for privacy requirements at annually. Failure to meet the privacy program information dissemination requirements listed increases the risk to unauthorized disclosure of personally identifiable information: [Test: TR-3.1 - Dissemination of (i) the organization ensures that [Test: TR-3.1 - Dissemination of Privacy Program the public has access to [E-# OR Dissemination of Privacy Program Information [NIST information about its privacy High W-#] Privacy Program Information] 800-53 w/ DHS activities and is able to Information] 4300A PRIV-TR-3] communicate with its Senior Not Entered Agency Official for Privacy Not Entered (SAOP)/Chief Privacy Officer (CPO); and (ii) the organization ensures that its privacy practices are publicly available through organizational Web sites or otherwise. Failure to meet the redress requirements listed below increases could allow unauthorized individuals to [Test: IP-3.1 - Redress [NIST [E-# OR [Test: IP-3.1 - view privacy information and Redress] w/ DHS 4300A High W-#] Redress] disclose them without consent PRIV-IP-3] to other individuals: Not Entered Not Entered (i) the organization provides a process for individuals to have
for privacy requirements at annually. [E-# OR W-#] Dissemination of Privacy Program Information [NIST 800-53 w/ DHS 4300A PRIV-TR-3] [Test: TR-3.1 - Dissemination of Privacy Program Information] Not Entered Failure to meet the privacy program information dissemination requirements listed increases the risk to unauthorized disclosure of personally identifiable information: (i) the organization ensures that the public has access to information about its privacy activities and is able to communicate with its Senior Agency Official for Privacy (SAOP)/Chief Privacy Officer (CPO); and (ii) the organization ensures that its privacy practices are publicly available through organizational Web sites or otherwise. High [Test: TR-3.1 - Dissemination of Privacy Program Information] Not Entered [E-# OR W-#] Redress [NIST w/ DHS 4300A PRIV-IP-3] [Test: IP-3.1 - Redress] Not Entered Failure to meet the redress requirements listed below increases could allow unauthorized individuals to view privacy information and disclose them without consent to other individuals: (i) the organization provides a process for individuals to have High [Test: IP-3.1 - Redress] Not Entered
Security%20Assessment%20Report%20Extensible.docx