Draft SORN

DEPARTMENT OF DEFENSE

U.S. Air Force

Narrative Statement for a New System of Records

Under the Privacy Act of 1974

NARRATIVE STATEMENT – NEW SORN

DEPARTMENT OF DEFENSE

Narrative Statement for a New System of Records

Under the Privacy Act of 1974

1. System name and number: Personnel Recovery Command & Control (PRC2), F____

2. Purpose of establishing the system (New): To collect information with the purpose of identifying and authenticating personnel during recovery missions. Personnel Recovery (PR) is a DoD mission area where the objectives are to return isolated personnel (IP) to duty; increase morale; increase operational performance; and deny adversaries the opportunity to influence our military strategy and national will by exploiting the intelligence and propaganda value of isolated personnel.

3. Specific authority under which the system of records is maintained:

5 U.S.C. Section 552a; 10 U.S.C. Sections 133, 3012, 8012; E.O. 13478; DoDI 5400.11 DoD Privacy Program; Air Force Instruction 33-332, Air Force Privacy and Civil Liberties Program.

4. Evaluation on the probable or potential effect on the privacy of individuals:

Unauthorized access to records is low due to PRC2 being hosted on a DoD Risk Management Framework life-cycle cybersecurity infrastructure. The system is a Government-Off-The-Shelf web application used DoD wide and some federal agencies, and employs Commercial-Off-The-Shelf software, hosted on an Impact Level 5 and 6, DISA’s Authorizing Official (AO) approved DISA Cloud Service Provider (CSP) environment. Records are maintained in a controlled facility. Records are accessible only to authorized persons with a need-to-know who are properly screened, cleared, and trained. Records are encrypted during transmission to protect session information and at rest. The system maintains a role based access, government Common Access Card (CAC) and associated Personal Identification Number (PIN) for system access.

5. Routine use compatibility:

The routine uses are consistent with the purpose for which the information was collected and have been determined to be necessary and proper for planning and executing lifesaving missions. Information will only be used to identify personnel in recovery missions.

6. OMB public information collection requirements:

OMB collection required: Yes

OMB Control Number: 0701-0166

Title of collection if different: Personnel Recovery Command & Control

Date Approved or Submitted to OMB: XX/XX/XXXX

Expiration Date (if approved): XX/XX/XXXX

If collecting on members of the public and no OMB approval is required, state the applicable exception(s): N/A

7. Name of IT system: Personnel Recovery Command & Control (PRC2), version 6.0.2, DITPR ID#: N/A, PRC2 system is considered a Platform Information Technology (PIT) System. PIT systems are not subject to the reporting requirements of FISMA and, therefore, are not registered in the DITPR or the SIPRNet IT Registry.

8. Is the system, in whole or in part, being maintained, (maintained, collected, used, or disseminated) by a contractor? Yes. Exceptions on disclosure are made for government contractors.