Assessment Objective
Determine if:
- PM-23 a Data Governance Body consisting of [Assignment: roles] with [Assignment: responsibilities] is established.
Assessment Methods
Examine
- Privacy program plan
- documentation relating to the Data Governance Body, including documents establishing such a body, its charter of operations, and any plans and reports
- records of board meetings and decisions
- records of requests to review data
- policies, procedures, and standards that facilitate data governance
Interview
- Officials serving on the Data Governance Body (e.g., chief information officer, senior agency information security officer, and senior agency official for privacy)
Saincheisteanna nasctha
| Cineál naisc | Saincheist |
|---|---|
| blocks | PM-23 Data Governance Body |