+SA-04(11) System of Records
|
SA-04(11) System of Records
Control
Include [Assignement: Privacy Act requirements] in the acquisition contract for the operation of a system of records on behalf of an organization to accomplish an organizational mission or function.
Discussion
When, by contract, an organization provides for the operation of a system of records to accomplish an organizational mission or function, the organization, consistent with its authority, causes the requirements of the [PRIVACT](#18e71fec-c6fd-475a-925a-5d8495cf8455) to be applied to the system of records.
Assessment Objective
[Assignement: Privacy Act requirements] are defined in the acquisition contract for the operation of a system of records on behalf of an organization to accomplish an organizational mission or function.
Assessment Method
Examine
System and services acquisition policy
system and services acquisition procedures
procedures addressing the integration of Privacy Act requirements into systems of records operated by external organizations
solicitation documentation
acquisition documentation
acquisition contracts for the system, system component, or system service
service level agreements
system security plan
privacy plan
personally identifiable information processing policy
privacy program plan
privacy impact assessment
privacy risk assessment documentation
other relevant documents or records
Interview
Organizational personnel with acquisition responsibilities
organizational personnel with information security and privacy responsibilities
1. Přehled
1.1 Odkazy
1.2 Identifikované požadavky
1.3 Související regulace
2. Identifikované požadavky
Požadavky
| Zdroj |
Požadavek |
3. Související regulace
Propojené úkoly
|