DD-254_-_SOCSO_J3_REBS.pdf

DD Form 254, DEC 1999 Previous editions are obsolete

DEPARTMENT OF DEFENSE 1. CLEARANCE AND SAFEGUARDING

CONTRACT SECURITY CLASSIFICATION SPECIFICATION a. FACILITY CLEARANCE REQUIRED

TOP SECRET

(The requirements of the DoD Industrial Security Manual apply to all aspects of this effort)

b. LEVEL OF SAFEGUARDING REQUIRED

None

2. THIS SPECIFICATION IS FOR: (X and complete as applicable) 3. THIS SPECIFICATION IS: (X and complete as applicable)

a. PRIME CONTRACT NUMBER a. ORIGINAL (Complete date in all cases) Date (YYYYMMDD)

b. SUBCONTRACT NUMBER

b. REVISED (Supersedes all previous specs) Revision No.

Date (YYYYMMDD)

c. SOLICITATION OR OTHER NUMBER Due Date (YYYYMMDD) c. FINAL (Complete Item 5 in all cases) Date (YYYYMMDD)

FY16-2127 20160822

4. IS THIS A FOLLOW-ON CONTRACT? YES NO. If Yes complete the following

Classified material received or generated under (Preceding Contract Number) is transferred to this follow-on contract

5. IS THIS A FINAL DD FORM 254? YES NO. If Yes complete the following

In response to the contractor's request dated , retention of the identified classified material is authorized for the period of .

6. CONTRACTOR (Include Commercial and Government Entity ( CAGE) Code)

a. NAME, ADDRESS, AND ZIP CODE

b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code)

For Solicitation Only TBD For Solicitation Only

7. SUBCONTRACTOR

a. NAME, ADDRESS, AND ZIP CODE b. CAGE CODE c. COGNIZANT SECURITY OFFICES ( Name, Address, and Zip Code)

8. ACTUAL PERFORMANCE

a. LOCATION b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code) HQ, US SOUTHERN COMMAND, 9301 NW 33rd Street, DORAL, FL, 33172-1217

W096AA HQ, US SOUTHERN COMMAND - 9301 NW 33rd Street, DORAL, FL, 33172-1217

9. GENERAL IDENTIFICATION OF THIS PROCUREMENT

Provide non-personal Regional Engagement Branch (REB) Support services for USSOUTHCOM’s and SOCSOUTH’s Operations Directorates (J3). Period of Performance : TBD

10. THIS CONTRACT WILL REQUIRE ACCESS TO: YES NO 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO

a. COMMUNICATIONS SECURITY (COMSEC)

INFORMATION

a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER

CONTRACTOR’S FACILITY OR A GOVERNMENT ACTIVITY

b. RESTRICTED DATA b. RECEIVE CLASSIFIED DOCUMENTS ONLY

c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION c. RECEIVE AND GENERATE CLASSIFIED MATERIAL

d. FORMERLY RESTRICTED DATA: d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE

e. INTELLIGENCE INFORMATION: e. PERFORM SERVICES ONLY

(1) Sensitive Compartmented Information (SCI) f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO

RICO, U.S. POSSESSIONS AND TRUST TERRITORIES

(2) Non-SCI g. BE AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL

INFORMATION CENTER (DTIC) OR OTHER SECONDARY DISTRIBUTION CENTER

f. SPECIAL ACCESS INFORMATION h. REQUIRE A COMSEC ACCOUNT

g. NATO INFORMATION i. HAVE A TEMPEST REQUIREMENT

h. FOREIGN GOVERNMENT INFORMATION j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS

i. LIMITED DISSEMINATION INFORMATION k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE

j. FOR OFFICIAL USE ONLY INFORMATION l. OTHER (Specify).

k. OTHER Specify) JWICS/SIPRNet/Focal Point/ACCM access is required

AIS processing up to TS SCI at required government facilities. Security Classification Guidance will include but are not limited to; JTF-GTM SCG, Habeas Corpus Military Commissions SCG, DISA Circular, and any additional guidance provided by the COR.

12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public release shall be submitted for approval prior to release

Direct

Through (Specify):

Public release of SCI is not authorized. The Contractor/subcontractor is responsible for obtaining the approval of the User Agency for the release of any information under the contract/subcontract, except for certain types of information authorized by the NISPON. The subcontractor shall forward any request for release of other information, through the prime contractor to the appropriate User Agency for approval for public release to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review.

*In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency.

13. SECURITY GUIDANCE. The security classification guidance needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes: to challenge the guidance or classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any document/guides/extracts referenced herein.

