Personnel Credentialing and Personal Identity Verification (PIV)

In accordance with OMB Memorandum M-05-24, Implementation of Homeland Security Presidential Directive 12 (HSPD-12), and Federal Information Processing Standard (FIPS) PUB Number 201-2, CMS must achieve appropriate security assurance by verifying the claimed identity of contract personnel. Those that require routine physical access to a CMS facility and/or routine access to a CMS federally controlled information system will be required to obtain a CMS issued PIV card or applicable equivalent.  FIPS PUB 201-2 specifies the architecture and technical requirements for a common identification standard for Federal employees and Contractors.

The Identity and Credentialing Tool (ICT, formerly known as EFI) is a web interface that allows contract personnel to request access to CMS network, applications, and facility resources as is needed to perform contractual duties. Contractors should consult with their Contracting Officer’s Representative (COR) prior to submitting applications through ICT.

To access ICT, please click the below link:

https://eua.cms.gov/efi

For your convenience, the ICT User Guide and ICT Point of Contact (POC) Guide can be accessed to help guide you through the ICT process:

ICT User Guide (PDF (PDF)- This document guides the ICT applicant through the registration process, the login process, the username and password management process, and the Access Request process.

ICT Roster Owner Guide (PDF) - This guide provides instructions for Roster Owners to manage their contract. The selected Roster Owner is responsible for managing the users on a contract. A key role for the Roster Owner is the offboarding process. When a user leaves a contract, the Roster Owner will initiate the offboarding process by removing the user from the contract in ICT.

ICT POC Guide (PDF) - When a contract is entered into the ICT system, a primary Point of Contact (POC) e-mail address is designated. The POC manages access requests for the designated contract. POCs are responsible for reviewing the information provided for the access request, approving the request, returning it to the requester for modification, and reject and delete the access request as necessary.

All contract personnel that require a Personal Identity Verification (PIV) Card to perform their contractual duties must take mandatory PIV Applicant Training. This training shall be taken prior to submitting your application through ICT as the certificate of completion is necessary to submit your complete ICT application.

PIV Applicant Training (PPTX)

OF-306 – Declaration for Federal Employment (PDF) – All contractors that require a PIV card must complete the OPM OF-306.  At the time of application, this form should be uploaded in your ICT submission.

Executive Order 12564 Drug Free Workplace (PDF) - (Under Construction / Pending)

USA Staffing Question EFI (PDF) - (Under Construction / Pending)

Mandatory Contractor Training

Records Management Training

All contractor employees who have access to (1) HHS Federal Information or a Federal information system or (2) personally identifiable information shall complete the CMS provided Records management training required by the Department of Health and Human Services (HHS) before performing any work under their contract.  Thereafter, the employees must complete annual Records Management training throughout the life of the contract.  The Contractor shall also ensure subcontractor compliance with this training requirement. 

Access Instructions for Contractors, Interns, and Intermittent Employees without Learning Management System (LMS) accounts:

Access the training here: 2024 Records Management Training. After you complete the course, print the certificate and give a copy to your contract lead or supervisor.

If you have questions or feedback about this course, email the CMS Records Management Office.

CMS Task Order & Delivery Order Ombudsman

The CMS Task Order & Delivery Order Ombudsman is responsible for:

· Addressing contractor concerns regarding compliance with task/delivery order award procedures.

· Reviewing contractor complaints regarding task/delivery order contracts.

· Ensuring all contractors are afforded a fair opportunity to be considered for each task/delivery order.

To contact the CMS Task Order & Delivery Order Ombudsman please email: DPO@cms.hhs.gov