2.d. How will the new data be Since this is privacy data about an individual that was verified for relevance and not provided by the individual, the relevance and accuracy? accuracy is very important. Provide details on processes used to verify this information. Validation Rules and Agency certification 3.a. If the data is being Enter N/A if the data is not being consolidated. consolidated, what controls are in Otherwise describe the controls used to ensure that place to protect the data and aggregated or consolidated privacy data remains prevent unauthorized access? protected. Explain. The public can only view the information in the fields made available to the public. No one except those who have user names and passwords and the right privileges can alter data or view protected fields of data. Agency system administrators control usernames, passwords and user privileges to the FPDS-NG. Once protected there is no way to consolidate the data in a way that would the data. “expose” 3.b. If processes are being Enter N/A if the processes are not being consolidated. consolidated, are the proper Otherwise describe the controls used to ensure that controls remaining in place to aggregated or consolidated privacy data remains protect the data and prevent protected. unauthorized access? Explain. The public can only view the information in the fields made available to the public. No one except those who have user names and passwords and the right privileges can alter data or view protected fields of data. Agency system administrators control usernames, passwords and user privileges to the FPDS-NG. Once protected there is no way to consolidate the data in a way that would the data. “expose” 4. How will the data be retrieved? Explain all processes for retrieving the data. If personal Can it be retrieved by personal identifiers (i.e. name, SSN, employee number, etc.) are identifier? If yes, explain. used, list the identifiers. The Taxpayer Identification Number (TIN) is not available for any reports, since are sometimes the TIN’s same number as the SSN of an individual who is a government contractor. Only information provided by the contractor or someone entering data into CCR for the contractor is potentially available through FPDS-NG. Pre-2004 data consists of contractor names, addresses and Duns numbers which were made available through
2.d. How will the new data be verified for relevance and accuracy? Since this is privacy data about an individual that was not provided by the individual, the relevance and accuracy is very important. Provide details on processes used to verify this information. Validation Rules and Agency certification 3.a. If the data is being consolidated, what controls are in place to protect the data and prevent unauthorized access? Explain. Enter N/A if the data is not being consolidated. Otherwise describe the controls used to ensure that aggregated or consolidated privacy data remains protected. The public can only view the information in the fields made available to the public. No one except those who have user names and passwords and the right privileges can alter data or view protected fields of data. Agency system administrators control usernames, passwords and user privileges to the FPDS-NG. Once protected there is no way to consolidate the data in a way that would “expose” the data. 3.b. If processes are being consolidated, are the proper controls remaining in place to protect the data and prevent unauthorized access? Explain. Enter N/A if the processes are not being consolidated. Otherwise describe the controls used to ensure that aggregated or consolidated privacy data remains protected. The public can only view the information in the fields made available to the public. No one except those who have user names and passwords and the right privileges can alter data or view protected fields of data. Agency system administrators control usernames, passwords and user privileges to the FPDS-NG. Once protected there is no way to consolidate the data in a way that would “expose” the data. 4. How will the data be retrieved? Can it be retrieved by personal identifier? If yes, explain. Explain all processes for retrieving the data. If personal identifiers (i.e. name, SSN, employee number, etc.) are used, list the identifiers. The Taxpayer Identification Number (TIN) is not available for any reports, since TIN’s are sometimes the same number as the SSN of an individual who is a government contractor. Only information provided by the contractor or someone entering data into CCR for the contractor is potentially available through FPDS-NG. Pre-2004 data consists of contractor names, addresses and Duns numbers which were made available through