CCI-002983

The organization ensures that asset location technologies are employed in accordance with applicable federal laws, Executive Orders, directives, regulations, policies, standards, and guidance.

Implementation Guidance

The organization being inspected/assessed identifies and documents any federal laws, Executive Orders, directives, regulations, policies, standards, and guidance applicable to the asset location technologies in use. In particular, the organization identifies any requirements to protect the privacy of personnel transporting assets being tracked. The organization documents a process to meet the applicable requirements in their documentation of asset tracking technologies (PE-20, CCI 2980).

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented list of any federal laws, Executive Orders, directives, regulations, policies, standards, and guidance applicable to the asset location technologies in use, as well as the documentation of asset tracking technologies per PE-20, CCI 2980, to ensure that the organization being inspected/assessed identifies any requirements (particularly privacy requirements) applicable to the asset tracking methodologies in use, and to ensure that the organization implements a process to meet those identified requirements.

Compelling Evidence

1.) Documentation of any federal laws, Executive Orders, directives, regulations, policies, standards, and guidance applicable to the asset location technologies in use. 2.) Documentation of requirements applicable to asset tracking methodologies

The controls below (if any) were marked by NIST as being related to CCI-002983.