83 FR 6884 - Privacy Act of 1974; System of Records

NATIONAL SCIENCE FOUNDATION

Federal Register Volume 83, Issue 32 (February 15, 2018)

Page Range		6884-6885
FR Document		2018-03145

The National Science Foundation (NSF) is creating a new system of records: NSF-76 Account Registration and Management. This new system of records will contain records from a new centralized and streamlined account registration process that NSF is transitioning towards to provide each user with a single profile and unique identifier to be used across NSF systems.

Federal Register, Volume 83 Issue 32 (Thursday, February 15, 2018)

[Federal Register Volume 83, Number 32 (Thursday, February 15, 2018)]
[Notices]
[Pages 6884-6885]
From the Federal Register Online  [www.thefederalregister.org]
[FR Doc No: 2018-03145]


-----------------------------------------------------------------------

NATIONAL SCIENCE FOUNDATION


Privacy Act of 1974; System of Records

AGENCY: National Science Foundation.

ACTION: Notice of a New System of Records.

-----------------------------------------------------------------------

SUMMARY: The National Science Foundation (NSF) is creating a new system 
of records: NSF-76 Account Registration and Management. This new system 
of records will contain records from a new centralized and streamlined 
account registration process that NSF is transitioning towards to 
provide each user with a single profile and unique identifier to be 
used across NSF systems.

DATES: Persons wishing to comment on the changes set out in this notice 
may do so on or before March 19, 2018.
    Applicable Date: This action will be effective without further 
notice on March 19, 2018 unless modified by subsequent notice to 
incorporate comments received from the public.

ADDRESSES: You may submit comments, identified by [docket number and/or 
RIN number ___], by any of the following methods:
     Federal eRulemaking Portal: http://www.regulations.gov. 
Follow the instructions for submitting comments.
     Email: The Acting Senior Agency Official for Privacy, 
Dorothy Aronson, at daronson@nsf.gov. Include [docket number and/or RIN 
number ___] in the subject line of the message.
     Mail: Dorothy Aronson, Acting Senior Agency Official for 
Privacy, Office of Information and Resource Management, National 
Science Foundation, 2415 Eisenhower Ave., Alexandria, VA 22331.
    Instructions: NSF will post all comments on the NSF's website 
(https://www.nsf.gov/policies/privacy_act.jsp). All comments submitted 
in response to this Notice will become a matter of public record. 
Therefore, you should submit only information that you wish to make 
publicly available.

FOR FURTHER INFORMATION CONTACT: If you wish to submit general 
questions about the proposed new system of records NSF-76, please 
contact Dorothy Aronson, Acting Senior Agency Official for Privacy, at 
daronson@nsf.gov.

SUPPLEMENTARY INFORMATION: The new system of records, NSF-76 Account 
Registration and Management, will contain records from a new 
centralized and streamlined account registration process that NSF is 
transitioning towards to provide each user a single profile with a 
unique identifier to be used across NSF systems. The new account 
management functionality allows users to maintain their own account 
profiles, including personal information, and request roles to access 
NSF systems. It will also provide administrators the ability to manage 
roles for their organizations through a dashboard with functions to 
approve, disapprove, and assign roles for their organizations.
SYSTEM NAME AND NUMBER
    Account Registration and Management Records, NSF-76.

SECURITY CLASSIFICATION:
    Unclassified.

SYSTEM LOCATION:
    The National Science Foundation, 2415 Eisenhower Ave., Alexandria, 
VA 22314.

SYSTEM MANAGER(S):
    Division Director, Division of Information Systems, 2415 Eisenhower 
Ave., Alexandria, VA 22314. Phone: (703) 292-8150.

[[Page 6885]]

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:
    42 U.S.C. 1870; 44 U.S.C. 3101.

PURPOSE(S) OF THE SYSTEM:
    (1) To provide a centralized registration system for individuals 
that can be used to register and select role(s) necessary for use of 
NSF systems.
    (2) To provide a dashboard for administrators to easily manage NSF 
system roles for their organizations.
    (3) To provide demographic data that NSF may track over time in 
order to review and evaluate NSF programs.
    (4) To provide data that may be used to pre-populate forms and 
databases for users. This functionality will facilitate proposal 
submission, reviewer activities and other user functions.
    (5) To provide data that may be used for internal NSF compliance 
with applicable laws and policies, and conflict of interest management.
    (6) To provide data that may be used for NSF selection and 
management of reviewers as well as related merit review functions.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:
    Individuals who register with NSF and receive an NSF identifier 
(NSF ID) for accessing NSF systems to engage in a range of activities 
with the agency. These activities may include: proposal preparation and 
submission; proposal review activities; organizational account 
management activities; and fellowship and award activities.

CATEGORIES OF RECORDS IN THE SYSTEM:
    Registration information, including: name; email; phone number; 
ORCID digital identifier; and organization affiliation(s).

