Revised_Section_C-2-11-3-k_rev_11-2-18.pdf

19AQMM18R0311

(Revised 11-2-2018)

e. No personal smartphones, computers, media, flash drives, USB devices, or other peripherals shall be permitted in OFCs and accessible to Contractor personnel, visitors or applicants, with the exception of OFC manager and Government employees. No peripherals of any sort, including Contractor-owned equipment, shall be attached to the Government-supplied equipment unless authorized by the Government.

f. All computers and electronic equipment, including those belonging to the Contractor, shall be subject to inspection by post personnel at any time.

g. The Contractor shall install Government-provided security software (i.e. anti-virus definitions and security patches) updates on a monthly basis, or as directed by the Government, and report statistics and completion dates on the patching process to the Department of State COR and GTM in a monthly report described in Section F.6.1.1.

h. All Contractor personnel using GFE shall possess their own user account, restricted to only what is operationally necessary. Accounts with administrative access shall not be used as general user accounts.

i. GFE shall be configured with restricted access control to the Internet, only allowing authorized access to required business process sites, with prior Government approval.

Use of firewalls shall be mandatory, configured with no remote management and only those outbound connections necessary for transmission of biometric data via GFE.

j. The Contractor shall report the presence of an illegitimate system upon discovery and include these incidents in a separate report as detailed in Section F.6.1.1 and in accordance with Government regulations.

k. All proposed uses of Cloud technology that will include the processing of Controlled Unclassified Information / Sensitive But Unclassified (CUI/SBU) shall be cleared by the Government in advance. Only FedRAMP-approved Cloud Service Providers (CSP) shall be used. Selection of an appropriate CSP shall be based on the level of a Government approved FIPS 199-derived data impact categorization, which will be designated as high.

2.11.4 Scheduling

l. The Contractor shall be able to accommodate sufficient future appointment capacity at OFCs to meet post’s scheduling needs (no arbitrary appointment cut-offs).

m. The Contractor shall ensure that it is clear to both post managers and customers what date the next available appointment is at an individual post and all posts within a country mission.

2.11.5 Biometrics Collection

n. The Contractor shall collect biometrics in all cases supported by OFCs unless specifically directed by the Government.

o. Contractor OFC personnel tasked with collecting biometrics shall complete

Government-provided training on fraudulent passports, detecting impostors, and identifying altered/mutilated fingerprints.

p. The Contractor shall not exceed a 0.01 percent error rate (or other threshold as specified by a Task Order) for matching applicant’s electronic visa application data and biometric data.

q. The Contractor shall transfer applicant data to the consular section according to a mutually agreed upon schedule, ensuring adequate bandwidth and line speed to meet