1. CLEARANCE AND SAFEGUARDING a. FACILITY CLEARANCE REQUIRED DEPARTMENT OF DEFENSE CONTRACT SECURITY CLASSIFICATION SPECIFICATION Secret (The requirements of the DoD Industrial Security Manual apply b. LEVEL OF SAFEGUARDING REQUIRED to all security aspects of this effort.) None 2. THIS SPECIFICATION IS: (X and complete as applicable) THIS SPECIFICATION IS FOR: (X and complete as applicable) DATE (YYYYMMDD) a. PRIME CONTRACT NUMBER a. ORIGINAL (Complete date in all cases) 4/16/03 EEE-C-00-03-00018-00 DATE (YYYYMMDD) REVISION NO. b. REVISED b. SUBCONTRACT NUMBER (Supersedes all previous specs) DATE (YYYYMMDD) c. SOLICITATION OR OTHER NUMBER DUE DATE (YYYYMMDD) c. FINAL (Complete Item 5 in all cases) NO. If Yes, complete the following: YES 4. IS THIS A FOLLOW-ON CONTRACT? (Preceding Contract Number) is transferred to this follow-on contract. Classified material received or generated under NO. If Yes, complete the following: YES 5. IS THIS A FINAL DD FORM 254? , retention of the classified material is authorized for the period of In response to the contractor's request dated 6. CONTRACTOR (Include Commercial and Government Entity (CAGE) Code) c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code) b. CAGE CODE a. NAME, ADDRESS, AND ZIP CODE Defense Security Service (DSS) 1S307 Bechtel National Incorporated S53SC (Santa Clara) 50 Beale Street San Francisco, CA 94105-1813 7. SUBCONTRACTOR b. CAGE CODE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code) a. NAME, ADDRESS, AND ZIP CODE N/A 3. ACTUAL PERFORMANCE c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code) a. LOCATION b. CAGE CODE USAID/Kuwait USAID/IRAQ 9. GENERAL IDENTIFICATION OF THIS PROCUREMENT Reconstruction of Infrastructure in Post-War Iraq. YES NO YES 11. IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: NO 10. CONTRACTOR WILL REQUIRE ACCESS TO: X a. COMMUNICATIONS SECURITY (COMSEC) INFORMATION CONTRACTOR S FACALTY OR A GOVERNMENT ACTIVI ANOTHER b. RECEIVE CLASSIFIED DOCUMENTS ONLY b. RESTRICTED DATA RECEIVE AND GENERATE CLASSIFIED MATERIAL c. CRITICAL NUCLEAR WEAPON DESIGN INFORMATION d. FABRICATE, MODIFY, OR STORE CLASSIFIED HARDWARE d. FORMERLY RESTRICTED DATA e. PERFORM SERVICES ONLY e. INTELLIGENCE INFORMATION (1) Sensitive Compartmented Information (SCI) + POERTO RICO, U.S. POSSESSIONS AND TRUST PERRITORES THE U.S., X (2) Non-SCI 9. CENTER BITE OR OTHER SECONDARY DIS PRIBUTION CENTICAL INFORMATION h. REQUIRE A COMSEC ACCOUNT f. SPECIAL ACCESS INFORMATION HAVE TEMPEST REQUIREMENTS g. NATO INFORMATION HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS h. FOREIGN GOVERNMENT INFORMATION k. BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE i. LIMITED DISSEMINATION INFORMATION I. OTHER (Specify) j. FOR OFFICIAL USE ONLY INFORMATION Sensitive but Unclassified k. OTHER (Specify) Senstivie but Unclassified (SBU) PREVIOUS EDITION IS OBSOLETE. DD FORM 254, DEC 1999 Reset 12. PUBLIC RELEASE. Any information (classified or unclassified) pertaining to this contract shall not be released for public dissemination except as provided by the Industrial Security Manual or unless it has been approved for public release by appropriate U.S. Government authority. Proposed public releases shall Direct be submitted for approval prior to release Through (Specify) USAID/ANE, Mr. Ross Wherry (202) 712-4716 to the Directorate for Freedom of Information and Security Review, Office of the Assistant Secretary of Defense (Public Affairs)* for review. *In the case of non-DoD User Agencies, requests for disclosure shall be submitted to that agency. 13. SECURITY GUIDANCE. The security classifiection guidance needed for this classified effort is identified below. If any difficulty is encountered in applying this guidance or if any other contributing factor indicates a need for changes in this guidance, the contractor is authorized and encouraged to provide recommended changes; to challenge the guidance or the classification assigned to any information or material furnished or generated under this contract; and to submit any questions for interpretation of this guidance to the official identified below. Pending final decision, the information involved shall be Attach, or forward under handled and protected at the highest level of classification assigned or recommended. (Fill in as appropriate for the classified effort. separate correspondence, any documents/guides/extracts referenced herein. Add additional pages as needed to provide complete guidance.) See the attached Supplemental Guidance Item 13-1 through 13-21 in addition to Sections III "Special Security Conditions" and H.15. Contractor must comply with the DD Form 441 Agreement in addition to the NISPOM dated Jan. 1995. 