Due to the threat of data breach or loss of information that resides on either VA-owned or contractor-owned systems, and to comply with federal laws and regulations, VA has developed an Information and Information Technology Security clause to be used when VA information is used, stored, generated, transmitted, or exchanged by and between VA and a contractor, subcontractor or a third party in any format (e.g., paper, microfiche, electronic or magnetic portable media).
In solicitations and contracts where VA Information and/or Information Technology will be accessed or utilized, the contracting officer shall insert the clause found at 852.273-75, Security Requirements for Unclassified Information Technology Resources.
