Common use of REQUIRED STANDARDS, CERTIFICATIONS AND SPECIFICATIONS Clause in Contracts

REQUIRED STANDARDS, CERTIFICATIONS AND SPECIFICATIONS. In addition to any standards and specifications included in the Contract, Supplier shall follow the standards and specifications listed below during performance of this effort. (List any specific Commonwealth, VITA, Federal, engineering, trade/industry or professional standards, certifications and specifications that Supplier is required to follow or possess in performing this work. The first bullet includes a link to COVA-required standards for all Commonwealth technology projects. The rest are examples only and highlighted to reflect this. If you need a waiver of any COVA-required standard, please follow the process located at this link: xxxx://xxx.xxxx.xxxxxxxx.xxx/oversight/default.aspx?id=10344 and select the Data Standards Guidance bulleted link. Your Customer Account Manager can assist you. • COV ITRM Policies and Standards: xxxx://xxx.xxxx.xxxxxxxx.xxx/library/default.aspx?id=537 • IEEE 802® • HIPAA • SAS 70 Type II 16. U.S. ENVIRONMENTAL PROTECTION AGENCY’S AND DEPARTMENT OF ENERGY’S ENERGY STAR GUIDELINESRISK MANAGEMENT (Risk is a function of the probability of an event occurring and the impact of the negative effects if it does occur. Negative effects include schedule delay, increased costs, failure of dependent legacy system interoperability, other project dependencies that don’t align with this project’s schedule, and poor quality of deliverables. Depending on the level of risk of this project, as assessed by your Project Manager and/or Steering Committee, this section may contain any or all of the following components, at a level of detail commensurate with the level of risk. Remember to add them to the Deliverables table.) Contract No. VA-XXXXXX-XXX, Exhibit D

REQUIRED STANDARDS, CERTIFICATIONS AND SPECIFICATIONS. In addition to any standards and specifications included in the Contract, Supplier shall follow the standards and specifications listed below during performance of this effort. (List any specific Commonwealth, VITA, Federal, engineering, trade/industry or professional standards, certifications and specifications that Supplier is required to follow or possess in performing this work. The first bullet includes a link to COVA-required standards for all Commonwealth technology projects. The rest are examples only and highlighted to reflect this. If you need a waiver of any COVA-required standard, please follow the process located at this link: xxxx://xxx.xxxx.xxxxxxxx.xxx/oversight/default.aspx?id=10344 and select the Data Standards Guidance bulleted link. Your Customer Account Manager can assist you. • COV ITRM Policies and Standards: xxxx://xxx.xxxx.xxxxxxxx.xxx/library/default.aspx?id=537 • IEEE 802® • HIPAA • SAS 70 Type II 16. U.S. ENVIRONMENTAL PROTECTION AGENCY’S AND DEPARTMENT OF ENERGY’S ENERGY STAR GUIDELINESRISK MANAGEMENT (Risk is a function of the probability of an event occurring and the impact of the negative effects if it does occur. Negative effects include schedule delay, increased costs, failure of dependent legacy system interoperability, other project dependencies that don’t align with this project’s schedule, and poor quality of deliverables. Depending on the level of risk of this project, as assessed by your Project Manager and/or Steering Committee, this section may contain any or all of the following components, at a level of detail commensurate with the level of risk. Remember to add them to the Deliverables table.) Contract No. VA-XXXXXX-XXX, Exhibit D)

REQUIRED STANDARDS, CERTIFICATIONS AND SPECIFICATIONS. In addition to any standards and specifications included in the Contract, Supplier shall follow the standards and specifications listed below during performance of this effort. (List any specific Commonwealth, VITA, Federal, engineering, trade/industry or professional standards, certifications and specifications that Supplier is required to follow or possess in performing this work. The first bullet includes a link to COVA-required standards for all Commonwealth technology projects. The rest are examples only and highlighted to reflect this. If you need a waiver an exception of any COVA-required standard, please follow the process located at this link: xxxx://xxx.xxxx.xxxxxxxx.xxx/oversight/default.aspx?id=10344 and select the Data Standards Guidance bulleted link. Your Customer Account Manager AITR can assist you. •  COV ITRM Policies and Standards: xxxx://xxx.xxxx.xxxxxxxx.xxx/library/default.aspx?id=537 •  IEEE 802® •  HIPAA •  SAS 70 Type II 1617. U.S. ENVIRONMENTAL PROTECTION AGENCY’S AND DEPARTMENT OF ENERGY’S ENERGY STAR GUIDELINESRISK MANAGEMENT (Risk is a function of the probability of an event occurring and the impact of the negative effects if it does occur. Negative effects include schedule delay, increased costs, failure of dependent legacy system interoperability, other project dependencies that don’t align with this project’s schedule, and poor quality of deliverables. Depending on the level of risk of this project, as assessed by your Project Manager and/or Steering Committee, this section may contain any or all of the following components, at a level of detail commensurate with the level of risk. Remember to add them to the Deliverables table.) Contract No. VA-XXXXXX-XXX, Exhibit D)

