Common use of Loss Reporting Clause in Contracts

Loss Reporting. If either SSA or OPM experiences an incident involving the loss or breach of PII provided by SSA or OPM under the terms of this agreement, that agency will follow the incident reporting guidelines issued by OMB. In the event of a reportable incident under OMB guidance involving PII, the agency experiencing the incident is responsible for following its established procedures, including notification to the proper organizations (e.g., United States Computer Emergency Readiness Team and the agency’s privacy office). In addition, the agency experiencing the incident (e.g., electronic or paper) will notify the other agency’s Systems Security Contact named in this agreement. If OPM is unable to speak with the SSA Systems Security Contact within one hour, or if for some other reason notifying the SSA Security Systems Contact is not practicable (e.g., it is outside of the normal business hours), OPM will call SSA’s National Network Service Center toll free at 0-000-000-0000. Within one hour of becoming aware of a possible incident involving OPM provided PII, SSA will contact OPM IT Security Operations: xxxxxxxxxxxxxx@xxx.xxx; 000-000-0000.

Loss Reporting. If either SSA or OPM OCSE experiences an incident involving the loss or breach of PII provided by SSA or OPM OCSE under the terms of this agreement, that agency they will follow the incident reporting guidelines issued by OMB. In the event of a reportable incident under OMB and the incident under OMB guidance involving PII, the agency experiencing the incident is responsible for following its established procedures, including notification to the proper organizations (e.g., United States Computer Emergency Readiness Team and the agency’s privacy office). In addition, the agency experiencing the incident (e.g., electronic or paper) will notify the other agency’s Systems Security Contact named in this agreement. If OPM OCSE is unable to speak with the SSA Systems Security Contact within one hour, hour or if for some other reason notifying the SSA Systems Security Systems Contact is not practicable (e.g., it is outside of the normal business hours), OPM OCSE will call SSA’s National Network Service Center toll free at 0-000-000-0000. Within If SSA is unable to speak with OCSE’s Systems Security Contact within one hour of becoming aware of a possible incident involving OPM provided PIIhour, SSA will contact OPM IT Security Operations: xxxxxxxxxxxxxx@xxx.xxx; 000-000-0000XXXX’s Director of Operations at the National Computer Center, Baltimore, Maryland (202) 596- 0494.

Loss Reporting. If either SSA or OPM experiences an incident involving the loss or breach of PII provided by SSA or OPM under the terms of this agreement, that agency they will follow the incident reporting guidelines issued by OMB. In the event of a reportable incident under OMB guidance involving PII, the agency experiencing the incident is responsible for following its established procedures, including notification to the proper organizations (e.g., United States Computer Emergency Readiness Team and the agency’s privacy office.). In addition, the agency experiencing the incident (e.g., electronic or paper) will notify the other agency’s Systems Security Contact named in this agreement. If OPM is unable to speak with the SSA Systems Security Contact within one hour, hour or if for some other reason notifying the SSA Systems Security Systems Contact is not practicable (e.g., it is outside of the normal business hours), OPM will call SSA’s National Network Service Center toll free at 0-000-000-0000. Within one hour of becoming aware of a possible incident involving OPM OPM-provided PII, SSA will contact OPM IT Security Operations: xxxxxxxxxxxxxx@xxx.xxx; 000-000-0000.

Loss Reporting. If either SSA or OPM RRB experiences an incident involving the loss or breach of PII provided by SSA or OPM RRB under the terms of this agreement, that agency they will follow the incident reporting guidelines issued by OMB. In the event of a reportable incident under OMB guidance involving PII, the agency experiencing the incident is responsible for following its established procedures, including notification to the proper organizations (e.g., United States Computer Emergency Readiness Team and the agency’s privacy office). In addition, the agency experiencing the incident (e.g., electronic or paper) will notify the other agency’s Systems Security Contact named in this agreement. If OPM RRB is unable to speak with the SSA Systems Security Contact within one hour, hour or if for some other reason notifying the SSA Systems Security Systems Contact is not practicable (e.g., it is outside of the normal business hours), OPM RRB will call SSA’s National Network Service Center toll free at 0-000-000-0000. Within If SSA is unable to speak with RRB’s Systems Security Contact within one hour of becoming aware of a possible incident involving OPM provided PIIhour, SSA will contact OPM IT Xxxxx X. Xxxxxxx, Chief Information Security Operations: xxxxxxxxxxxxxx@xxx.xxx; 000-000-0000.Officer (CISO) for RRB computer system at or cell

Loss Reporting. If either SSA or OPM experiences OCSE experience an incident involving the loss or breach of PII provided by SSA or OPM OCSE under the terms of this agreement, that agency they will follow the incident reporting guidelines issued by OMB. In the event of a reportable incident under OMB guidance involving PII, the agency experiencing the incident is responsible for following its established procedures, including notification to the proper organizations (e.g., United States Computer Emergency Readiness Team and the agency’s privacy office). In addition, the agency experiencing the incident (e.g., electronic or paper) will notify the other agency’s Systems Security Contact named in this agreement. If OPM OCSE is unable to speak with the SSA Systems Security Contact within one hour, hour or if for some other reason notifying the SSA Systems Security Systems Contact is not practicable (e.g., it is outside of the normal business hours), OPM OSCE will call SSA’s National Network Service Center toll free at 0-000-000-0000. Within If SSA is unable to speak with OCSE’s Systems Security Contact within one hour of becoming aware of a possible incident involving OPM provided PIIhour, SSA will contact OPM IT Security Operations: xxxxxxxxxxxxxx@xxx.xxx; OCSE’s Director of Operations at NCC, Baltimore, Maryland at 000-000-0000.

