45 CFR 2508.9: What officials are responsible for the security, management and control of Corporation record keeping systems?

(a) The Director of Administration and Management Services shall have overall control and supervision of the security of all systems of records and shall be responsible for monitoring the security standards set forth in this regulation.

(b) A designated official (System Manager) shall be named who shall have management responsibility for each record system maintained by the Corporation and who shall be responsible for providing protection and accountability for such records at all times and for insuring that such records are secured in appropriate containers whenever not in use or in the direct control of authorized personnel.