CCI-003490

The organization conducts an initial evaluation of personally identifiable information (PII) holdings.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to conduct an initial evaluation of PII holdings.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process to ensure the organization being inspected/assessed conducts an initial evaluation of PII holdings

Compelling Evidence

1.) Site must produce a document which describes site's process to conducts an initial evaluation of PII holdings. 2.) Reviewer will validate the existence of documentation and the process to conduct an initial evaluation of PII holdings from the site's personal. 3.) Reviewer will validate that the documentation describes the process of site's initial evaluation of PII holdings.

The controls below (if any) were marked by NIST as being related to CCI-003490.