ATTACHMENT A VA HANDBOOK 6500.6 APPENDIX B.pdf

This document is a VA Acquisition Regulation Solicitation Provision and Contract Clause dated March 12, 2010, specifically focusing on Information and Information Technology Security Requirements. The document outlines a contract clause designed to address data breach threats and ensure compliance with federal laws and regulations regarding sensitive information handling for VA-owned and contractor-owned systems.

The clause requires contractors, their personnel, and subcontractors to adhere to federal laws, regulations, standards, and VA directives concerning information system security. It mandates that VA Sensitive Information or Information Technology that will be accessed or utilized must follow specific security requirements, with the Contracting Officer (CO) required to insert a security clause for Unclassified Information Technology Resources as specified in section 852.273-75.