14. ADDITIONAL SECURITY REQUIREMENTS. No X Yes Requirements, in addition to ISM requirements, are established for this contract. (If Yes, identify the pertinent contractual clauses in the contract document itself, or provide an appropriate statement which identifies the additional requirements. Provide a copy of the requirements to the cognizant security office. Use Item 13 if additional space is needed.) 15. INSPECTIONS. Yes No Elements of this contract are outside the inspection responsibility of the cognizant security office. (If Yes, explain and identify specific areas or elements carved out and the activity responsible for inspections. Use Item 13 if additional space is needed.) 16. CERTIFICATION AND SIGNATURE. Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below. a. TYPED NAME OF CERTIFYING OFFICIAL b. TITLE c. TELEPHONE (Include Area Code) Mark A. Webb Industrial Security Specialist (202) 712-5612 d. ADDRESS (Include Zip Code) 17. REQUIRED DISTRIBUTION a. CONTRACTOR 1300 Pennsylvania Avenue, N.W. 4/6/2003 b. SUBCONTRACTOR Room 2.06A-35 c. COGNIZANT SECURITY OFFICE FOR PRIME AND SUBCONTRACTOR e. SIGNATURE d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION e. ADMINISTRATIVE CONTRACTING OFFICER f. OTHERS AS NECESSARY DD FORM 254 (BACK), DEC 1999 SUPPLEMENTAL SECURITY GUIDANCE FOR USAID CONTRACT NUMBER EEE-C- 00-03-00018-00 OF THE DD Form 254 ENTITLED "SECURITY GUIDANCE" BLOCK #13 CONTINUED: 13-1. The National Industrial Security Program (NISP) was established by Executive Order 12829 (EO 12829). Effective April 2, 1996, USAID entered into agreement with the Department of Defense (DoD) in accordance with EO 12829. This agreement established the terms of DoD's responsibilities to act on behalf of USAID for NISP matters. 13-2. The operating manual for the NISP replaces the DoD all references to the Industrial Security Manual. Accordingly, DoD Industrial Security Manual contained in this DD Form 254 or in other clauses in this contract shall be substituted with the National Industrial Security Program Operating Manual (DoD 5220.22-M) . 13-3. FAR Clause 52.204-2, Security Requirements, is applicable to this contract. 13-4. The contractor will be responsible for abiding by the policies and procedures contained in the following USAID Automated Directive System (ADS) Chapters: 13-4a. USAID ADS Chapter 565, Physical Security Programs (Domestic) contains the policies and essential procedures for the in the protection of national security information and employees USAID Headquarters building. 13-4b. USAID ADS Chapter 567, Classified Contract Security and Contractor Personnel Security Program, contains the policies and essential procedures for classified contracts and personnel security investigations and clearances for contractor personnel. 13-4c. USAID ADS Chapter 568, National Security Information and Counterintelligence Security Program, contains the policies and essential procedures for the protection of national security information contact reporting, and counterintelligence awareness training. 13-4d. USAID ADS Chapter 551, Automated Information Systems Security, contains the policies and essential procedures for the protection of USAID sensitive systems and data. 13-5. USAID ADS Chapter 565 specifies the conditions under which Possession of a the Government will issue a USAID Building Pass. USAID Building Pass is required for unescorted access into the USAID Headquarters building. SUPPLEMENTAL SECURITY GUIDANCE FOR USAID CONTRACT NUMBER EEE-C- 00-03-00018-00 BLOCK #13 OF THE DD Form 254 ENTITLED "SECURITY GUIDANCE" CONTINUED: 13-6. In addition to the requirements noted in USAID ADS Chapter and 567, contractor employees who have been granted a security clearance will not be issued a USAID Building pass unless the contractor certifies in writing that the contract employee has signed an SF 312, Classified Information Nondisclosure Agreement, and received an initial security with Chapter 3 of the NISP Operating briefing in accordance Manual (NISPOM). (Note: The Request for Visit Authorization (VAR) serves as this certification that the security training and Non- Disclosure requirements have been met). Interim security The CTO will determine clearances will be accepted by USAID. whether Contract Hire personnel require a USAID RRB pass. 13-7. The contractor shall not permit any employee who has not been issued a USAID Building Pass by USAID to work in or have routine access in USAID-controlled space. 