Subpart 4.13 - Personal Identity Verification

Parent topic: Part 4 - Administrative and Information Matters

4.1300 Scope of subpart.

This subpart provides policy and procedures associated with Personal Identity Verification as

required by-

(a) Federal Information Processing Standards Publication (FIPS PUB) Number 201, "Personal

Identity Verification of Federal Employees and Contractors"; and

(b) Office of Management and Budget (OMB) Guidance M-05-24, dated August 5, 2005,

"Implementation of Homeland Security Presidential Directive (HSPD) 12-Policy for a Common

Identification Standard for Federal Employees and Contractors."

4.1301 Policy.

(a) Agencies must follow FIPS PUB Number 201 and the associated OMB implementation guidance

for personal identity verification for all affected contractor and subcontractor personnel when

contract performance requires contractors to have routine physical access to a Federally-controlled

facility and/or routine access to a Federally-controlled information system.

(b) Agencies must include their implementation of FIPS PUB 201 and OMB Guidance M-05-24 in

solicitations and contracts that require the contractor to have routine physical access to a Federallycontrolled facility and/or routine access to a Federally-controlled information system.

(c) Agencies must designate an official responsible for verifying contractor employee personal

identity.

(d)

(1) Agency procedures for the return of Personal Identity Verification (PIV) products shall ensure

that Government contractors account for all forms of Government-provided identification issued to

Government contractor employees under a contract, i.e., the PIV cards or other similar badges, and

shall ensure that contractors return such identification to the issuing agency as soon as any of the

following occurs, unless otherwise determined by the agency:

(i) When no longer needed for contract performance.

(ii) Upon completion of a contractor employee’s employment.

(iii) Upon contract completion or termination.

(2) The contracting officer may delay final payment under a contract if the contractor fails to comply

with these requirements.
4.1302 Acquisition of approved products and services for

personal identity verification.

(a) In order to comply with FIPS PUB 201, agencies must purchase only approved personal identity

verification products and services.

(b) Agencies may acquire the approved products and services from the GSA, Federal Supply

Schedule 70, Special Item Number (SIN) 132-62, HSPD-12 Product and Service Components, in

accordance with ordering procedures outlined in FAR subpart 8.4.

(c) When acquiring personal identity verification products and services not using the process in

paragraph (b) of this section, agencies must ensure that the applicable products and services are

approved as compliant with FIPS PUB 201 including-

(1) Certifying the products and services procured meet all applicable Federal standards and

requirements;

(2) Ensuring interoperability and conformance to applicable Federal standards for the lifecycle of

the components; and

(3) Maintaining a written plan for ensuring ongoing conformance to applicable Federal standards for

the lifecycle of the components.

(d) For more information on personal identity verification products and services see

http://www.idmanagement.gov.

4.1303 Contract clause.

The contracting officer shall insert the clause at 52.204-9, Personal Identity Verification of

Contractor Personnel, in solicitations and contracts when contract performance requires contractors

to have routine physical access to a Federally-controlled facility and/or routine access to a Federallycontrolled information system. The clause shall not be used when contractors require only

intermittent access to Federally-controlled facilities.