Privacy Act of 1974; System of Records

 
CONTENT
54125
Federal Register / Vol. 84, No. 196 / Wednesday, October 9, 2019 / Notices
they also will become a matter of public
record.
Sheleen Dumas,
Departmental Lead PRA Officer, Office of the
Chief Information Officer, Commerce
Department.
[FR Doc. 2019–21990 Filed 10–8–19; 8:45 am]
BILLING CODE 3510–22–P
DEPARTMENT OF DEFENSE
Department of the Air Force
[Docket ID: USAF–2019–HQ–0009]
Privacy Act of 1974; System of
Records
AGENCY
: Department of the Air Force,
DOD.
ACTION
: Notice of a new System of
Records.
SUMMARY
: The Office of the Deputy
Assistant Secretary of the Air Force for
Financial Operations (SAF/FMF) is
adding a new System of Records titled,
‘‘Forms and Account Management
Service (FAMS),’’ F065 SAF FMF A.
FAMS will be the sole, web-based
platform for the appointment and
termination of Departmental
Accountable Officials, appointment and
termination of Key Signatories of
financial documentation, and access
management to a portfolio of
information systems, which are material
for audit.
DATES
: This addition is effective upon
publication; however, comments on the
Routine Uses will be accepted on or
before November 8, 2019. The Routine
Uses are effective at the close of the
comment period.
ADDRESSES
: You may submit comments,
identified by docket number and title,
by any of the following methods:
* Federal Rulemaking Portal: http://
www.regulations.gov.
Follow the instructions for submitting
comments.
* Mail: Department of Defense, Office
of the Chief Management Officer,
Directorate of Oversight and
Compliance, 4800 Mark Center Drive,
Mailbox #24, Suite 08D09, Alexandria,
VA 22350–1700.
Instructions: All submissions received
must include the agency name and
docket number for this Federal Register
document. The general policy for
comments and other submissions from
members of the public is to make these
submissions available for public
viewing on the internet at http://
www.regulations.gov as they are
received without change, including any
personal identifiers or contact
information.
FOR FURTHER INFORMATION CONTACT
: Mr.
LaDonne White, Department of the Air
Force, Air Force Privacy Office, Office
of Warfighting Integration and Chief
Information Officer, ATTN: SAF/CIO
A6, 1800 Air Force Pentagon,
Washington, DC 20330–1800, or by
phone at (571) 256–2515.
SUPPLEMENTARY INFORMATION
: During
Financial Improvement and Audit
Readiness (FIAR) audits of Air Force
Information Technology (IT) processes,
numerous notices of findings and
recommendations were issued, related
to vulnerabilities in managing Air Force
systems account access and
appointment of accountable official
positions. Findings identified gaps in
properly handling and managing
accounts for access and authority to act.
Improper account management presents
information security risks that could
result in unauthorized access.
Historically, many of these functions
were performed in a decentralized
manner and conducted manually
without effective checks and balances
on accuracy. Introduction of the new
web-based platform will reduce and
eliminate the use of paper forms as it
will automate the request and approval
processes and enable periodic
validation and reconciliation of account
records against actual account
permissions.
OMB Circular No. A–123 defines
management’s responsibility for internal
control in Federal agencies. A re-
examination of the existing internal
control requirements for Federal
agencies was initiated in light of the
new internal control requirements for
publicly-traded companies contained in
the Sarbanes-Oxley Act of 2002.
Circular A–123 and the statute it
implements, the Federal Managers’
Financial Integrity Act of 1982, are at
the center of the existing Federal
requirements to improve internal
control.
This circular reflects policy
recommendations developed by a joint
committee of representatives from the
Chief Financial Officer Council (CFOC)
and the President’s Council on Integrity
and Efficiency (PCIE). The policy
changes in this circular are intended to
strengthen the requirements for
conducting management’s assessment of
internal control over financial reporting.