RECORD SOURCE CATEGORIES:
    Individuals who register with NSF to obtain an NSF identification 
number.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES 
OF USERS AND PURPOSES OF SUCH USES:
    NSF standard routine uses apply. NSF standard routine uses were 
last published in full in the Federal Register on December 22, 2014. 79 
FR 76398-02, 2014. The NSF standard routine uses can also be found on 
the NSF web page at www.NSF.gov/privacy. In addition to the standard 
routine uses, information may be disclosed to:
    (1) Other federal, state, local government agency, or third parties 
needing information regarding registrations to coordinate programs or 
policy.
    (2) Individual or organizational grant applicants, grantee 
organizations, and collaborators to provide or obtain data as part of 
award administration and to facilitate collaboration between and among 
individuals, organizations and collaborators.
    (3) NSF partners and affiliates to carry out studies for or to 
otherwise assist NSF with program management, evaluation, or reporting.

POLICIES AND PRACTICES FOR STORAGE OF RECORDS:
    Records are stored on electronic digital media.

POLICIES AND PRACTICES FOR RETRIEVAL OF RECORDS:
    Records are retrieved by the registrant's name, email, or NSF 
identifier (NSF ID).

POLICIES AND PRACTICES FOR RETENTION AND DISPOSAL OF RECORDS:
    Data collected and maintained pursuant to this System of Records is 
governed by one of the following records retention schedules:

    Grant and Contract Records Schedule N1-307-88-2
    Fellowship Records Schedule NC1-307-82-1
    Declined and Withdrawn Proposal Case Files NSF Records Schedule 
NC1-307-77-1/1

ADMINISTRATIVE, TECHNICAL, AND PHYSICAL SAFEGUARDS:
    The National Science Foundation's IT Security and Privacy program 
includes policies, plans, training, and technical safeguards to protect 
sensitive information, which includes personally identifiable 
information (PII). NSF routinely reviews PII in IT systems in addition 
to monitoring the many controls in place to assure that PII is 
appropriately protected. NSF's major applications and general support 
systems are assessed and authorized by NSF's continuous monitoring and 
ongoing authorization program. The authorization process requires a 
thorough security and privacy control review.
    All NSF systems are covered by a system security plan, and major 
applications and general support systems are authorized to operate. 
Applications and devices hosted on the NSF network are subjected to 
extensive vulnerability scanning and compliance checking against 
standard security configurations. Robust virus protection capabilities, 
anti-malware, and network intrusion detection and prevention devices 
provide 24/7 protection against external threats. NSF's strong access 
controls ensure that resources are made available only to authorized 
users, programs, processes or systems by reference to rules of access 
that are defined by attributes and policies.
    NSF uses the capabilities of a Trusted internet Connections (TIC) 
compliant provider for routing agency network traffic and uses the 
federally provided intrusion detection system (IDS), including advanced 
continuous monitoring and risk management analysis. NSF has a well-
established computer security incident response program. NSF's incident 
response procedures include a strong digital forensics capability to 
investigate and review data and identify relevant evidence and 
malicious activity.

RECORD ACCESS PROCEDURES:
    Follow the Requesting Access to Records procedures found at 45 CFR 
part 613.

CONTESTING RECORD PROCEDURES:
    Follow the procedures found at 45 CFR part 613.

NOTIFICATION PROCEDURES:
    Follow the procedures found at 45 CFR part 613.

EXEMPTIONS PROMULGATED FOR THE SYSTEM:
    None.

HISTORY:
    This is a new system of records and has not been previously 
published in the Federal Register.

    Dated: February 12, 2018.
Suzanne H. Plimpton,
Reports Clearance Officer, National Science Foundation.
[FR Doc. 2018-03145 Filed 2-14-18; 8:45 am]
BILLING CODE 7555-01-P

Federal Register / Vol. 83, No. 32 / Thursday, February 15, 2018 / Notices 6885

AUTHORITY FOR MAINTENANCE OF THE SYSTEM: as part of award administration and to reference to rules of access that are
42 U.S.C. 1870; 44 U.S.C. 3101. facilitate collaboration between and defined by attributes and policies.
among individuals, organizations and NSF uses the capabilities of a Trusted
PURPOSE(S) OF THE SYSTEM: internet Connections (TIC) compliant
collaborators.
(1) To provide a centralized (3) NSF partners and affiliates to carry provider for routing agency network
registration system for individuals that out studies for or to otherwise assist traffic and uses the federally provided
can be used to register and select role(s) NSF with program management, intrusion detection system (IDS),
necessary for use of NSF systems. evaluation, or reporting. including advanced continuous
(2) To provide a dashboard for monitoring and risk management
administrators to easily manage NSF POLICIES AND PRACTICES FOR STORAGE OF analysis. NSF has a well-established
system roles for their organizations. RECORDS:
computer security incident response
(3) To provide demographic data that Records are stored on electronic program. NSF’s incident response
NSF may track over time in order to digital media. procedures include a strong digital
review and evaluate NSF programs. forensics capability to investigate and
(4) To provide data that may be used POLICIES AND PRACTICES FOR RETRIEVAL OF
RECORDS:
review data and identify relevant
to pre-populate forms and databases for evidence and malicious activity.
users. This functionality will facilitate Records are retrieved by the
proposal submission, reviewer activities registrant’s name, email, or NSF RECORD ACCESS PROCEDURES:
and other user functions. identifier (NSF ID). Follow the Requesting Access to
(5) To provide data that may be used Records procedures found at 45 CFR
POLICIES AND PRACTICES FOR RETENTION AND
for internal NSF compliance with DISPOSAL OF RECORDS:
part 613.
applicable laws and policies, and
conflict of interest management. Data collected and maintained CONTESTING RECORD PROCEDURES:

