Common use of Management Oversight and Quality Assurance Clause in Contracts

Management Oversight and Quality Assurance. (The Privacy Act of 1974, E-Government Act of 2002 (P.L. 107-347), and the AC – Access Control & PM – Program Management Families, NIST SP 800-53 rev. 4) SSA requires the EIEP to establish and/or maintain ongoing management oversight and quality assurance capabilities to ensure that only authorized users have access to SSA-provided information. This will ensure there is ongoing compliance with the terms of the EIEP’s electronic information sharing agreement with SSA and the TSSRs established for access to SSA- provided information. The entity responsible for management oversight should consist of one or more of the EIEP’s management officials whose job functions include responsibility to ensure that the EIEP only grants access to the appropriate users and position types (least privilege), which require the SSA- provided information to do their jobs (need-to-know). SSA requires the EIEP to ensure that users granted access to SSA-provided information receive adequate training on the sensitivity of the information, associated safeguards, operating procedures, and the civil and criminal consequences or penalties for misuse or improper disclosure. SSA requires that EIEPs establish the following job functions and require that only users whose job functions are separate from personnel who request or use SSA-provided information. SSA requires that EIEPs establish the following job functions separate from personnel who request or use SSA-provided information.