�г��ٸ���Ƶ

Introduction

Last modified: August 7, 2019

The �г��ٸ���Ƶ System of Georgia (�г��ٸ���Ƶ) operates in a complex purchasing environment. It is governed by laws of the state of Georgia, policies of the Board of Regents, regulations of the Georgia Department of Administrative Services (DOAS), regulations of the Georgia Technology Authority (GTA), and regulations of the Office of the State Treasurer (OST).

Rules and regulations for purchasing of all other items as prescribed by DOAS, GTA, and BOR policy are contained in this section. The GTA regulations govern all procurements related to information technology, hardware, software, and consulting services. The state Department of Administrative Services governs all other procurements except as exempted by state law, such as library books, medical equipment and supplies, and perishable items, as noted in the Official Code of Georgia Annotated (O.C.G.A.), sections 50-5-50 through 50-5-81. These rules and regulations govern purchases from all funds except Custodial funds as noted in the BOR Policy Manual Section 7.7.1, Purchasing and Contracting Regulations/General Policy.

3.1 Purchase Requisitions/Orders

Last modified: July 9, 2020

When a need is determined for goods and/or services, a purchase requisition is submitted primarily electronically and on rare occasion by a paper requisition to the Institution�г��ٸ���Ƶ�s Purchasing Department. Agency budget managers must review and approve requisitions prior to submission allowing the Institution purchasing department to take action on their behalf.

The State Accounting Office (SAO) provides guidance to state entities on when a purchase order is expected in the procurement of goods and services. A purchase order is required for all purchases of goods and services more than $2,500 except for certain types of purchases specified in this Accounting update. For additional detail, see the State Accounting Office’s .

Purchase orders must contain an authorized signature, correct payment and delivery terms, and the appropriate “purchase type” codes and commodity codes as prescribed in the . In addition, all PO line descriptions must clearly identify what is being purchased (using quote, manufacturer, or item number alone are not acceptable).

3.1.1 Cost Limits and Related Processing Rules

Last modified: June 13, 2019

1. Procurements under $25,000 do not have to be competitively procured. However, it is best practice to obtain three quotes when possible to ensure pricing is competitive.

2. Purchase over $25,000.00 unless exempt must be competitively bid. Competitive bids are conducted when other means of procurement, such as state or entity contracts are not available.

3. Request for Quotes (RFQs) are used when the goods or services can be clearly specified and is awarded to the lowest responsive and responsible bidder.

4. Request for Proposals (RFPs) are used primarily for complex purchases, primarily services. The RFP process allows suppliers to propose their own comprehensive and innovative solution to the state�г��ٸ���Ƶ�s needs described in the RFP. The RFP seeks to identify the “best value” for the state by using a combination of technical and cost factors to evaluate suppliers�г��ٸ���Ƶ� proposals.

5. Procurement personnel conducting solicitations should be trained and certified by State Purchasing Division (SPD). Institution Procurement Officers (CUPO) must follow the guidelines for certification outlined in the .

6. Unless State Purchasing Division (SPD) has granted delegated purchasing authority to the institution to make the RFP certification on its own, or to use the Fast Track RFP Process, as detailed in of the GPM, the institution must submit a written request and justification to SPD.

7. Prior to using the RFP process to establish a contract, the state must certify in writing that the use of competitive sealed bidding (i.e., the RFQ process) will not be practicable or advantageous to the state . Standard RFP certification language is included in all SPD RFP templates.

8. Each institution has a Delegated Purchasing Authority (DPA) limit, designated by SPD. For procurement actions expected to exceed the institutional limit, SPD must publish the required notices and manage the RFP process. In certain circumstances with prior approval, SPD will allow the institution to manage the solicitation process when the expected result exceeds the institutional limit, subject to review by SPD. The CUPO is responsible for ensuring the state entity does not exceed its DPA and that all conditions of the DPA are met.

   Note: These limits do not apply to construction or public works contracts.

   Purchases for services greater than $2,499.99 must have a notarized immigration affidavit prior to contract execution or issuance of a Purchase Order. Suppliers and state entities shall comply with the requirements of . Additional information regarding Immigration and Security Compliance can be found on the website.

9. Multi-year contracts are permitted, up to a maximum of five (5) years, as long as there is no commitment of debt by the institution. Exceptions to the five years must be approved in advance by SPD and the �г��ٸ���Ƶ System Office.

   An example would be a food services contract with a third party supplier. See Section 3.4.2, Dining and Catering Contracts in this manual for additional requirements.

10. Every contract must have clauses that allow the institution to cancel the contract for cause and/or financial exigency.

---

3.1.2 Exemptions from the Competitive Procurement Procedure

Last modified: June 20, 2019

The State Purchasing Division (SPD) has established a list of goods/services which are either exempt from the State Purchasing Act or represent goods for which SPD has waived the competitive bidding requirements (see the on ). SPD may update this list from time to time by posting a new version of the list. It is always a best practice to view the NIGP Exempt List online for up to-date exempt NIGP Codes. Additional information about NIGP Codes and Exemptions are located at

3.1.2.1 �г��ٸ���Ƶ System Service Level Agreements

Since competitive procurement procedures apply to agreements with external vendors or contractors, �г��ٸ���Ƶ System of Georgia (�г��ٸ���Ƶ) institutions and the �г��ٸ���Ƶ System Office (USO) are exempted from these procedures when purchasing goods and services within the �г��ٸ���Ƶ. Intra �г��ٸ���Ƶ purchases of services shall be addressed through a simplified agreement Service Level Agreement written in plain language that describes: (1) Purpose of the agreement; (2) Nature of the services provided; (3) Nature of the financial consideration being provided in exchange for the services provided; and (4) Billing method and required billing documentation. Additional components may be added to the agreement; however, every effort should be made to minimize unnecessary or irrelevant additions. For example, it would be unnecessary to require one �г��ٸ���Ƶ institution to provide another �г��ٸ���Ƶ institution with copies of audited financial statements or budgets.

�г��ٸ���Ƶ institutions should update their contracting, procurement and accounts payable policies and procedures to comply with this BPM revision. Agreements should only be signed by those with delegated authority to sign contracts, which, as a matter of course, do not require legal review.

3.1.2.2 Sole Source Procurements

DOAS policy permits sole source procurements. Research must be conducted and documented to identify other sources and justification of any excess cost. See the Section 2.3.2, Sole Source Purchases, including Subsections 2.3.2.1 Justifying Sole Source Purchases and 2.3.2.2 Conducting Sole Source Purchases, for additional information regarding sole source procurement.

Some examples of when a sole source could be acceptable are:

1. When only the proposed source can furnish the services because of its previous BOR experience and having an alternative source duplicating these capabilities would result in excess cost.
2. When only one supplier can satisfy the technical requirements because of unique technical competence or expertise.
3. When the item does not satisfy the requirements for sole source, but the use of any other manufacturer would result in excessive costs.
4. When only one source possesses the patent(s) or exclusive right(s) to manufacture or to furnish the item or service.

3.1.2.3 Technology Procurements

Authority for processing technology procurements is assigned to the Georgia Technology Authority (GTA) through the . In the same chapter , the �г��ٸ���Ƶ is specified as being exempt from this legislation. The establishment of the GTA intersected with the authority of the Department of Administrative Services (DOAS), which resulted in a memorandum of understanding between the GTA, DOAS, and the �г��ٸ���Ƶ in 2007 granting delegated authority, with some constraints, for technology procurements to the Board of Regents of the �г��ٸ���Ƶ System of Georgia. Section 10.1, General Policy on Information Technology of the BOR Policy Manual delegates authority from the Board of Regents to the �г��ٸ���Ƶ VC/CIO to approve �г��ٸ���Ƶ technology procurements on their behalf. Section 10.3.1, Delegation of Project Authorization Authority authorizes the �г��ٸ���Ƶ VC/CIO to further delegate approval authority to institution presidents or their designee(s). This section of the Business Procedures Manual implements this BOR policy.

Spending Limits

The �г��ٸ���Ƶ VC/CIO delegates approval authority for individual IT purchases according to the following limits:

1. $500,000: Georgia Institute of Technology, Augusta �г��ٸ���Ƶ, Georgia State �г��ٸ���Ƶ and the �г��ٸ���Ƶ of Georgia.

2. $250,000: Columbus State �г��ٸ���Ƶ, �г��ٸ���Ƶ of North Georgia, Georgia Southern �г��ٸ���Ƶ, Kennesaw State �г��ٸ���Ƶ, �г��ٸ���Ƶ of West Georgia and Valdosta State �г��ٸ���Ƶ

3. $100,000: All other �г��ٸ���Ƶ organizations.

IT Procurement Policies

1. Information Technology is defined in the �г��ٸ���Ƶ IT Handbook located on the �г��ٸ���Ƶ Information Technology Services website.

2. Procurement of technology-related goods and services should follow the relevant BPM procedures.

3. Authorization is not required for activities that are part of normal maintenance of an existing system.

4. Any purchase of software that necessitates an inbound data interface with any hosted or centrally supported �г��ٸ���Ƶ enterprise application must be approved by the �г��ٸ���Ƶ VC/CIO.

5. Purchases for goods or services that are likely to have a significant impact on the wide area network bandwidth allocated to the institution should be carefully planned with the �г��ٸ���Ƶ VC/CIO.

6. Externally approved, grant-funded technology purchases that do not interact with �г��ٸ���Ƶ enterprise applications or �г��ٸ���Ƶ enterprise networks may be approved by the institution president or his or her designee for IT purchases.

7. Institutions may not divide large purchases into smaller packages to avoid the need for �г��ٸ���Ƶ approval. Individual purchases that are below these amounts, but are part of a larger initiative that will eventually exceed these amounts, shall also require written �г��ٸ���Ƶ VC/CIO approval; e.g., purchases of computers for various lab locations on a campus even if the purchases are for different buildings and from multiple fund sources.

8. �г��ٸ���Ƶ VC/CIO approval of IT requests will expire one year after being granted.

9. If there is a revised cost estimate to a previously approved IT procurement request and that estimate increases by more than 10%, a new IT procurement approval must be obtained.

