Re: SSA Wants to Audit Our System (?)

["Buck" <buck.calabro@xxxxxxxxxxxx>]

> But now I have a more general question: my boss says what they want to do
> is have us load some of their software on our system, using QSECOFR
> authority. It's then supposed to run for six weeks, collecting information
> in data files, which they will collect at the end.
>
> He seems to think we'd be crazy to let anyone do that, for any reason,
> because of security and data integrity issues. Is this standard procedure?
> Has anyone else experienced anything like this? I'm just curious. . .

We'd like to implement this sort of procedure with our customers.  Our legal
folks believe that if we ask politely and the customer declines, we would
not be able to forcibly collect statistics.  We are considering a clause in
the contract for future sales.  So, if your contract with SSA allows them to
install additional software to collect statistics, that might be that.

Please, don't email me with complaints about user-based pricing.  I am not
involved with that end of the business and have no control over the
contracts that customers sign.
  --buck