Request for Information Attachment 3 - Security

Defense Advanced Research Program Agency (DARPA)
Tactical Technology Office (TTO)

DARPA-SN-26-93

Request for Information (RFI)
Attachment 3 – Security Information

1. PROGRAM SECURITY

1.1.
Controlled Unclassified Information (CUI) and Controlled Technical Information (CTI) on Non-DoD Information Systems
For unclassified white papers containing Controlled Unclassified Information (CUI), Proposers will ensure personnel and information systems processing CUI security requirements are in place.
If an unclassified submission contains CUI or the suspicion of such, as defined by Executive Order (EO) 13556 and 32 CFR Part 2002, the information must be appropriately and conspicuously marked CUI in accordance with Department of Defense Instruction (DoDI) 5200.48. Identification of what is CUI or higher should be clearly detailed within the Proposer’s Security Classification Guide (SCG) or Controlled Unclassified Information Guide (CUIG). Proposers submitting white papers involving the pursuit and protection of the Defense Advanced Research Projects Agency (DARPA) information designated as CUI must have an information system authorized to process CUI information in accordance with (IAW) the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 and DoDI 8582.01. Further information on CUI identification, marking, protecting and control, to include processing on non-DoD information systems, is incorporated herein and can be found at https://www.darpa.mil/about/offices/contracts-management/proposer-general-terms#cui.

1.2. Classified Submissions

For classified white paper submissions, Proposers shall ensure all industrial, personnel, and information systems processing security requirements are in place and at the appropriate level (e.g., Facility Clearance Level (FCL)), and that Automated Information Security (AIS), Certification and Accreditation (C&A), and any Foreign Ownership Control and Influence (FOCI) requirements are mitigated prior to submission. Additional information on these requirements can be found at https://www.dcsa.mil/.
(a)

Classified Markings

Classified submissions shall be transmitted and marked in accordance with the security classification guidance referenced and sourced from the Proposers governing SCG. This SCG must be provided to the DARPA Program Security Representative (PSR) for review along with written authorization for the use of classified information in response to this Request for Information (RFI). Questions regarding classified submissions should be sent via