10. Purchases over $1 million will require a business case to be submitted for review and approval.

3.1.2.4 Professional and Personnel Services

Professional services and personnel services do not have to go through the competitive procurement process, but the definitions of professional services and personnel services are very limited.

Professional services are defined by as follows:

Profession means the profession of certified public accountancy, architecture, chiropractic, dentistry, professional engineering, land surveying, law, psychology, medicine and surgery, optometry, osteopathy, podiatry, veterinary medicine, registered professional nursing, or harbor piloting.

Generally, professionals that are certified in their fields can be hired non-competitively to do work in the certified field for which they are specifically licensed. Examples include:

• A CPA may be hired to provide accounting services, but not management consulting without a competitive process.
• An architect may be hired to design a building, but may not develop a campus plan without a competitive process.

Payments to professionals should be charged to the appropriate fee and per diem accounts.

Personnel employment services are those services rendered by a person who works full-time or part-time for and under the control of the state and receives compensation as a salary in direct payment from a department, agency, or institution of state government; e.g., work performed by BOR employees.

---

3.1.3 Background Checks of Supplier Employees

Last modified: November 4, 2020

As required by Board of Regents�г��ٸ���Ƶ� Policy 7.7.5.1 - Background Check Requirements for Selected Suppliers, �г��ٸ���Ƶ System of Georgia (�г��ٸ���Ƶ) institutions shall review and assess the risk of services provided to the institution by a supplier when the services require regular interaction with students, employees, monies, sensitive/confidential data, or regular access to secured facilities containing critical institutional-level infrastructure. In instances when the institution determines that the scope of work being performed by a supplier�г��ٸ���Ƶ�s employee is such that a background check should be required, the institution must seek appropriate contractual protections, including requiring the supplier to obtain appropriate background checks for all such supplier employees. This provision does not apply to construction contractors and subcontractors, which are covered by Board of Regents�г��ٸ���Ƶ� Policy 7.7.5.2. Examples of services requiring �г��ٸ���Ƶ�regular interaction,�г��ٸ���Ƶ� as anticipated by Board of Regents�г��ٸ���Ƶ� Policy 7.7.5.1 and this BPM Provision, may include the following situations that could reasonably occur; however, in each case, the assessment of risk must be an integral part of the evaluation process:

�г��ٸ���Ƶ� Supplier services are provided in an area where children, students, or employees have access and are likely to be present at the same time. This might include summer camps, housing, dining, classroom, office, or recreational facilities.

�г��ٸ���Ƶ� Supplier services are provided in an area where funds, credit card machines, or banking information is maintained, such as in a campus Bursar�г��ٸ���Ƶ�s office, Bookstore or other Auxiliary retail outlet.

�г��ٸ���Ƶ� Supplier services require direct access to any personally identifiable, health, banking, or credit card information, such as in a call center.

�г��ٸ���Ƶ� Supplier services require access to secured facilities containing critical infrastructure, such as a data center containing the institution�г��ٸ���Ƶ�s servers and other vital information technology equipment.

Suppliers maintain full responsibility for the actions of their employees and will be fully responsible for enforcing and implementing an appropriate background check requirement which conforms to State, Federal, Local and �г��ٸ���Ƶ Guidelines. The vendor will review the results of the background check. The institution should not obtain the results of these checks. If appropriate, the requirement for a supplier to conduct background checks on its employees and defend, indemnify, and hold harmless the institution for the actions of supplier employees must be specified in the contract for services.

�г��ٸ���Ƶ institutions shall develop procedures to ensure that the supplier employee background check requirement under Board of Regents�г��ٸ���Ƶ� Policy 7.7.5.1 is considered during the contracting process for each contract and implement the procedures beginning January 1, 2021, and forward. Although other procedures may be implemented to meet this requirement, Appendix I illustrates a contract routing form that both meets and documents this consideration during the contracting process. Review of the routing form by Legal or other persons responsible for review of contracts will alert the need for the appropriate background check and indemnification contract language. See Appendix II for suggested contract language.

The renewal forms for these contracts shall include attestation language that the background check requirement for the previous year was met as a requirement for renewal. See Appendix III for an example of a contract renewal form with the background check compliance language.

Attachments:
Appendix I - Contract Routing Form
Appendix II - Suggested Contract Language
Appendix III - SPD-CP010 Contract Renewal Form

---

3.1.4 Federal Procurement Requirements

Last modified: June 20, 2019

In accordance with the Uniform Guidance issued by the Office of Management and Budget (OMB), purchases funded by Federal grant funds must adhere to regulations found in 2 CFR 200 Uniform Guidance as a condition of receiving funds and to meet annual audit compliance. All �г��ٸ���Ƶ System of Georgia institutions must implement the new procurement guidelines for all Federal purchases made under federal research grants, agreements and contracts effective July 1, 2018. Please note there is potential for an institution to be granted a waiver to portions of the Uniform Guidance from the applicable Federal Granting Agency. Federal waiver documentation must be maintained by the �г��ٸ���Ƶ Institution.

The �г��ٸ���Ƶ promotes objectivity in College/�г��ٸ���Ƶ research by establishing processes that provide a reasonable expectation that the design, conduct, and reporting of sponsored research is free from bias resulting from financial conflicts of interest of the College/�г��ٸ���Ƶ employee involved in the research.

3.1.4.1 Code of Conduct and Conflict of Interest

�г��ٸ���Ƶ institutions must maintain written standards of conduct covering conflicts of interest and governing the actions of its employees engaged in the selection, award and administration of contracts. No employee or agent of �г��ٸ���Ƶ may participate in the selection, award, or administration of a contract funded by federal grant dollars if he or she has an actual or apparent conflict of interest.

A �г��ٸ���Ƶ�Conflict of Interest�г��ٸ���Ƶ� exists whenever personal, professional, commercial, or financial interests or activities outside of the College/�г��ٸ���Ƶ have the possibility (either in actuality or in appearance) of influencing a College/�г��ٸ���Ƶ employee�г��ٸ���Ƶ�s decision or behavior with respect to teaching and student affairs, appointments and promotions, uses of College/�г��ٸ���Ƶ resources, procurement and business transactions, or other matters of interest to the College/�г��ٸ���Ƶ or of biasing the design, conduct or reporting of College/�г��ٸ���Ƶ research. An essential step in addressing a Conflict of Interest is for the College/�г��ٸ���Ƶ employee involved to make full disclosure of relevant information related to any actual or potential conflict of interest so that interested parties inside and outside of the College/�г��ٸ���Ƶ may evaluate such information. The BOR Policy Manual contains the �г��ٸ���Ƶ Ethics Policy and outlines Code of Conduct and Conflict of Interest/Commitment requirements. This information is located at: 8.2.18 Personnel Conduct

The �г��ٸ���Ƶ Business Procedures Manual provides information on Reporting Wrongdoing at: 16.4 Reporting Wrongdoing

3.1.4.2 Federal Funds Procurement Types

1. Micro-purchases - the acquisition of supplies or services, the aggregate dollar amount of which does not exceed $10,000.
2. Small purchase - the acquisition of supplies, services or equipment in the range of $10,001 to $150,000.
3. Sealed bids - For acquisitions costing more than $150,000, bids are publicly solicited and a firm fixed price contract is awarded to the responsible bidder whose bid is the lowest price.
4. Competitive proposals - For acquisitions costing more than $150,000, conducted with more than one source submitting an offer, and either a fixed price or cost-reimbursement type contract is awarded. Contracts must be awarded to the responsible firm whose proposal is most advantageous to the program with price and other factors considered.
5. Noncompetitive proposals - procurement through solicitation of a proposal from only one source. A waiver must be granted by submitting the . Sole Source justification may be used when a procured item or service is only available from a single source, during a public emergency, approved by Federal agency, or when competition is deemed inadequate after solicitation from a number of sources.

All five procurement types must comply with the Procurement Standards in 2 CFR 200 Uniform Guidance Section 200.318, which can be summarized generally as follows: (1) the purchase complies with the non-Federal entity�г��ٸ���Ƶ�s documented procedures in place, (2) purchases are necessary, (3) open competition (to the extent required by each method), (4) conflict of interest policy and (5) proper documentation for the purchases.

3.1.4.3 Procurement Procedures

Federal and /or private grant funds are not exempt from the State Purchasing Act. The rules of competitive bidding still apply and institutions must follow the order of precedence outline in the Georgia Procurement Manual.

Purchases less than $10,000 (Micro-purchase)

The buyer/requester should identify potential suppliers. When possible, Statewide Contracts should be used.

Note: Installment payments less than $10,000 towards a total purchase price greater than $10,000 does not count as micro purchases. The total dollar amount of purchase must be considered. Purchases should not be split to circumvent procurement requirements.

Purchases between $10,001 and $24,999 (Small purchase)

A minimum of two (2) price quotes must be obtained and be the basis for supplier selection prior to making a purchase. Documentation needs to be in writing from the suppliers and can include screen shots from websites, copies of published price lists and advertised pricing in established magazines or journals. When possible, buyers/requesters should use Statewide Contracts. When State-wide Contracts are used, two price quotes are not required.

Purchases between $25,000 and $150,000

Bids will need to be posted to the Georgia Procurement Registry per the guidelines below. Goods and services classified by DOAS as statutory exemptions will follow the Uniform Guidance (UG) requirements for Small Purchases.

Public Posting Guidelines
If the Estimated Contract Value is�г��ٸ���Ƶ�	Then, the Posting Period is�г��ٸ���Ƶ�
$25,000 - $99,999.99	Minimum of Three (3) Business Days
$100,000 - $249,999.99 (UG $150,000 or more requires sealed Bid)	Minimum of Five (5) Business Days
$250,000 or more	Minimum of Fifteen (15) Calendar Days

Purchases $250,000 or greater

The institution will follow the State Purchasing Division competitive bid requirements outline in the .

Sole Source Purchases

There may be times when competitive bids are not appropriate and the requirement for obtaining them may be waived. Failing to anticipate needs resulting from poor planning is not an exception to competitive requirements. For an exception to be valid, a clear statement of justification for waiving the competitive bidding process must be submitted in writing for approval by completing the .

Note: The Sole Source form is not required for procurements $10,000 or less or for DOAS statutory exemptions.

