511.170 Information Technology Coordination and Standards.

      (a)  Standard Configurations. The contracting officer shall use standard configurations for GSA information technology procurements when feasible. A list of standard configurations for applicable information technology procurements can be found on the Acquisition Gateway Information Technology Hallway (login required) at https://hallways.cap.gsa.gov/app/#/gateway/information-technology.

      (b)  CIO Coordination. Requirements for GSA information technology must be coordinated with the GSA Chief Information Officer (CIO) in accordance with the Federal Information and Technology Acquisition Reform Act (FITARA) (Pub L. No. 113-291). Guidance for identifying the applicable GSA CIO point of contact can be found on GSA's Acquisition Portal at https://insite.gsa.gov/acquisitionportal. For interagency acquisitions involving information technology, see subpart  517.5.

      (c) GSA IT Standards Profile. GSA information technology must also be approved for use pursuant to the GSA Order CIO 2160.1 GSA IT Standards Profile. More details about the formal GSA IT Standards Profile approval process can be found on the GSA IT Standards webpage at the following link: https://insite.gsa.gov/portal/content/500499.

      (d)  Internet Protocol Version 6 (IPv6).

           (1)  Developing Requirements.

                (i) In accordance with FAR 11.002(g), contracting officers must include IPv6 requirements in all contracts and orders for information technology (IT) that will have the capability to access the Internet or any network utilizing Internet Protocol (IPv4 or IPv6).

                (ii)  Sample statement of work language to require IPv6 compliance can be found on GSA's Acquisition Portal at https://insite.gsa.gov/acquisitionportal.

                (iii)  See 539.101 (d) for guidance on verifying contractor compliance with IPv6 requirements.

           (2)  Waivers

                (i) The GSA Chief Information Officer (CIO) must approve any waiver from IPv6 requirements. 

                (ii)  The waiver request must provide the following information–

                     (A)  The product or service description;

                     (B)  The purpose of the procurement;

                     (C)  The requested duration of waiver; and

                     (D)  Sufficient justification for why IPv6 should be waived.

                (iii)  A sample waiver request can be found on GSA's Acquisition Portal at https://insite.gsa.gov/acquisitionportal.

                (iv)  Waivers must be documented in the contract file.

      (e)  Software Code Development. An alternatives analysis must be completed to leverage existing Federal or commercial software prior to buying custom-developed software code. To comply with this process, software requirements must be developed using the following order of preference—

           (1)  Software that the Government already owns. For software that will be used by GSA, this requires review of the GSA IT Standards List within the GSA Enterprise Architecture Analytics & Reporting Database that can be found on GSA's Acquisition Portal at https://insite.gsa.gov/acquisitionportal. The GSA IT Standards List shows software that has been approved for use within GSA by the Chief Technology Officer.

           (2)  Existing commercially-available software.

           (3)  Custom-developed software code in conjunction with existing Government or commercial software. See 511.170 (f) for requirements with procuring custom-developed code.

           (4)  Custom-developed software code only. See 511.170 (f) for requirements with procuring custom-developed code.

      (f)  Custom-Developed Software Code.

           (1)  Developing Requirements. Requirements for custom development of software code must include the establishment of enforceable rights sufficient to enable GSA to directly publish and publicly host all custom-developed code in accordance with GSA CIO IL-16-03, GSA Open Source Software Policy. To acquire open source software, the contracting officer must include the following–

                (i)  Any applicable FAR data rights clause; and

                (ii)  Sufficient data rights language in the statement of work. GSA Standard Open Source Code Statement of Work language can be found on GSA's Acquisition Portal at https://insite.gsa.gov/acquisitionportal.

           (2)  Waivers.

                (i)  The GSA Chief Information Officer (CIO) must approve any waiver from the open source code requirements mandated in (1). If a waiver is approved, GSA must still acquire and enforce rights sufficient to enable GSA or Government-wide reuse of custom-developed code. FAR clause 52.227-17 - Rights in Data - Special Works may be used to acquire Government-wide reuse of custom-developed code.

                (ii)  The waiver request must provide the following information–

                     (A)  The product or service description;

                     (B)  The purpose of the procurement; and

                     (C)  Sufficient justification for why open source code requirements should be waived.

                (iii)  A sample waiver form can be found on GSA's Acquisition Portal at https://insite.gsa.gov/acquisitionportal.

                (iv)  Waivers must be documented in the contract file.