Automation
LOW MODERATE HIGHRequirements NIST SOURCE
Manage enforcement of the authorized processing of personally identifiable information using [automated mechanisms].
Discussion (NIST Supplemental Guidance)
Automated mechanisms augment verification that only authorized processing is occurring.
Implementation Guidance
Original engineering commentary written for this explorer — not NIST source text and not authoritative guidance.
No engineering interpretation has been authored for PT-2(2) yet. This section is architected to receive it — see the Requirements and Assessment sections above for the authoritative NIST source content in the meantime.
Assessment
Assessment Objectives
- automated mechanisms used to manage enforcement of the authorized processing of personally identifiable information are defined;
- enforcement of the authorized processing of personally identifiable information is managed using <PT-02(02)_ODP automated mechanisms>.
Examine
[SELECT FROM: Personally identifiable information processing and transparency policy and procedures; privacy plan; other relevant documents or records].
Interview
[SELECT FROM: Organizational personnel with personally identifiable information processing and transparency responsibilities; organizational personnel with information security and privacy responsibilities].
Test
[SELECT FROM: Organizational processes for authorizing the processing of personally identifiable information; automated mechanisms supporting and/or implementing the management of authorized personally identifiable information processing].
STIGs & CCIs
No STIG checks or CCI mappings are currently loaded for PT-2(2). This section is architected to display, per product: STIG ID, Finding ID, Severity, Title, Description, Check, Fix, CCI, and NIST control mapping — but nothing is populated here until a real DISA STIG/CCI dataset is ingested.
Learn more about STIG/CCI integration →Evidence
Categorized from the SP 800-53A "Examine"/"Test" artifact list above by keyword — not an authoritative NIST evidence list.
Policy
- Personally identifiable information processing and transparency policy and procedures
- privacy plan
Testing
- Organizational processes for authorizing the processing of personally identifiable information
- automated mechanisms supporting and/or implementing the management of authorized personally identifiable information processing
Other Records
- other relevant documents or records