SAF/FMF is responsible for developing
and maintaining effective internal
control that provides assurance that
significant weaknesses in the design or
operation of internal control, such as
unauthorized access to Air Force
systems, that could adversely affect the
agency’s ability to meet its objectives,
would be prevented or detected in a
timely manner. FAMS enables SAF/
FMF the means to track and manage the
appointment of qualified personnel
(Departmental Accountable Officials
and Financial Signatories) to key
positions and control Air Force system
access to appropriately cleared Air
Force employees, thereby meeting the
requirements of OMB A–123.
The OSD notices for Systems of
Records subject to the Privacy Act of
1974 (5 U.S.C. 552a), as amended, have
been published in the Federal Register
and are available from the address
provided in the
FOR FURTHER
INFORMATION CONTACT
paragraph or are
available at the Defense Privacy, Civil
Liberties, and Transparency Division
website via at http://dpcld.defense.gov.
The proposed systems reports, as
required by the Privacy Act, as
amended, were submitted on August 5,
2019, to the House Committee on
Oversight and Reform, the Senate
Committee on Homeland Security and
Governmental Affairs, and the Office of
Management and Budget (OMB)
pursuant to Section 6 of OMB Circular
No. A–108, ‘‘Federal Agency
Responsibilities for Review, Reporting,
and Publication under the Privacy Act,’’
revised December 23, 2016 (December
23, 2016, 81 FR 94424).
Dated: October 4, 2019.
Morgan E. Park,
Alternate OSD Federal Register Liaison
Officer, Department of Defense.
SYSTEM NAME AND NUMBER
:
Forms and Account Management
Service (FAMS), F065 SAF FMF A
SECURITY CLASSIFICATION
:
Unclassified
SYSTEM LOCATION
:
Air Force Life Cycle Management
Center, 9 Eglin Street, Building 1606,
Hanscom Air Force Base, MA 01731.
SYSTEM MANAGER
(
S
):
Program Manager, SAF/FMFSA, 1500
West Perimeter Road, Suite 3130, Joint
Base Andrews NAF, MD 20762–6604.
System Managers: Michael Holloway
(240–612–5307 |
michael.l.holloway.civ@mail.mil);
Waqasul Haq (202–320–2372 |
waqasul.haq.ctr@us.af.mil); Hubert Chin
(240–612–5199 | hubert.chin.ctr@
mail.mil)
AUTHORITY FOR MAINTENANCE OF THE SYSTEM
:
10 U.S.C. 9013, Armed Forces,
Secretary of the Air Force; 31 U.S.C.
902, Authority and Functions of Agency
VerDate Sep<11>2014 17:13 Oct 08, 2019 Jkt 250001 PO 00000 Frm 00024 Fmt 4703 Sfmt 4703 E:\FR\FM\09OCN1.SGM 09OCN1
khammond on DSKJM1Z7X2PROD with NOTICES
54126
Federal Register / Vol. 84, No. 196 / Wednesday, October 9, 2019 / Notices
Chief Financial Officers, as amended; 31
U.S.C. 3325, Vouchers; 31 U.S.C. 3528,
Responsibilities and Relief from
Liability of Certifying Officials; Chief
Financial Officers Act of 1990, 31
U.S.C., chapters 5, 9, 11, and 35; also 5
U.S.C. 5313–5315, 38 U.S.C. 201 and 42
U.S.C. 3533; Government Management
Reform Act of 1994, Public Law 103–
356; Federal Financial Management
Improvement Act of 1996, Public Law
104–208, Title VIII; 44 U.S.C. 3541,
Federal Information Security
Modernization Act of 2014; Executive
Order 10450, Security Requirements for
Government Employment; DoD
Financial Management Regulation
7000.14–R, Vol. 5.
PURPOSE
(
S
)
OF THE SYSTEM
:
The Air Force (AF) FAMS is a secure,
cloud-based set of tools and services
established to automate key Financial
Management Forms, workflow, and
reporting processes (audit materials).
FAMS optimizes the use of information
technology and streamlines the financial
management processes by eliminating
paper form routing and physical storage
requirements and closing the associated
access control performance gaps. The
data acquired and updated from each
record source is used not only for
identity validation, but is also stored
and revalidated for subsequent
workflow actions.
CATEGORIES OF INDIVIDUALS COVERED BY THE
SYSTEM
:
Within the Department of the Air
Force: Active Duty service members,
Reserve service members, Air National
Guard service members, Presidential
Appointees, Civilians, and Contractors.