REQUIRED STANDARDS, CERTIFICATIONS AND SPECIFICATIONS. In addition to any standards and specifications included in the Contract, Supplier shall follow the standards and specifications listed below during performance of this effort. (List any specific Commonwealth, VITA, Federal, engineering, trade/industry or professional standards, certifications and specifications that Supplier is required to follow or possess in performing this work. The first bullet includes a link to COVA-required standards for all Commonwealth technology projects. The rest are examples only and highlighted to reflect this. If you need a waiver an exception of any COVA-required standard, please follow the process located at this link: xxxx://xxx.xxxx.xxxxxxxx.xxx/oversight/default.aspx?id=10344 and select the Data Standards Guidance bulleted link. Your Customer Account Manager AITR can assist you. • COV ITRM Policies and Standards: xxxx://xxx.xxxx.xxxxxxxx.xxx/library/default.aspx?id=537 • IEEE 802® • HIPAA • SAS 70 Type II 1617. U.S. ENVIRONMENTAL PROTECTION AGENCY’S AND DEPARTMENT OF ENERGY’S ENERGY STAR GUIDELINESRISK MANAGEMENT (Risk is a function of the probability of an event occurring and the impact of the negative effects if it does occur. Negative effects include schedule delay, increased costs, failure of dependent legacy system interoperability, other project dependencies that don’t align with this project’s schedule, and poor quality of deliverables. Depending on the level of risk of this project, as assessed by your Project Manager and/or Steering Committee, this section may contain any or all of the following components, at a level of detail commensurate with the level of risk. Remember to add them to the Deliverables table.) Contract No. VA-XXXXXX-XXX, Exhibit D)

REQUIRED STANDARDS, CERTIFICATIONS AND SPECIFICATIONS. In addition to any standards and specifications included in the Contract, Supplier shall follow the standards and specifications listed below during performance of this effort. (List any specific Commonwealth, VITA, Federal, engineering, trade/industry or professional standards, certifications and specifications that Supplier is required to follow or possess in performing this work. The first bullet includes a link to COVA-required standards for all Commonwealth technology projects. The rest are examples only and highlighted to reflect this. If you need a waiver of any COVA-required standard, please follow the process located at this link: xxxx://xxx.xxxx.xxxxxxxx.xxx/oversight/default.aspx?id=10344 xxxxx://xxx.xxxx.xxxxxxxx.xxx/it-governance/itrm-policies-standards/ and select the Data Standards Guidance bulleted link. Your Customer Account Manager can assist you. • COV ITRM Policies and Standards: xxxx://xxx.xxxx.xxxxxxxx.xxx/library/default.aspx?id=537 xxxxx://xxx.xxxx.xxxxxxxx.xxx/it-governance/itrm-policies- standards/ • IEEE 802® • HIPAA • SAS 70 Type II 1617. U.S. ENVIRONMENTAL PROTECTION AGENCY’S AND DEPARTMENT OF ENERGY’S ENERGY STAR GUIDELINESRISK MANAGEMENT (Risk is a function of the probability of an event occurring and the impact of the negative effects if it does occur. Negative effects include schedule delay, increased costs, failure of dependent legacy system interoperability, other project dependencies that don’t align with this project’s schedule, and poor quality of deliverables. Depending on the level of risk of this project, as assessed by your Project Manager and/or Steering Committee, this section may contain any or all of the following components, at a level of detail commensurate with the level of risk. Remember to add them to the Deliverables table.) Contract No. VA-XXXXXX-XXX, Exhibit D)