Common use of Cybersecurity Condition Clause in Contracts

Cybersecurity Condition. EPA must ensure that any connections between the Grantee’s network or information system and EPA networks used by the Grantee to transfer data under this agreement, are secure. The Grantee shall comply with the following requirements if the Grantee’s network or information system is connected to EPA networks to transfer data to the Agency using systems other than the Environmental Information Exchange Network or EPA’s Central Data Exchange: If the Grantee’s connections do not go through the Environmental Information Exchange Network or EPA’s Central Data Exchange, the Grantee agrees to contact the EPA Project Officer (PO) and work with the designated Regional/Headquarters Information Security Officer to ensure that the connections meet EPA security requirements, including entering into Interconnection Service Agreements as appropriate. This condition does not apply to manual entry of data by the recipient into systems operated and used by EPA’s regulatory programs for the submission of reporting and/or compliance data. For the purposes of this paragraph, a connection is defined as a dedicated persistent interface between an Agency IT system and an external IT system for the purpose of transferring information. Transitory, user-controlled connections such as website browsing are excluded from this definition.

Cybersecurity Condition. EPA must ensure that any connections between the Grantee’s network or information system and EPA networks used by the Grantee Contractor to transfer data under this agreement, are secure. The Grantee Contractor shall comply with the following requirements if the Grantee’s network or information system is connected to EPA networks to transfer data to the Agency using systems other than the Environmental Information Exchange Network or EPA’s Central Data Exchange: If the Grantee’s connections do not go through the Environmental Information Exchange Network or EPA’s Central Data Exchange, the Grantee Contractor agrees to contact the EPA Project Officer (PO) and work with the designated Regional/Headquarters Information Security Officer to ensure that the connections meet EPA security requirements, including entering into Interconnection Service Agreements as appropriate. This condition does not apply to manual entry of data by the recipient into systems operated and used by EPA’s regulatory programs for the submission of reporting and/or compliance data. For the purposes of this paragraph, a connection is defined as a dedicated persistent interface between an Agency IT system and an external IT system for the purpose of transferring information. Transitory, user-controlled connections such as website browsing are excluded from this definition.