PART 339-MANAGEMENT, ACQUISITION, AND USE OF INFORMATION RESOURCES

Subpart 339.70—ADP Clearances and Systems Security

Sec.

339.7001 ADP Clearances. 339.7002

ADP systems security.

AUTHORITY: 5 U.S.C. 301; 40 U.S.C. 486 (c). SOURCE: 49 FR 14023, Apr. 9, 1984, unless otherwise noted.

Subpart 339.70-ADP Clearances and Systems Security

339.7001 ADP clearances.

In accordance with Chapter 4-10 of the HHS ADP Systems Manual, the Office of Management Analysis and Systems (OMAS), OASMB-OS, is responsible for the review and approval of all requests for proposed automatic data processing (ADP) systems and modifications to existing ADP systems which require the acquisition of ADP hardware, software packages, and services, and telecommunications equipment, which exceed the dollar thresholds stated in Chapter 4-10.

(a) It is the responsibility of the program office to obtain written approval from OMAS on proposed ADP acquisitions which exceed the thresholds stated in Chapter 4-10 prior to submitting the request for contract to the contracting activity.

(b) The OMAS approval document is to be attached to the request for contract when it is submitted by the program office to the contracting activity. The contracting activity shall not initiate action on the request for contract until a properly executed approval document is obtained.

339.7002 ADP systems security.

(a) Program responsibilities. Whenever a proposed contract action requires the design, development, maintenance, or use of an ADP system or the use of ADP resources, the program office is required to designate a responsible individual to serve as the ADP system manager who is to ensure, in coordination with the cognizant sys

tems security officer, that ADP security requirements are met and that each contractor maintains an acceptable security program.

(b) Contracting responsibilities. (1) The contracting officer is responsible for ensuring that a certification of ADP systems security requirements, signed by both the ADP system manager and the ADP systems security officer, is submitted with the request for contract. The contracting officer shall not initiate action on the request for contract until the properly executed certification is received. The certification will state that the security requirements specified are reasonably sufficient for the intended application and that they comply with current Federal and HHS computer security policies, procedures, standards, and guidelines.

(2) When developing the request for proposals, the contracting officer shall include in the technical proposal instructions a statement requiring that the offeror present a detailed outline of its proposed ADP system security program which complies with the requirements of the statement of work and applicable portions of Part 6, ADP Systems Security, of the HHS ADP Systems Manual.

(3) The contracting officer shall include a special provision reading substantially as follows in all applicable solicitations and resultant contracts:

The Contractor agrees to comply with the ADP system security requirements set forth in the system of work and applicable portions of Part 6, ADP Systems Security, of the HHS ADP Systems Manual. The Contractor further agrees to include this provision in any subcontract awarded pursuant to this prime contract.

(4) The contracting officer shall ensure that a properly executed certification confirming that the offerors comply with the necessary security requirements is attached to the technical evaluation report received from the evaluation panel before proceeding with the acquisition process. This certification must be countersigned by the officials designated in paragraph (b)(1) above and must contain a similar statement of compliance.

Sec.

PART 342-CONTRACT

ADMINISTRATION

Subpart 342.5—Postaward Orientation

complish postaward orientation objectives. A postaward orientation conference should only be arranged when letters cannot resolve key issues.

Subpart 342.7-Indirect Cost Rates 342.705 Fianl indirect cost rates.

The Director, Division of Cost Allocation of the Regional Administrative Support Center within each HHS regional office has been delegated the authority to establish indirect cost rates, research patient care rates, and, as necessary, fringe benefit, computer, and other special costing rates for use in contracts and grants awarded to State and local governments, colleges and universities, hospitals, and other nonprofit organizations.

Subpart 342.70-Contract Monitoring 342.7001 Purpose.

Contract monitoring is an essential element of contract administration and the acquisition process. This subpart describes the Department's operating concepts regarding contract monitoring, performed jointly by the project officer and the contracting officer, to ensure that the required monitoring is performed, timely remedial action is taken when necessary, and a determination is made that contract objectives have been met.

