Attachment 7: MOU-ISA Template OEM Must Have Existing MOU-ISA

FOR OFFICIAL USE ONLY

Xpiren

MEMORANDUM OF UNDERSTANDING AND

INTERCONNECTION SECURITY AGREEMENT

Between
And

[VA Organization 1]
[Organization 2]

[September 9, 2020]
[Version 2.0]

i

O F F I C E O F I N F O RM AT ION S E C UR IT Y

FOR OFFICIAL USE ONLY

Template color key (This Text Box to be removed from final draft) Black text: boilerplate text that has been approved by VA management and must remain in document (flag/ comment on any areas of concern to discuss with the VA) [VA Organization 1]: Replace with name of the VA organization (can be performed by a find and replace all (CTRL+H)
[Organization 2]: Replace with name of non-VA organization / company name [VA Organization 1’s System]: Replace with correct name of system or informational asset [Organization 2’s System]: Replace with correct name of system or informational asset Blue text: replace with appropriate text and change to black once done Green text: this is informational/instructional text that should be removed from final draft Last – Update the Document Control Change Sheet to reflect the most recent status changes of the MOU/ISA.

ii

O F F I C E O F I N F O RM AT ION S E C UR IT Y

FOR OFFICIAL USE ONLY

DOCUMENT CONTROL CHANGE SHEET

Date

iii

Filename/Version #

Authors

Revision Description

09/09/2020

Template 2.0

Joseph Decoteau/Leigh
Zirbel/Crystal White/James
Mark McGee

Update VA Template and
release new version to the field.

MM/DD/YYYY

Example: [Organization 2] ABCVHA MOU ISA 1.0

VA POC Name / Org 2 POC
Name
[Include 2 Authors: VA and
Organization 2 point of contact
(POC) who drafted this
document]

[Indicate New Agreement or
Description of revision to
existing agreement]

O F F I C E O F I N F O RM AT ION S E C UR IT Y

FOR OFFICIAL USE ONLY

1.1

2.1

2.2

2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7

3.1

3.2

3.3

3.1.1
3.1.2

3.2.10
3.2.11
3.2.12

iv

O F F I C E O F I N F O RM AT ION S E C UR IT Y

INTRODUCTION

FOR OFFICIAL USE ONLY

The purpose of this document is to establish a management agreement between [VA Organization 1] and [Organization 2] regarding the development, management, operation, and security of a system interconnection between [VA Organization 1 System], owned or leased by [VA Organization 1], and [Organization 2 System], owned or leased by [Organization 2]. This agreement will govern the relationship between [VA Organization 1] and [Organization 2], including designated managerial and technical staff, in the absence of a common management authority. [VA Organization 1] utilizes a Memorandum of Understanding (MOU) to document the terms and