Federal Register / Vol. 77, No. 133 / Wednesday, July 11, 2012 / Notices 40863 

DEPARTMENT OF DEFENSE 

Office of the Secretary 

[Docket ID: DOD–2012–OS–0085] 

Privacy Act of 1974; System of 

Records 

AGENCY: National Reconnaissance 

Office, DoD. 

ACTION: Notice to Add a New System of 

Records. 

SUMMARY: The National Reconnaissance 

Office proposes to add a new system of 

records in its inventory of record 

systems subject to the Privacy Act of 

1974 (5 U.S.C. 552a), as amended. The 

blanket (k)(1) exemption applies to this 

systems of records to accurately 

describe the basis for exempting 

disclosure of classified information that 

is or may be contained in the records. 

DATES: This proposed action will be 

effective on August 10, 2012 unless 

comments are received which result in 

a contrary determination. 

ADDRESSES: You may submit comments, 

identified by docket number and title, 

by any of the following methods: 

• Federal Rulemaking Portal: http:// 

www.regulations.gov. Follow the 

instructions for submitting comments. 

• Mail: Federal Docket Management 

System Office, 4800 Mark Center Drive, 

East Tower, 2nd Floor, Suite 02G09, 

Alexandria, VA 22350–3100. 

Instructions: All submissions received 

must include the agency name and 

docket number for this Federal Register 

document. The general policy for 

comments and other submissions from 

members of the public is to make these 

submissions available for public 

viewing on the Internet at http:// 

www.regulations.gov as they are 

received without change, including any 

personal identifiers or contact 

information. 

FOR FURTHER INFORMATION CONTACT: 

Chief, Privacy and Information Sharing, 

National Reconnaissance Office (NRO), 

14675 Lee Road, Chantilly, VA 20151– 

1715 or (703) 808–0414. 

SUPPLEMENTARY INFORMATION: The 

National Reconnaissance Office notices 

for systems of records subject to the 

Privacy Act of 1974 (5 U.S.C. 552a), as 

amended, have been published in the 

Federal Register and are available from 

the address in FOR FURTHER INFORMATION

CONTACT. The proposed system report, 

as required by 5 U.S.C. 552a(r) of the 

Privacy Act of 1974, as amended, was 

submitted on June 27, 2012, to the 

House Committee on Oversight and 

Government Reform, the Senate 

Committee on Governmental Affairs, 

and the Office of Management and 

Budget (OMB) pursuant to paragraph 4c 

of Appendix I to OMB Circular No. A– 

130, ‘‘Federal Agency Responsibilities 

for Maintaining Records About 

Individuals,’’ dated February 8, 1996 

(February 20, 1996, 61 FR 6427). 

Dated: July 5, 2012. 

Aaron Siegel, 

Alternate OSD Federal Register Liaison 

Officer, Department of Defense. 

QNRO–31 

SYSTEM NAME: 

Software Security Risk Evaluations. 

SYSTEM LOCATION: 

National Reconnaissance Office 

(NRO), 14675 Lee Road, Chantilly, VA 

20151–1715. 

CATEGORIES OF INDIVIDUALS COVERED BY THE

SYSTEM: 

Software developers that support 

products that NRO is considering 

purchasing or leasing. 

CATEGORIES OF RECORDS IN THE SYSTEM: 

Individual’s name; company name; 

registered business telephone number 

and address (which for small businesses 

may also be an individual’s residential 

telephone number and address); 

additional information relevant to 

conducting a software risk evaluation, 

such as the company an individual 

works for or other software products the 

individual has developed. 

AUTHORITY FOR MAINTENANCE OF THE SYSTEM: 

National Security Act of 1947, as 

amended; 5 U.S.C. 301, Departmental 

Regulations; E.O. 12333, as amended; 

DoD 5200.1–M, Acquisition Systems 

Protection Program; DoD 5240.1–R, 

Procedures Governing the Activities of 

DoD Intelligence Components That 

Affect United States Persons; DoDD 

5200.27, Acquisition of Information 

Concerning Persons and Organizations 

not Affiliated with the Department of 

Defense; DoDD 5240.2, DoD 

Counterintelligence (CI); DoDI 5240.8, 

Security Classification Guide for 

Information Concerning the DoD 

Counterintelligence Program. 

PURPOSE(S): 

The Software Security Risk 

Evaluations (SSRE) system is used to 

evaluate potential security risks or 

counterintelligence threats associated 

with purchasing or using software 

products. 

ROUTINE USES OF RECORDS MAINTAINED IN THE

SYSTEM, INCLUDING CATEGORIES OF USERS AND

THE PURPOSES OF SUCH USES: 

In addition to those disclosures 

generally permitted under 5 U.S.C. 

