Assessment Objective
Determine if:
- PT-08a. approval to conduct the matching program is obtained from the Data Integrity Board when a system or organization processes information for the purpose of conducting a matching program;
- PT-08b.
- PT-08b.[01] a computer matching agreement is developed when a system or organization processes information for the purpose of conducting a matching program;
- PT-08b.[02] a computer matching agreement is entered into when a system or organization processes information for the purpose of conducting a matching program;
- PT-08c. a matching notice is published in the Federal Register when a system or organization processes information for the purpose of conducting a matching program;
- PT-08d. the information produced by the matching program is independently verified before taking adverse action against an individual, if required, when a system or organization processes information for the purpose of conducting a matching program;
- PT-08e.
- PT-08e.[01] individuals are provided with notice when a system or organization processes information for the purpose of conducting a matching program;
- PT-08e.[02] individuals are provided with an opportunity to contest the findings before adverse action is taken against them when a system or organization processes information for the purpose of conducting a matching program.
Assessment Methods
Examine
- Personally identifiable information processing and transparency policy and procedures
- privacy notice
- Privacy Act system of records
- Federal Register notices
- Data Integrity Board determinations
- contracts
- information sharing agreements
- memoranda of understanding
- governing requirements
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with personally identifiable information processing and transparency responsibilities
- organizational personnel with information security and privacy responsibilities
Test
- Organizational processes for supporting and/or implementing personally identifiable information processing
- matching program
Gekoppelde issues
| Koppelingstype | Issue |
|---|---|
| blocks | PT-08 Computer Matching Requirements |