CCI-003406
CCI-003406 Definition
Status | |
Type | CheckType.policy |
Master Assessment Datasheet
Implementation Guidance
The organization being inspected/assessed documents and implements a strategic organizational privacy plan for implementing applicable privacy controls, policies, and procedures. The DoD has determined that this CCI is not applicable until the policy is issued.
Validation Procedures
The organization conducting the inspection/assessment obtains and examines the applicable privacy documentation to ensure the organization being inspected/assessed has documents which demonstrate a strategic organizational privacy plan for implementing applicable privacy controls, policies, and procedures. The DoD has determined that this CCI is not applicable until the policy is issued.
Compelling Evidence
Supply documentation if a privacy policy is issued. If not then Not Applicable. If there is one make sure that organization is following the privacy controls, policies, and procedures that were put in place.