# 539.101 Policy.

(a) Standard Configurations. See section 511.170 for any applicable standard configurations for GSA information technology procurements.

(b) CIO Coordination. See sections 507.104, 511.170, and 543.102 for required coordination and approval by the GSA Chief Information Officer (CIO) for procurements involving GSA information technology. For interagency acquisitions, see section 517.502-70.

(c) GSA IT Standards Approval. See section 511.170 for any necessary GSA IT Standards Profile approvals.

(d) Internet Protocol Version 6 (IPv6).

(1) See 511.170(d) for guidance on developing requirements to ensure information technology that will have the capability to access the Internet or any network complies with Internet Protocol Version 6 (IPv6).

(2) The Contracting Officer or Contracting Officer's Representative must validate contractor compliance with IPv6 contract requirements as part of the review and acceptance process when products or systems are delivered. Evidence may include any of the following:

(i) The Supplier's Declaration of Conformity (SDOC). The template for the SDOC can be found on the National Institute of Standards and Technology (NIST) Information Technology Lab website that is included on the Acquisition Portal at https://insite.gsa.gov/itprocurement;

(ii) Laboratory Certification. The product being acquired has been tested and shown to be IPv6 compliant by an accredited laboratory. A listing of tested/certified products can be found on the NIST Information Technology Lab website that is included on the Acquisition Portal at https://insite.gsa.gov/itprocurement; or

(iii) Practical Demonstration. The product can be shown to the GSA Contracting Officer or Contracting Officer's Representative to be IPv6 compliant via practical demonstration, or by an otherwise credible validation of technical support.

(e) Software Code. See 511.170(e) and 511.170(f) for guidance on procuring software code.

(f) Supply Chain Risk Management. See subpart 504.70 for guidance on identifying and mitigating supply chain risks.