Assessment Objective

Determine if:

• PM-24 a Data Integrity Board is established;
  • PM-24a. the Data Integrity Board reviews proposals to conduct or participate in a matching program;
  • PM-24b. the Data Integrity Board conducts an annual review of all matching programs in which the agency has participated.

Assessment Methods

Examine

• Privacy program plan
• privacy program documents relating to the Data Integrity Board, including documents establishing the board, its charter of operations, and any plans and reports
• computer matching agreements and notices
• information sharing agreements
• memoranda of understanding
• records documenting annual reviews
• governing requirements, including laws, executive orders, regulations, standards, and guidance

Interview

• members of the Data Integrity Board (e.g., the chief information officer, senior information security officer, senior agency official for privacy, and agency Inspector General)

Saincheisteanna nasctha

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final