Situations that would justify purchases without the competitive bid process are:

• The supplier is obviously a sole source for the item. Examples:
• The item is available only from a single source
• Artwork
• Unusual and generally unavailable used equipment
• Specialized scientific equipment and instruments
• A specialized service (e.g. consultant) where the supplier has a one-of-a-kind ability to provide the required service due to demonstrably unique circumstances (knowledge, contacts, experience)
• Continuation of a current service where changing suppliers could result in excessive cost
• The federal awarding agency or pass-through entity expressly authorizes noncompetitive proposals in response to a written request from the non-Federal entity; or
• After solicitation of a number of sources, competition is determined inadequate.
• The item will be physically connected to existing equipment or the purchase is an upgrade to existing equipment/software.
• The public urgency or emergency for the requirement will not permit a delay resulting from competitive solicitation. Examples:
• Human life, health or �г��ٸ���Ƶ property is in jeopardy
• Repairs are immediately needed for equipment where delay would lead to higher expense.
• Subcontracts whereby the agreement to work with another individual or institution was written into the grant award.

3.1.4.4 Contract Provisions

Institution contracts funded with Federal Funds must contain the applicable provisions described in the Uniform Administration Requirements in Appendix II to Part 200- Contract Provision for non-Federal Contracts under Federal Award. Additionally, all contracts must address administrative, contractual or legal remedies for violations or breaches with appropriate penalties and/or sanctions, and the contract must address termination for cause and convenience with the manner of exercising these provisions.

For contracts in excess of $100,000 using federal dollars, the contract must contain the following provisions:

Applicable for bids/awards with federal dollars exceeding $100,000:

Byrd Anti-Lobbying Amendment. Pursuant to 22 CFR Part 227, Contractor agrees to: (a) sign and submit to the BOR (i) upon signing of this Agreement, the required certification that it has not used and will not use federal appropriated funds to influence various government officials in making certain federal awards, using the “Certification Regarding Lobbying” form, and (ii) the “Disclosure of Lobbying Activities Form”, if it uses or has agreed to use funds other than federal appropriated funds for this purpose; (b) sign and submit to IAVI at the end of each calendar quarter the Standard Form LLL, Disclosure of Lobbying Activities Form, if (i) it uses or has agreed to use funds other than federal appropriated funds and/or (ii) an event occurs that materially affects (as defined in 22 CFR Part 227) the accuracy of any information contained in any Disclosure Form previously submitted by the Contractor to IAVI. This provision must be included in all contracts, subcontracts or sub-awards exceeding $100,000 awarded hereunder.

---

3.2 Vehicles

Last modified: June 20, 2019

Procurement, utilization of, and disposition of motor vehicles is subject to regulation by DOAS and OPB Policy Memorandum #10, �г��ٸ���Ƶ�Rules, Regulations and Procedures Governing the Use and Assignment of Motor Vehicles, Purchase, Operation and Disposal of Motor Vehicles and Associated Record-keeping�г��ٸ���Ƶ�. Generally, this OPB policy provides major provisions associated with the following:

1. Vehicle Assignments �г��ٸ���Ƶ� Individual Assignments and Institution Pool Vehicles

2. Record Keeping Requirements

3. Acquisition of Motor Vehicles including disposals and transfers

4. Registration and Licensing

5. Physical Identification

6. Maintenance and Repairs

7. Fueling

A copy of OPB Policy Memorandum #10 can be located at .

Note:

Normally, only new vehicles may be purchased. DOAS has authority to grant permission to purchase used vehicles or to enter into lease agreements for vehicles, but the institution must provide justification if seeking such permission. All vehicles must be ordered using DOAS statewide contracts.

The transfer of vehicles between �г��ٸ���Ƶ institutions is allowed with the proper inventory transfer records maintained since the entire university system operates like one state agency. If an institution desires to transfer a vehicle to an agency outside of the �г��ٸ���Ƶ, then the institution must submit a State Surplus Property Transfer form and invoice via DOAS for approval.

3.2.1 Vehicle Allowances

Last modified: September 5, 2017

Cash vehicle allowances are always taxable. The recipient may be allowed to deduct expenses for business use of his/her vehicle on their personal tax return. No amounts included in income will be treated as salary for retirement system purposes.

---

3.3 Purchasing Cards

Last modified: June 20, 2019

The State of Georgia Purchasing Card (P�г��ٸ���Ƶ�Card) program streamlines payments for goods and services for State business use by eliminating the administrative burdens and costs associated with traditional methods of payment. Per the State Accounting Office and the , the P�г��ٸ���Ƶ�Card may be used as the method of payment for unplanned, non�г��ٸ���Ƶ�routine, or urgent point of sale purchases under $1,000 and for purchases under $5,000 that are pre-approved and go through the requisition process or pre-approvals prior to completing the purchase. Point of sale transactions include purchases made at a physical store, in person, online, or over the phone.

Each �г��ٸ���Ƶ institution is responsible for establishing proper internal controls over all areas of the P-Card program. The objectives of proper internal controls include:

• Ensure compliance with applicable laws, rules, regulations, and policies.
• Safeguard the assets of the institution from fraud, waste, and abuse.
• Provide for the effective and efficient administration of the P-Card program so as to support the educational objectives of the institution.

The responsibility for effective internal controls ultimately rests with institution leadership. However, it is expected that institution leadership will delegate aspects of P-Card program management and assessment to various offices and employees on campus to include the Purchasing office, P-Card program administrators, internal audit, P-Card approving officials, P-Card cardholders, supervisors, etc. Responsibility for individual purchases rests with the individual cardholder making the purchase and the official that approves the purchase.

The �г��ٸ���Ƶ System is requiring institutions using the P-Card program to establish controls designed to meet the objectives outlined in the State P-Card Policy. Sections 3.3.6 through 3.3.8 of this manual provide a list of specific policies, procedures, and other requirements that each institution must incorporate as controls in its institutional policies. Additionally, each institution shall implement additional controls as needed to ensure compliance with the P-Card program objectives.

This section of the BPM provides the basic guidelines of the P-Card program as provided by DOAS/OPB. As outlined in Section 3.3.3.3, each �г��ٸ���Ƶ Institution developed a P-card Plan which was approved by DOAS/OPB. Specific exceptions to the basic P-card program guidelines must be approved by DOAS/OPB based on specific business case/needs submitted by the individual �г��ٸ���Ƶ institution. One time or P-card Plan approved exemptions supersede any requirements outlined in this section. Documentation to support exceptions must be maintained by each �г��ٸ���Ƶ institution.

Note: The P�г��ٸ���Ƶ�Card Program is the only charge card program authorized for use by the �г��ٸ���Ƶ System of Georgia.

All official forms mentioned in this Policy are on the State Purchasing Division (SPD) website:
. The versions on the website will always be the latest versions.

3.3.1 Authorized Uses of Purchasing Cards

Last modified: June 21, 2019

All purchases made through the P-Card program must be for official State business. Internal policies governing use of the accounts can be more, but not less, restrictive than the .

Only the employee whose name appears on the face of the card is authorized to initiate transactions with the card. Use of card by any other person, even if the purchase is for legitimate State business, is considered misuse of the card. Each �г��ٸ���Ƶ institution must define allowable and prohibited purchases in their internal purchasing card policy.

• If a �г��ٸ���Ƶ institution wishes to impose additional restrictions or prohibitions, then the Institution must define these additional restrictions in the Institution�г��ٸ���Ƶ�s policy.
• Whenever a �г��ٸ���Ƶ Institution�г��ٸ���Ƶ�s policy is more restrictive than the �г��ٸ���Ƶ or Statewide Purchasing Card Policy, then the �г��ٸ���Ƶ Institution�г��ٸ���Ƶ�s policy takes precedence.
• �г��ٸ���Ƶ Institutions cannot allow purchases that are prohibited by the �г��ٸ���Ƶ or Statewide Purchasing Card Policy.

3.3.1.1 Allowable Purchases

The P�г��ٸ���Ƶ�Card can be used for official purchases of supplies, materials, equipment or services where not otherwise prohibited or restricted. All purchases must be within assigned spending limits per the institution�г��ٸ���Ƶ�s approved P-Card plan unless prior written approval from DOAS is received to exceed those limits. Allowable purchases include:

1. Goods and services used in the furtherance of a �г��ٸ���Ƶ institution�г��ٸ���Ƶ�s mission.

2. Purchases of goods or services intended for official State of Georgia work�г��ٸ���Ƶ�related use that are not otherwise excluded by the Section 3.3.2, Prohibited Uses of Purchasing Card of this manual.

