DHS/USCIS/PIA-008 Enterprise Service Bus 2 (ESB 2)

The U.S. Citizenship and Immigration Services (USCIS) is migrating its information technology systems to the cloud environment to align with the Cloud Smart initiative. To support this modernization effort, USCIS plans to incrementally migrate the Enterprise Service Bus (ESB 2) hosted services to Enterprise Gateway and Integration Services (EGIS). Both ESB 2 and EGIS facilitate real-time information sharing between enterprise applications internally within USCIS, other Department of Homeland Security (DHS) components, and externally with other agencies and partners. ESB 2 implements a communication system between applications, which interact in a service-oriented architecture, while EGIS supports a microservice architecture. Until the ESB 2 services are fully integrated into EGIS, USCIS plans to maintain legacy ESB 2 as there is continued need to sustain the exchange of information between legacy operational systems.

USCIS is updating and reissuing this Privacy Impact Assessment (PIA) to document the migration of the Lockbox Intake Service (LIS), Adoption Orchestration Service (AOS), Visa Support Services Project (VSSP), and Refugee Asylum Support Service (RASS) from ESB 2 to EGIS. USCIS fully decommissioned Central Index System Support System (CIN-SS) and no longer needs to use its services. E-Verify no longer uses the American Association of Motor Vehicle Administrators (AAMVA) Hub Service (AHS), but uses the Verification Service to receive data from the National Law Enforcement Telecommunications System (NLETS). USCIS plans to update both the ESB 2 and EGIS PIAs to document the changes to these systems as changes occur. USCIS is updating this Privacy Impact Assessment (PIA) to evaluate the privacy risks and mitigations associated with the collection, use, and dissemination of personally identifiable information (PII) by the integrated subsystem services hosted by ESB 2. February 2020

Associated SORN(s):

The source-system SORNs described in the attached Appendices cover the collection, use, maintenance, and dissemination of information by the subsystem services.