components. If PII is discovered, a Privacy Impact Assessment is performed. The Privacy Impact Assessment template used by can be found in Section 3. This section constitutes the Privacy Threshold Analysis and findings. Qualifying Questions Does the ISA collect, maintain, or share PII in any identifiable form? Does the ISA collect, maintain, or share PII information from or about the public? Has a Privacy Impact Assessment ever been performed for the ISA? Is there a Privacy Act System of Records Notice (SORN) for this ISA system? If yes; the SORN identifier and name is: If answers to Questions 1-4 are all “No” then a Privacy Impact Assessment may be omitted. If any of the answers to Question 1-4 are “Yes” then complete a Privacy Impact Assessment. Designation Check one. A Privacy Sensitive System Not a Privacy Sensitive System (in its current version) The Privacy Impact Assessment Template can be found on the following FedRAMP website page: .
components. If PII is discovered, a Privacy Impact Assessment is performed. The Privacy Impact Assessment template used by can be found in Section 3. This section constitutes the Privacy Threshold Analysis and findings. Qualifying Questions Does the ISA collect, maintain, or share PII in any identifiable form? Does the ISA collect, maintain, or share PII information from or about the public? Has a Privacy Impact Assessment ever been performed for the ISA? Is there a Privacy Act System of Records Notice (SORN) for this ISA system? If yes; the SORN identifier and name is: If answers to Questions 1-4 are all “No” then a Privacy Impact Assessment may be omitted. If any of the answers to Question 1-4 are “Yes” then complete a Privacy Impact Assessment. Designation Check one. A Privacy Sensitive System Not a Privacy Sensitive System (in its current version) The Privacy Impact Assessment Template can be found on the following FedRAMP website page: .
FedRAMP-SSP-Moderate-Baseline-Template-v3.2.docx