System Owners and information owners are responsible for ensuring If the information system is information is used and managed consistently for its stated purpose in operated in more than one support of the organization. Please describe processes, procedures, site, how will consistent use software tools, etc. that are used to support this goal. of the information be ensured at all sites? Records Management Enter the record item(s) and the corresponding record description(s) Identify the record(s). and disposition(s) for the retention and disposal. Check appropriately and cite as required. Identify the specific disposition authority(ies) that correspond to the record(s) □ Unscheduled □ Scheduled (cite NARA authority(ies) below) noted in no. 22. Provide name, contact e-mail and phone number for the records Records Contact contact who assisted with questions 22 and 23 ACCESS, SAFEGUARDS & SECURITY Please refer to of DOE Cyber your organization’s implementation Security Directives and Senior DOE Management Program Cyber Security Plans (PCSP). For example: "The System Owner has What controls are in place to implemented and tested all baseline security controls appropriate to its protect the data from FIPS categorization in accordance with the Senior DOE Management unauthorized access, PCSP and DOE Directives. The system was certified and accredited modification or use? (provide date(s)) and found to have mitigated risk to an acceptable level." of individuals who will have access to the PII data. List Roles Only Who will have access to PII Point to current access control list(s) (with version), but Please Do Not data? List Names Here. For example, will users have access to all data on the information How is access to PII data system or will the access be restricted? user’s determined? Do other information systems Many information systems interconnect and share data. Please share data or have access to identify all systems that connect to and access information on this the data in the system? If yes, system. explain.
If the information system is operated in more than one site, how will consistent use of the information be ensured at all sites? System Owners and information owners are responsible for ensuring information is used and managed consistently for its stated purpose in support of the organization. Please describe processes, procedures, software tools, etc. that are used to support this goal. Records Management Identify the record(s). Enter the record item(s) and the corresponding record description(s) and disposition(s) for the retention and disposal. Identify the specific disposition authority(ies) that correspond to the record(s) noted in no. 22. Check appropriately and cite as required. □ Unscheduled □ Scheduled (cite NARA authority(ies) below) Records Contact Provide name, contact e-mail and phone number for the records contact who assisted with questions 22 and 23 ACCESS, SAFEGUARDS & SECURITY What controls are in place to protect the data from unauthorized access, modification or use? Please refer to your organization’s implementation of DOE Cyber Security Directives and Senior DOE Management Program Cyber Security Plans (PCSP). For example: "The System Owner has implemented and tested all baseline security controls appropriate to its FIPS categorization in accordance with the Senior DOE Management PCSP and DOE Directives. The system was certified and accredited (provide date(s)) and found to have mitigated risk to an acceptable level." Who will have access to PII data? List Roles Only of individuals who will have access to the PII data. Point to current access control list(s) (with version), but Please Do Not List Names Here. How is access to PII data determined? For example, will users have access to all data on the information system or will the user’s access be restricted? Do other information systems share data or have access to the data in the system? If yes, explain. Many information systems interconnect and share data. Please identify all systems that connect to and access information on this system.
PIA%20Template%20August%202017%20%28Final%29.docx