PREPARATION OF A DD FORM 254 FOR SUBCONTRACTING. Cal Stewart ISP

Transcription

1 PREPARATION OF A DD FORM 254 FOR SUBCONTRACTING Cal Stewart ISP

2 WHAT IS THE DD FORM 254? Contract document that provides classification guidance to Contractors who perform on U.S. Government classified contracts. Identifies classified information and access requirements involved for contract performance. The only authorized means to provide security classification guidance to a subcontractor.

3 WHY DO WE USE A DD FORM 254 IN A CLASSIFIED CONTRACT? Security Agreement (DD 441) obligates the Government to provide appropriate classification guidance. A contractual specification that is as important as any other specification in a contract. Captures all security requirements of a classified contract in one place.

4 Prime Contractor Responsibility Pass good guidance... down the line

5 Preparer Responsibilities Determine need for subcontractor to have classified access. Verify facility clearance. Sponsorship. Accurately reflect security requirements for both the procurement process and contract performance.

6 Clearance Verification FACILITY CLEARANCE vs STORAGE Industrial Security Facilities Database (ISFD) DSS System Security Center

7 PREPARING THE DD FORM 254

8 1. CLEARANCE AND SAFEGUARDING a. FACILITY CLEARANCE REQUIRED SECRET b. LEVEL OF SAFEGUARDING REQUIRED SECRET

9 2. THIS SPECIFICATION IS FOR : ( and complete as applicable a. PRIME CONTRACT NUMBER DLAB S-0001 b. SUBCONTRACT NUMBER c. SOLICITATION OR OTHER NUMBER Due Date (YYYYMMDD)

10 2. THIS SPECIFICATION IS FOR : ( and complete as applicable a. PRIME CONTRACT NUMBER b. SUBCONTRACT NUMBER DLAB S-0001 P c. SOLICITATION OR OTHER NUMBER Due Date (YYYYMMDD)

11 2. THIS SPECIFICATION IS FOR : ( and complete as applicable a. PRIME CONTRACT NUMBER DLAB S-0001 b. SUBCONTRACT NUMBER c. SOLICITATION OR OTHER NUMBER RFP RC Due Date (YYYYMMDD) YYYYMMDD

12 3. THIS SPECIFICATION IS: ( and complete as applicable) a. ORIGINAL (Complete date in all cases Date (YYYYMMDD) b. REVISED (Supersedes all previous specs) Revision No. Date (YYYYMMDD) c. FINAL (Complete Item 5 in all cases) Date (YYYYMMDD)

13 3. THIS SPECIFICATION IS: ( and complete as applicable) a. ORIGINAL (Complete date in all cases Date (YYYYMMDD) b. REVISED (Supersedes all previous specs) Revision No. 1 Date (YYYYMMDD) c. FINAL (Complete Item 5 in all cases) Date (YYYYMMDD)

14 REVISED DD FORMS 254 Issued as necessary during the life of the contract. Issued when security requirements change. Indicate what the revision covers in Item 13.

15 3. THIS SPECIFICATION IS: ( and complete as applicable) a. ORIGINAL (Complete date in all cases Date (YYYYMMDD) b. REVISED (Supersedes all previous specs) Revision No. Date (YYYYMMDD) c. FINAL (Complete Item 5 in all cases) Date (YYYYMMDD)

16 4. IS THIS A FOLLOW-ON CONTRACT? YES NO If Yes, complete the following: Classified material received or generated under DLAB S-0001 (Preceding Contract Number) is transferred to this follow-on contract. 5. IS THIS A FINAL DD FORM 254? YES NO If Yes, complete the following: In response to the contractor s request dated , retention of the identified classified material is authorized for the period of 2 years.

17 FINAL DD FORM 254 Required if Subcontractor requires retention beyond the two year period. Subcontractor requests written retention authority through the Prime Contractor to the GCA. Prime Contractor determines if there is a continuing need for retention and forwards request to the GCA. If GCA approves, Prime Contractor issues a final DD Form 254. Block 5 must reflect retention period. Block 13 annotated to reflect final disposition instructions for the classified material.

18 6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code) a. NAME, ADDRESS AND ZIP CODE ABC Corporation P.O. Box Wayne, PA b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code) DSS Northeast Area Two Greentree Centre Suite 120 Marlton, NJ SUBCONTRACTOR a. NAME, ADDRESS AND ZIP CODE YZ Corporation 123 Redstone Way Huntsville, AL b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code) DSS Southeast Area P.O. Box Patrick AFB, FL 32925

19 8. ACTUAL PERFORMANCE a. NAME, ADDRESS AND ZIP CODE Hi Tech Incorporated 444 Main Street Richmond, VA b. CAGE CODE 3L069 c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code) DSS Southeast Area Pembroke Five Ste Independence Blvd Virginia Beach, VA GENERAL IDENTIFICATION OF THIS PROCUREMENT Research and development of Countermeasures Against Grayhawk Missile.

