Contracting Policy

Conflict of Interest (COI)

Personnel Credentialing and Personal Identity Verification (PIV)

In accordance with OMB Memorandum M-05-24, Implementation of Homeland Security Presidential Directive 12 (HSPD-12), and Federal Information Processing Standard (FIPS) PUB Number 201-2, CMS must achieve appropriate security assurance by verifying the claimed identity of contract personnel. Those that require routine physical access to a CMS facility and/or routine access to a CMS federally controlled information system will be required to obtain a CMS issued PIV card or applicable equivalent.  FIPS PUB 201-2 specifies the architecture and technical requirements for a common identification standard for Federal employees and Contractors.

The Identity and Credentialing Tool (ICT, formerly known as EFI) is a web interface that allows contract personnel to request access to CMS network, applications, and facility resources as is needed to perform contractual duties. Contractors should consult with their Contracting Officer’s Representative (COR) prior to submitting applications through ICT.

To access ICT, please click the below link:

https://eua.cms.gov/efi

For your convenience, the ICT User Guide and ICT Point of Contact (POC) Guide can be accessed to help guide you through the ICT process:

ICT User Guide (PDF (PDF)- This document guides the ICT applicant through the registration process, the login process, the username and password management process, and the Access Request process.

ICT Roster Owner Guide (PDF) - This guide provides instructions for Roster Owners to manage their contract. The selected Roster Owner is responsible for managing the users on a contract. A key role for the Roster Owner is the offboarding process. When a user leaves a contract, the Roster Owner will initiate the offboarding process by removing the user from the contract in ICT.

ICT POC Guide (PDF) - When a contract is entered into the ICT system, a primary Point of Contact (POC) e-mail address is designated. The POC manages access requests for the designated contract. POCs are responsible for reviewing the information provided for the access request, approving the request, returning it to the requester for modification, and reject and delete the access request as necessary.

All contract personnel that require a Personal Identity Verification (PIV) Card to perform their contractual duties must take mandatory PIV Applicant Training. This training shall be taken prior to submitting your application through ICT as the certificate of completion is necessary to submit your complete ICT application.

PIV Applicant Training (PPTX)

OF-306 – Declaration for Federal Employment (PDF) – All contractors that require a PIV card must complete the OPM OF-306.  At the time of application, this form should be uploaded in your ICT submission.

Executive Order 12564 Drug Free Workplace (PDF) - (Under Construction / Pending)

USA Staffing Question EFI (PDF) - (Under Construction / Pending)