Common use of Cybersecurity Condition Clause in Contracts

Cybersecurity Condition. (a) The recipient agrees that when collecting and managing environmental data under this assistance agreement, it will protect the data by following all applicable State or Tribal law cybersecurity requirements. (1) EPA must ensure that any connections between the recipient’s network or information system and EPA networks used by the recipient to transfer data under this agreement, are secure. For purposes of this Section, a connection is defined as a dedicated persistent interface between an Agency IT system and an external IT system for the purpose of transferring information. Transitory, user-controlled connections such as website browsing are excluded from this definition. If the recipient’s connections as defined above do not go through the Environmental Information Exchange Network or EPA’s Central Data Exchange, the recipient agrees to contact the EPA Project Officer no later than 90 days after the date of this award and work with the designated Regional/Headquarters Information Security Officer to ensure that the connections meet EPA security requirements, including entering into Interconnection Service Agreements as appropriate. This condition does not apply to manual entry of data by the recipient into systems operated and used by EPA’s regulatory programs for the submission of reporting and/or compliance data. (2) The recipient agrees that any subawards it makes under this agreement will require the subrecipient to comply with the requirements in (b)(1) if the subrecipient’s network or information system is connected to EPA networks to transfer data to the Agency using systems other than the Environmental Information Exchange Network or EPA’s Central Data Exchange. The recipient will be in compliance with this condition: by including this requirement in subaward agreements; and during subrecipient monitoring deemed necessary by the recipient under 2 CFR 200.332(d), by inquiring whether the subrecipient has contacted the EPA Project Officer. Nothing in this condition requires the recipient to contact the EPA Project Officer on behalf of a subrecipient or to be involved in the negotiation of an Interconnection Service Agreement between the subrecipient and EPA.

