36C25618Q0306-002.docx

36C25618Q0306

Attachment 4

SOURCE REFRENCE DOCUMENTS

Performance of the tasks associated with this PWS, the Contractor shall comply with the following:

NOTE: These documents are referenced throughout the PWS. Contractor can find these documents on the internet.

1. FIPS Pub 201-2, “Personal Identity Verification of Federal Employees and Contractors,” August 2013

2. 5 U.S.C. § 552a, as amended, “The Privacy Act of 1974”

3. VHA Handbook 1907.01,“Health Information Management and Health Records,” July 14, 2014

4. VHA Handbook 1907.07,”Management of Health Records File Room and Scanning,” May 12, 2016

5. VHA HIM Fact Sheet,”Non-VA Medical Care – VistA Imaging Capture,” March 2015

6. 24VA10P2,”Patient Medical Records-VA,” Record Retention Specification

7. VA Directive 0710, “Personnel Suitability and Security Program,” June 4, 2010, http://www.va.gov/vapubs/

8. VA Directive 6500, “Managing Information Security Risk: VA Information Security Program,” September 20, 2012

9. VA Handbook 6500, “Risk Management Framework for VA Information Systems – Tier 3: VA Information Security Program,” March 10, 2015

10. VA Handbook, 6300.1, Records Management Procedures, March 24, 2010

11. NIST SP 800-116, A Recommendation for the Use of Personal Identity Verification (PIV) Credentials in Physical Access Control Systems, November 20, 2008

12. OMB Memorandum M-07-16, Safeguarding Against and Responding to the Breach of Personally Identifiable Information, May 22, 2007

13. Office of Information Security (OIS) VAIQ #7424808 Memorandum, “Remote Access”, January 15, 2014, https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28 VA119-17-A-0229

14. VA Memorandum “Mandatory Use of PIV Multifactor Authentication to VA Information System” (VAIQ# 7613595), June 30, 2015, https://www.voa.va.gov/DocumentListPublic.aspx?NodeId=28

15. Sections 504 and 508 of the Rehabilitation Act (29 U.S.C. § 794d), as amended by the Workforce Investment Act of 1998 (Public Law (P.L.) 105-220), August 7, 1998