3.3.1.2 Allowable Purchases �г��ٸ���Ƶ� Restrictions Apply

1. Travel�г��ٸ���Ƶ�Related Expenses �г��ٸ���Ƶ� �г��ٸ���Ƶ Employees
   �г��ٸ���Ƶ employees traveling on official State business as defined in the State Travel Regulations published by the State Accounting Office and the Office of Planning and Budget may use the Purchasing Card for:
   a. Transportation - When the mode of transportation is a vehicle rental, the rental must be from one of the Mandatory Statewide Contracts unless approved using the Waiver from Statewide Contract process defined in Section 1.3.1.1 of the b. Parking
2. Travel�г��ٸ���Ƶ�Related Expenses �г��ٸ���Ƶ� Non�г��ٸ���Ƶ�State Employees
   Cardholders may use the Purchasing Card for students travelling on official school business, clients of �г��ٸ���Ƶ Institution, and the general public when participating in an official State program or other activity for:
   i. All types of transportation when this transportation is needed in the fulfillment of the �г��ٸ���Ƶ Institution�г��ٸ���Ƶ�s mission.
   ii. Lodging and meals for students and for clients of a �г��ٸ���Ƶ Institution needed in the fulfillment of the �г��ٸ���Ƶ Institution�г��ٸ���Ƶ�s mission.
3. Equipment
   Use of the P�г��ٸ���Ƶ�Card for equipment is governed by the State Accounting Office policies on Capital Assets. �г��ٸ���Ƶ Institutions may impose additional restrictions. �г��ٸ���Ƶ Institutions are limited to single units with a cost under $3,000 per unit, including freight, and the transaction must comply with single transaction spending limits as outlined by State Policy.
4. Vehicle�г��ٸ���Ƶ�Related Transactions
   Car washes are permitted provided the Institution allows this type of purchase in the internal policy.
5. Software, Data Plans, and �г��ٸ���Ƶ�Apps �г��ٸ���Ƶ�
   Software, unless prohibited by the Institution�г��ٸ���Ƶ�s internal policy, can be purchased for only State-issued computers, smart phones and tablets.
6. Food or Meals
   a. Food provided for consumption at events or services provided to the general public, state benefit recipients and/or state program participants, or purchased for resale in gift shops, bookstores, or similar venues, and other non�г��ٸ���Ƶ�employee meal related use.
   b. Non�г��ٸ���Ƶ�travel related meals for State employees that meet the State Accounting Office definition of group meals. See BPM Section 4 for additional Statewide Travel Policy guidance.
   c. Meals only when the cost of the meal is included in the total cost (e.g. a conference fee of $1,500 that includes three meals).
   d. Food and lodging for student activities, but not for faculty, staff, coaches, or other institution employees, when on official institution business (e.g. athletic team travel). Documentation for the purchase must include:
      i. Itemized receipt showing all meals purchased
      ii. Roster of participants showing student name and signature
      iii. Copy of team schedule or other documentation showing that the meal was for an authorized student activity
   e. Food for official research, laboratory animals, or instructional/classroom use.
   f. Food for school�г��ٸ���Ƶ�sponsored childcare (e.g. day care center at a school).
   g. Alcoholic beverages, such as cooking wine, for instructional or classroom use only. The following steps must be followed:
       i. Document the purchase showing that the purchase was for instructional use.
       ii. Create and document steps to ensure that the alcohol is either completely used or disposed of or properly secured between usage to prevent consumption in non�г��ٸ���Ƶ� classroom activities.
       iii. When possible, purchase the alcohol from instructional/culinary arts supply sources rather than a grocery or package store.

---

3.3.2 Prohibited Uses of Purchasing Cards

Last modified: June 21, 2019

The following types of purchases are strictly prohibited either by Official Code of Georgia, Annotated (O.C.G.A.), or to meet reporting requirements:

1. Goods or services not directly related to job responsibilities or other official State of Georgia business (i.e. personal purchases).

2. Data plans, software, or applications (apps) for non�г��ٸ���Ƶ��г��ٸ���Ƶ issued devices, including, but not limited to, smart phones, laptop computers, and tablets.

3. Memberships at wholesale warehouses and shopping clubs (e.g. Sam�г��ٸ���Ƶ�s, Costco, Amazon Prime)

4. Cash advances

5. Gift cards, stored value cards, calling cards, and similar products.

6. Employee travel expenses related to lodging and meals, except as specifically covered under Allowable Purchases.   a. Certain Agencies may request an exception to this requirement in the event of a declared emergency.
     b. Use Special Approval Request, Form SPD�г��ٸ���Ƶ�PC003, for this request.

7. Entertainment (e.g. in�г��ٸ���Ƶ�room movies for State employees traveling on business). This restriction does not apply to student activities or to items purchased for resale at bookstores.

8. Alcoholic beverages or products except as permitted above

9. Tobacco products

10. Fuel, mechanical repairs, and maintenance for State�г��ٸ���Ƶ�owned or rental vehicles. Exceptions may be granted upon verification of procedures to enter costs into VITAL, the State�г��ٸ���Ƶ�s fleet management system administered by the DOAS Office of Fleet Management.
      a. This restriction does not apply to non�г��ٸ���Ƶ�mechanical body shop repairs (e.g. dented bumper) not covered under the State�г��ٸ���Ƶ�s vehicle maintenance contract.
      b. This restriction does not apply to auto parts for in�г��ٸ���Ƶ�house use (e.g. Entity�г��ٸ���Ƶ�operated repair shops) or for teaching purposes.

11. Affiliated organization expenditures.

12. Agency fund expenditures that have not gone through the requisition or pre-approval process.

13. Purchases made from units of the institution. Purchases made from units within the institution should be handled using a cost transfer or other payment method. Use of the P-Card subjects the selling unit to the merchant fees associated with credit card sales and is not a cost-effective means of making intra-institution purchases. For example, an institution should not permit use of the P-Card for purchases made from the institution-managed bookstore.

14. Split purchases. O.C.G.A. § 50�г��ٸ���Ƶ�5�г��ٸ���Ƶ�69 requires competitive bidding for all open�г��ٸ���Ƶ�market purchases anticipated to be $25,000 or more. However, §50�г��ٸ���Ƶ�5�г��ٸ���Ƶ�83 sets the legal Single Transaction Limit (STL) for P�г��ٸ���Ƶ�Card transactions at less than $5,000 (e.g. $4,999.99 or less) unless the purchase is from a Statewide Contract and in compliance with State procurement policy. However, policy requires the Single Transaction Limit (STL) for unplanned, non�г��ٸ���Ƶ�routine, or urgent point of sale P�г��ٸ���Ƶ�Card transactions be set at $1,000 and purchases that are preapproved and go through a requisition or pre-approval process prior to completing the purchase be set at under $5,000 (i.e. $4,999.99 or less). Point of sale transactions include purchases made at a physical store, in person, or over the phone.
      a. Cardholders are prohibited from splitting a transaction between two or more transactions on a single account, two or more transactions on multiple accounts, or two or more transactions using the P�г��ٸ���Ƶ�Card and a purchase order in order to circumvent competitive solicitation requirements. Refer to the for complete information on bid requirements and procedures.
      b. Cardholders are prohibited from splitting a transaction between two or more transactions on a single card number, two or more transactions on multiple card numbers, or two or more transactions using the P�г��ٸ���Ƶ�Card and a purchase order in order to circumvent the Single Transaction Limit imposed on the card regardless of the amount of the STL.

15. Sales tax. O.C.G.A. §48�г��ٸ���Ƶ�8�г��ٸ���Ƶ�3 exempts purchases made by �г��ٸ���Ƶ Institutions from State Sales and Use Tax when payment is made with appropriated funds. Cardholders must present the Department of Revenue Sales and Use Tax Exemption, Form ST�г��ٸ���Ƶ�5, to suppliers upon request. This form is available on the Department of Revenue website at by searching for ST�г��ٸ���Ƶ�5.

The requirement for out�г��ٸ���Ƶ�of�г��ٸ���Ƶ�state suppliers to charge Sales and Use Tax on shipments to purchasers in the State of Georgia does not apply to tax�г��ٸ���Ƶ�exempt State Entities. In order to avoid confusion, the cardholder must provide out�г��ٸ���Ƶ�of�г��ٸ���Ƶ�state suppliers with a copy of the ST�г��ٸ���Ƶ�5 prior to placing an order to be shipped into the State of Georgia. If the supplier refuses to remove taxes, the cardholder must make the purchase from a different supplier whenever possible.

Cardholders are responsible for ensuring that merchants do not charge tax or provide a credit for inadvertent charges.
  1. If taxes are charged, the cardholder must contact the merchant to obtain a credit to the account. Sales tax cannot be disputed with the Bank.
  2. Credits cannot be obtained by any other method, including, but not limited to, cash, gift cards, or store credit.
  3. Documentation of attempts to obtain credit for any State Sales and Use Tax charged in error must be maintained with the documentation for the transaction where the tax was charged.

State Entities may apply to the Georgia Department of Revenue for a refund of sales taxes paid in error or because a supplier/merchant refuses to remove taxes. The form to use for this request is the Department of Revenue�г��ٸ���Ƶ�s Claim for Sales and Use Tax Refund, Form ST�г��ٸ���Ƶ�12. In addition to the ST�г��ٸ���Ƶ�12, the State Entity must also submit either (1) a Waiver of Vendor�г��ٸ���Ƶ�s Rights, Form ST�г��ٸ���Ƶ�12A, or (2) a Purchaser�г��ٸ���Ƶ�s Claim for Sales Tax Refund Affidavit, Form ST�г��ٸ���Ƶ�12B. These forms contain instructions for their use and are located at .

---

3.3.3 Program Administration

Last modified: June 21, 2019

The Institution Procurement Officer (CUPO) serves as the official liaison between the Insitution and State Purchasing Division personnel for all matters related to the Entity�г��ٸ���Ƶ�s program. This individual usually serves as the P�г��ٸ���Ƶ�Card Program Administrator, although any or all of the following administrative responsibilities may be delegated to another individual or to one or more Card Program Coordinators, depending on the size and complexity of the Entity�г��ٸ���Ƶ�s program.

3.3.3.1 Standard P�г��ٸ���Ƶ�Cards

Cardholders are limited to one active P�г��ٸ���Ƶ�Card. Cardholders must be permanent, part�г��ٸ���Ƶ�time or full�г��ٸ���Ƶ�time, State employees whose jobs require the use of a P�г��ٸ���Ƶ�Card or other account. Institutions may include additional restrictions if desired.

There will be no exceptions to the following:

1. Neither cards nor accounts will be issued to employees of foundations associated with a �г��ٸ���Ƶ Institution, student employees, temporary workers (e.g. hired from a temporary staffing agency), or contractors (e.g. person hired for a pre�г��ٸ���Ƶ�determined period of time for a specific project).
2. Cards and other accounts will not be issued in the name of a Department or work unit (e.g. Facilities Maintenance) to be shared by multiple employees.
3. Only the employee whose name is shown on the face of the card is authorized to make purchases with the card, either in person, on�г��ٸ���Ƶ�line, or telephone. Use by any other person, even if for State business purposes, is considered misuse of the card.

At a minimum, an employee�г��ٸ���Ƶ�s supervisor, the Institution�г��ٸ���Ƶ�s Card Program Administrator and the Institution�г��ٸ���Ƶ�s Chief Financial Officer must approve a cardholder�г��ٸ���Ƶ�s application for a P�г��ٸ���Ƶ�Card or other account as well as renewals of existing accounts. The appropriate P�г��ٸ���Ƶ�Card application form is the Purchasing Card Profile, Form SPD�г��ٸ���Ƶ�PC002, found on the .

The Chief Financial Officer, Card Approvers and potential cardholders must meet all training requirements as described in this policy. Approver and cardholder training must be completed prior to receiving the P�г��ٸ���Ƶ�Card or obtaining access to an account number.