Cybersecurity Condition. (a) The recipient agrees that when collecting and managing environmental data under this assistance agreement, it will protect the data by following all applicable State or Tribal law cybersecurity requirements. (1) EPA must ensure that any connections between the recipientrecipient ’s network or information system and EPA networks used by the recipient to transfer data under this agreementagreement , are secure. For purposes of this Section, a connection is defined as a dedicated persistent interface between an Agency IT system and an external IT system for the purpose of transferring information. Transitory, user-controlled connections such as website browsing are excluded from this definition. If the recipient’s connections as defined above above, do not go through the Environmental Information Exchange Network or EPA’s Central Data Exchange, the recipient agrees to contact the EPA Project Officer no later than 90 days after the date of this award (PO) and work with the designated Regional/Headquarters Information Security Officer to ensure that the connections meet EPA security requirements, including entering into Interconnection Service Agreements as appropriate. This condition does not apply to manual entry of data by the recipient into systems operated and used by EPAEPA ’s regulatory programs for the submission of reporting and/or and /or compliance data. (2) The recipient agrees that any subawards it makes under this agreement will require the subrecipient to comply with the requirements in (b)(1) if the subrecipient’s network or information system is connected to EPA networks to transfer data to the Agency using systems other than the Environmental Information Exchange Network or EPAEPA ’s Central Data Exchange. The recipient will be in compliance with this condition: by including this requirement in subaward agreements; and during subrecipient monitoring deemed necessary by the recipient under 2 CFR 200.332(d200.331(d), by inquiring whether the subrecipient has contacted the EPA Project Officer. Nothing in this condition requires the recipient to contact the EPA Project Officer on behalf of a subrecipient or to be involved in the negotiation of an Interconnection Service Agreement between the subrecipient and EPA. A. Statement of water quality concerns/issues: AUID Waterbodies Unsupported Uses Causes of Impairment B. Project goals and objectives: 1. Develop and complete a detailed upper Wolf Creek watershed management plan that supports primary goals within the larger River Raisin watershed including the attainment of water quality standards, achieving all designated uses, and protecting source water supply for Adrian, Blissfield and Deerfield. 2. Within the upper Wolf Creek subwatershed plan, identify specific Critical Source Areas (CSAs) that are contributing to elevated E. coli bacteria, nutrients, and cyanobacteria blooms within Xxxx Xxxx and Xxxx Xxxxxx via Xxxx Creek. This could include but is not limited to leaking septic fields, farm runoff, stormwater drainage pipes, and tile drains. This will help target future implementation efforts which will save time, money, and allow for better management outcomes. 3. Develop a GIS story map to highlight the watershed management plan project and assist with community outreach and involvement efforts. The final product will be shared on the River Raisin Watershed Council’s website and used as a tool at stakeholder meetings to help educate the public concerning watershed health and potential improvement projects. The objectives to complement the aforementioned goals include the following (note: these will be completed during the development of the upper Wolf Creek subwatershed plan): 1. Prepare a summary table of the watershed management plan and all necessary elements utilizing the state (CMI checklist) and federal (319 WMP Checklist) guidance documents. 2. Develop a detailed field sampling QAPP and collect additional water quality data to assess CSAs. 3. Perform a ground-based agricultural survey of farmlands within the subwatershed using ArcGIS Field Maps and an ArcGIS online database. Utilize LiDAR and available GIS watershed data in conjunction with ground surveys to help identify CSAs. 4. Utilize collected water quality and flow data to develop average concentrations for each pollutant and evaluate the relative impact that the CSAs have on the watershed. 5. Recommend Best Management Practices (BMPs) for CSAs and discuss strategies for implementation. 6. Establish a community outreach program and develop ties with relevant local interest groups as well as the local xxxxxx led group to share and exchange information concerning the health of the watershed. Anticipated water quality benefits relative to the project cost include the following: 1. Plan for a reduction in E. coli bacteria which have been exceeding TMDL levels established by EGLE. This is important for public health and body contact in the Wolf Creek subwatershed waterways. 2. Plan for a reduction of nutrients and cyanobacteria biomass in Xxxx Xxxx and ultimately Lake Adrian, as the latter serves as a drinking water supply for the City of Xxxxxx, and the ongoing River Raisin supplies the villages of Blissfield and Deerfield. Protecting downstream source water from cyanobacteria is an important public health benefit for the drinking water customers. 3. A plan for improvements in lake health with improved biodiversity of good phytoplankton to support a healthy lake food chain. Once the project (plan) is completed, the partnering Xxxx Xxxx Property Owners Association (LEPOA) will continue monitoring Xxxx Xxxx and its tributary drains to assure that improvements are maintained. Continued water quality monitoring will help assess the impacts of future BMP implementation on water quality.

Cybersecurity Condition. (a) The recipient agrees that when collecting and managing environmental data under this assistance agreement, it will protect the data by following all applicable State or Tribal law cybersecurity requirements. (1) EPA must ensure that any connections between the recipient’s network or information system and EPA networks used by the recipient to transfer data under this agreement, are secure. For purposes of this Section, a connection is defined as a dedicated persistent interface between an Agency IT system and an external IT system for the purpose of transferring information. Transitory, user-controlled connections such as website browsing are excluded from this definition. If the recipient’s connections as defined above do not go through the Environmental Information Exchange Network or EPA’s Central Data Exchange, the recipient agrees to contact the EPA Project Officer (PO) no later than 90 days after the date of this award and work with the designated Regional/Headquarters Information Security Officer to ensure that the connections meet EPA security requirements, including entering into Interconnection Service Agreements as appropriate. This condition does not apply to manual entry of data by the recipient into systems operated and used by EPA’s regulatory programs for the submission of reporting and/or compliance data. (2) The recipient agrees that any subawards it makes under this agreement will require the subrecipient to comply with the requirements in (b)(1) if the subrecipient’s network or information system is connected to EPA networks to transfer data to the Agency using systems other than the Environmental Information Exchange Network or EPA’s Central Data Exchange. The recipient will be in compliance with this condition: by including this requirement in subaward agreements; and during subrecipient monitoring deemed necessary by the recipient under 2 CFR 200.332(d200.331(d), by inquiring whether the subrecipient has contacted the EPA Project Officer. Nothing in this condition requires the recipient to contact the EPA Project Officer on behalf of a subrecipient or to be involved in the negotiation of an Interconnection Service Agreement between the subrecipient and EPA.

