CCI-004161

Include an assessment process to determine the extent of the harm, embarrassment, inconvenience, or unfairness to affected individuals and any mechanisms to mitigate such harms in the Incident Response Plan for breaches involving Personally Identifiable Information.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-004161.