Assessment Objectives
In addition to relevant policies, standards and procedures, the assessor shall examine, interview, and/or test to determine if appropriately scoped evidence exists to support the claim that:
- PRI-06_A01 processing conditions to be applied for specific categories of Personal Data (PD) are defined.
Assessment rigor: 1
Origin: 53A_R5_PT-07_ODP - PRI-06_A02 processing conditions are applied for specific categories of Personal Data (PD).
Assessment rigor: 1
Origin: 53A_R5_PT-07 - PRI-06_A03 when a system processes Social Security numbers, the unnecessary collection, maintenance and use of Social Security numbers are eliminated.
Assessment rigor: 3
Origin: 53A_R5_PT-07(01)(a)[01] - PRI-06_A04 when a system processes Social Security numbers, alternatives to the use of Social Security Numbers as a personal identifier are explored.
Assessment rigor: 3
Origin: 53A_R5_PT-07(01)(a)[02] - PRI-06_A05 when a system processes Social Security numbers, individual rights, benefits or privileges provided by law are not denied because of an individual’s refusal to disclose their Social Security number.
Assessment rigor: 3
Origin: 53A_R5_PT-07(01)(b) - PRI-06_A06 when a system processes Social Security numbers, any individual who is asked to disclose their Social Security number is informed whether that disclosure is mandatory or voluntary, by what statutory or other authority such number is solicited and what uses will be made of it.
Assessment rigor: 3
Origin: 53A_R5_PT-07(01)(c)[01] - PRI-06_A07 when a system processes Social Security numbers, any individual who is asked to disclose their Social Security number is informed by what statutory or other authority the number is solicited.
Assessment rigor: 3
Origin: 53A_R5_PT-07(01)(c)[02] - PRI-06_A08 when a system processes Social Security numbers, any individual who is asked to disclose their Social Security number is informed what uses will be made of it.
Assessment rigor: 3
Origin: 53A_R5_PT-07(01)(c)[03] - PRI-06_A09 the processing of information describing how any individual exercises rights guaranteed by the First Amendment is prohibited unless expressly authorized by statute or by the individual or unless pertinent to and within the scope of an authorized law enforcement activity.
Assessment rigor: 3
Origin: 53A_R5_PT-07(02)
Ticket collegati
| Tipo di collegamento | Ticket |
|---|---|
| blocks | Personal Data (PD) Categories |
- Secure Controls Framework -
EN: GRCA includes the Secure Controls Framework® (SCF) content, © Secure Controls Framework Council, LLC, used under the Creative Commons Attribution-NoDerivatives 4.0 International Public License. SCF control numbers, names, descriptions and mappings appear exactly as published by the SCF Council – https://securecontrolsframework.com. GRCA may group or reorder SCF content for display, which does not change SCF content; the mappings are shown as links to the frameworks they name. Learn more at https://securecontrolsframework.com.
DE: GRCA enthält Inhalte des Secure Controls Framework® (SCF), © Secure Controls Framework Council, LLC, genutzt unter der Creative Commons Attribution-NoDerivatives 4.0 International Public License. Nummern, Namen, Beschreibungen und Zuordnungen der SCF-Controls erscheinen genau so, wie der SCF Council sie veröffentlicht – https://securecontrolsframework.com. GRCA gruppiert oder sortiert SCF-Inhalte für die Anzeige, ohne sie zu verändern; die Zuordnungen erscheinen als Verknüpfungen zu den genannten Regelwerken. Mehr unter https://securecontrolsframework.com.