PREDICT Supporting Statement v1[1].2

SUPPORTING STATEMENT

PREDICT System Information Collection

(OMB No. 1640-NEW)

A. Justification

1. The PREDICT initiative of the Department of Homeland Security (DHS) Science and Technology (S&T) directorate facilitates the accessibility of computer and network operational data for use in cyber defense research and development through the establishment of distributed repositories of security-relevant network operations data, and the application procedures, protection policies, and review processes necessary to make this data available to the cyber defense research community.  It is expected that PREDICT will be operational by Fall 2008.

The purpose of this system is to:

• Provide a central repository, accessible through a Web-based portal that catalogs current computer network operational data.

• Provide secure access to multiple sources of data collected as a result of use and traffic on the Internet.

• Facilitate data flow among PREDICT participants for the purpose of developing new models, technologies and products that support effective threat assessment and increase cyber security capabilities.

DHS S&T must collect information from public in order to carry out Homeland Security Presidential Directive 7 to collaborate with appropriate private sector entities, continue to encourage the development of information sharing and analysis mechanisms, and to facilitate sharing of information about physical and cyber threats, vulnerabilities, incidents, potential protective measures, and best practices.

2. The content of PREDICT is proprietary datasets that will be used by the Research community in its efforts to build products and technologies that will better protect America’s computing infrastructure.

3. Using a secure Web portal, accessible through https://www.predict.org/, the PREDICT Coordinating Center manages a centralized repository that identifies the datasets and their sources and location, and acts as gatekeeper for access and release of the data.

All data input to the system is either keyed in by users (Data Providers) or migrated (via upload of an XML file).

4. DHS S&T found no duplication of efforts, and there are no similar forms currently available that can be used for this system.

5. This collection does not impact small businesses or other small entities.

6. If the information is not collected, DHS S&T will be unable to fulfill the objectives of the PREDICT system to provide secure access to multiple sources of data collected as a result of use and traffic on the Internet or facilitate data flow among PREDICT participants.

7. The special circumstances contained in item seven of the supporting statement are not applicable to this information collection.

8. DHS S&T asked for comments from the public in a 60 day notice for public comment (72 FR 73859) and a 30 day notice for public comment (73 FR 13915). DHS S&T did not receive any comments on the information collection.

9. DHS S&T does not provide payments or gifts to respondents in exchange for a benefit sought.

10. The security safeguards for the system shall meet the policy requirements set forth in the PREDICT System Security Plan (SSP) and its implementation manual and/or regulation. All systems are subject to monitoring consistent with applicable laws, regulations, agency policies, procedures and practices. The Privacy Act of 1974 (Public Law 93-589) mandates that personal information solicited from individuals completing Federal records and forms be kept confidential. A Privacy Threshold Analysis was completed and required the submission of a Privacy Impact Assessment, which was accepted as complete. They are included in the submission package.

11. There are no questions of a sensitive nature in this information collection.

12. Estimated Annualized Burden Hours and Costs

Form Name / Number	Account Request Form	Add a New Dataset Form	Annotate Dataset Form
No. of Respondents	37	10	37
No. of Responses per Respondent	1	1	1
Avg. Burden per Response (in hours)	.25	.25	1
Total Annual Burden (in hours)	9.25	2.5	37
Average Hourly Wage Rate	$100	$100	$100
Total Annual Respondent Cost	$925	$250	$3700

Form Name / Number	Request a Dataset Form	Update Host Data Form	Update Provider Data Form
No. of Respondents	37	10	10
No. of Responses per Respondent	1	1	1
Avg. Burden per Response (in hours)	.25	.25	.25
Total Annual Burden (in hours)	9.25	2.5	2.5
Average Hourly Wage Rate	$100	$100	$100
Total Annual Respondent Cost	$925	$250	$250

Form Name / Number	Memorandum of Agreement - PREDICT (PCC) Coordinating Center and Researcher/User	Memorandum of Agreement - PCC and Data Provider (DP)	Memorandum of Agreement - PCC and Data Host (DH)
No. of Respondents	37	10	10
No. of Responses per Respondent	1	1	1
Avg. Burden per Response (in hours)	1	.75	.75
Total Annual Burden (in hours)	37	7.5	7.5
Average Hourly Wage Rate	$100	$100	$100
Total Annual Respondent Cost	$3700	$750	$750

Form Name / Number	Authorization Letter for Data Host	Authorization Letter for Data Provider	Sponsorship Letter
No. of Respondents	10	10	37
No. of Responses per Respondent	1	1	1
Avg. Burden per Response (in hours)	1	1	1
Total Annual Burden (in hours)	10	10	37
Average Hourly Wage Rate	$100	$100	$100
Total Annual Respondent Cost	$1000	$1000	$3700

Form Name / Number	Notice of Dataset Access/Application Expiration	Certificate of Data Destruction
No. of Respondents	10	10
No. of Responses per Respondent	1	1
Avg. Burden per Response (in hours)	.25	.25
Total Annual Burden (in hours)	2.5	2.5
Average Hourly Wage Rate	$100	$100
Total Annual Respondent Cost	$250	$250

Annual Reporting Burden and Respondent Cost: The total estimated ICR Public Burden in hours is 180. This figure was derived by summing the total annual burden hours from all forms. The total annual number of respondents is 275. This figure was derived by summing the number of respondents to each form.

13. There are no capital or start-up costs associated with this information collection. There is no fee charge of for filing and of the information collection forms. Any cost burdens to respondents as a result of this information collection are identified in Item 14.

14. Government Cost

Estimate annual cost to the federal government in relation to this information collection is $2.5 million. This cost includes staffing costs for senior level directors, computer programmers, system administrators and mid level technical/engineers.  Costs also include the purchase of servers and software for collecting/retaining/storing the collected information.

Public Cost

The total estimated annual public reporting cost is $14,925. This figure was derived by summing the estimated annual respondent costs for all forms.

15. This is a new information collection.

16. DHS S&T does not intend to employ the use of statistics or the publication thereof for this information collection.

17. DHS S&T will display the expiration date of OMB approval for this information collection.

18. DHS S&T does not request an exception to the certification of this information collection.

B. Collection of Information Employment Statistical Methods

Not Applicable.

6