342.7002 Contract monitoring responsibil ities.

(a) Upon execution of the contract, the mutual obligations of the Government and the contractor are established by, and limited to, the written stipulations in the contract. Unless authorized by the contracting officer, HHS personnel shall not direct or request the contractor to assume any obligation or take any actions not specifically required by the contract. Only the contracting officer may impose a requirement which will result in a change to the contract. All contract changes must be directed in writing or confirmed in writing by the contracting officer.

(b) The contracting officer is responsible for assuring compliance with all terms of the contract, especially the statutory, legal, business, and regulatory provisions. Whether or not a postaward conference is held, the contracting officer shall inform the contractor by letter (if not already stipulated by contract provisions) of the authorities and responsibilities of the Government personnel with whom the contractor will be dealing throughout the life of the contract.

(c) The contracting officer must depend on program, technical, and other personnel for assistance and advice in monitoring the contractor's performance, and in other areas of postaward administration. The contracting officer must assure that responsibilities assigned to these personnel are understood and carried out. The individual roles and corresponding responsibilities typically involve, but are not limited to, the following:

(1) The role of program and technical personnel in monitoring the contract to assist or advise the contracting officer (or act as his/her representative when so designated by the contracting officer) in activities such

as:

(i) Providing technical monitoring during contract performance, and issuing letters to the contractor and contracting officer relating to delivery acceptance, or rejection in accordance with the terms of the contract;

(ii) Assessing contractor performance, including inspection and testing of products and evaluation of reports and data;

(iii) Recommending necessary changes to the schedule of work and period of performance in order to accomplish the objectives of the contract. This shall be accomplished by a written request to the contracting officer, together with an appropriate justification and funds availability citation;

(iv) Reviewing invoices/vouchers and recommending approval/disapproval action by the contracting officer, to include comments regarding anything unusual discovered in the review;

(v) Reviewing and recommending approval or disapproval of subcontracts,

overtime, travel, and key personnel changes; and

(vi) Participating, as necessary, in various phases of the contract closeout process.

(2) The role of the project officer in performing required aspects of the contract monitoring process. In addition to those applicable activities set forth in (c)(1) above, the project officer shall:

(i) Submit periodic reports to the contracting officer that concisely explain the status of the contract, and include recommended actions for any problems reported. Provide the contracting officer with written notification of evaluation and approval/disapproval of contract deliverables and of completion of tasks or phases. The contracting officer will, in turn, provide the contractor with written notification of approval or disapproval unless the responsibility has been delegated by the contracting officer, in which case the person responsible for such action will notify the contractor and provide a copy to the contracting officer for inclusion in the contract file;

(ii) Monitor the technical aspects of the contractor's business and technical progress, identify existing and potential problems that threaten performance, and immediately inform the contracting officer of deviations from contract objectives, or from any technical or delivery requirements, so that remedial measures may be instituted accordingly;

(iii) Provide immediate notification to the head of the program office responsible for the program whenever it is determined that program objectives are not being met, together with specific recommendations of action to be taken. A copy of the project officer's report and recommendations shall be transmitted to the contracting officer for appropriate action;

(iv) Submit, within 120 days after contract completion, a final assessment report to the contracting officer. The report should include an analysis of the contractor's performance, including the contract and program objectives achieved and missed. A copy of the final assessment report shall be forwarded to the head of the program

office responsible for the program for management review and followup, as necessary; and

(v) Accompany and/or provide, when requested, technical support to the HHS auditor in the conduct of floor checks.

(3) The role of the contract administrator, auditor, cost analyst, and property administrator in assisting or advising the contracting officer in postaward administration activities such as:

(i) Evaluation of contractor systems and procedures, to include accounting policies and procedures, purchasing policies and practices, property accounting and control, wage and salary plans and rate structures, personnel policies and practices, etc.;

(ii) Processing of disputes under the Disputes clause and any resultant appeals;

(iii) Modification or termination of the contract; and

(iv) Determination of the allowability of cost charges to incentive or costreimbursement type contracts and progress payments under fixed-price contracts. This is especially important when award is made to new organizations or those with financial weaknesses.

(d) The contracting officer is responsible for assuring that contractor performance and contract monitoring are carried out in conformance with contract provisions. If performance is not satisfactory or if problems are anticipated, it is essential that the contracting officer take immediate action to protect the Government's rights under the contract. The contracting officer shall notify his/her immediate supervisor of problems that cannot be resolved within contract limitations and whenever contract or program objectives are not met. The notification shall include a statement of action being taken by the contracting officer. 342.7003 Withholding of contract payments.

which incorporates the definition of excusable delays. These clauses are contained in the Department's contract general provisions.

