF), the facility will still have to be approved by USASMDC/ARSTRAT. The following additional documentation is required to prior to introducing any USASMDC/ARSTRAT-sponsored SAP information.

(1) A Memorandum of Agreement (MOA) must be executed between the USASMDC/ARSTRAT PSM and the established SAP Cognizant Security Authority (CSA) if a requirement or capability is identified to discuss, store, or process SAP information within an existing SAPF.

(2) A Co-Utilization Agreement (CUA) is required between USASMDC/ARSTRAT PSM and the SCI CSA prior to introduction of USASMDC/ARSTRAT-sponsored SAP data into an accredited SCIF.

3. Item 11g: Finished documents or other materials pertaining to this contract will not be released to the Defense Technical Information Center (DTIC) or any other such information service under any circumstances.

4. Item 11i:

a. Automated Information Systems (AIS) processing SAP data must be certified and accredited in accordance with (IAW) the Joint Air Force – Army – Navy (JAFAN) 6/3 and Department of Defense Information Assurance Certification and Accreditation Process (DIACAP). Any modifications that affect the security posture of the system will dictate new accreditation (and documentation) IAW the JAFAN 6/3.

b. TEMPEST requirements may be necessary in the performance of this contract in accordance with program requirements and/or the Overprint to the NISPOMSUP.

5. Item 11j: Operations Security (OPSEC) requirements are necessary in the performance of this contract IAW individual program requirements and/or the Overprint to the NISPOMSUP. Specific guidance will be provided by the USASMDC/ARSTRAT PSM.

6. Item 11l:

a. Foreign Nationals are not permitted to work on or have access to any SAP information without obtaining written authorization from the USASMDC/ARSTRAT SAPCO. However, if approval is granted, U.S. Export Laws still apply and the contractor must obtain required export licenses. When requesting foreign national access, include the individual’s full name, date and place of birth, social security account number and official status within the U.S.

b. The contractor is not authorized to acquire from foreign companies any parts and/or materials by purchase or trade without first obtaining written authorization from the USASMDC/ARSTRAT SAPCO.

7. Item 12:

a. Public release of SAP information is PROHIBITED. Finished documents or other materials pertaining to this effort will not be released to the Defense Technical Information Center (DTIC) nor any other such information service under any circumstances. A pre-publication and/or presentation(s) review is required prior to the use of any classified or unclassified information which is either tangentially or directly related to any SAP. In each case, approval must be obtained from USASMDC/ARSTRAT SAPCO. The request must be submitted by the person who desires to make the publication or presentation, via the Contract Program Security Manager (CPSM) to the USASMDC/ARSTRAT PSM.

b. The contractor shall not use references to SAP accesses or information, even by unclassified acronyms, in advertising, promotional efforts or recruitment of employees.

8. Item 13: The following Regulations, Guides, and Manuals apply to this contract:

a. DoD 5200.1-R, Information Security Program Regulation, Chapter VIII;

b. DoD 5220.22-M, National Industrial Security Program Operating Manual (NISPOM);

c. DoD 5220.22-M Sup 1, NISPOM Supplement;

d. DoD Overprint to the NISPOMSUP;

e. AR 380-381, SAPs and Sensitive Activities;

f. AR 25-2, Information Assurance;

g. AR 525-13, Antiterrorism

h. AR 530-1, OPSEC

i. JAFAN 6/3, Protecting SAP Information within Information Systems;

j. JAFAN 6/4, Special Access Program Tier Review Process;

k. JAFAN 6/9, Physical Security Standards for Special Access Program Facilities;

l. SAP-specific Program Security Guides(s);

m. SAP-specific Security Classification Guide(s);

n. Applicable Facility Specific Standard Operating Procedures;

o. Treaty Plans; and

p. Program-specific OPSEC Guides.

9. CONTRACT NUMBER. The complete contract number is Unclassified. The contractor may be required to establish non-attributable internal procedures and charge numbers that will be documented in the facility’s Standard Operating Procedures (SOP) as necessary for cost accumulation by uncleared personnel.

10. SUBCONTRACTING. All subcontracts with SAP authorization must have prior approval of USASMDC/ARSTRAT PSM. Contractors will include the provisions of this supplement in all subcontracts requiring SAP access in support of this effort. Any classified program activity that requires the use of a subcontractor facility must meet JAFAN 6/9 criteria and be accredited by the USASMDC/ARSTRAT PSM.

11. DOCUMENTATION. Collateral information/material not directly relating to this contract shall not be introduced or authorized within a SAPF without prior written authorization from USASMDC/ARSTRAT PSM.

12. COMMUNICATIONS AND TRANSMISSIONS.

a. Any communications with outside activities not involved with the specific supported SAP are PROHIBITED, unless otherwise authorized by USASMDC/ARSTRAT PSM.

b. All programmatic material relating to this contract and its administration shall be classified in accordance with the requirements outlined in USASMDC/ARSTRAT and SAP-specific security classification guides and this DD254 or as directed by USASMDC/ARSTRAT.

c. Program related verbal communications will be conducted on secure telephone units approved by USASMDC/ARSTRAT PSM.

d. All documentation concerning this contract will be transmitted in accordance with Chapter 5, Section 4, of the Overprint to the NISPOMSUP. If U.S. Postal mailing is used, USASMDC/ARSTRAT PSM will provide additional guidance.

13. VOUCHERS. All invoices/vouchers submitted under this contract shall be UNCLASSIFIED and shall be devoid of any information that would require them to be classified. The invoice/voucher may reveal the contractor’s name, customer name or UIC of the contract number. All invoices/vouchers shall be transmitted via means identified in paragraph 10, above, or based on guidance from USASMDC/ARSTRAT.

14. LEGAL COUNSEL. Should the contractor require private counsel to represent corporate interests in matters related to or associated with SAP sponsored activities, the Procurement Contracting Officer (PCO), and USASMDC/ARSTRAT PSM shall be notified in writing. The private counsel shall be treated as a subcontractor. In those incidents where the issues are not program specific, it is the responsibility of the appropriate indoctrinated contractor personnel to prevent inadvertent dissemination of SAP related information/data, operational procedures and/or administrative details to the private counsel.

15. RETENTION OF PROGRAM RELATED DOCUMENTATION. Upon completion of this contract and acceptance by the Government of final deliverables, the contractor shall:

a. Conduct an inventory/audit of all classified documents received and/or generated under this contract and forward it to USASMDC/ARSTRAT PSM.

b. In accordance with USASMDC/ARSTRAT direction, the contractor shall destroy classified material utilizing approved destruction procedure/methods and maintain certificates of destruction for final close-out review. Retention of SAP information at the contractor facility is not generally authorized beyond contract close-out unless a follow on contract/task is anticipated. A written request for authorization for document retention must be forwarded through the USASMDC/ARSTRAT PSM to the PCO and the USASMDC/ARSTRAT SAPCO for approval.

16. ISSUES/CONFLICT REPORTING.

a. Any questions regarding classification, access, or any other security related issue in regard to this contract must be referred, in writing, to USASMDC/ARSTRAT PSM.

b. Any suspected or confirmed security incident or violation involving SAP information will be immediately reported, in writing, to the USASMDC/ARSTRAT PSM.

c. Any conflict between instructions contained in any referenced policy and this DD Form 254 must be reported to USASMDC/ARSTRAT PSM by the most expedient means.

Victoria A. Bien

USASDMC/ARSTRAT

Program Security Manager