3.3.3.2 Ghost Card Accounts

Ghost Card accounts are no longer allowable.

3.3.3.3 P�г��ٸ���Ƶ�Card Plan

Each �г��ٸ���Ƶ Institution participating in the Card Program is required to have an approved P�г��ٸ���Ƶ�Card Plan. Items required in the Card Plan must include but are not limited to the following:

1. Justification of need for each cardholder or job class.
2. Justification of need for point of sale purchases based on job requirements.
3. A scenario of card distribution that meets the statutory requirement of a maximum of 100 cards.
4. Establish time limits for determining when to cut off or cancel dormant cards based on job requirements.
5. Establish spending limits (with appropriate waiver requests) based on job requirements and business model.
6. An overview of Internal Controls surrounding card use.
7. Establish approval chain for each cardholder.

Amendments must be submitted for approval as business needs change. All P�г��ٸ���Ƶ�Card Plans and subsequent amendments must be reviewed and approved by the Institution�г��ٸ���Ƶ�s President and submitted to DOAS for approval in conjunction with OPB. Compliance audits will be conducted against the plan.

3.3.3.4 Institution Presidents

Each President of a �г��ٸ���Ƶ Institutions participating in the Card Program is responsible for reviewing and approving the Institution�г��ٸ���Ƶ�s P�г��ٸ���Ƶ�Card Plan and all amendments prior to submission to DOAS/OPB. Institution Presidents cannot be issued a P�г��ٸ���Ƶ�Card.

3.3.3.5 Chief Financial Officer

The Chief Financial Officer of the Institution participating in the P-card program is responsible for overseeing the card program. Duties of the Chief Financial Officer include:

1. Successful completion of the CFO Card Program Training module
2. Submission of the completed CFO Card Program Acknowledgement form
3. The appointment of an Entity Card Program Administrator
4. Approval of qualified cardholders and approvers
5. Review and approval of the Annual Self Audit of the Institution�г��ٸ���Ƶ�s Card Program as defined by DOAS.
   Note: CFO duties do not include oversight of audits performed by external or internal auditors authorized by statute or charter.
6. Review and approve policies in conjunction with the CUPO and Card Administrator annually.
7. Review and approval of Institution�г��ٸ���Ƶ�s P�г��ٸ���Ƶ�Card Plan and all amendments
8. Submission of the Plan to the Institution�г��ٸ���Ƶ�s President

3.3.3.6 Card Program Administrator

The Card Program Administrator serves as the main point�г��ٸ���Ƶ�of�г��ٸ���Ƶ�contact for all card program personnel and serves as a liaison between Institution management, CFO, the State Purchasing Division, and other card program personnel. In some cases, responsibilities may be shared and/or delegated to a Card Program Coordinator. The Institution must provide a Designation of Card Program Administrator, Form SPD�г��ٸ���Ƶ�CC001, and the Card Program Administrator Acknowledgement form to the State Purchasing Division within 30 days of any changes in Administrators or Coordinators if the coordinator serves as a point of contact with the State Purchasing Division. Information on all official Program forms and how they are to be used can be found on the SPD website:

The Card Program Administrators/Coordinators fulfill responsibilities in the following areas:

1. Card Management
     a. Develops and maintains the Institution�г��ٸ���Ƶ�s internal P�г��ٸ���Ƶ�Card policy to address policy areas unique to the institution or that are not covered by the Statewide Purchasing Card Policy or �г��ٸ���Ƶ Business Procedures Manual.
     b. Cannot be a P�г��ٸ���Ƶ�Card holder.
     c. Works with management, including the Institution�г��ٸ���Ƶ�s CFO, to identify job titles or positions that require a P�г��ٸ���Ƶ�Card or would be good candidates for use of the card and/or other accounts.
     d. Develops internal procedures for requesting new cards and/or changes to existing cards (e.g. change in spending limits).
     e. Works with management and the CFO to determine appropriate cardholder spending limits based on budget restrictions, job requirements, historical spending patterns, and overall procurement practices.
     f. Evaluates cardholder spending limits against actual usage at least annually and terminates cards that show consistently low usage.
     g. Identifies cards with little or no usage to determine if cards are needed.

2. Reconciliation Procedures The Card Program Administrator is responsible for developing the following internal procedures:
     a. Reconciliation process that ensures timely payment and/or allocation of transactions to the General Ledger at least monthly.
     b. Documentation, including use of Works™ Payment Manager or other P-Card plan approved systems for reconciliation of transactions.
     c. Disputing a transaction with the Bank.

3. Compliance with Laws and Policies
     a. Establishes written internal procedures to ensure compliance with State procurement laws, the Georgia Procurement Manual, the Statewide Purchasing Card Policy, �г��ٸ���Ƶ Business Procedures Manual and the internal P�г��ٸ���Ƶ�Card policy.
     b. Develops written internal procedures for requesting exceptions to either State or internal policy requirements using the Special Approval Request, Form SPD�г��ٸ���Ƶ�PC003.
     c. Develops internal procedures for requesting exceptions to both Institution and internal policies, if allowed.
     d. Submits all P�г��ٸ���Ƶ�Card Plan amendments and requests for exceptions to the Statewide Purchasing Card Policy to the Institution�г��ٸ���Ƶ�s CFO for submission to cardprograms@doas.ga.gov for approval by DOAS and OPB.

4. Internal Controls
     a. Develops the Institution�г��ٸ���Ƶ�s internal P�г��ٸ���Ƶ�Card procedures in compliance with the principles of sound internal controls.
     b. Ensures that the Institution has sufficiently documented internal controls and other measures (e.g. audits) to prevent and/or detect misuse or abuse of the P�г��ٸ���Ƶ�Card and other accounts.
     c. Develops written procedures for ordering cards and canceling cards when lost or stolen or when a cardholder leaves employment.
     d. Develops written procedures for reporting and documenting actual and/or potential cardholder abuse or misuse.
     e. Ensures that transactions are audited at least annually during the required self�г��ٸ���Ƶ�audit process outlined in section 3.3.7.

5. Card Program Training
     a. Develops Institution specific training for all cardholders, supervisors, and other approving officials.
     b. Develops appropriate refresher training to be delivered at least annually.
     c. Ensures that all card program personnel receive notification of changes in State, �г��ٸ���Ƶ, and internal policies, including Official Announcements from the State Purchasing Division.

3.3.3.7 Supervisors / Approving Officials

Supervisors or other persons responsible for reviewing transactions must have a thorough knowledge of the cardholders�г��ٸ���Ƶ� job responsibilities in order to determine if purchases are job related or otherwise authorized. All approving officials are required to complete the Approver Card Program Acknowledgement form.

1. Monthly Reconciliation
     a. Before approving the P�г��ٸ���Ƶ�Card transactions, either by signing a transaction log or statement or signing off on transactions electronically, the supervisor or approving official must carefully review all documentation to ensure that all documentation meets the minimum requirements as explained in Section VII.A. of the Statewide Purchasing Card Policy.
     b. Ensure that passwords are not shared or delegated for others to use in order to review and approve transactions.
     c. Sign off on all transactions in Works™ Payment Manager or other P-Card plan approved systems, as appropriate, within the timeframe established by the Card Program Administrator.
     d. Ensure all documentation is submitted according to internal procedures and State requirements. See Section VII of the Statewide Purchasing Card Policy.

2. Other Responsibilities
     a. Maintain knowledge of State, �г��ٸ���Ƶ and internal procurement policies and procedures related to use of the P�г��ٸ���Ƶ�Card.
     b. Coordinate the following with the Card Program Administrator:
       i. Ordering and canceling cards for employees
       ii. Establishing reasonable spending limits

3.3.3.8 Cardholders and Related Account Users

All cardholders are de facto purchasing agents for the �г��ٸ���Ƶ Institutions. All card program personnel must have a minimum understanding of State procurement laws and the requirements of the Georgia Procurement Manual and �г��ٸ���Ƶ Business Procedures Manual.

1. Card Usage
     a. Ensure that no other persons have access to any card information (i.e. card account number, expiration date, security code).   b. Ensure that all purchases comply with State and internal policies.
2. Monthly Reconciliation
     a. Ensure that all invoices and receipts meet minimum requirements for adequate documentation of transactions.
     b. Sign off on all transactions in Works™ Payment Manager or other P-card plan approved system, as appropriate, within the timeframe established by the Entity�г��ٸ���Ƶ�s Card Program Administrator.
     c. Ensure all documentation is submitted according to internal procedures and State requirements. See Section VIII.A. of the Statewide Purchasing Card Policy.
3. Other Responsibilities
   Maintain knowledge of State, �г��ٸ���Ƶ and internal procurement policies and procedures related to use of the P�г��ٸ���Ƶ�Card

3.3.3.9 Legal Issues

All procurement laws in the Official Code of Georgia, Annotated, and administrative rules found in the Georgia Procurement Manual apply to the use of the P�г��ٸ���Ƶ�Card. Cardholders, program users, CFOs or supervisors/approving officials who knowingly, or through willful neglect, fail to comply with the following may be subject to suspension or termination of account privileges or other Statewide Purchasing Policy disciplinary action, up to and including termination of employment and criminal prosecution to the fullest extent of the law.

• Official Code of Georgia, Annotated (O.C.G.A.), sections related to governmental purchasing
• Applicable requirements of the Georgia Procurement Manual (GPM)
• Statewide Purchasing Card Policy
• �г��ٸ���Ƶ Business Procedure Manual
• Institutions policies and procedures governing procurement and the Purchasing Card Program.

The State Cards Program Director and State Purchasing Division reserve the right to withdraw any authority or delegated approval due to non�г��ٸ���Ƶ�compliance with applicable laws, rules, regulations, policies, and procedures, or the terms of any conditional approval.

3.3.3.10 Personal Purchases Prohibited

Cardholders and other program personnel are prohibited from using the P�г��ٸ���Ƶ�Card for the purchase of any goods or services not directly or indirectly related to official State of Georgia business. Intentional use of or approval for the use of the card for personal purchases will result in disciplinary action, up to and including termination from State employment and criminal prosecution.

