OnboardingProcess

• Notify of Contract Award

  The CMS COR notifies the ISG Contract Onboarding Services team of a new contract award at the following email address: ISGContractorOnboardingServices@cms.hhs.gov. 

  Responsible Parties: CMS COR

The Period of Performance (POP) is the time span between the effective date of a contract (when the contracted effort begins) and the last day under the contract on which deliveries of goods are made or services are performed. Once the POP begins all meetings, work, and calls can proceed.

Complete Contract Onboarding Services Intake Form

The CMS COR coordinates with the New Contractor to gather the required information to onboard a contract and identify the type of work to be performed and the services required. Refer to the CMS Services tab for guidance on the Data Use Agreement (DUA) process.

Within one day after the POP start date, the contractor needs to identify the Security Officer (SO) and the Security Point of Contract (SPOC) for their contract.  These individuals need to initiate their background checks via EUA and create/activate their user ID in HARP and the New Contractor needs to provide their ID and contact information to the COR as part of the onboarding process.

Once the COR has gathered the required information, they need to submit the JSM Form to onboard the New Contractor.  For detailed information regarding this process, CLICK HERE.

Responsible Parties: CMS COR, New Contractor, ISG Contract Onboarding Services Team

• Conduct Contract Onboarding Services Meeting

  The ISG Contract Onboarding Services team conducts a meeting with the CMS COR and New Contractor to confirm eligibility for the services identified in the Contract Onboarding Services Intake Form and sends a request for approval of these services to the CMS Service Leads for processing.

  Responsible Parties: ISG Contract Onboarding Services Team, CMS COR, New Contractor

• Complete Contract Onboarding

  After the CMS Service Leads have processed the request, the ISG Contract Onboarding Services team prepares and sends a welcome package to the New Contractor’s Security Official (SO) to complete the engagement process. The welcome package includes the following information:

  • List of SO Responsibilities
  • List of Approved Services
  • Description of Approved Services
  • Instructions for Onboarding Users

  Upon receipt of this welcome package and informational materials, the New Contractor SO can begin the process of onboarding new users into the QualityNet IT Services. Access is based on the list of approved services provided in the package.

  Responsible Parties: ISG Contract Onboarding Services Team, CMS Service Leads; New Contractor

• Hold Contract Calls as Needed

  The CMS COR and ISG Contract Onboarding Services team will conduct touch point calls with the New Contractor. During these calls, the teams will ensure that the New Contractor has all the necessary knowledge, templates, and points of contact (POCs) for any formal security deliverables or other security-related items within the dates of the engagement timeline. The teams will also ensure that the New Contractor has all necessary hardware and software ordered, delivered, and installed within the dates of the engagement timeline. The ISG Contract Onboarding Services team will be responsible for archiving documentation of the results of the meetings/calls.

  Responsible Parties: CMS COR, ISG Contract Onboarding Services Team, New Contractor

• Complete Post-Onboarding Survey

  The ISG Contract Onboarding Services team forwards link to Contract Onboarding Services Post-Onboarding Survey to New Contractor for response. The goal of the survey is to assist the team in creating an effective and efficient onboarding process.

  Responsible Parties: ISG Contract Onboarding Services Team, New Contractor