External Agency. Your agency agrees to be responsible for protecting NHM&E data security and client privacy at your agency and at the agencies you fund or partner with in fulfilling your mission. Language in this document that refers to “your agency” is inclusive of those grantee locations that are directly funded by CDC and use CDC data systems. Security encompasses data confidentiality, integrity, and availability. Client privacy is a right protected by the Privacy Act of 1974 as amended.
External Agency a) Your agency agrees to periodically (at least annually) assess its data security measures and compliance to all required standards, regulation, and data security guidelines.
External Agency a) Your agency agrees that authentication requirements for CDC data systems will be determined based on the security level assessed by CDC’s Office of the Chief Information Security Officer (OCISO).
External Agency a) Your agency agrees to be responsible for adequately protecting client privacy at your agency. Client privacy is a right protected by law.
External Agency a) Your agency agrees to provide technical assistance to your users and the users of your directly funded organizations.
External Agency a) Your agency will select a CDC Data System Administrator who will define and document the roles and responsibilities of the CDC data systems users, and how they are aligned with CDC data systems access levels. The CDC Data System Administrator will also be responsible for verifying CDC data systems users who need to access NHM&E data and the access levels necessary when requested by CDC employees.
External Agency a) Your agency agrees that all users at your agency and the agencies you fund will read and comply with the ROB outlined for users and system administrators.
External Agency. The Employer will update the list for shift replacement every three (3) months to reflect employees who are on vacation, leave of absence, sick leave, WSIB, etc.
External Agency a) Authorized staff from your agency will access non-CDC data systems through security procedures such as password protection or e-authentication procedures.
External Agency a) Your agency agrees to provide technical assistance to your non-CDC data system users and the non-CDC data system users of your directly funded organizations.
