Attachment 4: CONTRACTOR RULES OF BEHAVIOR

Department of Veterans Affairs
Washington, DC 20420

VA HANDBOOK 6500.6

Transmittal Sheet

MARCH 12, 2010

CONTRACT SECURITY

1. REASON FOR ISSUE: This Handbook establishes the procedures to implement security policy, and communicate responsibilities and departmental framework for the Department of Veterans Affairs (VA) contracts and acquisitions.
2. SUMMARY OF CONTENTS/MAJOR CHANGES: This Handbook establishes VA’s procedures, responsibilities, and processes for implementing security in appropriate contracts and acquisitions. This Handbook applies to all VA Administration and Staff Offices and pertains to VA sensitive information which is stored, generated, transmitted or exchanged by VA, a contractor, subcontractor or a third party, or on behalf of any of these entities regardless of format or whether it resides on a VA system or contractor or subcontractor’s electronic information system(s) operating for or on the VA’s behalf. 3. RESPONSIBLE OFFICE: The Office of the Assistant Secretary for Information and Technology (OI&T) (005).
4. RELATED DIRECTIVE: VA Directive 6500, Information Security Program. 5. RESCISSIONS: None.

CERTIFIED BY:

BY DIRECTION OF THE SECRETARY

VETERANS AFFAIRS:

/S/
Roger W. Baker
Assistant Secretary for Information
and Technology

/S/
Roger W. Baker
Assistant Secretary for Information
and Technology

Distribution: Electronic Only.

VA HANDBOOK 6500.6

MARCH 12, 2010

CONTRACT SECURITY

PARAGRAPH

PAGE

1.

2.

3.

4.

a.
b.
c.
d.
Associate Deputy Assistant Secretary for Acquisition and Logistics Programs & e.
f.
g.
h.
i.
Associate Deputy assistant Secretary for Risk Management & Incident Response .. 10 j.
k.
l.
n.
o.
p.
Contracting Officers (COs)-Contracting Officer’s Technical Representatives

5.

6.

7.

LIST OF APPENDICES

APPENDIX A: Checklist for Information Security in the Initiation Phase of Acquisition

A-1

APPENDIX B: VA Acquisition Regulation Solicitation Provision and Contract Clause

B-1

APPENDIX C: VA Information and Information System Security/Privacy Language for Inclusion into Contracts, as Appropriate

C-1

APPENDIX D: Contractor Rules of Behavior

D-1

VA HANDBOOK 6500.6

MARCH 12, 2010

CONTRACT SECURITY

1. PURPOSE AND SCOPE

a. This handbook establishes the security requirements, procedures, responsibilities, and departmental framework for ensuring that security is included in appropriate Department of Veterans Affairs (VA) contracts and acquisitions.
b. This handbook applies to all VA contracts in which VA sensitive information is stored,