incidents to the organizational incident response capability; (ii) the organization requires personnel to report suspected security incidents to the organizational incident response capability within the organization-defined time period; and (iii) the organization reports security incident information to designated authorities. Failure to meet the data minimization and retention requirements listed could lead to the compromise or unauthorized disclosure of personally identifiable information: Minimization of [Test: DM-1.1 - Personally [Test: DM-1.1 - (i) the organization identifies Minimization of Identifiable Minimization of the minimum personally Personally [E-# OR Information [NIST Personally identifiable information (PII) High Identifiable W-#] 800-53 w/ DHS Identifiable elements that are relevant and Information] 4300A Information] necessary to accomplish the legally authorized purpose of Not Entered Not Entered collection; (ii) the organization limits the collection and retention of PII to the minimum elements identified for the purposes described in the notice and for which the individual has
incidents to the organizational incident response capability; (ii) the organization requires personnel to report suspected security incidents to the organizational incident response capability within the organization-defined time period; and (iii) the organization reports security incident information to designated authorities. [E-# OR W-#] Minimization of Personally Identifiable Information [NIST 800-53 w/ DHS 4300A [Test: DM-1.1 - Minimization of Personally Identifiable Information] Not Entered Failure to meet the data minimization and retention requirements listed could lead to the compromise or unauthorized disclosure of personally identifiable information: (i) the organization identifies the minimum personally identifiable information (PII) elements that are relevant and necessary to accomplish the legally authorized purpose of collection; (ii) the organization limits the collection and retention of PII to the minimum elements identified for the purposes described in the notice and for which the individual has High [Test: DM-1.1 - Minimization of Personally Identifiable Information] Not Entered
Security%20Assessment%20Report%20Extensible.docx