1. The Official Code of Georgia, Annotated (O.C.G.A.), §50�г��ٸ���Ƶ�5�г��ٸ���Ƶ�80 states that any person who knowingly uses state funds for personal purchases under $500 is guilty of a misdemeanor.
2. A person who knowingly uses state funds for personal purchases of $500 or more is guilty of a felony punishable by one to 20 years in prison.
3. Supervisors or other approving officials who knowingly, or through willful neglect, approve personal or fraudulent purchases are subject to the same disciplinary actions as those making the purchases.

Note: Suspected malfeasance must be reported to the �г��ٸ���Ƶ System Office in accordance with the procedures outlined in the BPM Section 16.4.

3.3.3.11 Cardholder Background Checks

O.C.G.A. §50�г��ٸ���Ƶ�5�г��ٸ���Ƶ�83 requires criminal background checks on all employees hired for positions that are eligible for P�г��ٸ���Ƶ�Cards. Background investigations should be conducted in compliance with �г��ٸ���Ƶ Background Investigation policy as outlined in the �г��ٸ���Ƶ HRAP.

3.3.3.12 Cardholder Credit Checks

In addition to background checks for all cardholders, O.C.G.A. §50�г��ٸ���Ƶ�5�г��ٸ���Ƶ�83 requires credit checks on all employees issued a purchasing card. Credit checks must be conducted through existing Statewide contract vendors and procedures including standardized reports that indicate acceptance or denial of the employee�г��ٸ���Ƶ�s request for a card based on predefined criteria established by DOAS. Each Institution must establish an escalation path for denials to provide potential cardholders an opportunity to dispute inaccurate data found.

3.3.3.13 E�г��ٸ���Ƶ�Verify

The Georgia Security and Immigration and Compliance Act, O.C.G.A. §13�г��ٸ���Ƶ�10�г��ٸ���Ƶ�91, requires suppliers to file an affidavit that the supplier and its subcontractors have registered and participate in the federal work authorization program known as E�г��ٸ���Ƶ�Verify. This program is intended to ensure that only lawful citizens or lawful immigrants are employed by the supplier or subcontractor. All State Entities are required to obtain this signed and notarized affidavit from suppliers prior to entering into any service contract $2,500 or greater involving the supplier�г��ٸ���Ƶ�s physical performance of services within the State of Georgia. The State of Georgia Attorney General�г��ٸ���Ƶ�s Office has interpreted this to include one�г��ٸ���Ƶ�time P�г��ٸ���Ƶ�Card transactions for services.

For P�г��ٸ���Ƶ�Card transactions that meet this definition, the cardholder or another person within the �г��ٸ���Ƶ Institutions are responsible for ensuring receipt of this affidavit. A copy of this affidavit must be included with all transaction documentation.

---

3.3.4 Purchasing Card Account Code

Last modified: September 5, 2017

A limited number of merchants feed �г��ٸ���Ƶ�item description�г��ٸ���Ƶ� into the WORKS reports, but a large portion of the transactions do not have an �г��ٸ���Ƶ�item description�г��ٸ���Ƶ�. Although difficult, each �г��ٸ���Ƶ institution is tasked with appropriately distributing P-Card expenses to the appropriate expense code based on items/services purchased.

---

3.3.5 Purchasing Card Program Compliance

Last modified: June 21, 2019

Each institution is responsible for ensuring compliance with applicable laws, rules, regulations, and policies governing P-Cards. Ensuring compliance shall, at a minimum, include the following controls:

1. Develop and maintain institutional P-Card policies and procedures that fully incorporate current DOAS and �г��ٸ���Ƶ policies and procedures.
2. Ensure that P-Cards are issued only to permanent part-time or full-time employees of the institution whose jobs require the use of a P-card. Institution may include additional restrictions if desired.
3. Ensure that P-Cards are not issued to employees of Foundations and other affiliated organizations associated with the institution.
4. Ensure that a P-Card is issued only to a named individual and not to a department or office.
5. Ensure that cardholders do not share the P-Card or P-Card number for use by other employees.
6. Separation of duties between ordering cards (program administrators), making transactions (cardholders), and review or approval of transactions for payment (supervisors/approving officials).
7. A minimum of two approvers required before a purchase is made (usually supervisor and fiscal) for all routine purchases and non-routine over $1,000.
8. Establish penalties for misuse of the P-Card to include a written system that documents warnings, suspensions, terminations, and permanent P-Card revocation.
9. Require cardholders to obtain receipts for all purchases made on the P-Card. The receipt should include:
   
   • Vendor name
   • Transaction amount
   • Date
   • Itemized list of items purchased
   
   Copies or facsimiles of the original receipt may be acceptable if the original is not available. A screen-print or order confirmation e-mail is required when making Internet purchases, or a copy of an order-form that was mailed to a vendor to request an item. The screen print/order confirmation must include the shipping date and be signed as received.
   
   The institution shall centrally maintain receipts and supporting documentation for P-Card purchases or may assign this responsibility to approving officials, departments, etc. Receipts and supporting documentation shall be maintained for a period of seven (7) years and shall be made available as needed for audit or review. It is recommended that institutions centrally maintain the receipts and supporting documentation.
   
10. Require cardholders to maintain a log in the cardholder�г��ٸ���Ƶ�s name showing:
    
    • Each P-Card purchase
    • Relevant vendor�г��ٸ���Ƶ�s name
    • Item(s) purchased
    • Date of the purchase
    • Amount of the purchase
    • Name of the employee for whom the purchase was made
    • Intended business use
    • Grant or project to which the purchase is applicable
    • Other information as required
    The cardholder shall be required to maintain copies of this log for seven (7) years or the institution may centrally maintain copies of the log. The log shall be made available as needed for audit or review.
    
    Require approving officials to review assigned cardholder P-Card purchases on at least a monthly basis. The approving official should provide evidence of his or her review through a signature on the P-Card purchasing log and/or the monthly Bank of America statement. It is recommended that the approving official monitor P-Card purchases on a more frequent basis using the WORKS program.
11. Delegation of the approver duties is unallowable. Should an approver be on leave or otherwise unavailable to approve a purchase or transaction, another trained approver already assigned approver responsibility may assume those duties temporarily.
12. All transaction reconciliation is to be done electronically, either in Works™ Payment Manager or other system approved in the P-Card plan depending on the Institution�г��ٸ���Ƶ�s accounting system. Transactions must be reconciled and allocated to the General Ledger within 30 days of the statement billing date.
    

    Note: All Institutions are required to use the Works™ Payment Manager system provided by the Bank for card administration and account maintenance. Institutions must use WORKs Payment Manager for Cardholder sign-off and supervisory approval of transactions, unless another system was approved in conjunction with P-Card plan.

13. Follow all federal laws applicable to the reporting of spending with 1099 vendors.
14. It is the responsibility of each institution participating in the P-Card program to put in place procedures to comply with any federal tax laws regarding 1099 reporting. Please note that the P-Card may not be used for professional services as outlined in BPM Section 3.3.2.
15. Ensure that P-Card purchasing records are retained for at least seven (7) years.
16. Report any misuse of P-Cards in compliance with the provisions as outlined in BPM Section 16.4, Fraud, Waste, and Abuse.
17. The Statewide Purchasing Card Policy and the �г��ٸ���Ƶ Business Procedures Manual serves as the Policy for the P�г��ٸ���Ƶ�Card Program on a system wide level and is not designed to be specific to an individual Institution. Each Institution must develop its own internal policy to address areas that the Statewide Purchasing Card Policy and �г��ٸ���Ƶ Business Procedures Manual cannot and does not address. The Card Program Administrator or the Institution Procurement Officer in conjunction with the CFO must evaluate the internal policy at least annually using the Policy Risk Evaluation workbook found on the [State Purchasing Division](http://doas.ga.gov/state-purchasing) website.

---

3.3.6 Purchasing Card Program Safeguarding of Assets

Last modified: September 7, 2017

Each institution is responsible for ensuring that the institution�г��ٸ���Ƶ�s assets are safeguarded from fraud, waste, and abuse. Ensuring the safeguarding of assets shall, at a minimum, include the following controls:

• Ensure that rebates or refunds from vendors shall be the property of the institution and shall be paid promptly into the institution�г��ٸ���Ƶ�s accounts.
• Perform criminal and consumer background checks in accordance with O.C.G.A. § 50-5-83. The institution shall ensure that the results of a criminal background check and consumer credit check are provided the privacy protections required by law. Institutions shall comply with the provisions of the Human Resources Administrative Policy Manual in implementing a background check requirement.
• Require cardholders to personally reimburse the institutions for purchases made that are not appropriately documented. Approving officials also may be required to reimburse the institution if the approving official approved the purchase.

• Ensure that any items of value purchased for distribution to students be allowed only in support of the educational objectives of the institution. Additionally, ensure that the cardholder maintains sufficient documentation so as to identify the individual receiving an item.

• Ensure that P-Cards are promptly cancelled upon employee transfer or termination.

---

3.3.7 Purchasing Card Program Effectiveness and Efficiency

Last modified: September 7, 2017

Each institution is responsible for providing effective and efficient administration of the P-Card program in support of the institution�г��ٸ���Ƶ�s educational objectives. Ensuring effective and efficient administration shall, at a minimum, include the following controls:

1. Formally designate P-Card roles and responsibilities to include P-Card program administration, approving officials, and cardholders.
2. Formally identify job positions within the institution that would require the use of a P-Card.
3. Develop a training manual on the use of P-Cards that shall instruct cardholders and approving officials on the maximum value utilization of P-Cards, applicable policies and procedures, and purchasing rules that may impact P-Card usage.
4. Require initial and refresher training for both cardholders and approving officials. Failure to participate in initial training shall result in non-issuance of the P-Card, and failure to participate in refresher training shall result in card suspension until the training is completed.
5. Review not less than annually all P-Cards issued to employees, and eliminate P-Cards for employees who demonstrate consistently low usage of P-Cards or no longer have a demonstrated business need for the P-Card.
6. Limit the number of cardholders for which an approving official may be responsible to a reasonable number over which the approving official may exercise sufficient oversight. It is recommended that the number of cardholders for which an approving official is responsible not exceed ten (10) cardholders.
7. Ensure that a sample of P-Card purchases are independently reviewed by the P-Card program administrator, campus internal auditor, or other trained personnel independent of the approving official and cardholder under review at least annually.

