Enclosure (1) to COMDTINST 5260.4A
4.2.3
For each interface with a system outside your component, state what specific information
is shared with the specific components, agencies, and any other organizations within
DHS.
4.3
How is the information transmitted or disclosed?
4.3.1
Describe how the information is transmitted to each component, agency, and any other
organization within DHS. For example is the information transmitted electronically, by
paper, or by some other means?
Privacy Impact Analysis: Given the internal sharing, discuss what privacy risks were identified
and how they were mitigated. For example, if a decision was made to limit internal sharing to
certain components because of privacy or other concerns, include such a discussion.
Section 5.0 External Sharing and Disclosure
The following questions are intended to define the content, scope, and authority for information
sharing external to DHS which includes Federal, state and local government, and the private
sector.
5.1
With which external organization(s) is the information shared?
5.1.1
The term "external" references other departments, agencies and organizations that are not
a part of DHS. This could be other Departments, law enforcement and intelligence
agencies, the private sector, and state and local entities. This question is directed at inter-
departmental sharing, as well as with private entity and state or local information sharing.
5.1.2
Identify and list the name or names of the federal, state, or local government agency or
private sector organization with which the information is shared.
5.2
What information is shared and for what purpose?
5.2.1
For each interface with a system outside DHS, state what specific information is shared
with each specific partner. For example, Customs and Border Protection may share its
information on an individual with the FBI.
5.2.2
Where you have a specific authority to share the information, please provide a citation to
the authority.
5.3
How is the information transmitted or disclosed?
5.3.1
Is the information shared in bulk or does the organization have direct access to the
information?
14