CCI-003508

The organization develops policies that minimize the use of personally identifiable information (PII) for training.

Implementation Guidance

The organization being inspected/assessed develops and documents policies that minimize the use of PII for training.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented policies to ensure the organization being inspected/assessed develops policies that minimize the use of PII for training.

Compelling Evidence

1.) Site must produce a signed document which describes site's policies to minimize the use of PII for training. 2.) Reviewer will verify that the documentation exists. 3.) Reviewer will verify that the documentation describes and identifies policies to minimize the use of PII for training. 4.) Reviewer must valid that the site implements and follows these policies.

The controls below (if any) were marked by NIST as being related to CCI-003508.