4.  Include systems protections so that past performance data is not inadvertently made public.

Comment: One respondent recommended that the FAR Council should coordinate with the FAPIIS Program Manager to take all the appropriate steps from a system architecture/controls standpoint to preclude the public disclosure (advertent or inadvertent) of "past performance information." According to the respondent, this should include systemic protections that make it impossible to post "past performance information" to the publicly-available iteration of FAPIIS.

Response: The structure of FAPIIS ensures that "past performance reviews" (as described in FAR subpart 42.15) will not be inadvertently released. Past performance information is stored in a completely separate module from the other information in FAPIIS. There is no connection between the past performance module and the public Web site for FAPIIS. This assurance was provided by the Contractor Performance Assessment Reporting System/PPIRS Program Manager and the FAPIIS Program Manager.