An error occurred:

CCIs

Number Definition Status Related
CCI-003421 The organization's privacy risk management process assesses the privacy risk to individuals resulting from the storing of personally identifiable information (PII). Draft
CCI-003422 The organization's privacy risk management process assesses the privacy risk to individuals resulting from the transmitting of personally identifiable information (PII). Draft
CCI-003423 The organization's privacy risk management process assesses the privacy risk to individuals resulting from the use of personally identifiable information (PII). Draft
CCI-003424 The organization's privacy risk management process assesses the privacy risk to individuals resulting from the disposal of personally identifiable information (PII). Draft
CCI-003425 The organization conducts Privacy Impact Assessments (PIAs) for information systems, programs, or other activities that pose a privacy risk in accordance with applicable law, OMB policy, or any existing organizational policies and procedures. Draft
CCI-003426 The organization establishes privacy roles for contractors. Draft
CCI-003427 The organization establishes privacy responsibilities for contractors. Draft
CCI-003428 The organization establishes access requirements for contractors. Draft
CCI-003429 The organization establishes privacy roles for service providers. Draft
CCI-003430 The organization establishes privacy responsibilities for service providers. Draft
CCI-003431 The organization establishes access requirements for service providers. Draft
CCI-003432 The organization includes privacy requirements in contracts. Draft
CCI-003433 The organization includes privacy requirements in other acquisition-related documents. Draft
CCI-003434 The organization defines the frequency for monitoring privacy controls and internal privacy policy to ensure effective implementation. Deprecated
CCI-003435 The organization defines the frequency for auditing privacy controls and internal privacy policy to ensure effective implementation. Draft
CCI-003436 The organization monitors privacy controls, per organization-defined frequency, to ensure effective implementation. Draft
CCI-003437 The organization monitors internal privacy policy to ensure effective implementation. Draft
CCI-003438 The organization audits privacy controls, per organization-defined frequency, to ensure effective implementation. Draft
CCI-003439 The organization audits internal privacy policy, per organization-defined frequency, to ensure effective implementation. Draft
CCI-003440 The organization develops a comprehensive training and awareness strategy aimed at ensuring that personnel understand privacy responsibilities and procedures. Draft
CCI-003441 The organization implements a comprehensive training and awareness strategy aimed at ensuring that personnel understand privacy responsibilities and procedures. Draft
CCI-003442 The organization updates a comprehensive training and awareness strategy aimed at ensuring that personnel understand privacy responsibilities and procedures. Draft
CCI-003443 The organization defines the frequency, minimally annually, for administering its basic privacy training. Draft
CCI-003444 The organization defines the frequency, minimally annually, for administering the targeted, role-based privacy training for personnel having responsibility for personally identifiable information (PII) or for activities that involve PII. Draft
CCI-003445 The organization administers basic privacy training per the organization-defined frequency. Draft
CCI-003446 The organization administers, per organization-defined frequency, targeted, role-based privacy training for personnel having responsibility for personally identifiable information (PII) or for activities that involve PII. Draft
CCI-003447 The organization defines the frequency, minimally annually, on which personnel certify acceptance of responsibilities for privacy requirements. Draft
CCI-003448 The organization ensures personnel certify (manually or electronically) acceptance of responsibilities for privacy requirements per organization-defined frequency. Draft
CCI-003449 The organization develops reports for the Office of Management and Budget (OMB), Congress, and other oversight bodies, as appropriate, to demonstrate accountability with specific statutory and regulatory privacy program mandates. Draft
CCI-003450 The organization disseminates reports to the Office of Management and Budget (OMB), Congress, and other oversight bodies, as appropriate, to demonstrate accountability with specific statutory and regulatory privacy program mandates. Draft