552a(b) of the Privacy Act of 1974, these 

records contained therein may 

specifically be disclosed outside the 

NRO as a routine use pursuant to 5 

U.S.C. 552a(b)(3) as follows: 

The DoD Blanket Routines Uses 

published at the beginning of the NRO 

compilation of systems of records 

notices apply to this system. 

POLICIES AND PRACTICES FOR STORING, 

RETRIEVING, ACCESSING, RETAINING, AND

DISPOSING OF RECORDS IN THE SYSTEM: 

STORAGE: 

Records are maintained in paper files 

and on electronic storage media. 

RETRIEVABILITY: 

Records are retrieved by the 

individual’s name. 

SAFEGUARDS: 

Records are maintained in a 

controlled facility. Physical entry is 

restricted by use of locks, guards, 

badges, and is accessible only to 

authorized personnel. Access to records 

is limited to persons responsible for 

servicing the record in performance of 

official duties and who are properly 

screened and cleared for need-to-know. 

Access to computerized data is 

restricted by passwords, which are 

changed periodically. 

RETENTION AND DISPOSAL: 

Records are destroyed when 

superseded, obsolete, or no longer 

needed. Records are destroyed by 

erasing or shredding. 

SYSTEM MANAGER(S) AND ADDRESS: 

National Reconnaissance Office, 

ATTN: Chief, Counter Intelligence 

Operations, Office of Security and 

Counter Intelligence, 14675 Lee Road, 

Chantilly, VA 20151–1715. 

NOTIFICATION PROCEDURE: 

Individuals seeking to determine 

whether information about themselves 

is contained in this system of records 

should address written inquiries to the 

National Reconnaissance Office, 

Information Access and Release Center, 

14675 Lee Road, Chantilly, VA 20151– 

1715. 

Request should contain full name, 

current address, telephone number, date 

and place of birth, and other such 

personal information necessary to locate 

the record sought. While the Social 

Security Number (SSN) is not required, 

providing it will expedite the 

authentication of the requestor’s 

identity and clearance level. 

In addition, the requester must 

provide a notarized statement or an 

unsworn declaration in accordance with 

28 U.S.C. 1746, in the following format: 


srobinson on DSK4SPTVN1PROD with NOTICES
40864 Federal Register / Vol. 77, No. 133 / Wednesday, July 11, 2012 / Notices 

If executed outside the United States: 

I declare (or certify, verify, or state) 

under penalty of perjury under the laws 

of the United States of America that the 

foregoing is true and correct. Executed 

on (date). (Signature). 

If executed within the United States, 

its territories, possessions, or 

commonwealths: I declare (or certify, 

verify, or state) under penalty of perjury 

that the foregoing is true and correct. 

Executed on (date). (Signature). 

RECORD ACCESS PROCEDURES: 

Individuals seeking access to 

information about themselves contained 

in this system should address written 

inquiries to the National 

Reconnaissance Office, Information 

Access and Release Center, 14675 Lee 

Road, Chantilly, VA 20151–1715. 

Request should include full name, 

current address, telephone number, date 

place of birth, and other such personal 

information necessary to locate the 

record sought. While the Social Security 

Number (SSN) is not required, 

providing it will expedite the 

authentication of the requestor’s 

identity and clearance level. 

In addition, the requester must 

provide a notarized statement or an 

unsworn declaration in accordance with 

28 U.S.C. 1746, in the following format: 

If executed outside the United States: 

I declare (or certify, verify, or state) 

under penalty of perjury under the laws 

of the United States of America that the 

foregoing is true and correct. Executed 

on (date). (Signature). 

If executed within the United States, 

its territories, possessions, or 

commonwealths: I declare (or certify, 

verify, or state) under penalty of perjury 

that the foregoing is true and correct. 

Executed on (date). (Signature). 

CONTESTING RECORD PROCEDURES: 

The NRO rules for accessing records, 

for contesting contents and appealing 

initial agency determinations are 

published in 32 CFR part 326 or may be 

obtained from the Privacy Act 

Coordinator, National Reconnaissance 

Office, 14675 Lee Road, Chantilly, VA 

20151–1715. 

RECORD SOURCE CATEGORIES: 

From available research tools. 

EXEMPTIONS CLAIMED FOR THE SYSTEM: 

An exemption rule for this system has 

been promulgated in accordance with 

requirements of 5 U.S.C. 553(b)(1), (2), 

and (3), and published in 32 CFR part 

326. For additional information contact 

the system manager. 

