= TION J EDG-C-00-03-00010-00 SECTION J- LIST OF ATTACHMENTS ATTACHMENT 1 - DD FORM 254 - DEPARTMENT OF DEFENSE CONTRACT SECURITY CLASSIFICATION SPECIFICATION ,T-1 T. CLEARANCE AND SAFEGUARDING FACILITY CLEARANCE REQUIRED DEPARTMENT OF DEFENSE SECRET CONTRACT SECURITY CLASSIFICATION SPECIFICATION b. LEVEL OF SAFEGUARDING REQUIRED (The requirements of the DoD Industrial Security Manual apply NONE to all security aspects of this effort) THIS SPECIFICATION IS: (X and complete as applicable) 2. THIS SPECIFICATION IS FOR: (X and complete as applicable) DATE (YYYYMMOD) ORIGINAL (Complete date in all cases) a. a. PRIME CONTRACT NUMBER 20030326 EDG-C-00-03-00010-00 DATE (VYYYMMOD) REVISED REVISION NO. b. SUBCONTRACT NUMBER (Supersedes all previous specs) DATE (YYYYMMDO) DUE DATE (YYYYMMOD) c. FINAL (Complete item 5 in all cases) € SOLICITATION OR OTHER NUMBER NO. If Yes, complete the following: YES 4. IS THIS A FOLLOW-ON CONTRACT? (Preceding Contract Number) is transferred to this follow-on contract. Classified material received or generated under * NO. If Yes, complete the following. YES 5. IS THIS A FINAL DO FORM 254? • retention of ite classified material is authorized for the period of In response to the contractor's request dated CONTRACTOR (Include Commercial and Government Entity (CAGE) Cade) D. CAGE CODE E COGNIZANT SECURITY OFFICE (Name, Addross, and Lip Code) NAME, ADDRESS, AND ZIP CODE DSS 3A730 R.T.I. INTERNATIONAL S15NF 3040 CORNWALLS ROAD 757 490-8561 RESEARCH TRIANGLE PARK NC, 27709 TD. CAGE CODE FE. COGNIZANT SECURITY OFFICE (Name, Address, and Lip Code) 7. SURE ATRASTOR NAME, ADDRESS, AND ZIP CODE N/A N/A N/A TE. COGNIZANT SECURITY OFFICE (Vame, Address, and Lip Code) ID. CAGE CODE 8. ACTUAL PERFORMANCE LOCATION N/A USAID/SEC RRB, ROOM 2.06A USAID ASIA AND FAR EAST MISSION 202 712-0990 (IRAQ/KUWAIT 9. GENERAL IDENTIFICATION OF THIS PROCUREMENT STRENGTHEN SUB-NATIONAL INSTITUTIONS AND CIVIC PROCESSES IN IRAQ TYES NO TYES NO |11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: 10. CONTRACTOR WILL REQUIRE ACCESS TO: COX ACTORS TIME A CONTENN ACTMAYOTHER a COMMMACATIONS SECURITY (COMSEG) INFORMATION RECEIVE CLASSIFIED DOCUMENTS ONLY RECEIVE AND GENERATE CLASSIFIED MATERIAL • RESTRICTED DATA • CRITICAL NUCLEAR WEAPON DESIGN INFORMATION FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE d. FORMERLY RESTRICTED DATA PERFORM SERVICES ONLY e. INTELLIGENCE INFORMATION HOW OSCO. US. PO SISSON ANS TENST HERRITORIES THE U.S. (1) Sensite Compartmented Information (SCI) (2) N01-501 REQUIRE A CONSEC ACCOUNT I SPECIAL ACCESS INFORMATION HAVE TEMPEST REQUIREMENTS HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS 9 NATO INFORMATION BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE 1 FOREIGN GOVERNMENT INFORMATION I LIMITED DISSEMINATION INFORMATION OTHER (Specify) J FOR OFFICIAL USE ONLY INFORMATION k. OTHER (Spearty, - ACCESS TO SENSITIVE BUT UNCT ASSIFIED INFORMATION (SBID PREVIOUS EDITION IS OBSOLETE DD FORM 254, DEC 1999 Reset 12. PUBLIC RELEASE. Any information (classified or unclassifted) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate US Government authonty. Proposed public releases shall be submitted for approval prior to release Direct X Through (Specify) USAID'S CONTRACTOR'S TECHNICAL OFFICER (CTO), MR. CHRIS MILLIHAN, USALD/ANE, 1300 PENN, AVE, N. W., WASHINGTON, D.C., 20523-8800, (202) 712-4547 o the Drectorate for freedom of Information and Secunty Review, Office of the Assistant Secretary of Defense (Public Affairs) * for review "In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency 13. SECURITY GUIDANCE. The secunty classifiection guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the gudance or the classification assigned to any information or material furnished or generated under this contract: and to submit any questions for interpretation of this guidance to the official identified below Pending final decision, the information involved shall be handled and protected at the lighest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. Altach, or forward under separate correspondence, any documents/guides