Assessment Objective
Determine if:
- SI-18a.
- SI-18a.[01] the accuracy of personally identifiable information across the information life cycle is checked [Assignment: frequency];
- SI-18a.[02] the relevance of personally identifiable information across the information life cycle is checked [Assignment: frequency];
- SI-18a.[03] the timeliness of personally identifiable information across the information life cycle is checked [Assignment: frequency];
- SI-18a.[04] the completeness of personally identifiable information across the information life cycle is checked [Assignment: frequency];
- SI-18b. inaccurate or outdated personally identifiable information is corrected or deleted.
Assessment Methods
Examine
- System and information integrity policy
- system and information integrity procedures
- personally identifiable information processing policy
- documentation addressing personally identifiable information quality operations
- quality reports
- maintenance logs
- system audit records
- audit findings
- system security plan
- privacy plan
- privacy impact assessment
- privacy risk assessment documentation
- other relevant documents or records
Interview
- Organizational personnel responsible for performing personally identifiable information quality inspections
- organizational personnel with information security responsibilities
- organizational personnel with privacy responsibilities
Test
- Organizational processes for personally identifiable information quality inspection
- automated mechanisms supporting and/or implementing personally identifiable information quality operations
Verknüpfte Vorgänge
| Verknüpfungstyp | Vorgang |
|---|---|
| blocks | SI-18 [P] Personally Identifiable Information Quality Operations |