STIGQter STIGQter: STIG Summary: Traditional Security Checklist Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

Industrial Security - DD Form 254

DISA Rule

SV-245791r1207711_rule

Vulnerability Number

V-245791

Group Title

ID-01.02.01

Rule Version

ID-01.02.01

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

1. DD Forms 254 must be on hand for each classified contract.

2. All security requirements must be properly detailed on the form, particularly for information technology-related requirements (in addition to security clearance, training, and certification requirements) for the positions or types of work to be performed.

Check Contents

1. Check there are DD Forms 254 available for all classified contracts.

NOTE: These forms may be held by the site contracting officials but should be available to the site security manager and information security manager for review.

2. Conduct a cursory review of the DD 254 to ensure all security requirements are properly detailed on the form, especially with regard to Information Assurance Positions in addition to security clearance, training and certification requirements.

NOTE: Applicable to tactical environments if there are contractor personnel performing classified work. This form will likely only be found at fixed locations rather than field locations. While the DD 254 may not be available on site or even in Theater, the completed document's location should be identified and if possible a scanned and emailed copy requested for review. This will likely only be able to occur via SIPRNet email because some of these forms contain classified information, while all others are only CUI.

Vulnerability Number

V-245791

Documentable

False

Rule Version

ID-01.02.01

Severity Override Guidance

1. Check there are DD Forms 254 available for all classified contracts.

NOTE: These forms may be held by the site contracting officials but should be available to the site security manager and information security manager for review.

2. Conduct a cursory review of the DD 254 to ensure all security requirements are properly detailed on the form, especially with regard to Information Assurance Positions in addition to security clearance, training and certification requirements.

NOTE: Applicable to tactical environments if there are contractor personnel performing classified work. This form will likely only be found at fixed locations rather than field locations. While the DD 254 may not be available on site or even in Theater, the completed document's location should be identified and if possible a scanned and emailed copy requested for review. This will likely only be able to occur via SIPRNet email because some of these forms contain classified information, while all others are only CUI.

Check Content Reference

M

Target Key

5410