20

21 10. THIS CONTRACT WILL REQUIRE ACCESS TO: YES NO a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION b. RESTRICTED DATA c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION d. FORMERLY RESTRICTED DATA e. INTELLIGENCE INFORMATION (1) Sensitive Compartmented Information (SCI) (2) Non-SCI f. SPECIAL ACCESS INFORMATION g. NATO INFORMATION h. FOREIGN GOVERNMENT INFORMATION i. LIMITED DISSEMINATION INFORMATION j. FOR OFFICIAL USE ONLY INFORMATION k. OTHER (Specify)

22 10. THIS CONTRACT WILL REQUIRE ACCESS TO: YES NO a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION b. RESTRICTED DATA c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION d. FORMERLY RESTRICTED DATA e. INTELLIGENCE INFORMATION (1) Sensitive Compartmented Information (SCI) (2) Non-SCI f. SPECIAL ACCESS INFORMATION g. NATO INFORMATION h. FOREIGN GOVERNMENT INFORMATION i. LIMITED DISSEMINATION INFORMATION j. FOR OFFICIAL USE ONLY INFORMATION k. OTHER (Specify)

23 10. THIS CONTRACT WILL REQUIRE ACCESS TO: YES NO a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION b. RESTRICTED DATA c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION d. FORMERLY RESTRICTED DATA e. INTELLIGENCE INFORMATION (1) Sensitive Compartmented Information (SCI) (2) Non-SCI f. SPECIAL ACCESS INFORMATION g. NATO INFORMATION h. FOREIGN GOVERNMENT INFORMATION i. LIMITED DISSEMINATION INFORMATION j. FOR OFFICIAL USE ONLY INFORMATION k. OTHER (Specify)

24 10. THIS CONTRACT WILL REQUIRE ACCESS TO: YES NO a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION b. RESTRICTED DATA c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION d. FORMERLY RESTRICTED DATA e. INTELLIGENCE INFORMATION (1) Sensitive Compartmented Information (SCI) (2) Non-SCI f. SPECIAL ACCESS INFORMATION g. NATO INFORMATION h. FOREIGN GOVERNMENT INFORMATION i. LIMITED DISSEMINATION INFORMATION j. FOR OFFICIAL USE ONLY INFORMATION k. OTHER (Specify)

25 10. THIS CONTRACT WILL REQUIRE ACCESS TO: YES NO a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION b. RESTRICTED DATA c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION d. FORMERLY RESTRICTED DATA e. INTELLIGENCE INFORMATION (1) Sensitive Compartmented Information (SCI) (2) Non-SCI f. SPECIAL ACCESS INFORMATION g. NATO INFORMATION h. FOREIGN GOVERNMENT INFORMATION i. LIMITED DISSEMINATION INFORMATION j. FOR OFFICIAL USE ONLY INFORMATION k. OTHER (Specify)

26 10. THIS CONTRACT WILL REQUIRE ACCESS TO: YES NO a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION b. RESTRICTED DATA c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION d. FORMERLY RESTRICTED DATA e. INTELLIGENCE INFORMATION (1) Sensitive Compartmented Information (SCI) (2) Non-SCI f. SPECIAL ACCESS INFORMATION g. NATO INFORMATION h. FOREIGN GOVERNMENT INFORMATION i. LIMITED DISSEMINATION INFORMATION j. FOR OFFICIAL USE ONLY INFORMATION k. OTHER (Specify) See Item 13

27 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER CONTRACTOR S FACILITY b. RECEIVE CLASSIFIED DOCUMENTS ONLY c. RECEIVE AND GENERATE CLASSIFIED MATERIAL d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE e. PERFORM SERVICES ONLY f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES g. BE AUTHORIZED TO USE THE SERVICES OF THE DEFENSE TECHNICAL INFORMATION CENTER (DTIC) OR OTHER SECONDARY DISTRIBYTION CENTER h. REQUIRE A COMSEC ACCOUNT i. HAVE TEMPEST REQUIREMENTS j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE l. OTHER (Specify) k. OTHER (Specify) See Item 13

28 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER CONTRACTOR S FACILITY b. RECEIVE CLASSIFIED DOCUMENTS ONLY c. RECEIVE AND GENERATE CLASSIFIED MATERIAL d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE e. PERFORM SERVICES ONLY f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES g. BE AUTHORIZED TO USE THE SERVICES OF THE DEFENSE TECHNICAL INFORMATION CENTER (DTIC) OR OTHER SECONDARY DISTRIBYTION CENTER h. REQUIRE A COMSEC ACCOUNT i. HAVE TEMPEST REQUIREMENTS j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERIVICE l. OTHER (Specify) k. OTHER (Specify) See Item 13

29 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER CONTRACTOR S FACILITY b. RECEIVE CLASSIFIED DOCUMENTS ONLY c. RECEIVE AND GENERATE CLASSIFIED MATERIAL d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE e. PERFORM SERVICES ONLY f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES g. BE AUTHORIZED TO USE THE SERVICES OF THE DEFENSE TECHNICAL INFORMATION CENTER (DTIC) OR OTHER SECONDARY DISTRIBYTION CENTER h. REQUIRE A COMSEC ACCOUNT i. HAVE TEMPEST REQUIREMENTS j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE l. OTHER (Specify) k. OTHER (Specify) See Item 13

