Privacy and Security Notice

​​

PRIVACY NOTICE 

By continuing to use this system you indicate your awareness of and consent to the following terms and conditions of use. LOG OFF IMMEDIATELY if you do not agree to the conditions stated in this warning. SECURITY NOTICE This system is part of a Federal information system. This system is monitored for security purposes to ensure it remains available to all users and to protect information in the system. The system employs software programs to monitor network traffic to identify unauthorized activities. By accessing this system, you are expressly consenting to these monitoring activities. Unauthorized attempts to defeat or circumvent security features; to use the system for other than intended purposes; to deny service to authorized users; to access, obtain, alter, damage, or destroy information; to upload or change information; to otherwise cause system or information damage; or otherwise to interfere with the system or its operation, is prohibited. Evidence of such acts may be disclosed to law enforcement authorities and result in prosecution under the Computer Fraud and Abuse Act of 1986 and the National Information Infrastructure Protection Act of 1996, or other applicable laws.


PRIVACY NOTICE This system is for authorized use only. Use of this system constitutes consent to security monitoring and testing. All activity is logged with your host name and IP address. Users (authorized or unauthorized) have no explicit or implicit expectation of privacy. Any or all uses of this system and all files on this system may be intercepted, monitored, recorded, copied, audited, inspected, and disclosed to authorized site and law enforcement personnel, as well as authorized officials of other agencies, both domestic and foreign. By using this system, the user consents to such interception, monitoring, recording, copying, auditing, inspection, and disclosure at the discretion of authorized site or law enforcement personnel. Unauthorized or improper use of this system may result in administrative disciplinary action and civil and criminal penalties.


USE OF PERSONAL INFORMATION You are not required to supply personal information to visit this site. We collect personal identifying information only if specifically and knowingly provided by you. All personal identifying information you provide will be used only in connection with the application for which it was entered, and as provided herein. All data entered is stored on a secure server and is protected against unauthorized access.


USE OF “COOKIES” The use of “cookies” is limited to collecting and storing only the following information about you: the name of the domain from which you access the Internet, the date and time you access our site, and the Internet address of the Web site from which you linked directly to our site. We do not track or record information about individuals and their visits, except with regard to system security violations (described above). We never give, sell or transfer any personal information to a third party, except for providing information to the appropriate authorities for system security enforcement purposes.​


CUI Disclosure​

The EDMS infrastructure provides for a broad range of capabilities designed to significantly enhance the productivity and collaboration of the NNSA staff. Those capabilities include a means of controlling access of other users to your documents and data. Although the EDMS does not contain CLASSIFIED information, it does process and store UNCLASSIFIED sensitive data which is only available to users with a need to know. You are to use those SharePoint access permission capabilities to manage use and access to your documents and data. Employing those permission capabilities ensure secure use by other users with a need to know.

 

To assist you in managing sensitive documents and data, DOE has designated certain data as Controlled Unclassified Information (CUI). CUI is unclassified information requiring safeguarding and dissemination controls mandated by statute or policy. Examples of such information within DOE include Official Use Only (OUO), Export Controlled Information (ECI), Unclassified Controlled Nuclear Information (UCNI), unclassified Naval Nuclear Propulsion Information (U-NNPI), Source Selection Information and protected Personally Identifiable Information (PII). Within DOE other terms have been used, such as Unclassified Controlled Information (UCI) and Sensitive Unclassified Information (SUI), to refer to information that warrants protection as CUI. If you have documents and data with associated CUI markings on SharePoint, you are required to control access using SharePoint access permission controls.


Within SharePoint you implement document and data permissions by restricting or managing permissions at the site, library or document level. Specific EDMS procedures:


  1. CUI can be posted within any area of EDMS or EMI SIG Portal as designated by the blue security banner.

  2. CUI can not be posted to the EMI SIG Public portal.

  3. If a completely new site or library needs to be created to capture additional data that will also need to be controlled or have restricted access, then the permissions will be managed at the site or library level.

  4. The email containing CUI documents downloaded from EDMS should be encrypted.

  5. For directions on how to establish permissions, contact EMISIGSupport@nnsa.doe.gov

  6. For reference, the following DOE directives provide CUI policy, requirements, and procedures:

  • Executive Order 13556, Controlled Unclassified Information
  • DOE O 471.1B, Identification and Protection of Unclassified Controlled Nuclear Information
  • DOE O 471.3, Admin Chg 1,Identifying and Protecting Official Use Only Information
  • DOE M 471.3-1,Admin Chg 1, Manual for Identifying and Protecting Official Use Only Information
  • DOE O 475.2B, Identifying Classified Information
  • Powerpedia: https://powerpedia.energy.gov/wiki/Controlled_unclassified_information
  • Point of Contact for the EDMS Security​



​Sponsored by DOE/NNSA Office of Emergency Management Policy​

DOE logo.png