CCI-004436

Implement a process for receiving and responding to complaints, concerns or questions from individuals about the organizational privacy practices.

Implementation Guidance

Determine if: - a process for receiving complaints, concerns, or questions from individuals about Organizational security and privacy practices is implemented. - a process for responding to complaints, concerns, or questions from individuals about Organizational security and privacy practices is implemented.

Validation Procedures

Examine: [SELECT FROM: Privacy program plan; procedures addressing complaint management; complaint documentation; procedures addressing the reviews of complaints; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with privacy program responsibilities; organizational personnel with privacy responsibilities]. Test: [SELECT FROM: Organizational processes for complaint management; mechanisms supporting complaint management; tools used by the public to submit complaints, concerns, and questions (e.g., telephone, hotline, email, or web-based forms].

The controls below (if any) were marked by NIST as being related to CCI-004436.