Cybersecurity Condition. State Grant Cybersecurity (a) The recipient agrees that when collecting and managing environmental data under this assistance agreement, it will protect the data by following all applicable State or Tribal law cybersecurity requirements. (1) EPA must ensure that any connections between the recipient’s network or information system and EPA networks used by the recipient to transfer data under this agreement, are secure. For purposes of this Section, a connection is defined as a dedicated persistent interface between an Agency IT system and an external IT system for the purpose of transferring information. Transitory, user-controlled connections such as website browsing are excluded from this definition. If the recipient’s connections as defined above do not go through the Environmental Information Exchange Network or EPA’s Central Data Exchange, the recipient agrees to contact the EPA Project Officer no later than 90 days after the date of this award (PO) and work with the designated Regional/Headquarters Information Security Officer to ensure that the connections meet EPA security requirements, including entering into Interconnection Service Agreements as appropriate. This condition does not apply to manual entry of data by the recipient into systems operated and used by EPA’s regulatory programs for the submission of reporting and/or compliance data. (2) The recipient agrees that any subawards it makes under this agreement will require the subrecipient to comply with the requirements in (b)(1) if the subrecipient’s network or information system is connected to EPA networks to transfer data to the Agency using systems other than the Environmental Information Exchange Network or EPA’s Central Data Exchange. The recipient will be in compliance with this condition: by including this requirement in subaward agreements; and during subrecipient monitoring deemed necessary by the recipient under 2 CFR 200.332(d200.331(d), by inquiring whether the subrecipient has contacted the EPA Project Officer. Nothing in this condition requires the recipient to contact the EPA Project Officer on behalf of a subrecipient or to be involved in the negotiation of an Interconnection Service Agreement between the subrecipient and EPA.

Cybersecurity Condition. (a) The recipient agrees that when collecting and managing environmental data under this assistance agreement, it will protect the data by following all applicable State or Tribal law cybersecurity requirements. (1) EPA must ensure that any connections between the recipient’s network or information system and EPA networks used by the recipient to transfer data under this agreement, are secure. For purposes of this Section, a connection is defined as a dedicated persistent interface between an Agency IT system and an external IT system for the purpose of transferring information. Transitory, user-controlled connections such as website browsing are excluded from this definition. If the recipient’s connections as defined above do not go through the Environmental Information Exchange Network or EPA’s Central Data Exchange, the recipient agrees to contact the EPA Project Officer (PO) no later than 90 days after the date of this award and work with the designated Regional/Headquarters Information Security Officer to ensure that the connections meet EPA security requirements, including entering into Interconnection Service Agreements as appropriate. This condition does not apply to manual entry of data by the recipient into systems operated and used by EPA’s regulatory programs for the submission of reporting and/or compliance data. (2) The recipient agrees that any subawards it makes under this agreement will require the subrecipient to comply with the requirements in (b)(1) if the subrecipient’s network or information system is connected to EPA networks to transfer data to the Agency using systems other than the Environmental Information Exchange Network or EPA’s Central Data Exchange. The recipient will be in compliance with this condition: by including this requirement in subaward agreements; and during subrecipient monitoring deemed necessary by the recipient under 2 CFR 200.332(d), by inquiring whether the subrecipient has contacted the EPA Project Officer. Nothing in this condition requires the recipient to contact the EPA Project Officer on behalf of a subrecipient or to be involved in the negotiation of an Interconnection Service Agreement between the subrecipient and EPA.