Contracting Policy and Resources

Conflict of Interest (COI)

"CMS is pleased to provide for review, the following Conflict of Interest solicitation/ contract documents for contracts greater than the Simplified Acquisition Threshold (SAT). These documents will be modified accordingly by each Contracting Officer (CO) for use in new solicitations effective October 1, 2020. Existing contracts will be modified within a year of the effective date. Any questions may be directed to Christopher Hagepanos, Compliance Officer, at"

Mandatory Contractor Training

Records Management Training

All contractor employees who have access to (1) HHS Federal Information or a Federal information system or (2) personally identifiable information shall complete the CMS provided Records management training required by the Department of Health and Human Services (HHS) before performing any work under their contract.  Thereafter, the employees must complete annual Records Management training throughout the life of the contract.  The Contractor shall also ensure subcontractor compliance with this training requirement. 

Access Instructions for Federal Employees:

Register here: 2022 Records Management Training

For login support, call 1-888-ONE-DHHS (1-888-663-3447) or email For technical support or help with accessibility options and assistive technology, contact the LMS Helpdesk at 1-855-495-2184.

Access Instructions for Contractors, Interns, and Intermittent Employees without Learning Management System (LMS) accounts:

Access the training here: 2022 Records Management Training. After you complete the course, print the certificate and give a copy to your contract lead or supervisor.

If you have questions or feedback about this course, email the CMS Records Management Office.

Personnel Credentialing and Personal Identity Verification (PIV)

In accordance with OMB Memorandum M-05-24, Implementation of Homeland Security Presidential Directive 12 (HSPD-12), and Federal Information Processing Standard (FIPS) PUB Number 201-2, CMS must achieve appropriate security assurance by verifying the claimed identity of contract personnel. Those that require routine physical access to a CMS facility and/or routine access to a CMS federally controlled information system will be required to obtain a CMS issued PIV card or applicable equivalent.  FIPS PUB 201-2 specifies the architecture and technical requirements for a common identification standard for Federal employees and Contractors.

The Enterprise User Administration Front-End Interface (EFI) is a web interface which allows contract personnel to request access to CMS network, applications, and facility resources as is needed to perform contractual duties. Contractors should consult with their Contracting Officer’s Representative (COR) prior to submitting applications through EFI.

To access EFI please click the below link:

For your convenience, the EFI User Guide and EFI Point of Contact (POC) Guide can be accessed to help guide you through the EFI process:

EFI User Guide (PDF)- This document guides the EFI applicant through the registration process, the login process, the username and password management process, and the Access Request process.

EFI New User Video

EFI POC Guide (PDF) - When a contract is entered into the EFI system, a primary Point of Contact (POC) e-mail address is designated. The POC manages access requests for the designated contract. POCs are responsible for reviewing the information provided for the access request, approving the request, returning it to the requester for modification, and reject and delete the access request as necessary.

All contract personnel that require a Personal Identity Verification (PIV) Card to perform their contractual duties must take mandatory PIV Applicant Training. This training shall be taken prior to submitting your application through EFI as the certificate of completion is necessary to submit your complete EFI application.

PIV Applicant Training (PPTX)

OF-306 – Declaration for Federal Employment (PDF) – All contractors that require a PIV card must complete the OPM OF-306.  At the time of application, this form should be uploaded in your EFI submission.


Page Last Modified:
07/11/2022 04:01 PM