<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><b>From:</b> Research <<a href="mailto:research-bounces@lists.ucr.edu">research-bounces@lists.ucr.edu</a>>
<b>On Behalf Of </b>Charles -Jr E Greer<br>
<b>Sent:</b> Monday, August 01, 2022 7:59 AM<br>
<b>To:</b> <a href="mailto:research@lists.ucr.edu">research@lists.ucr.edu</a><br>
<b>Subject:</b> [Research] Annual Reminder of UCR’s Implementation and Responsibilities under Section 889 of the National Defense Authorization Act (NDAA)<br>
<b>Importance:</b> High<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%"><b>To: Researchers, CFAO, FAO’s, Procurement/Purchasing Staff, Sponsored Programs Administration staff (please share this email; broadly).<o:p></o:p></b></p>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%"><b>Background <o:p>
</o:p></b></p>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%">The US federal government issued rules and guidance that implemented Section 889 of the National Defense Authorization Act (NDAA) for fiscal year 2019 (FY2019). In July 2020, Part B of the requirements
directly impacted UCR’s use and procurement of certain devices. Beginning with 2021 and in accordance with UCR’s
<a href="https://its.ucr.edu/cybersecurity/ndaa/guidance">NDAA 889 Compliance Plan</a>, a notification will be sent annually of this requirement and UCR’s implementation of the requirements for contracts containing the Federal Acquisition Regulations (FAR)
implementing clauses and for federal assistance awards (grants and cooperative agreements).<o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%"><b>Federal Contracts
<o:p></o:p></b></p>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%">The Federal Acquisition Regulations (FAR)clauses 52.204-24 and 52.204-25 prohibits the federal government from contracting with an entity that simply uses “covered telecommunications equipment
or services” as a substantial or essential component of any system, or “covered telecommunications equipment or services” as “critical technology” as part of any system. This prohibition applies whether or not such equipment or services are used in the performance
of a government contract or part of contractual deliverables provided to the government.
<o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%">UCR as an awardee of extramural federal contracts has accepted FAR Clauses 52.204-24 and 52.204-25; and
<u>may not use any equipment made by</u> (1) Huawei Technologies Company Ltd., (2) ZTE Corporation, (3) Hytera Communications Corporation, (4) Dahua Technology Company Ltd., and (5) Hangzhou Hikvision Digital Technology Company Ltd., and their subsidiaries
or affiliates in UCR systems or research. This includes the use of personal phones/devices that connect with UC systems, including for multi-factor authentication purposes (e.g., DUO). Researchers should work with the campus ISOs or IT offices to find alternate
technologies or devices (e.g., UC provided dongles). <u> UCR includes such a statement on the Campus Award Notice (CAN) for federal contracts containing FAR Clause 52.204-25 as a reminder.<o:p></o:p></u></p>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%"><u>UCR prohibits the procurement of any equipment made by
</u>(1) Huawei Technologies Company Ltd., (2) ZTE Corporation, (3) Hytera Communications Corporation, (4) Dahua Technology Company Ltd., and (5) Hangzhou Hikvision Digital Technology Company Ltd., and their subsidiaries or affiliates.
<b>This procurement prohibition applies regardless of funding source.</b><o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%">Information Technology Solutions (ITS) will conduct regular reasonable inquiries to identify suspect devices and remove network access, as necessary. Departments will be responsible for the
replacement of necessary devices using authorized suppliers. <u><o:p></o:p></u></p>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%"><b>Federal Assistance Awards
<o:p></o:p></b></p>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%">Uniform Guidance 2 CFR 200.216 prohibits using federal funds to enter into, or renew, contracts for equipment, services, or systems that use “covered telecommunications” as a substantial or essential
component of any system, or as critical technology as part of any system. <o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%">The “covered telecommunications” equipment or services includes equipment produced by Huawei Technologies Company or ZTE Corporation and video surveillance and telecommunications equipment produced
by Hytera Communications Corporation, Hangzhou Hikvision Digital Technology Company, or Dahua Technology Company. It also includes equipment or services produced by any subsidiary or affiliate of such entities. The Secretary of Defense may also add entities
it reasonably believes to be an entity owned or controlled by, or otherwise connected to, the government of a covered foreign country.<o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%">UCR includes the following statement on the Campus Award Notice (CAN) for federal assistance awards:<o:p></o:p></p>
<p class="MsoNormal" style="line-height:105%">THIS FEDERAL ASSISTANCE AWARD CONTAINS A RESTRICTION ON THE USE OF THE AWARDED FUNDS TO PURCHASE EQUIPMENT, SERVICES, OR SYSTEMS<b>
</b>THAT USE ‘COVERED TELECOMMUNICATIONS’ (AS DEFINED IN THE AWARD) AS A SUBSTANTIAL OR ESSENTIAL COMPONENT OF ANY SYSTEM, OR AS A CRITICAL TECHNOLOGY AS PART OF ANY SYSTEM.<o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%"><b>Subcontractor/Vendor Contracts or Subawards
<o:p></o:p></b></p>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%"><a name="_Hlk109976904">Under both contracts and assistance awards, UC purchasing authorities and campus contracts/grants officers must flow down the requirements of FAR clauses 52.204-24 and
52.204-25, and 2 CFR 200.216, as applicable, in procurement contracts, subcontracts and subawards under federal contracts or federal assistance awards.
<o:p></o:p></a></p>
<span style="mso-bookmark:_Hlk109976904"></span>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%">Please contact the following offices with questions:<o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%"> ITS for existing device concerns:
<a href="mailto:infosecoffice@ucr.edu">infosecoffice@ucr.edu</a><o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%"> Procurement Services for new purchases:
<a href="mailto:purchasing@ucr.edu">purchasing@ucr.edu</a><o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%"> RED for other inquiries: contact the SPA Contract and Grant Officer for your department or
<a href="mailto:redalert@ucr.edu">redalert@ucr.edu</a><o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%"><o:p> </o:p></p>
<p class="MsoNormal" style="line-height:105%">Charles E. Greer, Jr. Bobbi McCracken<o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:105%">AVC Research Administration and Compliance AVC Business & Financial Services
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>