Privacy Impact Assessment Form

Save

Privacy Impact Assessment Form
v 1.47.4
Status Draft

Form Number

F-18495

Form Date

Question

Answer

1

OPDIV:

CDC

2

PIA Unique Identifier:

P-4757682-165418

2a Name:

6/23/2021 7:36:07 AM

DSLR-PR Operational Readiness Review (ORR)
General Support System (GSS)
Major Application

3

Minor Application (stand-alone)

The subject of this PIA is which of the following?

Minor Application (child)
Electronic Information Collection
Unknown

3a

Identify the Enterprise Performance Lifecycle Phase
of the system.

Test
Yes

3b Is this a FISMA-Reportable system?

4

Does the system include a Website or online
application available to and for the use of the general
public?

5

Identify the operator.

6

Point of Contact (POC):

7

Is this a new or existing system?

8

Does the system have Security Authorization (SA)?

8b Planned Date of Security Authorization

No
Yes
No
Agency
Contractor
POC Title

Associate Director IT team

POC Name

Mark Green

POC Organization CPR/DSLR
POC Email

[email protected]

POC Phone

404.639.7268
New
Existing
Yes
No
July 30, 2021
Not Applicable

Page 1 of 3

Save

11 Describe the purpose of the system.

The Centers for Disease Control and Prevention (CDC), Center
for Preparedness and Response (CPR), Division of State and
Local Readiness (DSLR) administers the Public Health
Emergency Preparedness (PHEP) cooperative agreement
program. The PHEP program helps build and strengthen public
health systems that are ready to respond and recover from
public health emergencies. CDC’s Operational Readiness
Review (ORR) is a rigorous, evidence-based assessment used to
evaluate PHEP program planning and operational functions.
The overall evaluation strategy is guided by the Public Health
Emergency Preparedness and Response Capabilities: National
Standards for State, Local, Tribal, and Territorial Public Health.

The Public Health Emergency preparedness (PHEP) program
will collect descriptive, planning and operational functions.
Descriptive forms will collect essential information for
jurisdiction’s population, partner and trainings plans. These
plans contain information about Points of Dispensing (POD)
and Work Force Development (WDT) information. The
planning forms collects performance measure information for
jurisdictions all-hazards emergency plans around the 15 PHEP
capabilities. The forms contain information around community
preparedness, community recovery, mass care, medical surge
and other capabilities. Each operational submission is
associated with a PHEP program requirement exercise, drill
and/or real event. Every program requirement must include at
Describe the type of information the system will
least one associated area identified for improvement. Data is
collect, maintain (store), or share. (Subsequent
12
questions will identify if this information is PII and ask collected via Microsoft SQL Server database and used for
longitudinally analysis, reports generation, and to support
about the specific data elements.)
program consistency throughout the public health
community.
The Operational Readiness Review (ORR) uses the Secure
Access Management System (SAMS) to authenticate. All ORR
Users and system administrators are authenticated through
SAMS. CDC staff will use their PIV cards with (CDC Active
Directory) which validates an individual’s identity and access
privileges. Non-CDC staff will validate using SAMS
credentialing via SAMS. ORR users must go through Identity
proofing to request a SAMS Username and Password. SAMS is
responsible for authenticating and encrypting user sessions
and transactions. Active Directory and SAMS are separate
systems with their own PIAs.

Page 2 of 3

Save

Provide an overview of the system and describe the
13 information it will collect, maintain (store), or share,
either permanently or temporarily.

The ORR evaluation is intended to identify strengths and
challenges facing preparedness programs as well as recognize
areas for improvement and technical assistance. The
Operational Readiness Review (ORR) evaluation encourages
Public Health Emergency preparedness (PHEP) recipients and
Cities Readiness Initiative (CRI) funded local planning
jurisdictions to use the ORR to demonstrate that 1) risk
assessments guide preparedness planning, 2) risk-based, allhazards emergency plans are maintained, and 3) trainings,
drills, and exercises are conducted on a timely basis.
The data is collected via a server database and stored in the
DSLR Data warehouse for archival purposes, longitudinally
analysis, reports generation, and to support program
consistency throughout the public health community.
The Operational Readiness Review (ORR) uses the Secure
Access Management System (SAMS) to authenticate. All ORR
Users and system administrators are authenticated through
SAMS. CDC staff will use their PIV cards with (CDC Active
Directory) which validates an individual’s identity and access
privileges. Non-CDC staff will validate using SAMS
credentialing via SAMS. ORR users must go through Identity
proofing to request a SAMS Username and Password. SAMS is
responsible for authenticating and encrypting user sessions
and transactions. Active Directory and SAMS are separate
systems with their own PIAs.

14 Does the system collect, maintain, use or share PII?

Yes
No

General Comments

OPDIV Senior Official
for Privacy Signature

signed by Jarell
Jarell Oshodi Digitally
Oshodi -S
Date: 2021.07.07 13:43:30
-S
-04'00'

Page 3 of 3