Also includes Foreign Military Members
and Foreign Civilian hire employees.
CATEGORIES OF RECORDS IN THE SYSTEM
:
Name, Electronic Data Interchange
Personal Identifier Number (EDIPI), also
referred to as the DoD ID number,
current rank/grade, current
organization, current duty location,
security clearance level, security
clearance completion date, Active/
Reserve/Guard designation, Air Force
specialty code used by the United States
Air Force to identify a specific job, hire
date, hire location, separation/
retirement date, and date of death.
RECORD SOURCE CATEGORIES
:
Individuals; DoD databases accessed
through Defense Manpower Data Center
(DMDC) Identity Web Services—
Personal Identity Data and DMDC
Information System for Security—
Personal Security Clearance Data.
ROUTINE USES OF RECORDS MAINTAINED IN THE
SYSTEM
,
INCLUDING CATEGORIES OF USERS AND
PURPOSES OF SUCH USES
:
In addition to those disclosures
generally permitted under 5 U.S.C.
552a(b) of the Privacy Act of 1974, as
amended, these records contained
therein may specifically be disclosed
outside the DoD as a routine use
pursuant to 5 U.S.C. 552a(b)(3) as
follows:
a. To the appropriate Federal, State,
local, territorial, tribal, foreign, or
international law enforcement authority
or other appropriate entity where a
record, either alone or in conjunction
with other information, indicates a
violation or potential violation of law,
whether criminal, civil, or regulatory in
nature.
b. To any component of the
Department of Justice for the purpose of
representing the DoD, or its
components, officers, employees, or
members in pending or potential
litigation to which the record is
pertinent.
c. In an appropriate proceeding before
a court, grand jury, or administrative or
adjudicative body or official, when the
DoD or other Agency representing the
DoD determines that the records are
relevant and necessary to the
proceeding; or in an appropriate
proceeding before an administrative or
adjudicative body when the adjudicator
determines the records to be relevant to
the proceeding.
d. To the National Archives and
Records Administration for the purpose
of records management inspections
conducted. This routine use complies
with 44 U.S.C. 2904 and 2906.
e. To a Member of Congress or staff
acting upon the Member’s behalf when
the Member or staff requests the
information on behalf of, and at the
request of, the individual who is the
subject of the record.
f. To appropriate agencies, entities,
and persons when (1) The DoD suspects
or has confirmed that the security or
confidentiality of the information in the
System of Records has been
compromised; (2) the DoD has
determined that as a result of the
suspected or confirmed breach there is
a risk of harm to individuals, the DoD
(including its information systems,
programs, and operations), the Federal
Government, or national security; and
(3) the disclosure made to such
agencies, entities, and persons is
reasonably necessary to assist in
connection with the DoD’s efforts to
respond to the suspected or confirmed
breach or to prevent, minimize, or
remedy such harm.
g. To another Federal agency or
Federal entity, when the DoD
determines that information from this
System of Records is reasonably
necessary to assist the recipient agency
or entity in (1) responding to a
suspected or confirmed breach or (2)
preventing, minimizing, or remedying
the risk of harm to individuals, the
recipient agency or entity (including its
information systems, programs and
operations), the Federal Government, or
national security, resulting from a
suspected or confirmed breach.
POLICIES AND PRACTICES FOR STORAGE OF
RECORDS
:
Records are stored on electronic
media.
POLICIES AND PRACTICES FOR RETRIEVAL OF
RECORDS
:
Individual’s full name and EDIPI/DoD
ID number.
POLICIES AND PRACTICES FOR RETENTION AND
DISPOSAL OF RECORDS
:
Destroy 10 years after cancellation or
revocation of the order, provided there
are no outstanding discrepancies for
which corrective action has been
prescribed.
ADMINISTRATIVE
,
TECHNICAL
,
AND PHYSICAL
SAFEGUARDS
:
Role-based access control restricts the
system access to authorized users with
a need-to-know. Network encryption
protects data transmitted over the
network while disk encryption secures
the disks storing data. Key management
services safeguards encryption keys.
