%PDF-1.6
%
2 0 obj
<>
endobj
75 0 obj
<>stream
2017-02-23T08:41:35-08:00
Canon
2017-02-23T08:41:59-08:00
2017-02-23T08:41:59-08:00
uuid:34180be4-dda1-4cdd-bc33-2c591fae1be2
uuid:e506f17b-132b-4621-ade3-ca7011de1a93
application/pdf
endstream
endobj
3 0 obj
<>
endobj
76 0 obj
<>
endobj
77 0 obj
<>
endobj
78 0 obj
<>
endobj
79 0 obj
<>
endobj
80 0 obj
<>
endobj
81 0 obj
<>
endobj
82 0 obj
<>
endobj
106 0 obj
<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI]/Subtype 115 0 R/XObject<>>>/Type/Page>>
endobj
107 0 obj
<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI]/Subtype 120 0 R/XObject<>>>/Type/Page>>
endobj
108 0 obj
<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI]/Subtype 125 0 R/XObject<>>>/Type/Page>>
endobj
109 0 obj
<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI]/Subtype 130 0 R/XObject<>>>/Type/Page>>
endobj
110 0 obj
<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI]/Subtype 135 0 R/XObject<>>>/Type/Page>>
endobj
135 0 obj
<>stream
(3) Additionally, it is incumbent upon the contractor to inform its officers and employees ofthe penalties for improper disclosure imposed by the Privacy Act of 1974,5 U.S.C. 552a.Specifically, 5 U.S.C. 552a(i)(1), which is made applicable to contractors by 5 U.S.C.552a(m)(1), provides that any officer or employee of a contractor, who by virtue of his/heremployment or official position, has possession of or access to agency records whichcontain individually identifiable information, the disclosure of which is prohibited by thePrivacy Act or regulations established thereunder, and who knowing that disclosure of thespecific material is prohibited, willfully discloses the material in any manner to any person oragency not entitled to receive it, shall be guilty of a misdemeanor and fined not more than$5,000.
(4) Granting a contractor access to FTI must be preceded by certifying that each individualunderstands the agency's security policy and procedures for safeguarding IRS information.Contractors must maintain their authorization to access FTI through annual recertification.The initial certification and recertification must be documented and placed in the agency'sfiles for review. As part of the certification and at least annually aftenruards, contractors mustbe advised of the provisions of lRCs 7431,7213, and7213A (see Exhibit 4, Sanctions forUnauthorized Disclosure, and Exhibit 5, Civil Damages for Unauthorized Disclosure). Thetraining provided before the initial certification and annually thereafter must also cover theincident response policy and procedure for reporting unauthorized disclosures and databreaches. (See Section 10) For both the initial certification and the annual certification, thecontractor must sign, either with ink or electronic signature, a confidentiality statementcertifying their understanding of the security requirements.
III. INSPECTION
