Attachment_2_-_DD_254_with_SCI_Addendum.pdf

DEPARTMENT OF DEFENSE

CONTRACT SECURITY CLASSIFICATION SPECIFICATION

(The requirements of the DoD Industrial Security Manual apply to all security aspects of this effort.)

1. CLEARANCE AND SAFEGUARDING

a. FACILITY CLEARANCE REQUIRED

b. LEVEL OF SAFEGUARDING REQUIRED

2. THIS SPECIFICATION IS FOR: (X and complete as applicable)

a. PRIME CONTRACT NUMBER

b. SUBCONTRACT NUMBER

c. SOLICITATION OR OTHER NUMBER DUE DATE (YYYYMMDD)

3. THIS SPECIFICATION IS: (X and complete as applicable)

a. ORIGINAL (Complete date in all cases)

REVISION NO.

c. FINAL (Complete Item 5 in all cases)

DATE (YYYYMMDD)

b. REVISED (Supersedes all previous specs)

DATE (YYYYMMDD)

DATE (YYYYMMDD)

4. IS THIS A FOLLOW-ON CONTRACT? YES NO. If Yes, complete the following:

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract.

5. IS THIS A FINAL DD FORM 254? YES NO. If Yes, complete the following:

In response to the contractor's request dated , retention of the classified material is authorized for the period of

6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

8. ACTUAL PERFORMANCE

a. LOCATION b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

10. CONTRACTOR WILL REQUIRE ACCESS TO: 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL:YES NO YES NO

a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION

b. RESTRICTED DATA

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION

d. FORMERLY RESTRICTED DATA

e. INTELLIGENCE INFORMATION

(1) Sensitive Compartmented Information (SCI)

(2) Non-SCI

f. SPECIAL ACCESS INFORMATION

g. NATO INFORMATION

h. FOREIGN GOVERNMENT INFORMATION

i. LIMITED DISSEMINATION INFORMATION

j. FOR OFFICIAL USE ONLY INFORMATION

k. OTHER (Specify)

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER

CONTRACTOR'S FACILITY OR A GOVERNMENT ACTIVITY

b. RECEIVE CLASSIFIED DOCUMENTS ONLY

c. RECEIVE AND GENERATE CLASSIFIED MATERIAL

d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. PERFORM SERVICES ONLY

f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES

g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL INFORMATION

CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER

h. REQUIRE A COMSEC ACCOUNT

i. HAVE TEMPEST REQUIREMENTS

j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

l. OTHER (Specify)

DD FORM 254, DEC 1999 PREVIOUS EDITION IS OBSOLETE.

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release

a. TYPED NAME OF CERTIFYING OFFICIAL

Direct Through (Specify)

d. ADDRESS (Include Zip Code)

Yes No to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classifiection guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract;

and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.)

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract.

(If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

Yes No15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office.

(If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

b. TITLE c. TELEPHONE (Include Area Code)

e. SIGNATURE

17. REQUIRED DISTRIBUTION

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINISTRATIVE CONTRACTING OFFICER

f. OTHERS AS NECESSARY

DD FORM 254 (BACK), DEC 1999

DD Form 254 Continuation Page Page of Subcontract gary.gaal Typewritten Text

DD Form 254 Continuation Page Page of Subcontract

2 INTERNATION PLAZA, SUITE 510

PHILADELPHIA, PA 19113

Raven Rock Mountain Complex

3200 Pentagon Wash DC 20301

SIPRNET

10a: Classified COMSEC material is not releasable to contractor employees who have not received a FINAL clearance at the appropriate security level. COMSEC access shall be IAW DoD 5220.22-M and AR 380-40. When access is required at Government facilities, contractor personnel will adhere to COMSEC rules and regulations as mandated by Command policy and procedures. Written concurrence of the KO is required prior to subcontracting. COMSEC Users briefing required.

10e: (1) SCI Access required. No public release of information authorized, public disclosure or confirmation of any subject related to the support contract is not authorized without first obtaining written approval from the KO.

(2) Non-SCI Information is not releasable to contractor employees who have not received a clearance at the appropriate security level. Written concurrence of the KO is required prior to subcontracting. Access to Intelligence information required for performance. Non-SCI Intelligence briefing required.

10g: Personnel not assigned to a NATO staff position, but requiring access to NATO classified information, NATO COSMIC, NATO Secret or access to the NATO accredited SIPRNET and JWICs terminals, must possess the equivalent FINAL or Interim U.S. Security. NATO briefing required and documented in JPAS.

10j: For Official Use Only (FOUO) Information generated and/or provided under this contract shall be safeguarded and marked as specified in DoD 5200.1-R, Appendix 3 (attached). FOUO briefing required.

a) AIS processing at the SCI level is required.

b) Secret Internet Protocol Network (SIPRNET) access required. The contractor shall not access, download or further disseminate any special access data (i.e. intelligence, NATO, COMSED, etc.) outside the execution of the defined contract requirements and without the guidance and written permission of the KO. In the event that any special access is required, the KO must modify the requirements for the DD Form 254.

