Each OIG investigation is assigned a case number and all records relating to a particular investigation are filed and retrieved by that case number. Records may also be retrieved from the system by the name of an individual. Safeguards: Electronic records are maintained on secure NASA servers and protected in accordance with all Federal standards and those established in NASA regulations at 14 CFR 1212.605. Additionally, server and data management environments employ infrastructure encryption technologies both in data transmission and at rest on servers. Electronic messages sent within and outside of the Agency that convey sensitive data are encrypted and transmitted by staff via pre-approved electronic encryption systems as required by NASA policy. Approved security plans are in place for information systems containing the records in accordance with the Federal Information Security Management Act of 2002 (FISMA) and OMB Circular A-130, Management of Federal Information Resources. Only authorized personnel requiring information in the official discharge of their duties are authorized access to records through approved access or authentication methods. Access to electronic records is achieved only from workstations within the NASA Intranet or via a secure Virtual Private Network (VPN) connection that requires hardware token authentication or via employee PIV badge authentication from computers. Non-electronic records are secured in locked rooms or files. Retention and Disposal: Records are maintained in Agency files and destroyed in accordance with NASA Procedural Requirements (NPR) 1441.1, NASA Records Management Program Requirements, and NASA Records Retention Schedules (NRRS) 1441.1, Schedule 9. System Manager and Address:
Each OIG investigation is assigned a case number and all records relating to a particular investigation are filed and retrieved by that case number. Records may also be retrieved from the system by the name of an individual. Safeguards: Electronic records are maintained on secure NASA servers and protected in accordance with all Federal standards and those established in NASA regulations at 14 CFR 1212.605. Additionally, server and data management environments employ infrastructure encryption technologies both in data transmission and at rest on servers. Electronic messages sent within and outside of the Agency that convey sensitive data are encrypted and transmitted by staff via pre-approved electronic encryption systems as required by NASA policy. Approved security plans are in place for information systems containing the records in accordance with the Federal Information Security Management Act of 2002 (FISMA) and OMB Circular A-130, Management of Federal Information Resources. Only authorized personnel requiring information in the official discharge of their duties are authorized access to records through approved access or authentication methods. Access to electronic records is achieved only from workstations within the NASA Intranet or via a secure Virtual Private Network (VPN) connection that requires hardware token authentication or via employee PIV badge authentication from computers. Non-electronic records are secured in locked rooms or files. Retention and Disposal: Records are maintained in Agency files and destroyed in accordance with NASA Procedural Requirements (NPR) 1441.1, NASA Records Management Program Requirements, and NASA Records Retention Schedules (NRRS) 1441.1, Schedule 9. System Manager and Address:
nasa_10igic_-_2015.docx