VA Security Requirements.docx

?.## VA Security Requirements

The contractor, their personnel, and their subcontractors shall be subject to the Federal laws, regulations, standards, and VA Directives and Handbooks regarding information and information system security as delineated in this contract. The contractor shall complete and comply with the Contractors Rules of Behavior.

Confidentiality and Non-Disclosure This equipment does connect to a VA network. Therefore, in accordance with Appendix A, Handbook 6500.6 Checklist, block 6, the C&A requirements do apply to this requirement, and a Security Accreditation Package is required.

This equipment does hold or store patient information. Therefore, in accordance with Appendix A, Handbook 6500.6 Checklist block 7, Appendix B and C provisions apply.

Appendix B: The contractor, their personnel, and their subcontractors shall be subject to the Federal laws, regulations, standards, and VA Directives and Handbooks regarding information and information system security as delineated in this contract.

Appendix C: VA will own this equipment. If vendor needs access during delivery, assembly, install or repair, the contractor shall be escorted by a VA employee to ensure there is no exposure to VA sensitive information. If the contractor is required to be on site for more than two consecutive days, VHA Privacy Training, TMS Course VA10203, is required and available at https://www.tms.va.gov/SecureAuth35/. The contractor will provide all consumable supplies necessary for training and competency assessment of hospital staff. Proof of training will be provided to the COR upon request.