D.2 VA HANDBOOK 6500.6, APPENDIC D, CONTRACTOR RULES OF BEHAVIOR.pdf

This document is a VA Handbook 6500.6 Appendix D User Agreement detailing rules of behavior for contractors accessing VA information systems and resources. The document outlines comprehensive security and privacy guidelines that contractors must follow, including: granting system access only to those with an official need to know, protecting passwords, using only authorized systems and software, encrypting sensitive information, following VA electronic media sanitization protocols, and completing required security training.

Key provisions include prohibitions against exploiting system controls, disabling security software, hosting unauthorized servers, and taking VA sensitive information from the workplace without authorization. Contractors must use VA systems strictly to fulfill contract terms, report security incidents, and comply with VA security directives. The document concludes with an acknowledgment section requiring contractors to sign and return the agreement, affirming their understanding and acceptance of these information security requirements.