[Tab:Title]

    What is NCSS

    The National Industrial Security Program (NISP) Contract Classification System (NCCS) is the one-stop shop for processing, distribution and collection of DoD contract security classification specifications, also known as the DD Form 254, for contracts requiring access to classified information.

    Mandated by the Federal Acquisition Regulation (FAR) 4.402, NCCS is the federal enterprise information system supporting the Department of Defense, other federal agencies under NISP agreement, and cleared industry (nondefense) organizations.

    Benefits of NCSS

    • -Role Based Workflow System
    • -Ability to register for up to three user roles
    • -Enables end-to-end processing to expedite the DD Form 254 process
    • -Ability to select reviewers and certifiers across the application
    • -Contains tailorable dashboards
    • -Ability to track individual processing statuses
    • -Easy access to built-in reporting functionality for refined metrics to meet reporting needs
    • -In system users help guides throughout the creating of the DD Form 254

    NCCS 2.9 Release New Features

    January 28, 2025 - Acquisition Assist 254: This feature allows users to generate acquisition assist DD Form 254s for GCA routing, task orders, purchasing agreements and ordering agreements. This feature will be executable on existing DD Form 254s in the application and will be generated in the same manner a revision or final DD Form 254 would be. This feature has been highly requested by the user base and it is now live for all Government Originators to utilize. Sub 254 Routing: This feature enables the Sub DD Form 254 generated by an industry partner to be routed back to the respective government client for review and approval. The approval chain flows from industry reviewer to the appropriate government reviewer and certifier for action before routing back to the industry partner for certification and release. As a core function and requirement for some government clients, this feature is now live for all industry partners to utilize. 

    Why Was NCCS Created?

    Mandated by FAR 4.402, effective August 3, 2020, NCCS was designed to improve upon the processing of the DD Form 254. NCCS replaces the need for PDF processing of the DD Form 254, and provides an automated solution for collection, retrieval and management of the DD Form 254.

    NCCS will:

    • Serve as a centralized repository for all DD Form 254s
    • Fully integrate an automated workflow for processing the DD Form 254
    • Retrieve real-time statuses of DD Form 254 submissions, reviews, approvals, clarification, and/or rejection of request
    • Provide oversight of all DD Form 254s, including subcontracts across the DoD, Federal Agencies under NISP agreement, and Industry

    When Will NCCS Be Released?

    NCCS 2.0 was soft launched on June 6, 2022. The soft launch NCCS 2.0 is an early version of the software to deliver basic capabilities to users to evaluate and provide feedback on. The soft launch activities and feedback will help shape the scope and design for the first official release later this year.

    How Will NCCS Change the Way We Do Business?

    NCCS improves efficiency by automating manual practices and removing paper from the DD Form 254 process. NCCS will provide enhanced user experience (UX) and increase visibility into DD Form 254 status. NCCS will also provide enhanced oversight to contracts across agency purview, including subcontracts.

    Where Is NCCS Hosted?

    NCCS is hosted on a secured cloud architecture that provides security, privacy, and data protection in a functional design.

    What Is the Onboarding Process Like?

    As DCSA onboards agencies to NCCS, we are committed to supporting them every step of the way. To begin onboarding to NCCS, agencies must first gain access to the hosting platform. To gain access agencies must complete the following:

    SAARs can be submitted to the NCCS team at: dcsa.quantico.hq.mbx.nccs-support@mail.mil

    Once onboarded to the main platform users will gain access to the NCCS application where they will submit more detailed information regarding their agency hierarchy, and select their user roles within the NCCS for final approval.

    • Identify an Agency Onboarding Champion to serve as the main point of contact (POC) and sponsor throughout the Onboarding process
    • Confirm your agency has access to a compatible internet browser (i.e., the three most recent versions of Mozilla Firefox, Google Chrome, or Microsoft Edge)
    • Ensure individuals have a minimum of an adjudicated T1 investigation.
    • Confirm individuals have the necessary smartcard for identity authentication that performs a trusted, PKI certification in compliance with Homeland Security Presidential Directive 12 (e.g., Common Access Card (CAC), Personal Identity Verification (PIV) Card)
    • Complete System Access Request (SAAR) form (DD2875) for user account creation.
      •  Government SAAR Template (please post this)
    • Complete DoD-sponsored Cybersecurity training within past 12 months

    When Should I Start the Onboarding Process?

    Users should follow their agency’s/organization’s implementation guidance for NCCS onboarding and use.

    What Is the Onboarding Process Like for Legacy Users?

    Legacy user onboarding is a two-step process:

    STEP 1: For those agencies who had users in the previous version of NCCS, DCSA has procedures in place to mass onboard the legacy users for access to the secure platform. Legacy users will only be mass onboard if requested by the agency. 

    STEP 2: Once platform access is approved, user may register for a role within the NCCS application, located here: https://tesseract.cloud.dcsa.mil/nccs/

    See the Onboarding section in the main menu for additional details.

    What Is the Process for Non-legacy Users?

    Non-legacy user onboarding is a two-step process:

    STEP 1: Complete the attached SAAR (Parts I, II, and III are required) DD Form 2875 SAAR and submit the completed SAAR documents should be sent to dcsa.quantico.hq.mbx.nccs-support@mail.mil

    STEP 2: Once the SAAR has been processed, users will receive a notification to register for a role within the NCCS application, located here: https://tesseract.cloud.dcsa.mil/nccs/

    See the Onboarding section in the main menu for additional details.

    What Do I Need To Have To Be Granted Access To the DCSA Platform?

    • Ensure individuals have a minimum of an adjudicated T1 investigation.
    • Confirm individuals have the necessary smartcard for identity authentication that performs a trusted, PKI certificates (either a Common Access Card (CAC) or DoD-approved External Certification Authority (ECA) certificate)
    • Complete DoD-sponsored Cybersecurity training within past 12 months

    Where Do I Need To Find the SAAR?

    The SAAR for NCCS can be found in the Onboarding section or by selecting the link below:

    Can I Gain Access to the Platform or the App Using a User Name and Password?

    No. NCCS allows for the storage of CUI, and is accredited on an IL5 environment, only allowing for the use of PKI certificates (either a Common Access Card (CAC) or DoD-approved External Certification Authority (ECA) certificate) for system access.

    What Is a GAM?

    GAM stands for Government Account Manager. The GAM role is used to approve user roles such as Originator, Reviewer, Contracting Officer, Certify Official, or Operations Officer. Review the slick sheets posted in the Training Material section in the main menu for additional details.

    What Is the Difference Between a GAM Category 1 and a GAM Category 2?

    The only difference between a GAM Category 1 and a GAM Category 2 is that a Category 2 cannot approve other GAMs.

    What Was the Required Roles to Create a DD Form 254 for Government Organizations?

    Originator, Reviewer, Certifying Officialontracting Officer are the required roles needed to complete the creation of a DD 254.

    Operations Officer is an optional role used for created reports and metrics.

    Review the slick sheets posted in the Training Material section in the main menu for additional details.

    For Government Organizations, What Role Approves User Roles (Originator, Reviewer, Contracting Officer, Certifying Official, or Operations Officer)?

    Any Government Account Manager (GAM) with your category or above.

    Review the Approval Process posted in the Training Material section in the main menu for additional details.

    Can I Add a Reviewer, a Certifying Official, or a Contracting Officer Outside of My Organization?

    Yes.