CCI-004160

Include a process to determine if notice to individuals or other organizations, including oversight organizations, is needed, in the Incident Response Plan for breaches involving Personally Identifiable Information.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-004160.