An error occurred:

CCIs

Number Definition Status Related
CCI-005012 Defines the information to be refreshed on an organization-defined frequency. Draft SI-14(2)
CCI-005013 Defines the frequency at which to refresh organization-defined information. Draft SI-14(2)
CCI-005014 Defines the information to be generated on demand. Draft SI-14(2)
CCI-005015 Delete information when no longer needed. Draft SI-14(2)
CCI-005016 Refresh connections to the system on demand. Draft SI-14(3)
CCI-005017 Terminate connections after completion of a request, or a period of non-use. Draft SI-14(3)
CCI-005018 Check the accuracy, relevance, timeliness, and completeness of personally identifiable information across the information life cycle, on an organization-defined frequency. Draft SI-18
CCI-005019 Defines the frequency for checking the accuracy, relevance, timeliness, and completeness of personally identifiable information. Draft SI-18
CCI-005020 Correct or delete inaccurate or outdated personally identifiable information. Draft SI-18
CCI-005021 Correct or delete personally identifiable information that is inaccurate or outdated, incorrectly determined regarding impact, or incorrectly de-identified using organization-defined mechanisms. Draft SI-18(1)
CCI-005022 Defines the automated mechanisms for identifying inaccurate or outdated, incorrectly determined regarding impact, or incorrectly de-identified personally identifiable information. Draft SI-18(1)
CCI-005023 Employ data tags to automate the correction or deletion of personally identifiable information across the information life cycle within organizational systems. Draft SI-18(2)
CCI-005024 Collect personally identifiable information directly from the individual. Draft SI-18(3)
CCI-005025 Correct or delete personally identifiable information upon request by individuals or their designated representatives. Draft SI-18(4)
CCI-005026 Notify organization-defined recipients of personally identifiable information that the personally identifiable information has been corrected or deleted. Draft SI-18(5)
CCI-005027 Defines the recipients of personally identifiable information who are to be notified when the personally identifiable information is corrected or deleted. Draft SI-18(5)
CCI-005028 Notify individuals that the personally identifiable information has been corrected or deleted. Draft SI-18(5)
CCI-005029 Remove the following elements of personally identifiable information from datasets. Draft SI-19
CCI-005030 Defines the elements of personally identifiable information to be removed from datasets. Draft SI-19
CCI-005031 Evaluate organization-defined frequency for effectiveness of de-identification. Draft SI-19
CCI-005032 Defines the frequency for evaluating for effectiveness of de-identification. Draft SI-19
CCI-005033 De-identify the dataset upon collection by not collecting personally identifiable information. Draft SI-19(1)
CCI-005034 Prohibit archiving personally identifiable information elements if those elements in a dataset will not be needed after the dataset is archived. Draft SI-19(2)
CCI-005035 Remove personally identifiable information elements from a dataset prior to its release if those elements in the dataset do not need to be part of the data release. Draft SI-19(3)
CCI-005036 Remove, mask, encrypt, hash, or replace direct identifiers in a dataset. Draft SI-19(4)
CCI-005037 Manipulate numerical data, contingency tables, and statistical findings so that no individual or organization is identifiable in the results of the analysis. Draft SI-19(5)
CCI-005038 Prevent disclosure of personally identifiable information by adding non-deterministic noise to the results of mathematical operations before the results are reported. Draft SI-19(6)
CCI-005039 Perform de-identification using validated algorithms and software that is validated to implement the algorithms. Draft SI-19(7)
CCI-005040 Perform a motivated intruder test on the de-identified dataset to determine if the identified data remains or if the de-identified data can be re-identified. Draft SI-19(8)
CCI-005041 Embed data or capabilities in the following systems or system components to determine if organizational data has been exfiltrated or improperly removed from the organization. Draft SI-20