An error occurred:

CCIs

Number Definition Status Related
CCI-003541 The organization implements a process for responding to complaints, concerns, or questions from individuals about the organizational privacy practices. Draft IP-4
CCI-003542 The organization defines the time period within which it must respond to complaints, concerns, or questions from individuals about the organizational privacy practices. Draft IP-4(1)
CCI-003543 The organization responds to complaints, concerns, or questions from individuals about the organizational privacy practices within the organization-defined time period. Draft IP-4(1)
CCI-003544 The organization defines the frequency on which it will update the inventory that contains a listing of all programs and information systems identified as collecting, using, maintaining, or sharing personally identifiable information (PII). Draft SE-1
CCI-003545 The organization establishes an inventory that contains a listing of all programs identified as collecting, using, maintaining, or sharing personally identifiable information (PII). Draft SE-1
CCI-003546 The organization establishes an inventory that contains a listing of all information systems identified as collecting, using, maintaining, or sharing personally identifiable information (PII). Draft SE-1
CCI-003547 The organization maintains an inventory that contains a listing of all programs identified as collecting, using, maintaining, or sharing personally identifiable information (PII). Draft SE-1
CCI-003548 The organization maintains an inventory that contains a listing of all information systems identified as collecting, using, maintaining, or sharing personally identifiable information (PII). Draft SE-1
CCI-003549 The organization updates, per organization-defined frequency, an inventory that contains a listing of all programs identified as collecting, using, maintaining, or sharing personally identifiable information (PII). Draft SE-1
CCI-003550 The organization updates, per organization-defined frequency, an inventory that contains a listing of all information systems identified as collecting, using, maintaining, or sharing personally identifiable information (PII). Draft SE-1
CCI-003551 The organization defines the frequency for providing each update of the personally identifiable information (PII) inventory to the CIO or information security official. Draft SE-1
CCI-003552 The organization provides each update of the personally identifiable information (PII) inventory to the CIO or information security official, per organization-defined frequency, to support the establishment of information security requirements for all new or modified information systems containing PII. Draft SE-1
CCI-003553 The organization develops a Privacy Incident Response Plan. Draft SE-2
CCI-003554 The organization implements a Privacy Incident Response Plan. Draft SE-2
CCI-003555 The organization provides an organized and effective response to privacy incidents in accordance with the organizational Privacy Incident Response Plan. Draft SE-2
CCI-003556 The organization provides effective notice to the public regarding its activities that impact privacy, including its collection, use, sharing, safeguarding, maintenance, and disposal of personally identifiable information (PII). Draft TR-1
CCI-003557 The organization provides effective notice to individuals regarding its activities that impact privacy, including its collection, use, sharing, safeguarding, maintenance, and disposal of personally identifiable information (PII). Draft TR-1
CCI-003558 The organization provides effective notice to the public regarding its authority for collecting personally identifiable information (PII). Draft TR-1
CCI-003559 The organization provides effective notice to individuals regarding its authority for collecting personally identifiable information (PII). Draft TR-1
CCI-003560 The organization provides effective notice to the public regarding the choices, if any, individuals may have regarding how the organization uses personally identifiable information (PII). Draft TR-1
CCI-003561 The organization provides effective notice to individuals regarding the choices, if any, individuals may have regarding how the organization uses personally identifiable information (PII). Draft TR-1
CCI-003562 The organization provides effective notice to the public regarding the consequences of exercising or not exercising the choices regarding how the organization uses personally identifiable information (PII). Draft TR-1
CCI-003563 The organization provides effective notice to individuals regarding the consequences of exercising or not exercising the choices regarding how the organization uses personally identifiable information (PII). Draft TR-1
CCI-003564 The organization provides effective notice to the public regarding the ability of individuals to access personally identifiable information (PII). Draft TR-1
CCI-003565 The organization provides effective notice to individuals regarding the ability to access personally identifiable information (PII). Draft TR-1
CCI-003566 The organization provides effective notice to the public regarding the ability to have personally identifiable information (PII) amended or corrected if necessary. Draft TR-1
CCI-003567 The organization provides effective notice to individuals regarding the ability to have personally identifiable information (PII) amended or corrected if necessary. Draft TR-1
CCI-003568 The organization describes the personally identifiable information (PII) the organization collects. Draft TR-1
CCI-003569 The organization describes the purpose(s) for which it collects the personally identifiable information (PII). Draft TR-1
CCI-003570 The organization describes how the organization uses personally identifiable information (PII) internally. Draft TR-1