CCI-003446

The organization administers, per organization-defined frequency, targeted, role-based privacy training for personnel having responsibility for personally identifiable information (PII) or for activities that involve PII.

Implementation Guidance

The organization follows its strategy and plan for administering targeted, role-based privacy training.

Validation Procedures

The organization conducting the inspection/assessment reviews evidence of the organization being inspected providing annual targeted, role-based privacy training. DoD Components that have determined and documented adequate justification that DoD-wide privacy training and awareness activities provide evidence to demonstrate its personnel are taking this training annually.

Compelling Evidence

Reference section of documentation that pertains to IASE PII training. Observe that If extra training is required the organization needs to define and document the unique privacy needs which must be addressed by training.

The controls below (if any) were marked by NIST as being related to CCI-003446.