Privacy Impact Assessment (PIA) Program (RA-8) The Supply Chain Risk Management

The Supply Chain Risk Management Plan includes the following sections:

and Monitoring (CA)

Control Mapping: AT-2

Supply Chain Controls and Processes [NIST SR-3]

Insider Threat Program

Privacy Impact Assessment (PIA) Program (RA-8) The Supply Chain Risk ManagementDescription: NIST RMF program document detailing the requirements relating to a Privacy Impact Assessment (PIA) as described in RA 6 of NIST SP 800 53, Revision 5. The PIA includes the following sections: SECTION I GENERAL INFORMATION SECTION II PII IN THE SYSTEM SECTION III ATTRIBUTES OF THE DATA (USE AND ACCURACY) SECTION IV SHARING PRACTICES SECTION V NOTICE TO INDIVIDUALS TO DECLINE CONSENT USE SECTION VI ACCESS TO DATA SECTION VII PRIVACY