Assessment Objective
Determine if:
- PT-02(01) data tags containing [Assignment: authorized processing] are attached to [Assignment: elements of personally identifiable information].
Assessment Methods
Examine
- Personally identifiable information processing and transparency policy and procedures including procedures addressing data tagging
- data tag definitions
- documented requirements for use and monitoring of data tagging
- data extracts with corresponding data tags
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with personally identifiable information processing and transparency responsibilities
- organizational personnel with information security and privacy responsibilities
Test
- Organizational processes for authorizing the processing of personally identifiable information
- organizational processes for data tagging
- mechanisms for applying and monitoring data tagging
- mechanisms supporting and/or implementing the restriction of personally identifiable information processing
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | PT-02(01) Data Tagging |