Assessment Objective
Determine if:
- PT-02(02) enforcement of the authorized processing of personally identifiable information is managed using [Assignment: automated mechanisms].
Assessment Methods
Examine
- Personally identifiable information processing and transparency policy and procedures
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with personally identifiable information processing and transparency responsibilities
- organizational personnel with information security and privacy responsibilities
Test
- Organizational processes for authorizing the processing of personally identifiable information
- automated mechanisms supporting and/or implementing the management of authorized personally identifiable information processing
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | PT-02(02) Automation |