Assessment Objective
Determine if:
- SI-18(02) data tags are employed to automate the correction or deletion of personally identifiable information across the information life cycle within organizational systems.
Assessment Methods
Examine
- System and information integrity policy
- system and information integrity procedures
- personally identifiable information processing policy
- procedures addressing data tagging
- personally identifiable information inventory
- system audit records
- audit findings
- system security plan
- privacy plan
- privacy impact assessment
- privacy risk assessment documentation
- other relevant documents or records
Interview
- Organizational personnel responsible for tagging data
- organizational personnel with information security and privacy responsibilities
Test
- Data tagging mechanisms
- automated mechanisms supporting and/or implementing data tagging
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | SI-18(02) Data Tags |