1. FISMA Compliance Principal Investigator’s Requirements

2. Research Project Team List of all full time employees
List of all contractors
Provide evidence of background checks on contractors and other affiliates
What level of access would they have

3. Project Details Type of data
Value of data (quantitative or qualitative)
Subject description
Type of permission/consent
Disclosure obligations
Size of data/space

4. Data Details Method of data entry Who is doing data entry?
Where data entry is taking place?
What device and software are involved?

5. Data Collection Who is collecting the data?
Where is data being collected?
What device is being used?
Examples: Video recorder
Voice recorder
e-Questionnaire

6. Data Storage Indicate: *Primary storage Where is the location?
*Secondary
*All Alternative storage
Where is the location?

7. Data Processing
What applications will be used in data analysis and processing?

8. System Deactivation Data Disposal
What do you intend to do with the data collected after the project is completed?

9. Project Timelines Duration of research project
Timeline for IT/FISMA related deliverables
ATOs are good for 3 years.
All artifacts are subject to yearly renewal except Privacy Impact Assessment PIA (renewed every 3 years).