(a) Agencies must follow FIPS PUB Number 201 and the associated OMB implementation guidance for personal identity verification for all affected contractor and subcontractor personnel when contract performance requires contractors to have routine physical access to a Federally-controlled facility and/or routine access to a Federally-controlled information system.
(b) Agencies must include their implementation of FIPS PUB 201 as amended, and OMB guidance M-05-24 in solicitations and contracts that require the contractor to have routine physical access to a federally-controlled facility and/or routine access to a Federally-controlled information system.
(c) Agencies shall designate an official responsible for verifying contractor employee personal identity.