State-56, Network User Account Records, 63253-63254 [2010-25884]

Agencies

• DEPARTMENT OF STATE

[Federal Register Volume 75, Number 198 (Thursday, October 14, 2010)]
[Notices]
[Pages 63253-63254]
From the Federal Register Online via the Government Printing Office [www.gpo.gov]
[FR Doc No: 2010-25884]


-----------------------------------------------------------------------

DEPARTMENT OF STATE

[Public Notice 7210]


State-56, Network User Account Records

SUMMARY: Notice is hereby given that the Department of State proposes 
to create a system of records, Network User Account Records, State-56, 
pursuant to the provisions of the Privacy Act of 1974, as amended (5 
U.S.C. 552a) and Office of Management and Budget Circular No. A-130, 
Appendix I. The Department's report was filed with the Office of 
Management and Budget on August 16, 2010.
    It is proposed that the new system will be named ``Network User 
Account Records.'' It is also proposed that the new system description 
will be utilized to administer network user accounts; to help document 
and/or control access to computer systems, platforms, services, 
applications, and databases within a Department network; to monitor 
security of computer systems; to investigate and make referrals for 
disciplinary or other actions if unauthorized access or inappropriate 
usage is suspected or detected; and to identify the need for training 
programs.
    Any persons interested in commenting on the new system of records 
may do so by submitting comments in writing to Margaret P. Grafeld, 
Director, Office of Information Programs and Services, A/GIS/IPS, 
Department of State, SA-2, 515 22nd Street, Washington, DC 20522-8001. 
This system of records will be effective 40 days from the date of 
publication, unless we receive comments that will result in a contrary 
determination.
    The new system description, ``Network User Account Records, State-
56,'' will read as set forth below.

    Dated: August 16, 2010.
Steven J. Rodriguez,
Deputy Assistant Secretary of Operations, Bureau of Administration, 
U.S. Department of State.
STATE-56

SYSTEM NAME:
    Network User Account Records.

SECURITY CLASSIFICATION:
    Unclassified.

SYSTEM LOCATION:
    Records are maintained by the Department of State in secure 
facilities wherever a domain controller is automatically compiling a 
visitors' log of individuals who authenticate to a particular server.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:
    Department of State employees and other organizational users who 
have access to Department of State computer networks.

CATEGORIES OF RECORDS IN THE SYSTEM:
    This Privacy Act system consists of the network user account 
records that Department information systems, applications, and services 
compile and maintain about users of a network. These records include 
user data such as the user's name, system-assigned username; e-mail 
address; employee or other user identification number; organization 
code; job title; business affiliation; work contact information; 
systems, applications, or services to which the individual has access; 
systems, applications, or services used; dates, times, and durations of 
use; user profile; and IP address of access. The records also include 
system usage files and directories when they contain information about 
specific users.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:
    5 U.S.C. 301; 44 U.S.C. 3544.

PURPOSE:
    To administer network user accounts; to help document and/or 
control access to computer systems, platforms, services, applications, 
and databases within a Department network; to monitor security of 
computer systems; to investigate and make referrals for disciplinary or 
other actions if unauthorized access or inappropriate usage is 
suspected or detected; and to identify the need for training programs.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES 
OF USERS AND PURPOSES OF SUCH USES:
    The routine uses applicable to this system of records are published 
at 73 FR 40650-40651 (July 15, 2008).

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, RETAINING 
AND DISPOSING OF RECORDS IN THE SYSTEM:
STORAGE:
    Electronic and paper records.

RETRIEVABILITY:
    Records are indexed by the user's name, system-assigned username; 
e-mail address; or other searchable data fields or codes.

[[Page 63254]]

 SAFEGUARDS:
    All individuals with access to the records covered by this system 
of records receive cyber security awareness training which covers the 
procedures for handling classified and Sensitive-but-Unclassified 
information, including personally identifiable information. Annual 
refresher training is mandatory. Individuals with access undergo a 
background security investigation. All paper records are maintained in 
secured filing cabinets or in restricted areas, access to which is 
limited to authorized personnel only. Access to electronic records is 
password-protected and under the supervision of the information owner. 
Access privileges reflect separation of duties and least privilege, and 
are only extended to those Department personnel who have a need for the 
records in the performance of their duties. Individuals who are 
authorized to examine detailed information about the network and system 
usage of specific users are assigned privileged system accounts for 
that purpose. When it is determined that an individual no longer 
requires access, his or her account is disabled.

RETENTION AND DISPOSAL:
    See National Archives and Records Administration General Records 
Schedule 20.1 (Files/Records Relating to the Creation, Use, and 
Maintenance of Computer Systems, Applications, or Electronic Records) 
and 24.6 (User Identification, Profiles, Authorizations, and Password 
Files). Records are deleted when no longer needed for administrative, 
legal, audit, or other operational purposes.

SYSTEM MANAGER AND ADDRESS:
    Chief Information Officer, Department of State, 2201 C Street, NW., 
Washington, DC 20520.

NOTIFICATION PROCEDURES:
    Individuals who have reason to believe that this system of records 
may contain information pertaining to them may write the Director, 
Office of Information Programs and Services, Department of State, SA-2, 
515 22nd Street, NW., Washington, DC 20522-8001. At a minimum, the 
individual should include the name of this system of records; their 
name, current mailing address, zip code, and signature; and a brief 
description of the circumstances that caused the individual to believe 
that the system of records contains records pertaining to them, 
including the specific geographic locations, overseas missions, or 
individual offices in which the individual believes he or she may have 
accessed or is believed to have accessed the Department's computer 
systems.

RECORD ACCESS AND AMENDMENT PROCEDURES:
    Individuals who wish to gain access to or amend records pertaining 
to them should write to the Director, Office of Information Programs 
and Services, Department of State, SA-2, 515 22nd Street, NW., 
Washington, DC 20522-8001.

RECORD SOURCE CATEGORIES:
    Individuals about whom the record is maintained; information 
systems, applications, and services within a Department network that 
record usage by individuals assigned a user account on that network.

EXEMPTIONS CLAIMED FOR THE SYSTEM:
    None.
[FR Doc. 2010-25884 Filed 10-13-10; 8:45 am]
BILLING CODE 4710-00-P