Add additional pages as needed to provide complete guidance.

SEE SECTION 13 CONTINUATION SECTION AT THE BOTTOM OF THIS FORM

14. ADDITIONAL SECURITY REQUIREMENTS. Requirements, in addition to ISM requirements, are established for this contract. (If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

Yes No

See SCI addendum

15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. (If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.

Yes No

See SCI addendum

16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

a. TYPED NAME OF CERTIFYING OFFICIAL Michael White

b. TITLE Chief, Information Security

c. TELEPHONE (Include Area Code)

(305) 437-1175

d. ADDRESS (Include ZIP Code) 17. REQUIRED DISTRIBUTION

9301 NW 33rd Street, DORAL, FL, 33172-1217

a. CONTRACTOR

b. SUBCONTRACTOR

c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR

e. SIGNATURE

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION

e. ADMINISTRATIVE

f. OTHERS AS NECESSARY

DD Form 254 (BACK), DEC 1999

CONTINUATION OF ITEM 13

13. SECURITY GUIDANCE. The security classification guidance needed for this effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes: to challenge the guidance or classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach, or forward under separate correspondence, any document/guides/extracts referenced herein.

Add additional pages as needed to provide complete guidance.

10e1. SCI Access required. No public release of information authorized, public disclosure or confirmation of any subject related to the support contract is not authorized without first obtaining written approval from the CM. 10e2. Non-SCI Information is not releasable to contractor employees who have not received a clearance at the appropriate security level.

Written concurrence of the CM is required prior to subcontracting. Access to Intelligence information required for performance. 10j. For Official Use Only (FOUO) Information generated and/or provided under this contract shall be safeguarded and marked as specified in DoD 5200.1-R. Contractor is responsible for identifying which FOIA exemptions apply to information disseminated outside the department /unit. 10k. JWICS/SIPRNet access is required within government facilities. Secret Internet Protocol Network (SIPRNET) access required and a NATO awareness brief. The SIPRNET contains NATO information and a NATO awareness briefing is required for everyone who needs access to the SIPRNET. The purpose of providing a NATO awareness briefing is to inform personnel how to protect NATO information in the event they come across it white on the SlPRNET. The contractor shall not access, download or further disseminate any special access data (Le. intelligence, NATO, COMSEC, etc.) outside the execution of the defined contract requirements and without the guidance and written pennission of the KO. In the event that any special access is required, the KO must modify the requirements for the DD Form 254. Note: Once the KO has modified the requirements for the DD Form 254, the Contractor must complete the SIPRNET Access Request Form, along with the modified DD Form 254, and forward to the KO prior to receiving access. A NATO awareness brief will also be required for all Contractors prior to access to the SIPRNET. ACCM information is governed by OoDM 5200.01-V3 "OoO Information Security Program" Enclosure 2 Safeguarding; Alternative Compensatory Control Measures (ACCM) and CJCS Manual CJCS Manual 3213.02C to include but not limited to supporting documentation for each Focal Point sub-system, including security classification guides, program security plans, and governing directives.

Inspections of ACCM information in USSOCOM and/or each Military Service Component (AFSOC, NSWC, NSWG2, USASOC, MARSOC and SOCSOUTH} facilities are under the auspices of the respective Command or Component FPPCO.

Additional ACCM requirements may be required at non USSOCSOM locations/facilities (based on service/command requirements). The performance monitor or component command COR at these locations will provide specific information.

11a. Contractor performance is restricted. Government agency or activity will provide security classification guidance for performance of this contract. Visit request to the CM and/or Security Management Office for need-to-know verification is done through JCAVS IAW Oct 2005 memo. Contractor performance is restricted to HQ USSOUTHERN Command, 9301 NW 33rd Street, Doral, Florida 33172; and, HQ SOCSOUTH, 29401 SW 125th Ave., Bldg 600, Homestead, Florida 33039. Using contractor, Government agency, or activity will provide security classification guidance for performance of this contract.

Submit visit request to the KO and/or Security Management Office for need-to-know verification. 11e. Transport passengers and passengers material possessions such as luggage (luggage cannot exceed 50 pounds per bag). Driver must be able to lift up to 50 pounds per bag. The Contractor shall observe all traffic laws. 11j. All assigned personnel are required to comply with specific OPSEC requirements issued for that site. Specific site requirements will be addressed in the Task Order PWS.

