Common use of Loss Reporting Clause in Contracts

Loss Reporting. If either SSA or RRB experiences a loss or breach of PII provided by the other agency under the terms of this agreement, they will follow the incident reporting guidelines issued by OMB. In the event of a reportable incident under OMB guidance involving PII, the agency experiencing the incident is responsible for following its established procedures, including notification to the proper organizations (e.g., United States Computer Emergency Readiness Team (CERT), and the agency’s privacy office). In addition, the agency experiencing the incident (e.g., electronic or paper) will notify the other agency’s Systems Security Contact named in this agreement. If RRB is unable to speak with the SSA Systems Security Contact within one hour or, if for some other reason notifying the SSA Systems Security Contact is not practicable (e.g., it is outside of the normal business hours), RRB will call SSA’s National Network Service Center toll free at 0-000-000-0000. If SSA is unable to speak with RRB’s Systems Security Contact within one hour, SSA will contact Xxxx Xxxxxxxxx, RRB CERT Team Leader, at 000-000-0000 or 000-000-0000 (cell).

Loss Reporting. If either SSA or RRB CMS experiences a an incident involving the loss or breach of PII provided by the other agency SSA or CMS under the terms of this agreement, they will follow the incident reporting guidelines issued by OMB. In the event of a reportable incident under OMB guidance involving PII, the agency experiencing the incident is responsible for following its established procedures, including notification to the proper organizations (e.g., United States Computer Emergency Readiness Team (CERT), and the agency’s privacy office). In addition, the agency experiencing the incident (e.g., electronic or paper) will notify the other agency’s Systems Security Contact named in this agreement. If RRB CMS is unable to speak with the SSA Systems Security Contact within one hour or, or if for some other reason notifying the SSA Systems Security Contact is not practicable (e.g., it is outside of the normal business hours), RRB CMS will call SSA’s National Network Service Center toll free at 0-000-000-0000. If SSA is unable to speak with RRB’s CMS’ Systems Security Contact within one hour, SSA will contact Xxxx Xxxxxxxxx, RRB CERT Team Leader, CMS IT Service Desk at 0-000-000-0000 or 000-000-0000 (cell)email XXX_XX_Xxxxxxx_Xxxx@xxx.xxx.xxx.

Loss Reporting. If either SSA or RRB ED experiences a an incident involving the loss or breach of PII provided by the other agency SSA or ED under the terms of this agreementCMA, they will follow the incident reporting guidelines issued by OMB. In the event of a reportable incident under OMB guidance involving PII, the agency experiencing the incident is responsible for following its established procedures, including notification to the proper organizations (e.g., United States Computer Emergency Readiness Team (CERT), and the agency’s privacy office). In addition, the agency experiencing the incident (e.g., electronic or paper) will notify the other agency’s Systems Security Contact named in this agreementCMA. If RRB ED is unable to speak with the SSA Systems Security Contact within one hour or, or if for some other reason notifying the SSA Systems Security Contact is not practicable (e.g., it is outside of the normal business hours), RRB ED will call SSA’s National Network Service Center toll free at 0-000-000-0000. If SSA is unable to speak with RRB’s ED Systems Security Contact within one 1 hour, SSA will contact Xxxx Xxxxxxxxx, RRB CERT Team Leader, at ED/FSA: EDSOC: xxxxx@xx.xxx: 000-000-0000 or 000-000-0000 (cell).0000

Loss Reporting. If either SSA or RRB experiences a an incident involving the loss or breach of PII provided by the other agency SSA or RRB under the terms of this agreement, they will follow the incident reporting guidelines issued by OMB. In the event of a reportable incident under OMB guidance involving PII, the agency experiencing the incident is responsible for following its established procedures, including notification to the proper organizations (e.g., United States Computer Emergency Readiness Team (CERT), and the agency’s privacy office). In addition, the agency experiencing the incident (e.g., electronic or paper) will notify the other agency’s Systems Security Contact named in this agreement. If RRB is unable to speak with the SSA Systems Security Contact within one hour or, or if for some other reason notifying the SSA Systems Security Contact is not practicable (e.g., it is outside of the normal business hours), RRB will call SSA’s National Network Service Center toll free at 0-000-000-0000. If SSA is unable to speak with RRB’s Systems Security Contact within one hour, SSA will contact Xxxx XxxxxxxxxXxxxx X. Xxxxxxx, Chief Information Security Officer (CISO) for RRB CERT Team Leader, computer system at 000-000-0000 or cell 000-000-0000 (cell)0000.

Loss Reporting. If either SSA or RRB CMS experiences a an incident involving the loss or breach of PII provided by the other agency SSA or CMS under the terms of this agreementAgreement, they will follow the incident reporting guidelines issued by OMB. In the event of a reportable incident under OMB guidance involving PII, the agency experiencing the incident is responsible for following its established procedures, including notification to the proper organizations (e.g., United States Computer Emergency Readiness Team (CERT)Team, and the agency’s privacy office). In addition, the agency experiencing the incident (e.g., electronic or paper) will notify the other agency’s Systems Security Contact named in this agreementAgreement. If RRB CMS is unable to speak with the SSA Systems Security Contact within one hour or, or if for some other reason notifying the SSA Systems Security Contact is not practicable (e.g., it is outside of the normal business hours), RRB CMS will call SSA’s National Network Service Center toll free at 0-000-000-0000. If SSA is unable to speak with RRBCMS’s Systems Security Contact within one hour, SSA will contact Xxxx Xxxxxxxxx, RRB CERT Team Leader, CMS IT Service Desk at 000-000-0000 (410) 786- 2580 or 000-000-0000 (cell)email XXX_XX_Xxxxxxx_Xxxx@xxx.xxx.xxx.