PT-2(2)

Requirement

Manage enforcement of the authorized processing of personally identifiable information using [Assignment: organization-defined automated mechanisms].

Discussion

Automated mechanisms augment verification that only authorized processing is occurring.

Related NIST 800-53 ID

CA-6;CM-12;PM-5;PM-22;PT-4;SC-16;SC-43;SI-10;SI-15;SI-19

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Personally identifiable information processing and transparency policy and procedures; privacy plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with personally identifiable information processing and transparency responsibilities; organizational personnel with information security and privacy responsibilities].

Test

[SELECT FROM: Organizational processes for authorizing the processing of personally identifiable information; automated mechanisms supporting and/or implementing the management of authorized personally identifiable information processing].

ID	Assessment Objectives
PT-02(02)	enforcement of the authorized processing of personally identifiable information is managed using <PT-02(02)_ODP automated mechanisms>.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!