CCI-003508

CCI-003508 Definition

The organization develops policies that minimize the use of personally identifiable information (PII) for training.

Status
Type	CheckType.policy

The controls below (if any) were marked by NIST as being related to CCI-003508.

Control	Description
DM-3	The organization: a. Develops policies and procedures that minimize the use of personally identifiable information (PII) for testing, training, and research; and b. Implements controls to protect PII used for testing, training, and research.