14 - VA Handbook 6500_6 - 3_12_10 FOR RLP.pdf

This document is the VA Handbook 6500.6, dated March 12, 2010, focusing on contract security requirements for the Department of Veterans Affairs (VA). The handbook establishes comprehensive security protocols for VA contracts involving sensitive information, covering procedures for information security, privacy protection, and contractor responsibilities. Key requirements include:

The handbook mandates that contractors and subcontractors comply with federal laws, VA directives, and security standards when handling VA sensitive information. It outlines specific obligations such as conducting background investigations, completing security training, implementing appropriate security controls, reporting security incidents, and protecting VA information systems. The document provides detailed guidelines for information system hosting, operation, maintenance, use, and incident investigation, with a strong emphasis on preventing unauthorized access, disclosure, or misuse of VA data and systems.