E. Attachment A B.pdf

ACQUISITION LETTER MV-22-06

ATTACHMENT A

C-SCRM Provisions and Clauses for Leasing Contracts

The following provisions and clauses, as applicable, must be included in leasing solicitations and/or contracts. The list below does not reflect the representations and certifications captured through FAR provision 52.204-7, System for Award Management, FAR provision 52.204-8, Annual Representations and Certifications, or FAR clause 52.204-19, Incorporation by Reference of Representations and Certifications.

FAR Provisions and Clauses

Title Provision/Clause Where Prescribed

52.204-2, Security Requirements Clause 4.404(a)

52.204-9, Personal Identity Verification of Contractor Personnel

Clause 4.1303

52.204-21, Basic Safeguarding of Covered Contractor Information Systems

Clause 4.1903

52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab and Other Covered Entities

Clause 4.2004

52.204-24, Representation Regarding Certain Telecommunications and Video Surveillance Services or Equipment

Provision 4.2105(a) (see also LA-20-11)

52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment

Clause 4.2105(b) (see also LA-20-11)

52.204-26, Covered Telecommunications Equipment or Services-Representation

Provision 4.2105(c) (see also LA-20-11)

GSAM/R Provisions and Clauses

Title Provision/Clause Where Prescribed

552.204-9, Personal Identity Verification Requirements

Clause 504.1303

552.270-33, Foreign Ownership and Financing Representation for High-Security Leased Space

Clause 570.703(c)

552.270-34, Access Limitations for High- Security Leased Space

Clause 570.703(d)

ACQUISITION LETTER MV-22-06

ATTACHMENT B

GSA Policies and Requirements Related to C-SCRM

Policy/Reference GSA Order PBS 3490.3 CHGE 1

Title Security for Sensitive Building Information Related to Federal Buildings, Grounds, or Property

Notes This Order applies to all entities that handle, receive, and store CUI building information related to GSA-controlled space, as well as to the access to and generation, dissemination, storage, transfer, and disposal of all such information. It also applies to procurements to acquire, alter, or manage space, either Government-owned or leased, including GSA space that is delegated to other Federal agencies. Appendix C (within the Order) includes CUI language for all solicitations containing CUI information (including Requests for Lease Proposals)

See also GSA Order CIO 2103.2, Controlled Unclassified Information (CUI) Policy

Policy/Reference LA-18-05

Title Cybersecurity Measures for Leased Facilities

Notes This leasing alert provides required and recommended measures for lessors related to cybersecurity protections and precautions in leased facilities. Section 2 (within the LA) provides required measures and recommended guidance, and Attachment 1 provides cybersecurity language that was added to Federal Security Level (FSL) templates.