Attachment 1 D.1 - VA Rules of Behavior.pdf

This document is the VA Rules of Behavior, which outlines the expected conduct and responsibilities for users of the Department of Veterans Affairs information systems and data.

The key details are:

• The rules apply to all VA employees, contractors, volunteers, trainees, and other authorized users who access VA information and information systems.
• Users must protect the confidentiality, integrity, and availability of VA information and information systems.
• Users must comply with all VA information security policies, standards, and procedures.
• Users are responsible for safeguarding their account credentials and must not share or disclose them.
• Users must report any suspected security incidents, compromises, or policy violations.
• Violations of the rules may result in disciplinary action, up to and including termination of employment or contract, and potential criminal penalties.