VA Handbook 6500.6 Appendix B.pdf

This is an appendix containing VA acquisition regulation solicitation provisions and contract clauses from VA Handbook 6500.6, dated March 12, 2010.

The document prescribes information and information technology security requirements for VA contracts. It establishes that contractors, their personnel, and subcontractors must comply with Federal laws, regulations, standards, and VA Directives and Handbooks regarding information and information system security as delineated in the contract. The clause applies to solicitations and contracts where VA Sensitive Information or Information Technology will be accessed or utilized. The security requirements reference 852.273-75 (Security Requirements for Unclassified Information Technology Resources, Interim-October 2008) and are intended to protect against data breaches, compromise, or loss of information residing on VA-owned or contractor-owned systems. This is a template provision for insertion into VA solicitations and contracts and does not address specific products, services, response dates, or pricing terms.