Assessment Objective
Determine if:
- SI-18(01) [Assignment: automated mechanisms] are used to correct or delete personally identifiable information that is inaccurate, outdated, incorrectly determined regarding impact, or incorrectly de-identified.
Assessment Methods
Examine
- System and information integrity policy
- system and information integrity procedures
- personally identifiable information processing policy
- documentation addressing personally identifiable information quality operations
- quality reports
- maintenance logs
- system audit records
- audit findings
- system security plan
- privacy plan
- privacy impact assessment
- privacy risk assessment documentation
- other relevant documents or records
Interview
- Organizational personnel responsible for performing personally identifiable information quality inspections
- organizational personnel with information security and privacy responsibilities
Test
- Organizational processes for personally identifiable information quality inspection
- automated mechanisms supporting and/or implementing personally identifiable information quality operations
Propojené úkoly
| Typ vazby | Úkol |
|---|---|
| blocks | SI-18(01) Automation Support |