US ARMY SCI ADDENDUM TO DD FORM 254

XXX (1)-This contract requires access to Sensitive Compartmented Information (SCI). The

Commander, US Army Intelligence and Security Command (INSCOM), acting on behalf of the

DA Deputy Chief of Staff (DCS), G-2 is the Cognizant Security Authority (CSA) for the US

Army, has exclusive security responsibility for all SCI released to the contractor or developed under the contract and held within the Contractor's SCI Facility (SCIF) or Co-utilization

Agreement (CUA).

XXX (2)-The Defense Intelligence Agency (DIA) has security inspection responsibility for SCI and the Defense Security Service (DSS) retains responsibility for all collateral information released or developed under the contract and held within the DoD Contractor's SCIF. All DD Forms 254 prepared for contracts involving access to SCI under this contract must be processed through

ACCS to the CM and Industrial Security Specialist for approval.

XXX (3)-The manuals, regulations, and directives checked below provide the necessary guidance for physical, personnel, and information security for safeguarding SCI, and are part of the security classification specification for this contract:

(a)-ICD 503, Intelligence Community Information Technology Systems Security

Risk Management, Certification and Accreditation

XXX (b)-ICD 704 Personnel Security Standards and Procedures Governing Eligibility for Access to Sensitive Compartmented Information and Other Controlled

Access Program Information

XXX (c)-IC Tech Spec-for ICD/ICS 705, Technical Specifications for Construction and

Management of Sensitive Compartmented Information Facilities

XXX (d)-Signals Intelligence Security Regulations (SISR) (Available from the CM)

XXX (e)-Imagery Policy Series (Available from the CM)

XXX (f)-DoDM 5105 Vol 1 – 3 SCI Administrative Security Manual.

XXX (g)-AR 380-28, DA Special Security System

XXX (h)-AR 25-2, Information Assurance

XXX (i)-AR 380-381, Special Access Programs

XXX (j)-Army Handbook for SCI Contracts.

(k)-Other

XXX (4)-Contract estimated completion date (PERIOD OF PERFORMANCE ONLY): TBD

(NOTE: Option years are not to be included, as an option is not valid until exercised by the government.)

XXX (5)-The name, telephone number, and email and mailing address of the Contract Monitor (CM) and alternate for the SCI portion of this contract are: Edward Cespedes, Address: 29401 SW125th

Ave, Homestead, FL, 33039, Phone: 786-415-2305, Email: edward.cespedes@socso.southcom.mil (Additionally, identify the Security POC, phone number, and email address at the contractor’s/subcontractor’s location): The Contractor’s Security POC is: TBD (The CM and the contractor security officer must be registered in the Army Centralized Contracts and Security

Portal (ACCS) at the level of contract, in order to process SCI actions)

XXX (6)-All DD Forms 254 prepared for contracts involving access to SCI under this contract must be processed through ACCS to the CM and Industrial Security Specialist for approval and to

Contractor Support Element, USAINSCOM, ACofS Security, G2 for review and concurrence of the awarded contract.

XXX (7)-Visit certification to DoD locations is not required, as need to know and accesses is verified at the visiting facility. Non DoD locations the contractor must process request for SCI visit certification(s) through ACCS to the CM for approval and to Contractor Support Element (CSE) for review and processing. Visit certification request must be submitted at least ten (10) working days prior to the visit.

XXX (8)-Debriefings: All FSO’s/CSSO’s must properly debrief all contractors from SCI through

ACCS. FSO/CSSO’s must submit the debrief request NLT 7 days and NET 10 days before actual departure. FSO’s/CSSO’s will separate all contractors from JCAVS after completion of debriefing.

XXX (9)-The contractor will not reproduce any SCI related material without prior written permission of the CM.

XXX (10)-Security Classification Guides or extracts are attached or will be provided under separate cover.

XXX (11)-Electronic processing of SCI requires accreditation of the equipment in accordance with

ICD 503 and AR 25-2. (Note: NATO security awareness briefing is required for access to

JWICS indicated in blocks 10k or 11l of DD 254.).

(12)-This contract requires a contractor Controlled Space or CUA

XXX (13)-Request for Indoctrination/Debrief Authority

XXX (14)-This contract requires (SI)(TK) (Add others as required)

XXX (15)-The contractor will perform SCI work under this contract at the following location (Name of government or contractor activity, SCI SMO or CAGE Code):

USSOUTHCOM, USSOCSOUTH

(16)-The contractor identified in Block 6 is a Multiple Facility Organization (MFO) and is authorized to submit DD254 and SCI Addendum for the following SCI locations (Facility Name and CAGE Code).