Overview
This section outlines the mandatory duties of contracting officers (COs) to identify, communicate, and manage security requirements throughout the acquisition lifecycle—from initial planning through contract award—whenever classified information is involved.
Key Rules
- Presolicitation Review: COs must determine if any phase of the contract will require access to classified information and identify whether the National Industrial Security Program (NISP) or specific agency procedures apply.
- Cross-Agency Coordination: If classified information belongs to another agency, the CO must verify that agency's NISP status and adhere to their specific security clearance protocols.
- Mandatory Clauses: Solicitations must include FAR clause 52.204-2 (Security Requirements) and any additional security safeguards deemed necessary for the specific acquisition.
- DD Form 254 Requirement: For DoD and agencies with DoD industrial security agreements, the CO is the approving official for the DD Form 254 (Contract Security Classification Specification), which is used to define classification levels for various tasks and materials.
- Communication of Requirements: COs are responsible for ensuring that prime contractors and subcontractors are fully informed of the security classifications assigned to all documents, tasks, and contract components.
Practical Implications
- Operational Readiness: COs must coordinate with security and technical personnel early in the process, as the failure to properly execute a DD Form 254 at the time of award can prevent contractors from beginning classified work.
- Risk Mitigation: By requiring specific security safeguards beyond the standard security clause, COs can tailor protection requirements to the unique sensitive aspects of a specific project or environment.