CCI-003427

CCI-003427 Definition

The organization establishes privacy responsibilities for contractors.

Status
Type	CheckType.policy

The organization being inspected/assessed establishes and documents privacy responsibilities for contractors.

The organization conducting the inspection/assessment obtains and examines the documented privacy responsibilities for contractors.

Reference section documentation for privacy responsibilities for contractors.

The controls below (if any) were marked by NIST as being related to CCI-003427.

Control	Description
AR-3	The organization: AR-3a.: Establishes privacy roles, responsibilities, and access requirements for contractors and service providers; and AR-3b.: Includes privacy requirements in contracts and other acquisition-related documents.