Common use of Loss Reporting Clause in Contracts

Loss Reporting. If either SSA or VA/VHA experiences an incident involving the loss or breach of PII provided by SSA or VA/VHA under the terms of this agreement, they will follow the incident reporting guidelines issued by OMB. In the event of a reportable incident under OMB guidance involving PII, the agency experiencing the incident is responsible for following its established procedures, including notification to the proper organizations (e.g., United States Computer Emergency Readiness Team, the agency’s privacy office). In addition, the agency experiencing the incident (e.g., electronic or paper) will notify the other agency’s Systems Security Contact named in this agreement. If VA/VHA is unable to speak with the SSA Systems Security Contact within one hour or if for some other reason notifying the SSA Systems Security Contact is not practicable (e.g., it is outside of the normal business hours), VA/VHA will call SSA’s National Network Service Center toll free at ▇-▇▇▇-▇▇▇-▇▇▇▇. If SSA is unable to speak with VA/VHA’s Systems Security Contact within one hour, SSA will contact the VA/VHA Situation Room at (▇▇▇) ▇▇▇-▇▇▇▇.

Loss Reporting. If either SSA or VA/VHA experiences an incident involving the loss or breach of PII provided by SSA or VA/VHA under the terms of this agreement, they will follow the incident reporting guidelines issued by OMB. In the event of a reportable incident under OMB guidance involving PII, the agency experiencing the incident is responsible for following its established procedures, including notification to the proper organizations (e.g., United States Computer Emergency Readiness Team, the agency’s privacy office). In addition, the agency experiencing the incident (e.g., electronic or paper) will notify the other agency’s Systems Security Contact named in this agreement. If VA/VHA is unable to speak with the SSA Systems Security Contact within one hour or or, if for some other reason notifying the SSA Systems Security Contact is not practicable (e.g., it is outside of the normal business hours), VA/VHA will call SSA’s National Network Service Center toll free at ▇-▇▇▇-▇▇▇-▇▇▇▇. If SSA is unable to speak with VA/VHA’s Systems Security Contact within one hour, SSA will contact the VA/VHA Situation Room at (▇▇▇) Enterprise Service Desk, ▇▇▇-▇▇▇-▇▇▇▇ (option 5) to create an incident ticket for assignment to the Cyber Security Operations Center (CSOC).