HSIN-Intelligence Portal - Center for Investigative Reporting

More documents

Recommendations

Info

$J1L(lO~ \~ ~~ - Center for Investigative Reporting$

FOROFFICIALUSEONLYPrivacy Impact AssessmentIntelligence&Analysis,HSINIntelligencePage248.5 How are the actual assignments of roles and rules verifiedaccording to established security and auditing procedures?(b)(2) High8.6 What auditing measures and technical safeguards are in place toprevent misuse of data?(b)(2) HighFOROFFICIALUSEONLY
FOROFFICIALUSEONLYmetadata.(b)(2) HighPrivacy Impact AssessmentIntelligence&Analysis,HSINIntelligencePage25I&A does not include U.S. person information in this8.7 Describe what privacy training is provided to users either generallyor specifically relevant to the functionality of the program orsystem?All DHS personnel having access to HS SLIC must conduct their activities in accordance with theguidance provided in DHS memorandum, Intelligence Oversight Basics, dated March 27, 2006. Thememorandum describes core concepts related to I&A’s mission, and the collection, retention, anddissemination of information about U.S. persons. DHS users also have access to system training thatincludes discussion of privacy aspects of the system, including required I&A annual training on EO 12333.Non-DHS intelligence professionals within the HS SLIC, who are also employed elsewhere within theIntelligence Community, have similar requirements for intelligence oversight training in accordance withExecutive Order 12333. State and local authorities have their own training programs that are used to teachstaff how to comply with issued guidance (see above at 5.6).8.8 Is the data secured in accordance with FISMA requirements? IfThe Certification and Accreditation process is currently being conducted. An Authority to Operateis expected to be granted before January 31, 2008. The platform will not be utilized in operational formuntil that approval to operate is obtained.8.9 Privacy Impact AnalysisAccess to the portions of HSIN-Intelligence containing sensitive PII is controlled and protected by anumber of technical, procedural, and policy-based safeguards, including, (b)(2) HighAccess is rolebased,and eligibility is reviewed for accuracy. Auditing is used to monitor system use. Overall, thesesafeguards adequately protect against inappropriate access to and use of information in the system.Auditing was a major portion of the need for an infrastructure solution separate from the legacyHSIN technology platform. Using the (b)(2) High technology, I&A will be able to perform its mission with arobust compliment of tools to maintain user access control and ensure appropriate conduct by users on theHSIN-Intelligence platform.Section 9.0 Technology9.1 Was the system built from the ground up or purchased andinstalled?HSIN-Intelligence was developed by (b)(2) High The majority of the system was base capabilityprovided to all (b)(2) High customers. However, the I&A secure portal Statement of Work required thecontractor to build additional features.FOROFFICIALUSEONLY
Page 5 and 6: FOROFFICIALUSEONLYPrivacy Impact As
Page 11: FOROFFICIALUSEONLYPrivacy Impact As
Page 18 and 19: 5.7 Privacy Impact AnalysisFOROFFIC
Page 28 and 29: Responsible OfficialsFOROFFICIALUSE

HSIN-Intelligence Portal - Center for Investigative Reporting

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?