and NIST guidance and standards being followed? A.67 If commercial IT is acquired, FAR 25.103(e) has exemption from Buy American Act been assured? No. Action Item FAR/HHSAR/ Yes No N/A Comments NIH Policy Part A.68 If IT requirement, are appropriate FAR 39.101(d), IT security policies and HHSAR 339.1, requirements, including use of 352.239-70 common security configurations available from NIST at incorporated in RFP? OCOI/COI A.69 If potential for OCOI/COI has been FAR 9.504(b) determined, did CO obtain (required unless assistance/advice of technical waived by agency specialists and OGC in evaluating head) potential conflicts? A.70 If significant potential for FAR 9.504(c); OCOI/COI, has CO provided 9.506(b)(1)-(3) written analysis, recommended (required unless course of action, draft RFP waived by agency provision and contract clause? head) A.71 If IDIQ >$103M (including all FAR options), is D&F approved by HCA 16.504(c)(1)(ii)D in file?
and NIST guidance and standards being followed? A.67 If commercial IT is acquired, has exemption from Buy American Act been assured? FAR 25.103(e) No. Action Item FAR/HHSAR/ NIH Policy Part Yes No N/A Comments A.68 If IT requirement, are appropriate IT security policies and requirements, including use of common security configurations available from NIST at incorporated in RFP? FAR 39.101(d), HHSAR 339.1, 352.239-70 OCOI/COI A.69 If potential for OCOI/COI has been determined, did CO obtain assistance/advice of technical specialists and OGC in evaluating potential conflicts? FAR 9.504(b) (required unless waived by agency head) A.70 If significant potential for OCOI/COI, has CO provided written analysis, recommended course of action, draft RFP provision and contract clause? FAR 9.504(c); 9.506(b)(1)-(3) (required unless waived by agency head) A.71 If IDIQ >$103M (including all options), is D&F approved by HCA in file? FAR 16.504(c)(1)(ii)D
BOCA_Rvw_Chcklst_ConstNeg_Dec11.docx