review and support required to The employees from the resolve identified findings. consolidated data center with access to FTI, including system administrators and programmers, The agency will conduct an internal must receive disclosure awareness inspection of the consolidated data training prior to access to FTI and center every eighteen months (see annually thereafter and sign a section 6.3). Multiple agencies confidentiality statement. This sharing a consolidated data center provision also extends to any may partner together to conduct a Vendors hired by the consolidated single, comprehensive internal data center that has access to FTI. inspection. However, care should be taken to ensure agency representatives do not gain The specific data breach incident unauthorized access to other reporting procedures for all agency’s FTI during the internal consolidated data center employees inspection. and Vendors. The required disclosure awareness training must include a review of these procedures.
review and support required to resolve identified findings. The agency will conduct an internal inspection of the consolidated data center every eighteen months (see section 6.3). Multiple agencies sharing a consolidated data center may partner together to conduct a single, comprehensive internal inspection. However, care should be taken to ensure agency representatives do not gain unauthorized access to other agency’s FTI during the internal inspection. The employees from the consolidated data center with access to FTI, including system administrators and programmers, must receive disclosure awareness training prior to access to FTI and annually thereafter and sign a confidentiality statement. This provision also extends to any Vendors hired by the consolidated data center that has access to FTI. The specific data breach incident reporting procedures for all consolidated data center employees and Vendors. The required disclosure awareness training must include a review of these procedures.
SIMM-45A-IVV-SOW_2017-0808-1.docx