CCI-004703

Include organization-defined Privacy Act requirements in the acquisition contract for the operation of a system of records on behalf of an organization to accomplish an organizational mission or function.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-004703.