(6) To provide data that may be used pursuant to this System of Records is Follow the procedures found at 45
for NSF selection and management of governed by one of the following CFR part 613.
reviewers as well as related merit records retention schedules:
NOTIFICATION PROCEDURES:
review functions. Grant and Contract Records Schedule
N1–307–88–2 Follow the procedures found at 45
CATEGORIES OF INDIVIDUALS COVERED BY THE Fellowship Records Schedule NC1– CFR part 613.
SYSTEM:
307–82–1 EXEMPTIONS PROMULGATED FOR THE SYSTEM:
Individuals who register with NSF Declined and Withdrawn Proposal None.
and receive an NSF identifier (NSF ID) Case Files NSF Records Schedule NC1–
for accessing NSF systems to engage in 307–77–1/1 HISTORY:
a range of activities with the agency. This is a new system of records and
These activities may include: proposal ADMINISTRATIVE, TECHNICAL, AND PHYSICAL
has not been previously published in
preparation and submission; proposal SAFEGUARDS:
the Federal Register.
review activities; organizational account The National Science Foundation’s IT
Dated: February 12, 2018.
management activities; and fellowship Security and Privacy program includes
and award activities. policies, plans, training, and technical Suzanne H. Plimpton,
safeguards to protect sensitive Reports Clearance Officer, National Science
CATEGORIES OF RECORDS IN THE SYSTEM: Foundation.
information, which includes personally
Registration information, including: identifiable information (PII). NSF [FR Doc. 2018–03145 Filed 2–14–18; 8:45 am]
name; email; phone number; ORCID routinely reviews PII in IT systems in BILLING CODE 7555–01–P
digital identifier; and organization addition to monitoring the many
affiliation(s). controls in place to assure that PII is
appropriately protected. NSF’s major NATIONAL SCIENCE FOUNDATION
RECORD SOURCE CATEGORIES:
applications and general support
Individuals who register with NSF to Privacy Act of 1974; System of
systems are assessed and authorized by
obtain an NSF identification number. Records
NSF’s continuous monitoring and
ROUTINE USES OF RECORDS MAINTAINED IN THE ongoing authorization program. The AGENCY: National Science Foundation.
SYSTEM, INCLUDING CATEGORIES OF USERS AND authorization process requires a ACTION: Notice of a modified system of
PURPOSES OF SUCH USES: thorough security and privacy control records.
NSF standard routine uses apply. NSF review.
standard routine uses were last All NSF systems are covered by a SUMMARY: The system of records
published in full in the Federal Register system security plan, and major Suspension, Debarment, and Research
on December 22, 2014. 79 FR 76398–02, applications and general support Misconduct Files NSF–55, contains
2014. The NSF standard routine uses systems are authorized to operate. records about persons considered for
can also be found on the NSF web page Applications and devices hosted on the government-wide suspension,
at www.NSF.gov/privacy. In addition to NSF network are subjected to extensive debarment, and/or research misconduct
the standard routine uses, information vulnerability scanning and compliance determination. The National Science
may be disclosed to: checking against standard security Foundation (NSF) is proposing to add
configurations. Robust virus protection one new routine use and an additional
sradovich on DSK3GMQ082PROD with NOTICES

(1) Other federal, state, local
government agency, or third parties capabilities, anti-malware, and network statute in the authority section of this
needing information regarding intrusion detection and prevention system of records.
registrations to coordinate programs or devices provide 24/7 protection against DATES: Persons wishing to comment on
policy. external threats. NSF’s strong access the changes set out in this notice may
(2) Individual or organizational grant controls ensure that resources are made do so on or before March 19, 2018.
applicants, grantee organizations, and available only to authorized users, This action will be applicable without
collaborators to provide or obtain data programs, processes or systems by further notice on March 19, 2018 unless

VerDate Sep<11>2014 19:01 Feb 14, 2018 Jkt 244001 PO 00000 Frm 00052 Fmt 4703 Sfmt 4703 E:\FR\FM\15FEN1.SGM 15FEN1

Document Created: 2018-02-15 00:21:01
Document Modified: 2018-02-15 00:21:01

Category		Regulatory Information
Collection		Federal Register
sudoc Class		AE 2.7: GS 4.107: AE 2.106:
Publisher		Office of the Federal Register, National Archives and Records Administration
Section		Notices
Action		Notice of a New System of Records.
Dates		Persons wishing to comment on the changes set out in this notice may do so on or before March 19, 2018.
Contact		If you wish to submit general questions about the proposed new system of records NSF-76, please contact Dorothy Aronson, Acting Senior Agency Official for Privacy, at [email protected]
FR Citation		83 FR 6884