8. Provision for annual audit or self�г��ٸ���Ƶ�audit of the P�г��ٸ���Ƶ�Card program by the Card Program Administrator or Internal Audit unit must be submitted annually to DOAS no later than December 1st. Guidelines for the annual self�г��ٸ���Ƶ�audit can be found at Self�г��ٸ���Ƶ�Audits must include adequacy of:

   a. internal policies and procedures
   b. cardholder spending limits
   c. monthly reconciliation procedures
   d. documentation for transactions

---

3.3.8 Card Program Personnel Training

Last modified: June 21, 2019

3.3.8.1 Institution Training

Each Institution�г��ٸ���Ƶ�s Card Program Administrator is responsible for developing and implementing training for cardholders and supervisors or other approving officials specific to that Institution�г��ٸ���Ƶ�s needs. Training must include relevant portions of the following:

a. Georgia Procurement Manual
b. Statewide Purchasing Card Policy
c. �г��ٸ���Ƶ Business Procedures Manual
d. Internal procurement and P�г��ٸ���Ƶ�Card policies

The Institution�г��ٸ���Ƶ�s Card Program Administrator is responsible for developing and implementing refresher training to be conducted at least annually for all cardholders, supervisors, and approving officials.

All cardholders must sign a cardholder agreement that contains the terms and conditions for use of the P�г��ٸ���Ƶ�Card and any other account. The mandatory cardholder agreement is available at

3.3.8.2 Statewide Training

The Professional Development Unit of the State Purchasing Division provides additional training for cardholders, supervisors, approving officials, CFOs, and Card Program Administrators. All training courses are updated at least annually and are available in the SPD Learning Management System (LMS). To gain access to the LMS, send an email to training@doas.ga.gov. Also reference on the DOAS website.

1. Introduction to P�г��ٸ���Ƶ�Card Principles provides the information necessary to understand the purpose of the P�г��ٸ���Ƶ�Card, its benefits, and the procurement regulations that apply to using the P�г��ٸ���Ƶ�Card. This course is required as either initial training or annual refresher training, or both, for Card Program Administrators, cardholders, and supervisors/approving officials for those State Entities that do not provide training.
2. Evaluating P�г��ٸ���Ƶ�Card Program Management provides guidance to Institution Procurement Officers, Card Program Administrators, and auditors on evaluating P�г��ٸ���Ƶ�Card policy and internal controls and auditing transactions.
3. P�г��ٸ���Ƶ�Card for the CFO training module provides an overview of the card program and the CFO�г��ٸ���Ƶ�s roles and responsibilities related to the program.

3.3.8.3 Works™ Payment Manager

Bank of America is responsible for delivering training on Works™ Payment Manager when the system is initially implemented. The Institution�г��ٸ���Ƶ�s Card Program Administrator is responsible for training new cardholders or other users. Personnel from the State Purchasing Division�г��ٸ���Ƶ�s Professional Development and/or Process Improvement units are also available.

---

3.3.9 Records Retention Requirements

Last modified: September 7, 2017

The �г��ٸ���Ƶ System of Georgia maintains the official Records Retention Schedule for the State of Georgia. This information is available at .

• Documents related to transactions (e.g. receipts) are accounting records and must be maintained according to the requirements of Accounts Payable Files.
• Documents related to the issuance of accounts to employees (e.g. profile forms) are accounting records and must be maintained according to the requirements of Credit Card Administration Records.

---

3.4 Contracts

Last modified: September 5, 2017

This section presents selected BOR policies in a highly summarized format. It should be considered a guide and used as a source of information for further research. For specific authority on executing contracts, the reader should also research the BOR Policy manual, as well as reviewing written documents delegating authority to the local institution to sign contracts.

3.4.1 Authority to Execute Contracts

Last modified: September 5, 2017

Prior to any delegation of authority, only the Chancellor and the Chancellor�г��ٸ���Ƶ�s designee are authorized to:

1. Enter into rental agreements as tenant or landlord where the total rent to be paid by or to the BOR does not exceed $25,000 per month or $35,000 per month during any subsequent renewal terms.

2. Sign contracts, agreements, deeds, licenses, or other instruments related to the purchase or gift of real property where the purchase price or gift value does not exceed $1,000,000.

3. Accept gifts, bequests, agreements or declarations of trust in those instances where the initial gift or trust estate is $100,000 or less. The Chancellor may, at his/her discretion, delegate the authority to execute said documents to the Treasurer or to the presidents of the individual �г��ٸ���Ƶ institutions. However, the Chancellor is not authorized to delegate to the presidents the authority to accept gifts of real property.

4. Act as contracting officers for and on behalf of the Board of Regents in the execution of construction contracts, contracts for professional services, selection of architects and engineers, execution of contracts for new buildings, etc. However, the authority so delegated shall not exceed the sum of $5,000,000 for any one contractual obligation.

The Chancellor and the Chancellor�г��ٸ���Ƶ�s designee are authorized to delegate any or all of the above authority to act as contracting officers to the individual �г��ٸ���Ƶ institutions. Current levels of institution delegated authority for capital project authorizations, consultant services procurement, BOR design review requirements and construction contracting can be found at .

Generally, the authority to sign contracts for the day-to-day operations of an institution has been delegated to the individual institutions. It is imperative that the documented authority is available in the permanent files of the institution as proof of such authorization.

---

3.4.2 Dining and Catering Contracts

Last modified: February 21, 2020

3.4.2 Dining and Catering Contracts

�г��ٸ���Ƶ System of Georgia (�г��ٸ���Ƶ) institutions utilize the Georgia Procurement Registry managed by the Department of Administrative Services for procurement of dining and catering services. Institutions must follow the procedures outlined in this section when developing procurement materials for contracts beginning on or after July 1, 2017. Institutions with contracts that are not fully compliant with these procedures must obtain any required amendments to their existing contracts or conduct a new procurement for services beginning no later than July 1, 2019.

3.4.2.1 Financial Model

3.4.2.1.1 Required Supplier Proposals

Requests for Proposals (RFPs) must require that suppliers submit proposals on a fixed cost basis (per meal/item or per plan) that reflects all the supplier�г��ٸ���Ƶ�s fixed and variable costs. Institutions may require additional pricing models, including fee-based proposals.

Institutions may add to the supplier fixed price reasonable charges, necessary for associated lease payments, and for direct and indirect dining and catering expenses not covered by the supplier. If commissions are to be paid by the supplier, the rate must be based on all gross sales, including retail and catering sales, and may be variable based on sales volume.

3.4.2.1.2 Affordability and Efficiency

Dining and catering services must be structured with student affordability and operational efficiency as essential criteria for successful suppliers. Institutions must be able to demonstrate that overhead costs, including the administration of dining dollars, are reasonable and comparable to peer institutions.

3.4.2.1.3 Self-Liquidating

Dining and catering contracts should be structured to enable a self-liquidating dining auxiliary, reserve balances sufficient to meet reserve requirements for lease financings and unique institutional needs as outlined in the 5 year dining auxiliary business plan, and to fulfill any lease payment obligations reliant upon dining revenues.

3.4.2.1.4 Performance Management

Supplier compensation must include a performance component and should be measured using campus designed performance measures or indicators that reflect customer satisfaction. Supplier should be responsible for any participation incentives.

3.4.2.1.5 Qualified Management Agreements

All RFPs must require that vendors certify their proposal is a Qualified Management Agreement in accordance with IRS Rev Proc. 2016-44. Opinion of bond counsel must be obtained prior to execution of the contract.

3.4.2.2 Pricing

3.4.2.2.1 Guarantees

Institutions may not provide any meal plan purchase minimums or volume guarantees to suppliers.

3.4.2.2.2 Non-student Pricing

Meal plan and retail pricing for any party other than a student must not be less than charges paid by students.

3.4.2.2.3 Residential Student Meal Plan Pricing

Institutions may require students living in housing to purchase a meal plan. Actual utilization of dining options by students required to purchase meal plans will be reviewed as a part of the annual rate approval process.

3.4.2.2.4 Dining Dollars

Dining dollars may come with meal plans or be an optional charge that students may elect to add to their meal plan. Any unused dining dollars must be tracked by the Institution. Unused dining dollars (other than nominal amounts less than $10) must be refunded to the student no later than upon separation from the institution.

3.4.2.3 Term and Renewal Options

Contracts must be annually renewable. Renewal options in excess of 9 years require the approval of the BOR Strategic Sourcing Director. Institutions are required to review contracts prior to exercising a renewal option to ensure the contract terms remain competitive.

3.4.2.4 Catering Services

Catering allowances should be sized according to institutional size and mission and should be utilized and tracked under the direction of the Chief Business Officer. Contracts shall allow for unused balances to rollover to subsequent years. Maximum annual allowances, exclusive of any rollover amount, for each sector are as follows:

• Research and comprehensive institutions: $85,000
• State universities: $70,000
• State colleges: $55,000

Catering allowances are considered institutional funds (see BPM 19.8). Prior to utilization of catering allowances, institutions should seek voluntary contributions from suppliers and cooperative organizations to support advancement and other events.

3.4.2.5 Grants and Scholarships

Contracts shall not allow the provision of grants, scholarships, or complimentary meals. Complimentary meals do NOT include meals provided to students in return for serving as live-in, residence life staff. Limited guest passes for parents of students purchasing meal plans are not considered complimentary.

3.4.2.6 Capital Improvements

3.4.2.6.1 Capital Allowances

Request for Proposals for Dining and Catering Services that include a total capital allowance in excess of the institution�г��ٸ���Ƶ�s delegated project authorization level must undergo facilities integrated review prior to contract award. This requirement applies to the total capital allowance regardless of the size of the individual projects contemplated. Institutions shall submit a Project Concept Proposal to start the review process with as much detail related to the future projects as is known at the time of the procurement. All capital allowances must be fully amortized over the life of the contract.

3.4.2.6.2 Capital Improvements in Leased Facilities

Capital improvements in leased facilities are typically funded through an increase in the rental agreement. All capital improvements in excess of the institution�г��ٸ���Ƶ�s delegated project authorization, including those performed by a third-party in a leased facility, require submittal of a Project Concept Proposal. Capital improvements in leased facilities within the institution�г��ٸ���Ƶ�s delegated project authorization level require the prior approval of BOR Fiscal Affairs, Finance Office.

