Enterprise Information Management Standards Performing Agency shall conform to HHS standards for data management as described by the policies of the HHS Chief Data and Analytics Officer. These include, but are not limited to, standards for documentation and communication of data models, metadata, and other data definition methods that are required by HHS for ongoing data governance, strategic portfolio analysis, interoperability planning, and valuation of HHS System data assets.
General Policies 6.2.4.1 Each Party’s resources are for approved business purposes only. 6.2.4.2 Each Party may exercise at any time its right to inspect, record, and/or remove all information contained in its systems, and take appropriate action should unauthorized or improper usage be discovered. 6.2.4.3 Individuals will only be given access to resources that they are authorized to receive, and which they need to perform their job duties. Users must not attempt to access resources for which they are not authorized. 6.2.4.4 Authorized users must not develop, copy or use any program or code that circumvents or bypasses system security or privilege mechanism or distorts accountability or audit mechanisms. 6.2.4.5 Actual or suspected unauthorized access events must be reported immediately to each Party’s security organization or to an alternate contact identified by that Party. Each Party shall provide its respective security contact information to the other.