OMB Circular A-130 What makes it Major / Minor application (for Appendix III; SP major / minor in the NBDRA? Not privacy) resolved in V2. Masquerading privacy NIST SP 800-19 data (see identity) Biometric match event FIPS 201; Possible paradigmatic event exemplar for Big Data Media (wearable, FDA, adapted from implanted digital NIST SP 800-53 device) Memorandum of Simple MOU was Critical for Big Data Variety NIST SP 800-47 Understanding for Privacy data (MOUP) Minor application NIST SP 800-18 Identify aspect of a larger application that applies to privacy (susceptible to privacy concerns) NIST SP 800-30 Identify segment associated with Mission/business segment* business processes that collect PII or other privacy data at risk CNSSI-4009 Applies MLS to privacy data subset Multilevel security (for privacy data) Mutual suspicion CNSSI-4009 As applicable to privacy data. E.g., consider privacy data across organizational boundaries FIPS 200 Use to identify possible exclusions or National security system (US) variations from otherwise universal guidelines or practices. Nation-specific. Need to know CNSSI-4009 Need to know for PII. determination NIST SP 800-50 of a needs assessment can Needs assessment for “The results privacy (policy, risk, provide justification to convince management to allocate adequate etc.) resources to meet the identified awareness and training needs.” Adapted from Ability to sustain business operations Privacy data resilience after privacy data attack (e.g., partial leak) Non-organizational NIST SP 800-53 user
Major / Minor application (for privacy) OMB Circular A-130 Appendix III; SP What makes it major / minor in the NBDRA? Not resolved in V2. Masquerading privacy data (see identity) NIST SP 800-19 Biometric match event FIPS 201; Possible paradigmatic event exemplar for Big Data Media (wearable, implanted digital device) FDA, adapted from NIST SP 800-53 Memorandum of Understanding for Privacy data (MOUP) Simple MOU was NIST SP 800-47 Critical for Big Data Variety Minor application (susceptible to privacy concerns) NIST SP 800-18 Identify aspect of a larger application that applies to privacy Mission/business segment* NIST SP 800-30 Identify segment associated with business processes that collect PII or other privacy data at risk Multilevel security (for privacy data) CNSSI-4009 Applies MLS to privacy data subset Mutual suspicion CNSSI-4009 As applicable to privacy data. E.g., consider privacy data across organizational boundaries National security system (US) FIPS 200 Use to identify possible exclusions or variations from otherwise universal guidelines or practices. Nation-specific. Need to know determination CNSSI-4009 Need to know for PII. Needs assessment for privacy (policy, risk, etc.) NIST SP 800-50 “The results of a needs assessment can provide justification to convince management to allocate adequate resources to meet the identified awareness and training needs.” Privacy data resilience Adapted from Ability to sustain business operations after privacy data attack (e.g., partial leak) Non-organizational user NIST SP 800-53