extracts rererenced herein. Add additional pages as needed to provide complete guidance) THE CONTRACTOR WILL ABIDE BY THE TERMS OF THE SECURITY AGREEMENT (DD FORM 441) EXECUTED BETWEEN THEIR COMPANY AND THE DEPARTMENT OF DEFENSE AND ENFORCE THE SECURITY STANDARDS OUTLINED IN THE NATIONAL INDUSTRIAL SECURITY PROGRAM OPERATING MANUAL (NISPOM) DATED JANUARY, 1995. IN ADDITION TO THE ABOVE, SUPPLEMENTAL SECURITY REQUIREMENTS PERTAINING TO THIS PERFORMANCE IS ATTACHED AS ITEM NUMBERS 13-1-13-21. THE CONTRACT MUST IMMEDIATELY CONTACT THE DESIGNATED CTO IDENTIFIED IN BLOCK 12 ABOVE FOR CLARIFICATION OF THE SECURITY GUIDANCE APPLICABLE TO THIS PERFORMANCE. _Yes [x]No C. TELEPHONE (include Area Code) a TYPED NAME OF CERTIFYING OFFICIAL MR. MARK A. WEBB (202) 712-5612 INDUSTRIAL SECURITY SPECIALIST OFFICE OF SECURITY LISAID d ADDRESS (Include Zip Code) 17. REQUIRED DISTRIBUTION Ja CONTRACTOR APR 1 1 2038 1300 PENNSLYVANIA AVE, N.W. O SUBCONTRACTOR WASHINGTON, D.C. * C. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR 20523-8800 e SIGNATURE US ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION ADMINISTRATIVE CONTRACTING OFFICER- te lah OTHERS AS NECESSARY USAID/SE DD FORM 254 (BACK), DEC 1999 + . SUPPLEMENTAL SECURITY GUIDANCE FOR CONTRACT NUMBER EDG-C-00-03-00016 BLOCK #13 OF THE DD FOII 254 ENTITLED "SECURITY GUIDANCE" CONTINUED: 13-1. The National Industrial Security Program (NISP) was established by Executive Order 12829 (EO 12829). Effective April 2, 1996, USAID entered into agreement with the Department of Defense (DoD) in accordance with EO 12829. This agreement established the terms of DoD's responsibilities to act on behalf of USAID for NISP matters. 13-2. The operating manual for the NISP replaces the DoD Industrial Security Manual. Accordingly, all references to the DoD Industrial Security Manual contained in this DD Form 254 or in other clauses in this contract shall be substituted with the National Industrial Security Program Operating Manual (DOD 5220.22-м) • 13-3. FAR Clause 52.204-2, Security Requirements, is applicable to this contract. 13-4. The contractor will be responsible for abiding by the policies and procedures contained in the following USAID Automated Directive System (ADS) . Chapters: 13-4a. USAID ADS Chapter 565, Physical Security Programs (Domestic) contains the policies and essential procedures for the o the poli protection of national security information and employees in the USAID Headquarters building. 13-4b. USAID ADS Chapter 567, Classified Contract Security and Contractor Personnel Security Program, contains the policies and essential procedures for classified contracts and personnel security investigations and clearances for contractor personnel. 13-4c. USAID ADS Chapter 568, National Security Information and Counterintelligence Security Program, contains the policies and essential procedures for the protection of national security. information contact reporting, and counterintelligence awareness training. USAID ADS Chapter 551, Automated Information Systems security, contains the policies and essential procedures for the protection of USAID sensitive systems and data. 13-5. USAID ADS Chapter 565 specifies the conditions under which the Government will issue a USAID Building Pass. USAID Building Pass is required for unescorted access into the USAID Headquarters building. SUPPLEMENTAL SECURITY GUIDANCE FOR CONTRACT NUMBER EDG-C-00-03-00010-00 BLOCK #13 OF THE DD FOrm 254 ENTITLED "SECURITY GUIDANCE" CONTINUED: 13-6. In addition to the requirements noted in USAID ADS Chapter 65 and 56%, contractor employees who have been granted a security clearance will not be issued a USAID Building pass unless the contractor certifies in writing that the contract employee has signed an SF 312, Classified Information Nondisclosure Agreement, and received an initial security briefing in accordance with Chapter 3 of the NISP Operating Manual (NISPOM) • (Note: The Request for Visit Authorization (VAR) serves as this certification that the security training and Non- Disclosure requirements have been met). Interim security clearances will be accepted by USAID. The CTO will determine whether Contract Hire personnel require a USAID RRB pass. 13-7. The contractor shall not permit any employee who has not been issued a USAID Building Pass by USAID to work in or have • routine access in USAID-controlled space. 