SA-15(12)

  • Requirement

    Require the developer of the system or system component to minimize the use of personally identifiable information in development and test environments.

  • Discussion

    Organizations can minimize the risk to an individual's privacy by using techniques such as de-identification or synthetic data. Limiting the use of personally identifiable information in development and test environments helps reduce the level of privacy risk created by a system.

More Info

  • Title

    Development Process, Standards, and Tools | Minimize Personally Identifiable Information
  • Family

    System and Services Acquisition
  • NIST 800-53B Baseline(s)

    • Related NIST 800-53 ID

      PM-25;SA-3;SA-8

    NIST 800-53A Assessment Guidance

    CMMC Training

    Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!