D 3 - Contractor Rules of Behavior.pdf
PDF 681 KB Posted
- Attached to
- Q522--FY26: Teleradiology | West Palm Beach
- Solicitation number
- 36C24826Q0307
About this file
This is Attachment Four - Contractor Rules of Behavior from VA Handbook 6500.6, Appendix D, which establishes a user agreement governing contractor access to and use of Department of Veterans Affairs information assets, systems, and facilities.
The document establishes mandatory conduct standards for all VA contractors accessing VA data (electronic or hard copy), information systems, and sites. Contractors must acknowledge they have no reasonable expectation of privacy and consent to monitoring, recording, auditing, and disclosure of their system access by VA Office of Information & Technology staff, the VA Chief Information Officer, and the VA Office of Inspector General. Unauthorized attempts to access, modify, delete, or misuse federal systems are prohibited and subject to criminal, civil, or administrative penalties under 18 U.S.C. §1030 and §2701. Contractors must comply with all VA security and data privacy directives, report security incidents to the Contracting Officer's Technical Representative (COTR), and obtain COTR approval for public dissemination of VA information.
Specific operational requirements include: following established procedures for user account access and closure; using only authorized systems and software; prohibiting use of non-contractor-owned equipment for VA sensitive information without VA CIO approval; protecting passwords and systems from unauthorized access; using only FIPS 140-2 validated encryption; following VA Handbook 6500.1 for electronic media sanitization; not hosting internet servers related to VA access without written COTR authorization; using VA-approved remote access software when direct network connection is unavailable; prohibiting remote access from publicly-available computers; protecting government property and not removing VA sensitive information without authorization; using only VA-authorized anti-virus and firewall software; and completing required security and privacy training. Contractors must ensure subcontractors comply with the same security requirements and accept that these rules do not create enforceable rights in litigation. Original signed acknowledgment must be returned to the COTR within the timeframe specified in the contract.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
ATTACHMENT FOUR (4) -
CONTRACTOR RULES OF BEHAVIOR
VA HANDBOOK 6500.6
APPENDIXD
CONTRACTOR RULES OF BEHAVIOR
This User Agreement contains rights and authorizations regarding my access to and use of any information assets or resources associated with my performance of services under the contract terms with the Department of Veterans Affairs (VA). This User Agreement covers my access to all VA data whether electronic or hard copy ("Data"), VA information systems and resources ("Systems"), and VA sites ("Sites"). This User Agreement incorporates Rules of Behavior for using VA, and other information systems and resources under the contract.
1. GENERAL TERMS AND CONDITIONS FOR ALL ACTIONS AND ACTIVITIES UNDER
THE CONTRACT:
a. I understand and agree that I have no reasonable expectation of privacy in accessing or using any VA, or other Federal Government information systems.
b. I consent to reviews and actions by the Office of Information & Technology (Ol&T) staff designated and authorized by the VA Chief Information Officer (CIO) and to the VA OIG regarding my access to and use of any information assets or resources associated with my performance of services under the contract terms with the VA. These actions may include monitoring, recording, copying, inspecting, restricting access, blocking, tracking, and disclosing to all authorized Ol&T, VA, and law enforcement personnel as directed by the VA CIO without my prior consent or notification.
c. I consent to reviews and actions by authorized VA systems administrators and Information Security Officers solely for protection of the VA infrastructure, including, but not limited to monitoring, recording, auditing, inspecting, investigating, restricting access, blocking, tracking, disclosing to authorized personnel, or any other authorized actions by all authorized Ol&T, VA, and law enforcement personnel.
d. I understand and accept that unauthorized attempts or acts to access, upload, change, or delete information on Federal Government systems; modify Federal government systems; deny access to Federal government systems; accrue resources for unauthorized use on Federal government systems; or otherwise misuse Federal government systems or resources are prohibited.
e. I understand that such unauthorized attempts or acts are subject to action that may result in criminal, civil, or administrative penalties. This includes penalties for violations of Federal laws including, but not limited to, 18 U.S.C. §1030 (fraud and related activity in connection with computers) and 18 U.S.C. §2701 (unlawful access to stored communications).
D-1
File details come from the government source that posted it. Updated .