Assessment Objective
Determine if:
- PM-24 a Data Integrity Board is established;
- PM-24a. the Data Integrity Board reviews proposals to conduct or participate in a matching program;
- PM-24b. the Data Integrity Board conducts an annual review of all matching programs in which the agency has participated.
Assessment Methods
Examine
- Privacy program plan
- privacy program documents relating to the Data Integrity Board, including documents establishing the board, its charter of operations, and any plans and reports
- computer matching agreements and notices
- information sharing agreements
- memoranda of understanding
- records documenting annual reviews
- governing requirements, including laws, executive orders, regulations, standards, and guidance
Interview
- members of the Data Integrity Board (e.g., the chief information officer, senior information security officer, senior agency official for privacy, and agency Inspector General)
Prepojené úlohy
| Typ prepojenia | Úloha |
|---|---|
| blocks | PM-24 [P] Data Integrity Board |