CCI-003429

CCI-003429 Definition

The organization establishes privacy roles for service providers.

Status
Type	CheckType.policy

The organization being inspected/assessed establishes and documents privacy roles for service providers.

The organization conducting the inspection/assessment obtains and examines the privacy roles established for service providers.

Reference section of documentation for privacy roles for service providers.

The controls below (if any) were marked by NIST as being related to CCI-003429.

Control	Description
AR-3	The organization: AR-3a.: Establishes privacy roles, responsibilities, and access requirements for contractors and service providers; and AR-3b.: Includes privacy requirements in contracts and other acquisition-related documents.