13-8. The Government will control access to classified national security information by contractor employees. All classified national security information will be properly marked by the Government prior to disclosure to the contractor. All discrepancies, doubts or questions concerning the proper sensitivity or classification level of information by the contractor will be resolved by the designated CO. 13-9. The contractor shall not possess or store any classified national security information or materials in the contractor's controlled space within the U.S. or overseas without the prior approval of the U.S. Government CTO, The Department of State Regional Security Officer (RSO) and USAID/SEC. 13-10. The contractor shall not reproduce or copy any classified national security information without the prior written authorization from the Government CTO or designee. Upon completion of the contract, all classified material will be returned to the Government. 13-11. The Government will advise the ESO of all security violations by contractor's employee(s) while working in USAID- controlled space. In turn, the ESO must report this incident/violation to their designated DSS representative. 13-12. The contractor may be afforded access to information which is considered sensitive under the Computer Security Act of 1987, Such information is "Sensitive as amended (Public Law 100-235) . But Unclassified" (SBU) and shall be safeguarded as specified in The Government will ensure all SBU information 12 FAM 540. provided to the contractor or placed under the control of the contractor is identified as SBU. SUPPLEMENTAL SECURITY GUIDANCE FOR USAID CONTRACT NUMBER EEE-C- 00-03-00018-00 BLOCK #13 OF THE DD Form 254 ENTITLED "SECURITY GUIDANCE" CONTINUED : 13-13. The Government CTO or designee will determine which contractor employees are allowed access to USAID sensitive automated information systems. 13-14. The contractor shall ensure that employees given access to SBU information, Government information technology systems containing sensitive information, and/or routine access to USAID- controlled space abide by the provisions of ADS Chapter 551. 13-15. The contractor shall not store any SBU information or materials in the contractor's controlled space without the prior approval of the Government Contracting Technical Officer's Representative (CTO) or designee. Upon completion of the contract, all SBU material will be returned to the Government. 13-16. Responsibility to Control Access: It is the contractor's responsibility to ensure that his/her employees do not have access to USAID data, information, network connections, and/or 100, 10 is 14 to con space without the appropriate clearance and that all mandated security procedures are followed. 13-17. The contractor shall ensure that upon termination from the contract his/her employees receive a security debriefing, sign the Security Debriefing Acknowledgement portion of the SF 312, and return the USAID Building Pass to the designated USAID CTO. 13-18. The Contractor shall submit for approval to the Government CTO the security requirements for any Subcontract that the Contractor may employ. 13-19. Any discrepancies, doubts or questions concerning the proper sensitivity or classification level of information provided to the contractor will be forwarded to the CTO for resolution. 13-20. The contractor will comply with the Visits and Meeting notification requirements as outlined in paragraph 6-103 inclusive of the National Industrial Security Program Operating Manual. Notifications are to be sent to: U.S. Agency For International Development, Office Of Security, 1300 Penn Ave, N. W., Rm. 2.06-A (RRB), Washington, D.C. 20523-8800. 13-21. Employees working under this contract must have been subject to a background investigation by the Defense Security Service, and awarded the appropriate interim/final security clearance by DISCO prior to the issuance of a USAID/W building pass.