3.4.2.6.3 Reserves

Institutions must fully reserve any amount of capital allowance utilized if the contract requires the repayment of unamortized balances in the event of non-renewal. These reserve balances are in addition to any amounts held in a repair and replacement reserve. Institutions must reflect these reserves in account 329200 Reserve for Deferred Gift Revenue from Auxiliary Vendor (Unrestricted). Other non-renewal fees or penalties are not allowed.

3.4.2.6.4 Institutional Funding of Dining Capital Improvements

Institutions may propose in their 5 year dining auxiliary business plan to accumulate dining auxiliary unrestricted fund balances to self-fund capital improvements. Institutions should evaluate the cost-benefit of self-funding compared to vendor-financed improvements.

3.4.2.7 Notification

Institutions must provide notice of intent to proceed with a dining and catering services Request for Proposal to the BOR Strategic Sourcing Director at least 90 days prior to submission to the Department of Administrative Services.

3.4.2.8 Variances

Any variances from these procedures must be pre-approved by the �г��ٸ���Ƶ Chief Fiscal Officer.

---

3.4.3 �г��ٸ���Ƶ Ethics Policy Reference in Contracts

Last modified: June 21, 2019

Cooperative organizations, vendors, and contractors shall certify compliance with the �г��ٸ���Ƶ Ethics Policy by written agreement. The ethics policy should be specifically referenced as a condition with which the vendor will comply. The following language must be included in all contracts:

Ethics: Offeror shall comply with the �г��ٸ���Ƶ System of Georgia Board of Regents Ethics Policy (Board Policy 8.2.18). The �г��ٸ���Ƶ prohibits any form of discrimination, harassment or retaliation against or by any member of the faculty, staff, administration, student body, volunteers, or visitors based upon race, color, religion, sex, national origin, age, whistle-blower status, disability, gender identity or expression, genetics, or any other characteristic protected by state or federal law. Offeror and Offeror’s employees will be required to know and adhere to the Title IX policy.

To review the �г��ٸ���Ƶ Ethics Policy in its entirety, click on the following link:

/policymanual/section8/C224/#p8.2.18_personnel_conduct

---

3.4.4 Supplier Contracts

Last modified: November 2, 2021

Effective immediately, upon the creation of a new contract or at the next renewal of an existing contract, all �г��ٸ���Ƶ institutions and organizations (collectively herein, �г��ٸ���Ƶ�organizations�г��ٸ���Ƶ�) must ensure that suppliers (or other third parties, herein, �г��ٸ���Ƶ�suppliers�г��ٸ���Ƶ�) with access to �г��ٸ���Ƶ data are adequately protecting that data. Such protection must be at least the same level of protection provided by the �г��ٸ���Ƶ and as required by law, regulation, or �г��ٸ���Ƶ/State of Georgia policy. To achieve this objective, �г��ٸ���Ƶ organizations shall:

1. Review all contracts, either upon the creation of a new contract or at the next renewal of an existing contract, to identify suppliers which may have access to or may be provided �г��ٸ���Ƶ data.

2. Determine what data types the supplier will access or be provided and/or the service the supplier will be providing. Based on the type of data or service, the �г��ٸ���Ƶ organization shall then assess the overall level of risk associated with access to that �г��ٸ���Ƶ data or the service availability for those suppliers. For example, suppliers with access to personal health information or student records are higher risk than suppliers with access to publicly available directory information. Additionally, a service supporting a mission-critical need like One�г��ٸ���Ƶ is higher risk than a supporting service like an informational webpage. Ultimately, the level of risk will be assessed as �г��ٸ���Ƶ�None,�г��ٸ���Ƶ� �г��ٸ���Ƶ�Low,�г��ٸ���Ƶ� �г��ٸ���Ƶ�Moderate�г��ٸ���Ƶ� or �г��ٸ���Ƶ�High�г��ٸ���Ƶ� as described below. If in doubt, the �г��ٸ���Ƶ organization shall assign the highest level reasonable:

   • None (No cybersecurity review is required �г��ٸ���Ƶ� no systems, products, services and/or �г��ٸ���Ƶ information or data assets are being exchanged or made available by the supplier as part of the contract.)
   • Low (No �г��ٸ���Ƶ data is shared with a supplier. Suppliers must be required to protect the availability of a non-mission-critical system(s), product(s), or service(s) under contract.)
   • Moderate (Moderate risk �г��ٸ���Ƶ data is shared with a supplier. Suppliers must be required to protect the availability and integrity of the �г��ٸ���Ƶ data assets being shared, but any data systems, data products, or data services provided are non-mission-critical. Examples of moderate risk data include but are not limited to publicly available information, directory information, and/or non-confidential information.)
   • High (High risk �г��ٸ���Ƶ data is shared with a supplier. Suppliers must be required to protect the availability, integrity, and confidentiality of the �г��ٸ���Ƶ data assets being shared and/or the mission-critical systems, products, or services under contract. Examples of high-risk data include but are not limited to personally identifiable information (�г��ٸ���Ƶ�PII�г��ٸ���Ƶ�) such as date of birth, social security number, and names of minor children; health information as defined by either HIPAA or FERPA; financial information (credit card numbers, bank account numbers), and other confidential information such as student records as defined by FERPA, etc.
     
     
3. Ensure that the new contract, or contract renewal, includes language appropriate for the designated risk level requiring the supplier to take steps to protect �г��ٸ���Ƶ data, systems, products, or services consistent with the risk level as referenced in item 2 above to include:
   
   • Adherence to the �г��ٸ���Ƶ contract or contract renewal checklist.
   • Determine if a need exists concerning cyber insurance. When needed, secure from the vendor an appropriate level of cybersecurity insurance to protect �г��ٸ���Ƶ�г��ٸ���Ƶ�s interests in case the supplier compromises �г��ٸ���Ƶ data or cannot provide the mission-critical service. Preferably, the cyber insurance coverage will indemnify and hold harmless �г��ٸ���Ƶ.
   • Obtain and review appropriate documentation of supplier compliance. Consideration should be given to what extent supplier compliance should be documented or otherwise addressed in the contract insofar as the supplier will have access to �г��ٸ���Ƶ data. (Examples of appropriate documentation could include a SOC report, an assurance provider’s assessment of the supplier�г��ٸ���Ƶ�s cybersecurity protocols, etc.)

Note: It is recognized that it may not be possible to achieve 100% compliance with the contract renewal checklist and other items listed above due to operational necessity and/or the nature of supplier-�г��ٸ���Ƶ negotiations. In those instances, institutions should identify alternative measures to adequately mitigate the risk and document these efforts in the appropriate file.

4. Review, at least annually, the supplier�г��ٸ���Ƶ�s compliance with the contractual requirements and document said review in the contract files. Contract owners should consider consulting with their organizational privacy officer or designated privacy point of contact for input on contracts with privacy implications. Organizational legal officials and/or �г��ٸ���Ƶ Legal Affairs at the �г��ٸ���Ƶ system office should be consulted concerning contract non-compliance. Organizational cybersecurity officials and/or �г��ٸ���Ƶ Cybersecurity at the �г��ٸ���Ƶ system office should be consulted and notified of any potential incident, breach of protected information or non-compliance.

5. �г��ٸ���Ƶ organizations should consider adding �г��ٸ���Ƶ data protection review as part of the contract review and/or routing process to ensure that this review takes place before executing a contract. For example, verification of data protection review could be included on an internal routing/approval sheet. The central office�г��ٸ���Ƶ�s contract routing sheet is attached as an example.
   It is recognized that operational needs and the give-and-take nature of contract negotiations may preclude 100% compliance by suppliers with respect to these provisions. However, �г��ٸ���Ƶ institutions and organizations are nevertheless responsible for ensuring adequate protection of �г��ٸ���Ƶ data analyzed in light of the preponderance of the entire set of supplier and �г��ٸ���Ƶ controls and measures protecting �г��ٸ���Ƶ data.

---

3.5 Personal Use of Institutional Procurement Channels

Last modified: September 5, 2017

Personal use of institutional procurement channels is not permitted. The �г��ٸ���Ƶ Policy Manual states:

Absent a specific and approved exemption, employees of the �г��ٸ���Ƶ System shall not purchase goods or services for personal use through channels used in the purchase of goods and services for the operation of the �г��ٸ���Ƶ System.

3.6 Sales Taxes on Institutional Purchases

Last modified: September 5, 2017

Purchases made by �г��ٸ���Ƶ System of Georgia institutions related to normal campus operations or purchases for resale are not subject to sales taxes. Some purchases utilizing agency funds, however, will be subject to sales taxes. The Georgia Department of Revenue determines what purchases are subject to sales taxes, and should be contacted if an interpretation is required.

Sales tax exemption forms should be provided to vendors to eliminate sales tax from appearing on invoices or from being collected at the time of sale. The timing of when to provide the sales tax exemption form is influenced by the type of purchasing activity. There are two basic types of purchasing activity, as indicated below:

1. Invoiced Sales: Generally these are sales to the institution from vendors that have an ongoing sales relationship with the institution. Once a standard sales tax exemption form has been provided to the vendor, no further action is required. As a normal policy, purchases initiated via purchase order also provide notice to the vendor that it is a tax-exempt sale.

2. Miscellaneous purchases, including petty cash purchases and purchasing card purchases: Without receiving some notification at the time of the sale, these types of sales are likely to appear to be sales to individuals by the vendor and therefore subject to sales tax. It is very important that institutional personnel provide a tax exemption certificate to the vendor at the time of making the purchase. Each institutional procurement office must insure that all personnel making these types of purchases are given adequate instructions and proper forms to eliminate sales taxes from being charged to the institution.

Generic Sales Tax Exemption forms may be obtained from the Georgia Department of Revenue. However, institutions are encouraged to print their own sales tax exemption forms that include institution-specific information such as name, address, and sales tax ID number.

© 2024 Board of Regents of the �г��ٸ���Ƶ System of Georgia
270 Washington Street, S.W.,
Atlanta, Georgia  30334
U.S.A.

↑ Top