Security Agreements

Before the Indian Health Service (IHS) and an external party share data, with or without a direct and persistent connection to IHS systems, both parties must enter into a Security Agreement. Agreements between IHS and an external party, which may be a Tribal or Urban entity, a corporation, another agency, or other person or organization, may include only one IHS Area or may include multiple Areas. In either case, the process of initiating an agreement begins with starting a Security Agreement Request in the ServiceNow Portal.

To begin, select "Request Something." After that, select "Security Services." And then select "Security Agreement Request."

You are first asked if you have a completed PIA. If you do not, or do not know what a PIA is, that is fine, just select "No" from the dropdown and continue. Next, you need to look to make sure the Business Partner for the Security Agreement is in the Business Partner dropdown in the Security Agreement Request form.

If the Business Partner is not in the dropdown, return to the Security Services list and begin a "Business Partner Request" before completing the "Security Agreement Request."

Otherwise, complete the Security Agreement Request form and the Security Agreements Team will begin to work on the ServiceNow ticket with you to complete the request.

Please note, that you need to attach any applicable addenda as attachments at the bottom of the Security Agreement Request form.

Please also note that once a ticket is closed in ServiceNow, the system no longer notifies the Security Agreements Team of any updates. If you need to make changes after a ServiceNow ticket has been closed, please start a new ticket.

• For more information about Security Agreements, contact the Security Agreements Team.
• To contact your Area ISSO, see the Area IT Service Desk.