[FR Doc. 2012–16872 Filed 7–10–12; 8:45 am] 

BILLING CODE 5001–06–P 

DEPARTMENT OF DEFENSE 

Office of the Secretary 

[Docket ID: DOD–2012–OS–0086] 

Privacy Act of 1974; System of 

Records 

AGENCY: Defense Information Systems 

Agency, DoD. 

ACTION: Notice to Add a New System of 

Records. 

SUMMARY: The Defense Information 

Systems Agency proposes to add a new 

system of records in its inventory of 

record systems subject to the Privacy 

Act of 1974 (5 U.S.C. 552a), as amended. 

The blanket (k)(1) exemption applies to 

this system of records to accurately 

describe the basis for exempting 

disclosure of classified information that 

is or may be contained in the records. 

DATES: This proposed action will be 

effective on August 10, 2012 unless 

comments are received which result in 

a contrary determination. 

ADDRESSES: You may submit comments, 

identified by docket number and title, 

by any of the following methods: 

• Federal Rulemaking Portal: http:// 

www.regulations.gov. Follow the 

instructions for submitting comments. 

• Mail: Federal Docket Management 

System Office, 4800 Mark Center Drive, 

East Tower, 2nd Floor, Suite 02G09, 

Alexandria, VA 22350–3100. 

Instructions: All submissions received 

must include the agency name and 

docket number for this Federal Register 

document. The general policy for 

comments and other submissions from 

members of the public is to make these 

submissions available for public 

viewing on the Internet at http:// 

www.regulations.gov as they are 

received without change, including any 

personal identifiers or contact 

information. 

FOR FURTHER INFORMATION CONTACT: Ms. 

Jeanette Weathers-Jenkins, DISA Privacy 

Officer, Chief Information Office, 6916 

Cooper Avenue, Fort Meade, MD 

20755–7901, or by phone at (301) 225– 

8158. 

SUPPLEMENTARY INFORMATION: The 

Defense Information Systems Agency 

notices for systems of records subject to 

the Privacy Act of 1974 (5 U.S.C. 

552a(r)), as amended, have been 

published in the Federal Register and 

are available from the address in FOR

FURTHER INFORMATION CONTACT. The 

proposed system report, as required by 

5 U.S.C. 552a(r) of the Privacy Act of 

1974, as amended, was submitted on 

June 27, 2012, to the House Committee 

on Oversight and Government Reform, 

the Senate Committee on Governmental 

Affairs, and the Office of Management 

and Budget (OMB) pursuant to 

paragraph 4c of Appendix I to OMB 

Circular No. A–130, ‘‘Federal Agency 

Responsibilities for Maintaining 

Records About Individuals,’’ dated 

February 8, 1996 (February 20, 1996, 61 

FR 6427). 

Dated: July 5, 2012. 

Aaron Siegel, 

Alternate OSD Federal Register Liaison 

Officer, Department of Defense. 

K890.18 

SYSTEM NAME: 

Contract Support System (CSS). 

SYSTEM LOCATION: 

DISA Defense Enterprise Computer 

Center (DECC–OKC), 8705 Industrial 

Boulevard, Building 3900, Tinker AFB, 

OK 73145–2713. 

CATEGORIES OF INDIVIDUALS COVERED BY THE

SYSTEM: 

Customer and Vendor Point of 

Contact (POC) is accessed only by the 

Federal/DoD Government contracting 

officials for contracting purposes. 

CATEGORIES OF RECORDS IN THE SYSTEM: 

Information collected and nature are 

defined in the following two categories: 

(1) Vendor Data: Vendor POC name, 

vendor company name, company 

business size, company Dun & 

Bradstreet Number, company Tax 

Identification Number, company set 

aside type, company HUBZone 

preference, company ethnic group and 

company U.S. Business and WomenOwned Business Identifier, vendor work 

address, vendor POC work phone, and 

vendor POC work email. Information is 

used to track the POC at the vendor’s 

organization pertaining to specific 

contracts awarded by Procurement and 

Logistics Directorate/Defense 

Information Technology Contracting 

Organization (PLD/DITCO). 

(2) Customer Data: Customer name, 

agency/organization, street address, 

office code, phone number and email 

address is stored in relation to contracts 

that have been awarded for them by 

PLD/DITCO. The system also collects 

the training dates for those customers 

that have been designated Contracting 

Officer Representatives (COR) or Task 

Monitors (TM). 

AUTHORITY FOR MAINTENANCE OF THE SYSTEM: 

5 U.S.C. 301, Departmental 

Regulations; Public Law 106–229, 

Electronic Signatures in Global and 

National Commerce Act; Presidential 

Directive on Electronic Commerce, July 

1, 1997; OASD(C3I) Policy 


srobinson on DSK4SPTVN1PROD with NOTICES