AgdaPkt 2021.01.25 Amended Joint SA PFA

Browse Search

6.A. - Page 69 of 70 cybersecurity requirements as applicable. (b)(1) EPA must ensure that any connections between the recipient's network or information system and EPA networks used by the recipient to transfer data under this agreement, are secure. For purposes of this Section, a connection is defined as a dedicated persistent interface between an Agency IT system and an external IT system for the purpose of transferring information. Transitory, user -controlled connections such as website browsing are excluded from this definition. If the recipient's connections as defined above do not go through the Environmental Information Exchange Network or EPA's Central Data Exchange, the recipient agrees to contact the EPA Project Officer (PO) no later than 90 days after the date of this award and work with the designated Regional/Headquarters Information Security Officer to ensure that the connections meet EPA security requirements, including entering into Interconnection Service Agreements as appropriate. This condition does not apply to manual entry of data by the recipient into systems operated and used by EPA's regulatory programs for the submission of reporting and/or compliance data. (b)(2) The recipient agrees that any subawards it makes under this agreement will require the subrecipient to comply with the requirements in (b)(1) if the subrecipient's network or information system is connected to EPA networks to transfer data to the Agency using systems other than the Environmental Information Exchange Network or EPA's Central Data Exchange. The recipient will be in compliance with this condition: by including this requirement in subaward agreements; and during subrecipient monitoring deemed necessary by the recipient under 2 CFR 200.331(d), by inquiring whether the subrecipient has contacted the EPA Project Officer. Nothing in this condition requires the recipient to contact the EPA Project Officer on behalf of a subrecipient or to be involved in the negotiation of an Interconnection Service Agreement between the subrecipient and EPA. ### END OF DOCUMENT ### 74 ATTY/AGR.2020.251/County of San Mateo (Page 21 of 21)