RECORD ACCESS PROCEDURES
:
Individuals seeking to determine
whether this System of Records contains
information on themselves should
address written inquiries to the
Department of the Air Force, FM Chief
Information Officer, SAF/FMFS, 1500
West Perimeter Road, Suite 3130, Joint
Base Andrews Naval Air Facility, MD
20762–6604. For verification purposes,
individuals should provide full name,
EDIPI/DoD ID number from Common
Access Card (CAC), office or
organization where currently assigned,
if applicable, and current address and
telephone number. In addition, the
requester must provide either a
notarized statement or an unsworn
declaration made in accordance with 28
U.S.C. 1746, in the following format:
If executed outside the United States:
‘‘I declare (or certify, verify, or state)
under penalty of perjury under the laws
of the United States of America that the
foregoing is true and correct. Executed
on (date). (Signature).’’
If executed within the United States,
its territories, possessions, or
VerDate Sep<11>2014 17:13 Oct 08, 2019 Jkt 250001 PO 00000 Frm 00025 Fmt 4703 Sfmt 4703 E:\FR\FM\09OCN1.SGM 09OCN1
khammond on DSKJM1Z7X2PROD with NOTICES
54127
Federal Register / Vol. 84, No. 196 / Wednesday, October 9, 2019 / Notices
commonwealths: ‘‘I declare (or certify,
verify, or state) under penalty of perjury
that the foregoing is true and correct.
Executed on (date). (Signature).’’
CONTESTING RECORD PROCEDURES
:
The DoD rule for accessing, contesting
and appealing agency determinations by
the individual concerned are published
in 32 CFR part 310 or may be obtained
from the system manager.
NOTIFICATION PROCEDURES
:
Individuals seeking to determine
whether information about themselves
is contained in this system should
address written inquiries to the
Department of the Air Force, FM Chief
Information Officer, SAF/FMFS, 1500
West Perimeter Road, Suite 3130, Joint
Base Andrews NAF, MD 20762–6604.
For verification purposes, individuals
should provide full name, EDIPI/DoD ID
number from CAC, office or
organization where currently assigned,
if applicable, and current address and
telephone number. In addition, the
requester must provide either a
notarized statement or an unsworn
declaration made in accordance with 28
U.S.C. 1746, in the following format:
If executed outside the United States:
‘‘I declare (or certify, verify, or state)
under penalty of perjury under the laws
of the United States of America that the
foregoing is true and correct. Executed
on (date). (Signature).’’
If executed within the United States,
its territories, possessions, or
commonwealths: ‘‘I declare (or certify,
verify, or state) under penalty of perjury
that the foregoing is true and correct.
Executed on (date). (Signature).’’
EXEMPTIONS PROMULGATED FOR THE SYSTEM
:
None.
HISTORY
:
None.
[FR Doc. 2019–22037 Filed 10–8–19; 8:45 am]
BILLING CODE 5001–05–P
DEPARTMENT OF DEFENSE
Office of the Secretary
[Docket ID: DoD–2019–OS–0114]
Privacy Act of 1974; System of
Records
AGENCY
: Office of the Secretary of
Defense, DoD.
ACTION
: Notice of a modified System of
Records.
SUMMARY
: The Office of the Secretary of
Defense (OSD) is modifying a System of
Records titled, ‘‘Defense Sexual Assault
Incident Database (DSAID),’’ DHRA 06
DoD. DSAID is a centralized case-level
database, which collects and maintains
information on sexual assaults involving
Armed Forces members. DSAID gives
Sexual Assault Response Coordinators
(SARCs) the enhanced ability to provide
comprehensive and standardized victim
case management.
DSAID is funded and operated by the
Department of Defense Sexual Assault
Prevention and Response Office (DoD
SAPRO) and enables service SAPR
Programs to meet congressional
reporting requirements and ensure
transparency of sexual assault-related
data.
DATES
: These modifications are effective
upon publication; however, comments
on the Routine Uses will be accepted on
or before November 8, 2019. The
Routine Uses are effective at the close of
the comment period.
