IPY: Interoperability & Portability
Controls
IPY-01: Interoperability and Portability Policy and Procedures
Establish, document, approve, communicate, apply, evaluate and maintain policies and procedures for interoperability and portability including requirements for: Communications between application interfaces Information processing interoperability Application development portability Information/Data exchange, usage, portability, integrity, and persistence Review and update the policies and procedures at least annually.
IPY-02: Application Interface Availability
Provide application interface(s) to CSCs so that they programmatically retrieve their data to enable interoperability and portability.
IPY-03: Secure Interoperability and Portability Management
Implement cryptographically secure and standardized network protocols for the management, import and export of data.
IPY-04: Data Portability Contractual Obligations
Agreements must include provisions specifying CSCs access to data upon contract termination and will include: Data format Length of time the data will be stored Scope of the data retained and made available to the CSCs Data deletion policy