Assessment Objective
Determine if:
- SI-18(05) [Assignment: recipients] and individuals are notified when the personally identifiable information has been corrected or deleted.
Assessment Methods
Examine
- System and information integrity policy
- system and information integrity procedures
- personally identifiable information processing policy
- system configuration
- individual requests for corrections or deletions
- notifications of correction or deletion action
- system audit records
- system security plan
- privacy plan
- privacy impact assessment
- privacy risk assessment documentation
- other relevant documents or records
Interview
- Organizational personnel responsible for sending correction or deletion notices
- organizational personnel with information security and privacy responsibilities
Test
- Organizational processes for notifications of correction or deletion
- automated mechanisms supporting and/or implementing notifications of correction or deletion
Incidencias vinculadas
| Tipo de vínculo | Incidencia |
|---|---|
| blocks | SI-18(05) Notice of Correction or Deletion |