(b) The transmittal letter used to convey the contract to each contractor shall contain a notice which highlights the contractor's agreement with the withholding of contract payments clause.

(c) No contract payment shall be made when any report required to be submitted by the contractor is overdue, or the contractor fails to perform or deliver work or services as required by the contract.

(d) The contracting officer shall issue a ten-day cure notice or initiate appropriate termination action for any failure in the contractor's performance as stated in the preceding paragraph (c).

(a) The contracting officer is responsible for initiating immediate action to protect the Government's rights whenever the contractor fails to comply with either the delivery or reporting provisions of the contract. Compliance with the reporting provisions includes those reports to be submitted directly to the payment office. If such a report is not submitted on time, the contracting officer is to be notified promptly by the payment office.

(b) When the contract contains a termination for default clause, the contractor's failure to either submit any required report when due or perform or deliver services or work when required by the contract is to be considered a default in performance. In either circumstance, the contracting officer is to immediately issue a formal ten-day cure notice pursuant to the default clause. The cure notice is to follow the format prescribed in FAR 49.607 and is to include a statement to the effect that contract payments will be withheld if the default is not cured or is not determined to be excusable.

(1) If the default is cured or is determined to be excusable, the contracting officer is not to initiate the withholding action.

(2) If the default is not determined to be excusable or a response is not received within the allotted time, the contracting officer is to initiate withholding action on all contract payments and is to determine whether termination for default or other action would be in the best interest of the Government.

(c) When the contract does not contain a termination for default clause, the contractor's failure to either submit any required report when due or perform or deliver services or work when required by the contract is to be considered a failure to perform. In either circumstance, the contracting officer is to immediately issue a written notice to the contractor specifying the failure and providing a period of ten days, or a longer period as determined necessary by the contracting officer, in which the contractor is to cure the failure or establish an excusable delay. The contracting officer is to include a statement in the written notice to the effect that contract payments will be withheld if the failure is not cured or is not determined to be excusable.

(1) If the failure is cured or is determined to be excusable, the contracting officer is not to initiate the withholding action.

(2) If the failure is not determined to be excusable or a response is not received within the allotted time, the contracting officer is to initiate withholding action on all contract payments and is to determine whether termination for convenience or other action would be in the best interest of the Government.

(d) The contracting officer should consult FAR Subpart 49.4 for further guidance before taking any of the actions described in this section.

342.7003-3 Withholding payments.

(a) When making the determination that contract payments should be withheld in accordance with the Withholding of Contract Payments clause, the contracting officer is to immediately notify the servicing finance office in writing of the determination to suspend payments. The notice of suspension is to contain all elements of information required by the pay

ment office to properly identify the contract and the applicable accounts involved.

(b) The contracting officer is to immediately notify the contractor in writing that payments have been suspended until the default or failure is cured.

(c) When the contractor cures the default or failure, the contracting officer is to immediately notify, in writing, all recipients of the notice of suspension that the suspension is to be lifted and contract payments are to be resumed.

(d) When exercising actions regarding the withholding of payment procedures, the contracting officer must be careful not to waive any of the Government's rights when corresponding with the contractor or when taking any other actions.

Subpart 342.71-Administrative Actions for Cost Overruns

342.7100 Scope of subpart.

This subpart sets forth the procedures to be followed when a cost overrun is anticipated; i.e., the allowable actual cost of performing a cost-reimbursement type contract is expected to exceed the total estimated cost specified in the contract.

342.7101 Applicability.

This subpart applies to the administration of cost-reimbursement type contracts and the cost-reimbursement portion of other types of contracts. Nothing in this subpart shall be construed to relieve contractors from compliance with the Limitation of Cost clause or any other provisions of contracts.

342.7102 General.

Reimbursement for costs incurred under cost-reimbursement contracts shall not exceed the amount of funds obligated by the contract, unless increased by the contracting officer. Cost overruns shall be held to an absolute minimum, compatible with accomplishment of the statement of work.