36C24420I0363-003.docx

SECURITY REQUIREMENT

The COR is responsible for ensuring that all Contractors comply with physical security policies. A compliant ID badge must be worn by Contractors at all times while on VA premises.

Contractor may not have access to the VA network or any VA sensitive information under this contract.

All Contractors must receive Privacy training annually using one of the following methods:

• Complete “VA Privacy Training for Personnel without Access to VA Computer Systems or Direct Access to or Use to VA Sensitive Information” training by using VA’s TMS system (https://www.tms.va.gov/SecureAuth35/). Contractors may use the TMS Managed Self Enrollment method to complete the training in TMS. The COR must ensure that all contractors are validated in the PIH domain.

• Complete the hard copy version of “VA Privacy Training for Personnel without Access to VA Computer Systems or Direct Access to or Use to VA Sensitive Information”. Signed training documents must be submitted to the COR.

Training must be completed prior to the performance of the contract and annually thereafter. Proof of training completion must be verified and tracked by the COR.