CCI-003430

CCI-003430 Definition

The organization establishes privacy responsibilities for service providers.

Status
Type	CheckType.policy

The organization being inspected/assessed establishes and documents privacy responsibilities for service providers.

The organization conducting the inspection/assessment obtains and examines the privacy responsibilities established for service providers.

Reference section of documentation for responsibilities for service providers.

The controls below (if any) were marked by NIST as being related to CCI-003430.

Control	Description
AR-3	The organization: AR-3a.: Establishes privacy roles, responsibilities, and access requirements for contractors and service providers; and AR-3b.: Includes privacy requirements in contracts and other acquisition-related documents.