Appendix B.pdf

This is an appendix to VA Handbook 6500.6 containing VA Acquisition Regulation solicitation provisions and contract clauses related to information and information technology security requirements, dated March 12, 2010.

The document establishes two primary security-related contract clauses for VA contracts. The first clause (839.201) addresses Information and Information Technology Security requirements, mandating that VA include security provisions in solicitations and contracts where VA Sensitive Information or Information Technology will be accessed or utilized. These provisions are designed to protect against data breaches, compromise, or loss of information on VA-owned or contractor-owned systems and to ensure compliance with applicable Federal laws and regulations. The second clause (852.273-75) prescribes specific Security Requirements for Unclassified Information Technology Resources, requiring that contractors, their personnel, and subcontractors comply with all Federal laws, regulations, standards, and VA Directives and Handbooks regarding information and information system security as delineated in the contract. The document notes that this clause language was undergoing official rulemaking and would be submitted for public review through the Federal Register, with potential modifications to final wording based on public comment and review by the Office of Acquisitions and Logistics.