30 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER CONTRACTOR S FACILITY b. RECEIVE CLASSIFIED DOCUMENTS ONLY c. RECEIVE AND GENERATE CLASSIFIED MATERIAL d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE e. PERFORM SERVICES ONLY f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES g. BE AUTHORIZED TO USE THE SERVICES OF THE DEFENSE TECHNICAL INFORMATION CENTER (DTIC) OR OTHER SECONDARY DISTRIBYTION CENTER h. REQUIRE A COMSEC ACCOUNT i. HAVE TEMPEST REQUIREMENTS j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE l. OTHER (Specify) k. OTHER (Specify) See Item 13

31 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER CONTRACTOR S FACILITY b. RECEIVE CLASSIFIED DOCUMENTS ONLY c. RECEIVE AND GENERATE CLASSIFIED MATERIAL d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE e. PERFORM SERVICES ONLY f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES g. BE AUTHORIZED TO USE THE SERVICES OF THE DEFENSE TECHNICAL INFORMATION CENTER (DTIC) OR OTHER SECONDARY DISTRIBYTION CENTER h. REQUIRE A COMSEC ACCOUNT i. HAVE TEMPEST REQUIREMENTS j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE l. OTHER (Specify) k. OTHER (Specify) See Item 13

32 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER CONTRACTOR S FACILITY b. RECEIVE CLASSIFIED DOCUMENTS ONLY c. RECEIVE AND GENERATE CLASSIFIED MATERIAL d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE e. PERFORM SERVICES ONLY f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES g. BE AUTHORIZED TO USE THE SERVICES OF THE DEFENSE TECHNICAL INFORMATION CENTER (DTIC) OR OTHER SECONDARY DISTRIBYTION CENTER h. REQUIRE A COMSEC ACCOUNT i. HAVE TEMPEST REQUIREMENTS j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS k. OTHER (Specify) k. OTHER (Specify) See Item 13

33 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER CONTRACTOR S FACILITY b. RECEIVE CLASSIFIED DOCUMENTS ONLY c. RECEIVE AND GENERATE CLASSIFIED MATERIAL d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE e. PERFORM SERVICES ONLY f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES g. BE AUTHORIZED TO USE THE SERVICES OF THE DEFENSE TECHNICAL INFORMATION CENTER (DTIC) OR OTHER SECONDARY DISTRIBYTION CENTER h. REQUIRE A COMSEC ACCOUNT i. HAVE TEMPEST REQUIREMENTS j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE l. OTHER (Specify) k. OTHER (Specify) See Item 13

34 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: YES NO a. HAVE ACCESS TO CLASSIFIED INFORMATION ONLY AT ANOTHER CONTRACTOR S FACILITY b. RECEIVE CLASSIFIED DOCUMENTS ONLY c. RECEIVE AND GENERATE CLASSIFIED MATERIAL d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE e. PERFORM SERVICES ONLY f. HAVE ACCESS TO U.S. CLASSIFIED INFORMATION OUTSIDE THE U.S., PUERTO RICO, U.S. POSSESSIONS AND TRUST TERRITORIES g. BE AUTHORIZED TO USE THE SERVICES OF THE DEFENSE TECHNICAL INFORMATION CENTER (DTIC) OR OTHER SECONDARY DISTRIBYTION CENTER h. REQUIRE A COMSEC ACCOUNT i. HAVE TEMPEST REQUIREMENTS j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE l. OTHER (Specify) k. OTHER (Specify) See Item 13

35 12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall be submitted for approval prior to release Direct Through (Specify) to the Directorate for Freedom of Information and Security Review. Office of the Assistant Secretary of Defense (Public Affairs) * for review. * In the case of non-dod User Agencies, requests for disclosure shall be submitted to that agency.

36 13. SECURITY GUIDANCE. The security classification guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Attach pages as needed to provide complete guidance.)

37 SECURITY CLASSIFICATION GUIDANCE Most important part of the DD Form 254 (Block 13). Used to identify applicable Security Classification Guides (SCG). Used to provide narrative guidance that identifies specific information to be classified. Used to provide appropriate downgrading and declassification instruction. Used for instructions, explanations, comments, or to clarify other items in the DD Form 254.

38 14. ADDITIONAL SECURITY REQUIREMENTS. Requirements in addition to ISM requirements, are established for this contract. (If Yes, identify Yes No the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.)

39 15. INSPECTIONS. Elements of this contract are outside the inspection responsibility of the cognizant security office. (If Yes, explain and identify specific Yes No areas of elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.)

40 16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. a. TYPED NAME OF CERTIFYING OFFICAL b. TITLE c. TELEPHONE (Include Area Code) d. ADDRESS (Include Zip Code) e. SIGNATURE

41 17. REQUIRED DISTRIBUTION a. CONTRACTOR b. SUBCONTRACTOR c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR d. US ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION e. ADMINISTRATIVE CONTRACTING OFFICER f. OTHERS AS NECESSARY

42 COMPLETION OF SUBCONTRACT Upon contract completion or termination, the contractor must: Return ALL classified received or generated under the contract. Request retention for a specified period of time. Request permission to transfer all classified to another active active contract, or Destroy all classified.