CCI-003587

The organization ensures its privacy practices are publicly available through organizational websites or otherwise.

Implementation Guidance

If the DoD Component has a Component level Privacy regulation, the DoD Component shall provide public access to that regulation on the Component's web site. The organization being inspected/assessed documents the web site on which it has published its Component level privacy regulation.

Validation Procedures

If the DoD Component has a Component level Privacy regulation, the DoD Component shall provide public access to that regulation on the Component's web site. The organization conducting the inspection/assessment obtains and examines the documented web site to ensure the organization being inspected/assessed, has provided public access to the Component level privacy regulation.

Compelling Evidence

1.) web site on which the organization has provided public access to the Component level privacy regulation.

The controls below (if any) were marked by NIST as being related to CCI-003587.