CCI-003452

The organization develops reports for senior management and other personnel with responsibility for monitoring privacy program progress and compliance.

Implementation Guidance

The organization being inspected/assessed provides the necessary inputs to support DoD's internal privacy reporting requirements. For example, DoD Components are required to report to the Defense Privacy Office the status and metrics for internal periodic Privacy Act System of Records Notices (SORN) reviews. DoD 5400.11-R, sections C8.1-3 establish policy for DoD Component compliance DPCLO requirements for DoD Privacy Reports.

Validation Procedures

The organization conducting the inspection/assessment reviews evidence of contributions to internal privacy reports as mandated by the DPLCO and OCIO to ensure the organization being inspected/assessed develops reports for senior management and other personnel with responsibility for monitoring privacy program progress and compliance.

Compelling Evidence

Reference section of documentation that pertains to how the organization develops reports for senior management and other personnel that have responsibilities for monitoring privacy program progress and compliance.

The controls below (if any) were marked by NIST as being related to CCI-003452.