Assessment Objective
Determine if:
- PT-07 [Assignment: processing conditions] are applied for specific categories of personally identifiable information.
Assessment Methods
Examine
- Personally identifiable information processing and transparency policy and procedures
- privacy notice
- Privacy Act system of records
- computer matching agreements and notices
- contracts
- privacy information sharing agreements
- memoranda of understanding
- governing requirements
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with personally identifiable information processing and transparency responsibilities
- organizational personnel with information security and privacy responsibilities
Test
- Organizational processes for supporting and/or implementing personally identifiable information processing
Verknüpfte Vorgänge
| Verknüpfungstyp | Vorgang |
|---|---|
| blocks | PT-07 [P] Specific Categories of Personally Identifiable Information |