1733Sa1.pdf

DALLAS REGIONAL PRINTING

PROCUREMENT OFFICE

U.S Courthouse & Federal Office Building

1100 Commerce Street, Room 731 Dallas, TX 75242-1027 www.gpo.gov

November 2, 2010

Dear Bidder:

This is Amendment No. 1. The specifications in our invitation for bids on Program 1733-S, scheduled for opening at 2 p.m., November 29, 2010, are amended as follows. The bid opening date is not extended.

Replace the second sentence in the sixth paragraph (Information System) on page 8 of the specifications with the following:

The contractor shall ensure their information system is configured and managed to meet the minimum recommendations described in NIST Special Publication (SP) 800-53 (Recommended Security Controls for Federal Information Systems) and VA Handbook 6500.2 (Management of Security and Privacy Incidents) (available at http://www1.va.gov/vapubs ). It has been determined that the VA information processed is defined in the following categories – Sensitive Personal Information (SPI) and Regulatory/Program Specific Information – therefore the levels of security must be set for a high-impact information system.

Replace item (c) and add the following to the fifth paragraph (Federal Laws, Policies, Regulations and Guidance Related to Federal Data Management) on page 12 of the specifications:

(c) Federal Information Security Management Act (FISMA) (available at http://www.fisma.gov ).

(j) VA Directive 5400 (Information Security Program) (available at http://www1.va.gov/vapubs ).

(k) VA Directive and Handbook Series 0710 (available at http://www1.va.gov/vapubs ).

Add the following paragraph after the fourth paragraph (Business Continuity Plans) on page 13 of the specifications:

TRAINING: All contractor personnel requiring access to VA information and VA information systems shall complete the following before being granted access to VA information and networks.

(a) Sign and acknowledge understanding of and responsibilities for compliance with the National Rules of Behavior related to access to VA information and information systems.

(b) Successfully complete VA Cybersecurity Awareness training and annual refresher training which will be due within one month of the beginning of any contract option year.

(c) Successfully complete VA General Privacy training and annual refresher training which will be due within one month of the beginning of any contract option year.

(d) Successfully complete any additional cybersecurity or privacy training as required for VA personnel with equivalent information system access.

The contractor will provide the VA COTR with a copy of the training certificates for each applicable employee within 30 days of beginning work on the contract. Certificates for refresher training will be due within one month of the beginning of any contract option year. Courses are available through the online VA Learning Management System. Access to the website will be coordinated with the VA COTR.

All other specifications remain the same.

If amendment is not acknowledged on bid, direct acknowledgement to:

U.S. Government Printing Office Dallas Regional Printing Procurement Office U.S Courthouse & Federal Office Building 1100 Commerce Street, Room 731 Dallas, TX 75242-1027

Telephone acknowledgement of this amendment is not acceptable.

BIDDER MUST ACKNOWLEDGE RECEIPT OF THIS AMENDMENT PRIOR TO BID OPENING.

Failure to acknowledge receipt of amendment, by amendment number, prior to bid-opening time, may be reason for bid being declared nonresponsive.

Sincerely, KELLE J. CHATHAM

Contracting Officer