The IRS and the Agency, with 24 hour notice, shall have the right to send its inspectors intothe offices and plants of the contractor to inspect facilities and operations performing anywork with FTI under this contract for compliance with requirements defined in IRSPublication 1075. The IRS' right of inspection shall include the use of manual and/orautomated scanning tools to perform compliance and vulnerability assessments ofinformation technology (lT) assets that access, store, process or transmit FTl. On the basisof such inspection, corrective actions may be required in cases where the contractor isfound to be noncompliant with contract safeguards.
Exhibit 7, IRS Publication 1075 (September 2015)
Attachment HPage 5 of 5
endstream
endobj
136 0 obj
<>/Filter/CCITTFaxDecode/Height 3363/Length 58208/Name/Obj194/Subtype/Image/Type/XObject/Width 2547>>stream
a֣էoU?G
fEB`c;˙
5Qa34ed"-vL&,>vM3fDi|w8'uRlPȡfj;?/5Kp@N TbkD\Pnk_Pjůo~B~PdaE B$G|qU::k,#1b@D00D.oZAjgLQlPD=4a/"._!%pZ4 `%nAzL&L ִw#Dg:#Z:,AyᑄC0k2pa6P@ @iD/ ӤӋCN.M?z} BajMiPAAz
]4ii}{~!!G,])9.D|#75xO
AŦk~iiMӮ
=A@+hEHuH
qȮ>r>ȸd0pA
hk\!:iզi_iwm5#"ũ2s#
J|}ahxAӤxA0i&{~﮿R7r$--LL.LS"qȽdJasAzoMSNz뮝~-E"[D\~.7
M
<'xM
xON_NO[wӾOZ]7_E8>AAO W=?=6zuo{a/PW"Wۄ]i&_U6\P*Z}zׯ-!qzuCE'/^\iq/߰{!Km
A_>55o_EX=_}~pmp~怿~_[O_#gtr_ɉhΞtF_o_$#$?_?ݝVOCN_ POUk=?}GZ$s_U_o_Zjڵk
+[IzMW8o}d7jkZ^zki_il0++__^Wm}k.J}=☨[~k:ViaKUQZll_J4]m/ wp_` 0/czk{_WZ۵m4L&j{
/AK?☯*?kum[m}4#
& l0V#`ӊw{o{Okii_A ݦaVa (p2Z>!_&5]4z4&iAhDCM"8ݯd]l&BG~MV5^Xa0wa4&2""Јڪ!4ݦNL&A@W@Rh=!a{M;M4&iŦ"""#8"""""""#XoI~Er+}xhv7Z4>Q4-hd3I6j"!FJt"6
3)BLh4@2U&vL SRʙ_VxienX5Bz~
?NMs!CLAKSjIE戜Dya;5䠬m'$98_7 ҽtЃc&=T}'A7=kkzޖ)mZ_~f{9GHly&GEYO?Y͙C$5͑_L ӆ3uN!"%dZHjltz<da3fB5M4OwӤk
5M=ftA0M04|Z=8M=5>.M5{]dWOԏ"0HL'ZNKir8{q#"Dw-L^Wx iu~w";a_M9ZxHȣ#ΉvGD|Џy]AA-mIp֗D^~>:ڑ,9;c"}Jd'!A 0?OO?UtMmWWTOWOᾞHx`@ n'Ai Uz>$OOOMN^~֭&KimizznM=z^S]uv?Ukn]{xt߱,_ȐLqu:=tu>Mֿ1QnFOK
K0?d*(H}WFAWq]_l_kБ~xW"B?!_{ k9H4??a]nXHz_AI/U
/_uDtO^Q~uz*C?Zm{_?V^T.WIh~ {)D]w/~-ZVkV_"u_ٶo-AuuI/INVM,&~oiu`mio봵Oӵ_mu{[m{)3l(AQQq7CKa;}]mom齵o]i5%p%6)6)6)iovuZ]V״l/
~a[k
+
Zwcb]ZkV/,0a.>X0wQLlSW~ӫmt5M0Cǧ턡a+إN=}czdWal*'
M5aTTV_{}VVL_4&:{|55i0 PgdQz5܃k_-.d+jL&A#MmtNA&L4
0!q߰Mmml za i'k aw `hDDDE!KM; wa@±B ϳ DFDDDEDGM a02"#DqK+4#ҜĨr5EB&23e@pd3h2֘B-tA0%l\z9Փgd lAKYܟi!9;f$!J.r MSAߪk[4ؤTAe`O0zȶ=L'nAc@=i&tւt!!t֒]7K[7& _H[?D_mBk1.xAzuT5d3 ΆtͲr͙9qmm%*q=sҞc:,P@ b(`0@B!h0@OjWf6FDQfȑNW:'"")DJS04Aih4ZNN/Ǻf(~r!RNMH0A;L
j&iqziF)D" B@'j u<'iŦTN./N-SM;M={IAӰja:i4V?MÑr-R#̎dnEu'D!@h448u_}[}ƚ#E"^D#ϒ:8`mBz~&a5u#4"D'K%< xM۠OO ;OoO!W"k
j?A7 ziIޞt0!S-.4G9 n?[}_UuN^W_^׆m'O~ޟqȸ֝/oK}&z^";DV|0t=?/}xAk?c~?ᄏ|}װпQxai?AM7tڊ:'w&ߢ??
?+둰a8kH/ֿ@O0x/SN?&>8_7__&B~w~]9VC}0F^ɊD.zG>Hȇl7_OH?["__(rG/Omrv'72A#鑯85GO߮۴o)>_OA
M7:uoյPӅIzq_oi뮗믯uֽ~uښMgCHҿ>-o뮶j_/a(a'aL3a.6)=oյI-oKVյᄡ]*)X>6*D[tE[nm&'iZ
#II
~*+*
ڧV
mo_DX4
6!aS$Cbӏ+bnk{kj
Oa0Xt☫bb_U]d0iԛA Ӄ
TS^W5=/Idxa22K0\& [MPih00L l"*6BM4Ԇ a;Mm>MU400A@飫!DDmSM~a;״ T&XM0Ŧ2D*h0N0DDqDDDRAiMVf]g߶'0X` DGDDDqctA^̋Vt鴫ZOBh_4a
5E 0b2qY.ȜKaW#\V2N-ݐrrʪ Cbtki"AA
U5_a\<#6H=SkzB-/EaHtNjv6O_\PToRtJU3"y$2q`BG'E&0}UErՒ4Q6d(*8Fȝf`!,4 C@h0!oo
S;"*~$gD}gFPqA1!ANB٠3
vM4A4=0 ӏi.v&ΑH4S&IHDCd YM3K'av`@0@aaaaq=~4Ju<4&F=ȜpM0@p0Aa!9h]Aa8A ӋX~jDp&h>0Aa:Azh;8N4/MwZuwuȃa"\|A"ii|\iRkŧIۤ[z}&mH,QG6JdvWVGm龞: Ǜ1J-6;j_d,-4DwH2$y?GGd p*mxBO=7Mӽ?z@ >=!Wu\"?șn|'B20a zNHnnt&zIo*~K\CE"o{$pN So;NtoONTߵtt:NzMoznI+~K^?>?Z_rM?}o]OT֯[^OOت*]{G\kUֽo9.0Szn_^\|-/}[uzm!_v9Q|wJ6Ƀ
F.>H_L?ۯHu|rbOD-KȠմA ]~X;C]u鲋ZӒ߿_AC_Ha?}Nڅ_k!A߯%-b/i)?]_.߮W뿧diZN[/_v?ߺxkKOI6/uiujzVK$uk°_K^/i~jnkivJVl#-":.)
