DOE 970.5203-1 Management controls. Basic (Jun 2007) (Current)

As prescribed in 970.0370-2(a), the contracting officer shall insert the clause at 970.5203-1, Management Controls, in all management and operating contracts.

Management Controls (JUN 2007)

(a)(1) The Contractor shall be responsible for maintaining, as an integral part of its organization, effective systems of management controls for both administrative and programmatic functions. Management controls comprise the plan of organization, methods, and procedures adopted by management to reasonably ensure that: the mission and functions assigned to the Contractor are properly executed; efficient and effective operations are promoted including consideration of outsourcing of functions; resources are safeguarded against waste, loss, mismanagement, unauthorized use, or misappropriation; all encumbrances and costs that are incurred under the contract and fees that are earned are in compliance with applicable clauses and other current terms, conditions, and intended purposes; all collections accruing to the Contractor in connection with the work under this contract, expenditures, and all other transactions and assets are properly recorded, managed, and reported; and financial, statistical, and other reports necessary to maintain accountability and managerial control are accurate, reliable, and timely.

(2) The systems of controls employed by the Contractor shall be documented and satisfactory to DOE.

(3) Such systems shall be an integral part of the Contractor's management functions, including defining specific roles and responsibilities for each level of management, and holding employees accountable for the adequacy of the management systems and controls in their areas of assigned responsibility.

(4) The Contractor shall, as part of the internal audit program required elsewhere in this contract, periodically review the management systems and controls employed in programs and administrative areas to ensure that they are adequate to provide reasonable assurance that the objectives of the systems are being accomplished and that these systems and controls are working effectively. Annually, or at other intervals directed by the Contracting Officer, the Contractor shall supply to the Contracting Officer copies of the reports reflecting the status of recommendations resulting from management audits performed by its internal audit activity and any other audit organization. This requirement may be satisfied in part by the reports required under paragraph (i) of 48 CFR 970.5232-3, Accounts, records, and inspection.

(b) The Contractor shall be responsible for maintaining, as a part of its operational responsibilities, a baseline quality assurance program that implements documented performance, quality standards, and control and assessment techniques.

(End of clause)
 

NONE

Prime’s Interest;

52.204-21 Basic Safeguarding of Covered Contractor Information Systems.

52.204-23 Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab Covered Entities.

52.204-27 Prohibition on a ByteDance Covered Application.

52.204-28 Federal Acquisition Supply Chain Security Act Orders-Federal Supply Schedules, Governmentwide Acquisition Contracts, and Multi-Agency Contracts.

52.204-29 Federal Acquisition Supply Chain Security Act Orders-Representation and Disclosures.

52.204-30 Federal Acquisition Supply Chain Security Act Orders-Prohibition.

252.204-7016 Covered Defense Telecommunications Equipment or Services-Representation.

252.204-7017 Prohibition on the Acquisition of Covered Defense Telecommunications Equipment or Services—Representation.

252.204-7018 Prohibition on the Acquisition of Covered Defense Telecommunications Equipment or Services.

252.204-7019 Notice of NIST SP 800-171 DoD Assessment Requirements.

252.204-7020 NIST SP 800-171 DoD Assessment Requirements.

252.204-7021 Contractor Compliance with the Cybersecurity Maturity Model Certification Level Requirement.

252.204-7000 Disclosure of Information.

252.204-7008 Compliance with Safeguarding Covered Defense Information Controls.

252.204-7009 Limitations on the Use or Disclosure of Third-Party Contractor Reported Cyber Incident Information.

252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting.

252.239-7000 Protection Against Compromising Emanations.

252.239-7009 Representation of Use of Cloud Computing.

252.239-7010 Cloud Computing Services.

252.239-7017 Notice of Supply Chain Risk.

252.239-7018 Supply Chain Risk.

252.245-7000 Government-Furnished Mapping, Charting, and Geodesy Property.

252.246-7007 Contractor Counterfeit Electronic Part Detection and Avoidance System.

1852.246-74 Contractor Counterfeit Electronic Part Detection and Avoidance

3052.204-72 Safeguarding of Controlled Unclassified Information.

3052.204-73 Notification and Credit Monitoring Requirements for Personally Identifiable Information Incidents.

3052.204-71 Contractor employee access.

552.204-9 Personal Identity Verification Requirements.

552.239-70 Information Technology Security Plan and Security Authorization.

552.239-71 Security Requirements for Unclassified Information Technology Resources.

552.238-110 Commercial Satellite Communication (COMSATCOM) Services.

652.239-70 Information Technology Security Plan and Accreditation.

652.239-71 Security Requirements for Unclassified Information Technology Resources.

752.204-72 Access to USAID facilities and USAID's information systems.

952.204-77 Computer security.

952.223-76 Conditional payment of fee or profit-safeguarding restricted data and other classified information and protection of worker safety and health.

970.5204-1 Counterintelligence.

970.5204-3 Access to and ownership of records.

Working with a set of FAR clauses from an RFP or contract?

Try pasting them into our tool to instantly generate a risk profile, including the basic flow down recommendation.

Info

Works best with Chrome and Edge browsers!