Request for Public Comment: 60-Day Information Collection: Indian Health Service Information Security Ticketing and Incident Reporting

AGENCY:

Indian Health Service, HHS.

ACTION:

Notice and request for comments. Request for extension of approval.

SUMMARY:

In compliance with the Paperwork Reduction Act of 1995, which requires 60 days for public comment on proposed information collection projects, the Indian Health Service (IHS) invites the general public to take this opportunity to comment on the information collection Office of Management and Budget (OMB) Control Number 0917-0041, titled, Information Security Ticketing and Incident Reporting. The purpose of this notice is to allow 60 days for public comment. A copy of the draft supporting statement is available at www.regulations.gov (see Docket ID IHS_FRDOC_001).

DATES:

C omment Due Date: April 18, 2022. Your comments regarding this information collection are best assured of having full effect if received within 60 days of the date of this publication.

ADDRESSES:

Submit comments, requests for more information on the collection, or requests to obtain a copy of the data collection instrument and instruction to Mr. Benjamin Koshy, by one of the following methods:

• Mail: Mr. Benjamin T. Koshy, Indian Health Service, 5600 Fishers Lane, STOP 07E30, Rockville, MD 20857.

• Phone: (301) 443-5389.

• Email: Benjamin.Koshy@ihs.gov.

FOR FURTHER INFORMATION CONTACT:

To request additional information, please contact Evonne Bennett, Information Collection Clearance Officer at: Evonne.Bennett@ihs.gov or 301-443-4750.

SUPPLEMENTARY INFORMATION:

This previously approved information collection project was last published in the Federal Register on February 14, 2018 (83 FR 6600), and allowed 30 days for public comment. No public comment was received in response to the notice. This notice announces our intent to submit this collection, which expires April 30, 2022, to OMB for approval of an extension, and to solicit comments on specific aspects for the proposed information collection.

Title: 0917-0041, “Information Security Ticketing and Incident Reporting.”

Form(s) and Form number(s): Incident Reporting Form, Form F07-02b.

OMB Control Number: 0917-0041.

Need and Use of Information Collection: This information collection activity provides a means for federal employees, Tribal employees, contractors, and other non-federal employees to report IHS information technology (IT) security and privacy incidents. This information collection has three purposes: to notify the CSIRT of an incident, provide updates about an open incident, and indicate resolution of an existing incident. The information collection furthers the IHS's ability to use secure IT, to enhance response time to IT incidents, and to maintain the agency's healthcare information security posture. This information collection also allow IHS to process privacy incidents and breaches within the IHS, in keeping with internal and external requirements.

Members of Affected Public: Federal employees, Tribal employees, contractors, and other non-federal employees accessing IHS IT systems.

Status of the Proposed Information Collection: Extension request.

Type of Respondents: Individuals.

The table below provides: Types of data collection instruments, estimation to number of respondents, number of responses per respondent, annual number of responses, average burden hour per response, and total annual burden hours.

There are no direct costs to respondents to report.

Requests for Comments: Your written comments and/or suggestions are invited on one or more of the following points:

(a) Whether the information collection activity is necessary to carry out an agency function;

(b) whether the agency processes the information collected in a useful and timely fashion;

(c) the accuracy of the public burden estimate (the estimated amount of time needed for individual respondents to provide the requested information);

(d) whether the methodology and assumptions used to determine the estimates are logical;

(e) ways to enhance the quality, utility, and clarity of the information being collected; and

(f) ways to minimize the public burden through the use of automated, electronic, mechanical, or other technological collection techniques or other forms of information technology.

Comments submitted in response to this notice will be made available to the public by publishing them in the 30-day Federal Register notice for this information collection. For this reason, please do not include information of a confidential nature, such as sensitive personal information or proprietary information. If comments are submitted via email, the email address will be automatically captured and included as part of the comment that is placed in the public docket and made available on the internet. Please note that responses to this public comment request containing any routine notice about the confidentiality of the communication will be treated as public comments that may be made available to the public notwithstanding the inclusion of the routine notice.