k6)i_kڱi _V`OqlS6)UojKa CX80}TV,WUDZOU[[SO^q0ڭ`ͅl'qW\llv8
4Ml=d?Q&PM-i.M'mt馺MBյOiz5akq4yAgb"%%_:C:g"!2 "0`!BhN&xL'|; LWȈ"rflGHf:!*#b!!C!u"hBBQ
0A
0L
0Aa8ihiQzqɸ8g̍bG 2LRBXd'@`$@a4h4
00xAƃ iIoiJ'rl,!DlgL4A
@ L м&A
4q-4iM=8wm&}5i#DW[~K|.aa;Aqz}}wi'"c"neD^-}1>wP/pA>
xN.ޢ;Ӥޓ>B=mC;[DH;ctE,H9hpA7A=<'(A'Zwzzƞ,Ys\D| E'H2/aAȘpA
nAOTt7M;NZON?T9;DXȸD%D|eX-oIAAtvttT=tWMm$Xiwkǖ?S
L'ASO6O]uI]^ڦ
Z_}.I;MtO]^Om}uWOmcczق6B$qum*_5"
`ȐO8k&]47?O!Aq1Zt^*@}@ar
6/^ih[+mak&_`65o
t
!o"H
{~H7WACao9CDk-?2u3P/O 7[oo{`hrVrA엁_}
JOV}m}}u6/k76M}___մ[[_[nz=~!ZWk}zWWWھڶ¶__/յ_^mmo^¶Vն,0p/**=?k|u^+^K
&JM.FFWM5;_.կkkKUlVKqE1\W״M5n״M5U__^ȵbkZmM;Nml;a4M;R D^M4"EUXV)XkiAǵ&:iiml-L&i 8aa4h0XM kalIi5A0Ma*
ˢ!f e`'!DDDDFci ;L5v0@L@ e/D&B""""""(5a{a;
j)@ͪ,DZ""8ްk `G%#Sm.++"_l/4Z=ml G ڐg$L!I
]#"M3De"vhgMS?NwiITemdR썙4iӿ^Y+#M4v*T/Ӵ&]zv?ZIV^D5=}~ݯv>5Gww5F3 לe!2`gQ8gL2HgNdH#"s'dHȫfqFf&laFvYcia QSTuͳ 3:gٚF<5
5L&D/@ݧ=L Aڄ0،,>:?6qP)"8A^ZDNP"ivL0 i
l hOL xAqk_ihqo\Zɹu4L6( naH3WM0D=/kai
;NxAjq vL&iM7ӋZMB¦ ED̎~;
z zxA^
ouODGrw#BE|u"Amr.Gy 0R.d<}
(Ami>n~MZ]4"%,9p pAڄ 7 ~ozIt#py<?uP KH<'OM7z]6U~o}.ku mA|?O7MU{c^[/a1ǧ~^~O]}?w_H~M>㮶o_>^?]>+ߐHkt_o~":o{?`k@4?7_9!j_h_
B]_7^HA.P|~j/2봿BE:kk$?[>뮈\_#?@!ߠۿ7[[⿵?wd;]w!__Nvumnmm'a_m:UVmmv҇cc//KkҵVakGMZuߵ[Uհap/Nl|q\qL{]:[mal+f\28V*=n.+︯w>?m5_[
2|0GXv ۷~Ml&!cL&oU'
mlֺa45NAcq[ kAiXa4|4MSOM0aP``i@2zq \k 4{Ma4`0!ae.DDDGvzӰ0AM;T`@5M4-B"
.!ҴjTM4&!!B
?&DCB""""""""rБtW0!h0#j~@eXImd)qK;Aj*dm,$iw>ʚS-ȑAwޞIy7;KieVDRl6&*#mBW;~_z_WK절 ͑<Z?9}!Ds3Ng2'.N!"a;@0 ny3Fyft2*)Dx
:Da0!&AhA=@}Aha4?isZ? :6<463CX"j4".0Aaݮ=m0a
tz
tziOOΨIr )#Vlfbm2;
0=Ba=t L'za4XCOJ-?^-xUvl4CX4"4MB]< 0
<'iڠ?bյҵ_]~ Dyrs"GM=B~&~ZiW תt"~$dpR(-)2b\tG0m<& &ONOӴMoZ_QdWH.P@6zJ< v:A
U=_NtOO7M^DD[rYD|Hȼ"0Ph{'xACO ;iҮzI}[U