11a: Contractor will have access to classified information only at another contractor's facility or Government activity up to and including TOP SECRET with SCI (SI, TK, G, and HCS) access. Any extracts or use of such data requires the contractor to apply derivative classification. Documentation generated as a result of this contract will be classified IAW source material provided by the User Activity will carry the most restrictive downgrading and/or declassification instructions, warning notices and control markings applicable. Use of cellular phones, hand-held radios. beepers and/or pagers, cordless telephones, and cordless microphones in a computer facility or Closed Area where classified processing is accomplished requires special consideration. These considerations are outlined in COMSEC Annex to the NISPOM (DoD 5220.22A).

11j: OPSEC requirements IAW AR 530-1,the NISPOM, and/or the Local User Activity policies and programs (unclassified technology). OPSEC briefing required.

11k: AIS processing at the SCI level is required.

13a: Contractor personnel performing Information Technology (IT) sensitive duties are subject to investigations and assignment requirements IAW AR 25-2, AR 380-57 and affiliated regulations.

13b: Classified information will be protected IAW NISPOM Chapter 5, the NISPOM supplement, and/or the local User Agency policies and programs.

13c: CERTIFICATION AND SIGNATURE: “Security Requirements attached herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below”.

GARY E. GAAL, GS-14,USA GARY E. GAAL

Task Monitor (TM) SCI CONTRACT MONITOR

HQDA, DAMO-OD (703) 697-9798

3200 Army Pentagon Washington, D.C. 20310-0320 E-mail: gary.e.gaal.civ@mail.mil

COMM: (703)697-6971/DSN 227-6971

FAX: (703)693-5570

NOTE: Requirement for SCI billets shall be established and controlled by individual Task Orders Individual request for SCI billets will be prepared by the Prime Contractor IAW Instructions provided by the SCI Contract Monitor (CM). The contractor shall perform SCI tasks under this contract at designated locations stipulated by the TM and/or the CM. Within 90 days of approval of this contract award (DD Form 254), the Prime Contractor shall prepare a Co-Utilization Agreement for each SCI where SCI work will be performed and forwarded to the SCI MC for review and processing.

XXX (1) This contract requires access to Sensitive Compartmented Information (SCI). The Commander, US Army Intelligence and Security Command (INSCOM), acting on behalf of the DA Deputy Chief of Staff (DCS), G-2 as the Cognizant Security Authority (CSA) for the US Army, has exclusive security responsibility for all SCI released to the contractor or developed under the contract and held within the Contractor's SCI Facility (SCIF) or Co-utilization Agreement (CUA) SCIF. The Defense Intelligence Agency (DIA) has security inspection responsibility for SCI and the Defense Security Service (DSS) retains responsibility for all collateral information released or developed under the contract and held within the DoD Contractor's SCIF. The manuals, regulations and directives checked below provide the necessary guidance for physical, personnel, and information security for safeguarding SCI, and are part of the security classification specification for this contract:

XXX DoD 5105.21-M-1, SCI Security Manual, Administrative Security XXX DoD TS-5105.21-M-2, SCI Manual, COMINT Policy XXX DoD TS-5105.21-M-3, TK policy XXX ICD 503, Protecting Sensitive Compartmented Information within Information Systems XXX ICD 705, Physical Security Standards for Construction of SCIFs XXX DIAM 50-4, DoD Intelligence Information System.

XXX DIAM 50-24, Security for Using Communications Equipment in a SCIF.

XXX AR 380-19, Information System Security XXX AR 380-28, DA Special Security System XXX AR 380-381, Special Access Programs (SAPS).

XXX Army Handbook for SCI Contracts.

Other

XXX (2) Contract estimated completion date: 28 Nov 14 (NOTE: Section “F” of the contract normally provides the Period of Performance. Option years are not to be included, as an option is not valid until exercised by the government.)

XXX (3) The name, telephone number, email address and mailing address of the Task Monitor (TM) for the SCI portion of this contract is (Additionally, identify the Security POC & phone number and email address at the contractor’s/subcontractor’s location): Gary E. Gaal, 703-697-6971, gary.e.gaal.civ@mail.mil, is the TM.

XXX (4) All DD Forms 254 prepared for subcontracts involving access to SCI under this prime contract must be forwarded to the CM for approval and then to HQ INSCOM, ACofS Security, G2, Contractor Support Element (CSE) for review and concurrence prior to award of the subcontract.

XXX (5) The contractor will submit the request for SCI visit certifications through the CM for approval of the visit. The certification request must arrive at the Contractor Support Element at least ten (10) working days prior to the visit. Visit certification requests will be processed through ACAVS.

XXX (6) The contractor will not reproduce any SCI related material without prior written permission of the CM.

XXX (7) Security Classification Guides or extracts are attached or will be provided under separate cover.

XXX (8) Electronic processing of SCI requires accreditation of the equipment in accordance with ICD 503, DIAM 50-4, and AR 380-19 (Note: Check only if item 11l indicates that a requirement exists for SCI AIS processing.)

(9) This contract requires a contractor SCIF.

XXX (10) This contract requires _X_ (SI) _X_ (TK) _X_(G) X HCS Accesses (Add others as required)

XXX (11) The contractor will perform SCI work under this contract at the following locations: HQDA, DAMO-ODA-F, Pentagon, (SCIF), Washington, DC, and other locations deemed appropriate by the areas Contract Monitor (CM) and/or Task Monitor.