13-8. The Government will control access to classified national All classified security information by contractor employees. national security information will be properly marked by the Government prior to disclosure to the contractor. All - discrepancies, doubts or questions concerning the proper sensitivity or classification level of information by the contractor will be resolved by the designated cro. 13-9. The contractor shall not possess or store any classified national security information or materials in the contractor's controlled space within the U.s. or overseas without the prior approval of the U.S. Government CTO, The Department of State Regional Security Officer (RSO) and USAID/SEC. 13-10. The contractor shall not reproduce or copy any classified national security information without the prior written Upon authorization from the Government CTO or designee. completion of the contract, all classified material will be returned to the Government. 13-11. The Government will advise the FSO of all security violations by contractor's employee(s) while working in USAID- controlled space. In turn, the ESO must report this incident/violation to their designated DSS representative. 13-12. The contractor may be afforded access to information which is considered sensitive under the Computer Security Act of 1987, Such information is "Sensitive as amended (Public Law 100-235). But Unclassified" (SBU) and shall be safeguarded as specified in The Government will ensure all SBU information 12 FAM 540. provided to the contractor or placed under the control of the contractor is identified as SBU. SUPPLEMENTAL SECURITY GUIDANCE FOR CONTRACT NUMBER EDG-C-00-03-00010-00 BLOCK #13 OF THE DD FOrm 254 ENTITLED "SECURITY GUIDANCE" CONTINUED: 13-13. The Government CTO or designee will determine which contractor employees are allowed access to USAID sensitive automated information systems. 13-14. The contractor shall ensure that employees given access to SU information, Government intormation technology systems containing sensitive information, and/or routine access to SAID- controlled space abide by the provisions of ADS Chapter 551. 13-15. The contractor shall not store any SBU information or materials in the contractor's controlled space without the prior approval of the Government Contracting Technical Öfficer's Representative (CTO) or designee. Upon completion of the contract, all SBU material will be returned to the Government. 13-16. Responsibility to Control Access: It is the contractor's responsibility to ensure that his/her employees do not have to USAID data, information, network connections, and/or space without the appropriate clearance and that all mandated security procedures are followed. contract his/her employees receive a security debriefing, sign the Security Debriefing Acknowledgement portion of the SF 312, and return the USAID Building Pass to the designated USAID CTO. 13-18. The Contractor shall submit for approval to the Government CTO the security requirements for any Subcontract that the Contractor may employ. 13-19. Any discrepancies, doubts or questions concerning the proper sensitivity or classification level of information provided to the contractor will be forwarded to the CTO for resolution. 13-20. The contractor will comply with the Visits and Meeting notification requirements as outlined in paragraph 6-103 inclusive of the National Industrial Security Program Operating Notifications are to be sent to: U.S. Agency For Manual. International Development, Office Of Security, N.W., Rm. 2.06-A (RRB), Washington, D.C. 20523-8800. - 13-21. Employees working under this contract must have been subject to a background investigation by the Defense Security awarded the appropriate interim/final security Service, and clearance by DISCO prior to the issuance of a USAID/W building pass.