Common use of Loss Reporting Clause in Contracts

Loss Reporting. If either SSA or VA/VHA experiences an incident involving the loss or breach of PII provided by SSA or VA/VHA under the terms of this agreement, they will follow the incident reporting guidelines issued by OMB. In the event of a reportable incident under OMB guidance involving PII, the agency experiencing the incident is responsible for following its established procedures, including notification to the proper organizations (e.g., United States Computer Emergency Readiness Team, the agency’s privacy office). In addition, the agency experiencing the incident (e.g., electronic or paper) will notify the other agency’s Systems Security Contact named in this agreement. If VA/VHA is unable to speak with the SSA Systems Security Contact within one hour or if for some other reason notifying the SSA Systems Security Contact is not practicable (e.g., it is outside of the normal business hours), VA/VHA will call SSA’s National Network Service Center toll free at 0-000-000-0000. If SSA is unable to speak with VA/VHA’s Systems Security Contact within one hour, SSA will contact the VA/VHA Situation Room at (000) 000-0000.

Loss Reporting. If either SSA or VA/VHA experiences an incident involving the loss or breach of PII provided by SSA or VA/VHA under the terms of this agreement, they will follow the incident reporting guidelines issued by OMB. In the event of a reportable incident under OMB guidance involving PII, the agency experiencing the incident is responsible for following its established procedures, including notification to the proper organizations (e.g., United States Computer Emergency Readiness Team, the agency’s privacy office). In addition, the agency experiencing the incident (e.g., electronic or paper) will notify the other agency’s Systems Security Contact named in this agreement. If VA/VHA is unable to speak with the SSA Systems Security Contact within one hour or or, if for some other reason notifying the SSA Systems Security Contact is not practicable (e.g., it is outside of the normal business hours), VA/VHA will call SSA’s National Network Service Center toll free at 0-000-000-0000. If SSA is unable to speak with VA/VHA’s Systems Security Contact within one hour, SSA will contact the VA/VHA Situation Room at (000) Enterprise Service Desk, 000-0000000-0000 (option 5) to create an incident ticket for assignment to the Cyber Security Operations Center (CSOC).

Loss Reporting. If either SSA or VA/VHA Source Jurisdiction experiences an incident involving the loss or breach of PII provided by SSA or VA/VHA Source Jurisdiction under the terms of this agreement, they will follow the incident reporting guidelines issued by OMB. In the event of a reportable incident under OMB guidance involving PII, the agency experiencing the incident is responsible for following its established procedures, including notification to the proper organizations (e.g., United States Computer Emergency Readiness Team, Team and the agency’s privacy office). In addition, the agency experiencing the incident (e.g., electronic or paper) will notify the other agency’s Systems Security Contact named in this agreement. If VA/VHA Source Jurisdiction is unable to speak with the SSA Systems Security Contact within one hour or if for some other reason notifying the SSA Systems Security Contact is not practicable (e.g., it is outside of the normal business hours), VA/VHA Source Jurisdiction will call SSA’s National Network Service Center toll free at 0-000-000-0000. If SSA is unable to speak with VA/VHA’s Source Jurisdiction Systems Security Contact within one hour, SSA will contact the VA/VHA Situation Room (fill in Source Jurisdiction's security contact information) at (000XXX) 000XXX-0000XXXX.

Loss Reporting. If either SSA or VA/VHA VA experiences an incident involving the loss or breach of PII provided by SSA or VA/VHA VA under the terms of this agreement, they will follow the incident reporting guidelines issued by OMB. In the event of a reportable incident under OMB guidance involving PII, the agency experiencing the incident is responsible for following its established procedures, including notification to the proper organizations (e.g., United States Computer Emergency Readiness Team, Team and the agency’s privacy office). In addition, the agency experiencing the incident (e.g., electronic or paper) will notify the other agency’s Systems Information Security Contact named in this agreement. If VA/VHA VA is unable to speak with the SSA Systems Information Security Contact within one hour or if for some other reason notifying the SSA Systems Information Security Contact is not practicable (e.g., it is outside of the normal business hours), VA/VHA VA will call SSA’s National Network Service Center toll free at 0-000-000-0000. If SSA is unable to speak with VA/VHA’s Systems Information Security Contact within one hour, SSA will contact the VA/VHA Situation Room VA Network and Security Operations Center at (0-000) -000-0000, Option 6 then Option 4.