Code of Federal Regulations Title 45. Public Welfare § 45.310.15 What are the safeguards and processes that comprehensive Tribal IV–D agencies must have in place to ensure the security and privacy of Computerized Tribal IV–D Systems and Office Automation?

(a) Information integrity and security. The comprehensive Tribal IV–D agency must have safeguards on the integrity, accuracy, completeness, access to, and use of data in the Computerized Tribal IV–D System and Office Automation. Computerized Tribal IV–D Systems and Office Automation should be compliant with the Federal Information Security Management Act, and the Privacy Act. The required safeguards must include written policies and procedures concerning the following:

(b) Monitoring of access. The comprehensive Tribal IV–D agency must monitor routine access to and use of the Computerized Tribal IV–D System and Office Automation through methods such as audit trails and feedback mechanisms to guard against, and promptly identify, unauthorized access or use;

(c) Training and information. The comprehensive Tribal IV–D agency must have procedures to ensure that all personnel, including Tribal IV–D staff and contractors, who may have access to or be required to use confidential program data in the Computerized Tribal IV–D System and Office Automation are adequately trained in security procedures.

(d) Penalties. The comprehensive Tribal IV–D agency must have administrative penalties, including dismissal from employment, for unauthorized access to, disclosure or use of confidential information.