Assessment Objective
Determine if:
- SI-18(04) personally identifiable information is corrected or deleted upon request by individuals or their designated representatives.
Assessment Methods
Examine
- System and information integrity policy
- system and information integrity procedures
- personally identifiable information processing policy
- system configuration
- individual requests
- records of correction or deletion actions performed
- system audit records
- system security plan
- privacy plan
- privacy impact assessment
- privacy risk assessment documentation
- other relevant documents or records
Interview
- Organizational personnel responsible for responding to individual requests for personally identifiable information correction or deletion
- organizational personnel with information security and privacy responsibilities
Test
- Request mechanisms
- automated mechanisms supporting and/or implementing individual requests for correction or deletion
Propojené úkoly
| Typ vazby | Úkol |
|---|---|
| blocks | SI-18(04) Individual Requests |