Contracting Policy
Conflict of Interest (COI)
"CMS is pleased to provide for review, the following Conflict of Interest solicitation/ contract documents for contracts greater than the Simplified Acquisition Threshold (SAT). These documents will be modified accordingly by each Contracting Officer (CO) for use in new solicitations effective October 1, 2020. Existing contracts will be modified within a year of the effective date. Any questions may be directed to dpo@cms.hhs.gov.
Personnel Credentialing and Personal Identity Verification (PIV)
In accordance with OMB Memorandum M-05-24, Implementation of Homeland Security Presidential Directive 12 (HSPD-12), and Federal Information Processing Standard (FIPS) PUB Number 201-2, CMS must achieve appropriate security assurance by verifying the claimed identity of contract personnel. Those that require routine physical access to a CMS facility and/or routine access to a CMS federally controlled information system will be required to obtain a CMS issued PIV card or applicable equivalent. FIPS PUB 201-2 specifies the architecture and technical requirements for a common identification standard for Federal employees and Contractors.
The Identity and Credentialing Tool (ICT, formerly known as EFI) is a web interface that allows contract personnel to request access to CMS network, applications, and facility resources as is needed to perform contractual duties. Contractors should consult with their Contracting Officer’s Representative (COR) prior to submitting applications through ICT.
To access ICT, please click the below link:
For your convenience, the ICT User Guide and ICT Point of Contact (POC) Guide can be accessed to help guide you through the ICT process:
ICT User Guide (PDF (PDF)- This document guides the ICT applicant through the registration process, the login process, the username and password management process, and the Access Request process.
ICT POC Guide (PDF) - When a contract is entered into the ICT system, a primary Point of Contact (POC) e-mail address is designated. The POC manages access requests for the designated contract. POCs are responsible for reviewing the information provided for the access request, approving the request, returning it to the requester for modification, and reject and delete the access request as necessary.
All contract personnel that require a Personal Identity Verification (PIV) Card to perform their contractual duties must take mandatory PIV Applicant Training. This training shall be taken prior to submitting your application through ICT as the certificate of completion is necessary to submit your complete ICT application.
OF-306 – Declaration for Federal Employment (PDF) – All contractors that require a PIV card must complete the OPM OF-306. At the time of application, this form should be uploaded in your ICT submission.
Executive Order 12564 Drug Free Workplace (PDF) - (Under Construction / Pending)
USA Staffing Question EFI (PDF) - (Under Construction / Pending)