SYSTEM NAME:

Enterprise Mission Assurance Support Service (EMASS)  (July 11, 2014,  79 FR 40074)

SYSTEM LOCATION:

Defense Information Systems Agency, Defense Enterprise Computing Centers (DECC), 3990 E. Broad Street, Columbus, OH 43213-1130.

CATEGORIES OF INDIVIDUALS COVERED BY THE SYSTEM:

DoD government employees, military personnel and DoD contractors.

CATEGORIES OF RECORDS IN THE SYSTEM:

Full name, organization, office phone number, title, position, grade, current DISA identification badge, grade, work email address, information technology (IT) position category, and clearance level.

AUTHORITY FOR MAINTENANCE OF THE SYSTEM:

5 U.S.C. 301, Departmental Regulation; DoD Directive 5105.19, Defense Information Systems Agency (DISA); and DoDI 8510.01, Department of Defense Information Assurance Certification and Accreditation Process (DIACAP).

PURPOSE(S):

The system automates the DoD certification and accreditation process. Information collected on individuals is to determine role based access and whether or not a person has the correct qualifications to perform certification and accreditation within the DoD organization that is utilizing the system.

ROUTINE USES OF RECORDS MAINTAINED IN THE SYSTEM, INCLUDING CATEGORIES OF USERS AND THE PURPOSES OF SUCH USES:

In addition to those disclosures generally permitted under 5 U.S.C. 552a (b) of the Privacy Act of 1974, as amended, these records contained therein may specifically be disclosed outside the DoD as a routine use pursuant to 5 U.S.C. 552a(b)(3) as follows:

The DoD Blanket Routine Uses set forth at the beginning of the DISA's compilation of systems of records notices may apply to this system.

POLICIES AND PRACTICES FOR STORING, RETRIEVING, ACCESSING, RETAINING, AND DISPOSING OF RECORDS IN THE SYSTEM:

STORAGE:

Electronic storage media.

RETRIEVABILITY:

Retrieved by name.

SAFEGUARDS:

Access to EMASS is an encrypted Public Key-Enabled and requires authorization from the organization system administrator. The system is a role based access application and administrators have the rights to assign. Information is stored within the database that resides within a DISA Enclave. The DISA enclave has a number of security measures in place to protect the database from unauthorized access from outside the .mil. Backup tapes are stored in a locked safe and information is also backed up daily.

RETENTION AND DISPOSAL:

Disposition pending (until the National Archives and Records Administration approves retention and disposal schedule, records will be treated as permanent).

SYSTEM MANAGER(S) AND ADDRESS:

EMASS Program Manager, Defense Information Systems Agency, Program Executive Office-Mission Assurance (PEO-MA) Room IA5, 6914 Cooper Ave, Fort Meade, MD 20755-0549.

NOTIFICATION PROCEDURE:

Individuals seeking to determine whether information about themselves is contained in this system of records should address written inquiries to the Defense Information Systems Agency, PEO-MA IA5, and 6914 Cooper Ave, Fort Meade, MD 20755-0549.

The full name of the requesting individual will be required to determine if the system contains a record about him or her.

The requester may also visit the system manager listed. The requester must present a copy of their current DISA identification badge or a copy of driver's license as proof of identity.

RECORD ACCESS PROCEDURES:

Individuals seeking access to information about themselves contained in this system of records should address written inquiries to the Defense Information Systems Agency, PEO-MA IA5, 6914 Cooper Ave, Fort Meade, MD 20755-0549.

The full name of the requesting individual will be required to determine if the system contains a record about him or her.

The requester may also visit the system manager listed. The requester must present a copy of their current DISA identification badge or a copy of driver's license as proof of identity.

DISAs rules for accessing records, for contesting content and appealing initial agency determinations are published in DISA Instruction 210-225-2; 32 CFR part 316; or may be obtained from the systems manager.

CONTESTING RECORD PROCEDURES:

DISAs rules for accessing records, for contesting content and appealing initial agency determinations are published in DISA Instruction 210-225-2; 32 CFR part 316; or may be obtained from the systems manager.

RECORD SOURCE CATEGORIES:

From the individual.

EXEMPTIONS CLAIMED FOR THE SYSTEM:

None.

FEDERAL REGISTER HISTORY:

January 30, 2014, 79 FR 4889; July 11, 2014, 79 FR 40074.