Assessment Objectives

In addition to relevant policies, standards and procedures, the assessor shall examine, interview, and/or test to determine if appropriately scoped evidence exists to support the claim that:

• PRI-17.1_A01 an accurate accounting of disclosures of Personal Data (PD) is developed and maintained.
  Assessment rigor: 1
  Origin: 53A_R5_PM-21a.
• PRI-17.1_A02 the accounting includes the date of each disclosure.
  Assessment rigor: 1
  Origin: 53A_R5_PM-21a.01[01]
• PRI-17.1_A03 the accounting includes the nature of each disclosure.
  Assessment rigor: 1
  Origin: 53A_R5_PM-21a.01[02]
• PRI-17.1_A04 the accounting includes the purpose of each disclosure.
  Assessment rigor: 1
  Origin: 53A_R5_PM-21a.01[03]
• PRI-17.1_A05 the accounting includes the name of the individual or organization to whom the disclosure was made.
  Assessment rigor: 1
  Origin: 53A_R5_PM-21a.02[01]
• PRI-17.1_A06 the accounting includes the address or other contact information of the individual or organization to whom the disclosure was made.
  Assessment rigor: 1
  Origin: 53A_R5_PM-21a.02[02]
• PRI-17.1_A07 the accounting of disclosures is retained for the length of time that the Personal Data (PD) is maintained or five years after the disclosure is made, whichever is longer.
  Assessment rigor: 1
  Origin: 53A_R5_PM-21b.
• PRI-17.1_A08 the accounting of disclosures is made available to the individual to whom the Personal Data (PD) relates upon request.
  Assessment rigor: 1
  Origin: 53A_R5_PM-21c.

Propojené úkoly

• Secure Controls Framework -

  EN: GRCA includes the Secure Controls Framework® (SCF) content, © Secure Controls Framework Council, LLC, used under the Creative Commons Attribution-NoDerivatives 4.0 International Public License. SCF control numbers, names, descriptions and mappings appear exactly as published by the SCF Council – https://securecontrolsframework.com. GRCA may group or reorder SCF content for display, which does not change SCF content; the mappings are shown as links to the frameworks they name. Learn more at https://securecontrolsframework.com.

  DE: GRCA enthält Inhalte des Secure Controls Framework® (SCF), © Secure Controls Framework Council, LLC, genutzt unter der Creative Commons Attribution-NoDerivatives 4.0 International Public License. Nummern, Namen, Beschreibungen und Zuordnungen der SCF-Controls erscheinen genau so, wie der SCF Council sie veröffentlicht – https://securecontrolsframework.com. GRCA gruppiert oder sortiert SCF-Inhalte für die Anzeige, ohne sie zu verändern; die Zuordnungen erscheinen als Verknüpfungen zu den genannten Regelwerken. Mehr unter https://securecontrolsframework.com.