Loss Reporting. If either SSA or OPM RRB experiences an incident involving the loss or breach of PII provided by SSA or OPM RRB under the terms of this agreement, that agency they will follow the incident reporting guidelines issued by OMB. In the event of a reportable incident under OMB guidance involving PII, the agency experiencing the incident is responsible for following its established procedures, including notification to the proper organizations (e.g., United States Computer Emergency Readiness Team and the agency’s privacy office). In addition, the agency experiencing the incident (e.g., electronic or paper) will notify the other agency’s Systems Security Contact named in this agreement. If OPM RRB is unable to speak with the SSA Systems Security Contact within one hour, hour or if for some other reason notifying the SSA Systems Security Systems Contact is not practicable (e.g., it is outside of the normal business hours), OPM RRB will call SSA’s National Network Service Center toll free at 0-000-000-0000. Within If SSA is unable to speak with RRB’s Systems Security Contact within one hour of becoming aware of a possible incident involving OPM provided PIIhour, SSA will contact OPM IT Xxxxx X. Xxxxxxx, Chief Information Security Operations: xxxxxxxxxxxxxx@xxx.xxx; Officer (CISO) for RRB computer system at 000-000-0000 or cell 000-000-0000.

Loss Reporting. If either SSA or OPM DOL experiences an incident involving the loss or breach of PII provided by SSA or OPM DOL under the terms of this agreement, that agency they will follow the incident reporting guidelines issued by OMB. In the event of a reportable incident under OMB guidance involving PII, the agency experiencing the incident is responsible for following its established procedures, including notification to the proper organizations (e.g., United States Computer Emergency Readiness Team and the agency’s privacy office). In addition, the agency experiencing the incident (e.g., electronic or paper) will notify the other agency’s Systems Security Contact named in this agreement. If OPM DOL is unable to speak with the SSA Systems Security Contact within one hour, hour or if for some other reason notifying the SSA Systems Security Systems Contact is not practicable (e.g., it is outside of the normal business hours), OPM DOL will call SSA’s National Network Service Center toll free at 0-000-000-0000. Within If SSA is unable to speak with the DOL Systems Security Contact within one hour of becoming aware of a possible incident involving OPM provided PIIhour, SSA will contact OPM IT DCMWC’s Information Security Operations: Officer at (540) 272- 5265, and will send an email to xxxxxxxxxxxxxx@xxx.xxx; 000-000-0000.

Loss Reporting. If either SSA or OPM ED experiences an incident involving the loss or breach of PII provided by SSA or OPM ED under the terms of this agreementAgreement, that agency they will follow the incident reporting guidelines issued by OMB. In the event of a reportable incident under OMB guidance involving PII, the agency experiencing the incident is responsible for following its established procedures, including notification to the proper organizations (e.g., United States Computer Emergency Readiness Team and the agency’s privacy office). In addition, the agency experiencing the incident (e.g., electronic or paper) will notify the other agency’s Systems Security Contact Issues Contact(s) named in this agreementAgreement. If OPM ED is unable to speak with the SSA Systems Security Contact within one hour, hour or if for some other reason notifying the SSA Systems Security Systems Contact is not practicable (e.g., it is outside of the normal business hours), OPM ED will call SSA’s National Network Service Center toll free at 0-000-000-0000. Within If SSA is unable to speak with either of ED’s Systems Security Issues Contacts within one hour of becoming aware of a possible incident involving OPM provided PIIhour, SSA will contact OPM IT Security Operationspromptly notify: xxxxxxxxxxxxxx@xxx.xxx; EDCIRC: XXXXX@xx.xxx: 000-000-0000.

Loss Reporting. If either SSA or OPM OCSE experiences an incident involving the loss or breach of PII provided by SSA or OPM OCSE under the terms of this agreement, that agency they will follow the incident reporting guidelines issued by OMB. In the event of a reportable incident under OMB and the incident under OMB guidance involving PII, the agency experiencing the incident is responsible for following its established procedures, including notification to the proper organizations (e.g., United States Computer Emergency Readiness Team and the agency’s privacy office). In addition, the agency experiencing the incident (e.g., electronic or paper) will notify the other agency’s Systems Security Contact named in this agreement. If OPM OCSE is unable to speak with the SSA Systems Security Contact within one hour, hour or if for some other reason notifying the SSA Systems Security Systems Contact is not practicable (e.g., it is outside of the normal business hours), OPM OCSE will call SSA’s National Network Service Center toll free at 0-000-000-0000. Within If SSA is unable to speak with OCSE’s Systems Security Contact within one hour of becoming aware of a possible incident involving OPM provided PIIhour, SSA will contact OPM IT Security Operations: xxxxxxxxxxxxxx@xxx.xxx; OCSE’s Director of Operations at PEB, Baltimore, Maryland (000-) 000-0000.