EXECUTIVE SUMMARY REPORT
INTRODUCTION TO THE PIA
Purpose
The purpose of this document is to describe the Privacy Impact
Assessment (PIA) conducted for Enterprise Business Support System (EBSS)
(formerly known as the Enterprise Information Management System). The
Department of Labor (DOL) is responsible for ensuring proper protections of the
information contained within its information systems, including personally
identifiable information (PII).
One objective of the PIA is to assist the Employment and Training
Administration (ETA) in identifying personal information and addressing
information privacy when planning, developing, implementing, and operating
individual agency information management systems and integrated DOL information
systems
The following DOL ETA Office is responsible for the EBSS modules: Office
of Performance and Technology, Division of Technology Applications Support.
EBSS is a management system that supports many of the business and
workflow processes throughout ETA. For ETA, EBSS is a management tool that
assists with the review and analysis of data. It allows ETA to review data
submitted by our grantees and generate management reports.
PIA APPROACH
This PIA was conducted in collaboration with the Program Offices,
Application Security Officers, Project Manager, ETA Privacy Officer, System
Analyst and was overseen by the Information Technology Security Manager. The
System Security Plan, Risk Assessment, and the Federal Register Part II volume
67 dated April 8, 2003 were also used to complete this assessment.
PIA RESULTS
Based on the results of this assessment, strong administrative,
technical, and management security controls are implemented for EBSS to ensure
the protection of PII
|
