ORR UAC Portal Multi-factor Authentication and IT Policy
Hello Family Reunification Partners,
  
ORR will be implementing stricter guidelines in order to access the UAC Portal.  

Multi-factor Authentication
In Accordance with Health and Human Services and NIST standards, the UAC Portal has been identified as a Moderate and High Value Asset. In coming weeks, all users to the UAC Portal must comply with Multi-factor Authentication. Multi-factor Authentication requires that each user has access to a text-message-ready mobile phone OR email account to accept a 6-digit pin. This 6-digit pin is required as part of the login process. If you have any questions or concerns, please contact your ORR Project Officer.
 
Rules of Behavior for Use
Each program must require its staff to read and sign the HHS Rules of Behavior for Use of HHS Information and IT Resources Policy (RoB). In addition, each program must maintain signed copies of the RoB for General Users in the staff's personnel file.
 
Training
Each program must ensure that staff attend Protecting PII and Cyber-security training a minimum of once a year and maintain a log of each training that includes the following:
*       The name, date, and time of the training
*       The names of employees who attended the training

USCCB will be following up with ORR on the required training and once the  HHS Information and IT Resources Policy (RoB) form becomes available we will share it with the network.  As this is a required form, USCCB will be updating our monitoring personnel checklist to ensure that all staff have signed this form. Please contact your assigned CSS if you have any questions. 

 
Thank you,
 
Simy Cuervo, LPC
Children's Services Specialist
USCCB/MRS/Children's Services
Family Reunification Team
7855 NW 12th Street
Miami, FL, 33126
305-541-8100 x241 ph

3211 Fourth Street, NE Washington, DC 20017
Phone: (202) 541-3341 Fax: (202) 722-8711

CONFIDENTIALITY NOTICE--This e-mail is intended for the sole use of the individual or entity to which it is addressed and may contain confidential and privileged material, which is exempt from disclosure under applicable law.  This message is for the sole use of the intended recipient(s).  Any review, distribution or copying of this communication by others is strictly prohibited.  If you are not an intended recipient and received this communication in error, please notify the sender by return e-mail and delete this message and any attachments.  Thank you. 

Copyright © 2019 United States Conference of Catholic Bishops