+SI-18(02) Data Tags
|
SI-18(02) Data Tags
Control
Employ data tags to automate the correction or deletion of personally identifiable information across the information life cycle within organizational systems.
Discussion
Data tagging personally identifiable information includes tags that note processing permissions, authority to process, de-identification, impact level, information life cycle stage, and retention or last updated dates. Employing data tags for personally identifiable information can support the use of automation tools to correct or delete relevant personally identifiable information.
Assessment Objective
data tags are employed to automate the correction or deletion of personally identifiable information across the information life cycle within organizational systems.
Assessment Method
Examine
System and information integrity policy
system and information integrity procedures
personally identifiable information processing policy
procedures addressing data tagging
personally identifiable information inventory
system audit records
audit findings
system security plan
privacy plan
privacy impact assessment
privacy risk assessment documentation
other relevant documents or records
Interview
Organizational personnel responsible for tagging data
organizational personnel with information security and privacy responsibilities
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|