Department of Veterans Affairs Acquisition Regulation (VAAR) Contract Clause—Information and Information Systems Security

As a result of final rule, RIN 2900-AQ41 posted to the Federal Register 88FR4739 on January 25, 2023, VAAR case 2015-V016, this is a request from the Department of Veterans Affairs (VA) for OMB approval of a new Information Collection (IC). Under Public Law 113-283, Federal Information Security Modernization Act of 2014, each agency of the Federal Government must provide security for the information and information systems that support the operations and assets of the agency, including those provided or managed by another agency, contractor, or other source. In order for VA to comply with Public Law 113-283, Federal Information Security Modernization Act of 2014, VA developed VAAR clause, 852.204-71, Information and Information System Security, and a new section 804.1970, Information security policy—contractor general responsibilities. The clause and the section contain the following information collection requirements from the public.

The latest form for Department of Veterans Affairs Acquisition Regulation (VAAR) Contract Clause—Information and Information Systems Security expires 2026-04-30 and can be found here.