Assessment Objective
Determine if:
- SI-18(03) personally identifiable information is collected directly from the individual.
Assessment Methods
Examine
- System and information integrity policy
- system and information integrity procedures
- personally identifiable information processing policy
- system configuration documentation
- system audit records
- user interface where personally identifiable information is collected
- system security plan
- privacy plan
- privacy impact assessment
- privacy risk assessment documentation
- other relevant documents or records
Interview
- Organizational personnel responsible for data collection
- organizational personnel with information security and privacy responsibilities
Test
- Data collection mechanisms
- automated mechanisms supporting and/or validating collection directly from the individual
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | SI-18(03) Collection |