ADDRESSES
: You may submit comments,
identified by docket number and title,
by any of the following methods:
*Federal Rulemaking Portal: http://
www.regulations.gov.
Follow the instructions for submitting
comments.
*Mail: Department of Defense, Office
of the Chief Management Officer,
Directorate for Oversight and
Compliance, 4800 Mark Center Drive,
Mailbox #24, Suite 08D09, Alexandria,
VA 22350–1700.
Instructions: All submissions received
must include the agency name and
docket number for this Federal Register
document. The general policy for
comments and other submissions from
members of the public is to make these
submissions available for public
viewing on the internet at http://
www.regulations.gov as they are
received without change, including any
personal identifiers or contact
information.
FOR FURTHER INFORMATION CONTACT
: Ms.
Luz D. Ortiz, Chief, Records, Privacy
and Declassification Division (RPDD),
1155 Defense Pentagon, Washington, DC
20301–1155, or by phone at (571) 372–
0478.
SUPPLEMENTARY INFORMATION
: DoD
SAPRO represents the Secretary of
Defense as the central authority charged
with preventing sexual assault in the
military and facilitating recovery for
survivors. DoD SAPRO promotes
military readiness by reducing sexual
assault through advocacy and execution
of program policy, planning, and
oversight across the DoD community.
To meet the expanded sexual assault
and response reporting requirements of
Section 543 of the National Defense
Authorization Act for Fiscal Year 2017
(10 U.S.C. 1561) as well as establish the
DSAID File Locker, the OSD is
modifying this System of Records by
changing the following sections: System
location, purpose(s) of the system,
categories of individuals covered by the
system, categories of records in the
system, routine use of records
maintained in the system, records
access procedures, and notification
procedures. The DoD notices for
Systems of Records subject to the
Privacy Act of 1974, as amended, have
been published in the Federal Register
and are available from the address in
FOR FURTHER INFORMATION CONTACT
or at
the Defense Privacy, Civil Liberties, and
Transparency Division website at http://
dpcld.defense.gov/. The proposed
systems reports, as required by the
Privacy Act, as amended, were
submitted on August 7, 2019, to the
House Committee on Oversight and
Reform, the Senate Committee on
Homeland Security and Governmental
Affairs, and the Office of Management
and Budget (OMB) pursuant to Section
6 of OMB Circular No. A–108, ‘‘Federal
Agency Responsibilities for Review,
Reporting, and Publication under the
Privacy Act,’’ revised December 23,
2016 (December 23, 2016, 81 FR 94424).
Dated: October 4, 2019.
Aaron T. Siegel,
Alternate OSD Federal Register Liaison
Officer, Department of Defense.
SYSTEM NAME AND NUMBER
:
Defense Sexual Assault Incident
Database (DSAID), DHRA 06 DoD.
SECURITY CLASSIFICATION
:
Unclassified.
SYSTEM LOCATION
:
Washington Headquarters Services
(WHS), 1155 Defense Pentagon,
Washington, DC 20301–1155.
SYSTEM MANAGER
(
S
):
Defense Sexual Assault Incident
Database Program Manager, 4800 Mark
Center Drive, Alexandria, VA 22350–
8000, email: whs.mc-
alex.wso.mbx.SAPRO@mail.mil;
telephone: (571) 372–2657.
AUTHORITY FOR MAINTENANCE OF THE SYSTEM
:
10 U.S.C. 136, Under Secretary of
Defense for Personnel and Readiness; 10
U.S.C. 3013, Secretary of the Army; 10
U.S.C. 5013, Secretary of the Navy; 10
U.S.C. 8013, Secretary of the Air Force;
32 U.S.C. 102, National Guard; DoD
Directive 6495.01, SAPR Program; DoD
Instruction 6495.02, SAPR Program
Procedures; Army Regulation 600–20,
Chapter 8, Army Command Policy
(Sexual Assault Prevention and
VerDate Sep<11>2014 17:13 Oct 08, 2019 Jkt 250001 PO 00000 Frm 00026 Fmt 4703 Sfmt 4703 E:\FR\FM\09OCN1.SGM 09OCN1
khammond on DSKJM1Z7X2PROD with NOTICES