OVERSIGHT Basic Enhanced Best Practice Barriers ENERGY VENDOR GOAL: ENSURE VENDOR PERFORMANCE THROUGH DOCUMENTATION AND MONITORING OVERSIGHT Strategy Signed vendor agreement Signed vendor agreement or Signed vendor agreement or • large number of or written assurance that written assurance with written assurance with vendors vendor is providing occasional vendor monitoring regular vendor monitoring • small vendors equitable benefits and and documentation that and documentation that • staff resources service delivery. vendor is providing equitable vendor is providing equitable • capacity and capability benefits and service delivery. benefits and service delivery • lack of vendor offices to with additional monitor documentation. • politics • vendor participation Initial Cost moderate - high moderate high Operational Cost moderate moderate high Client Burden low low low CONFIDENTIALITY GOAL: ENSURE SECURITY OF ALL SYSTEMS AND DATA THEREIN AND DATA SECURITY Strategy Maintain a secure system Maintain a secure system with Maintain a secure system with • technical expertise with written procedures on written procedures on sharing written procedures on sharing • funding sharing and handling and handling confidential and handling confidential • lack of HHS policy confidential data, signed data, signed security data, signed security • maintaining agreements security agreements and agreements and password agreements and password • staff turnover password protection protection (where applicable); protection (where applicable); (where applicable); meets meets industry standards. meets industry standards. industry standards. Each grantee and subgrantee Each grantee and subgrantee has written plan for managing has written plan for managing data security. data security. Grantee monitors data security. Initial Cost high high high Operational Cost moderate moderate high Client Burden low low low
OVERSIGHT Basic Enhanced Best Practice Barriers ENERGY VENDOR OVERSIGHT GOAL: ENSURE VENDOR PERFORMANCE THROUGH DOCUMENTATION AND MONITORING Strategy Signed vendor agreement or written assurance that vendor is providing equitable benefits and service delivery. Signed vendor agreement or written assurance with occasional vendor monitoring and documentation that vendor is providing equitable benefits and service delivery. Signed vendor agreement or written assurance with regular vendor monitoring and documentation that vendor is providing equitable benefits and service delivery with additional documentation. • large number of vendors • small vendors • staff resources • capacity and capability • lack of vendor offices to monitor • politics • vendor participation Initial Cost moderate - high moderate high Operational Cost moderate moderate high Client Burden low low low CONFIDENTIALITY AND DATA SECURITY GOAL: ENSURE SECURITY OF ALL SYSTEMS AND DATA THEREIN Strategy Maintain a secure system with written procedures on sharing and handling confidential data, signed security agreements and password protection (where applicable); meets industry standards. Maintain a secure system with written procedures on sharing and handling confidential data, signed security agreements and password protection (where applicable); meets industry standards. Each grantee and subgrantee has written plan for managing data security. Maintain a secure system with written procedures on sharing and handling confidential data, signed security agreements and password protection (where applicable); meets industry standards. Each grantee and subgrantee has written plan for managing data security. Grantee monitors data security. • technical expertise • funding • lack of HHS policy • maintaining agreements • staff turnover Initial Cost high high high Operational Cost moderate moderate high Client Burden low low low