Automation
LOW MODERATE HIGHRequirements NIST SOURCE
Track processing purposes of personally identifiable information using [automated mechanisms].
Discussion (NIST Supplemental Guidance)
Automated mechanisms augment tracking of the processing purposes.
Implementation Guidance
Original engineering commentary written for this explorer — not NIST source text and not authoritative guidance.
No engineering interpretation has been authored for PT-3(2) yet. This section is architected to receive it — see the Requirements and Assessment sections above for the authoritative NIST source content in the meantime.
Assessment
Assessment Objectives
- automated mechanisms for tracking the processing purposes of personally identifiable information are defined;
- the processing purposes of personally identifiable information are tracked using <PT-03(02)_ODP automated mechanisms>.
Examine
[SELECT FROM: Personally identifiable information processing and transparency policy and procedures; data extracts with corresponding data tags; privacy plan; other relevant documents or records].
Interview
[SELECT FROM: Organizational personnel with personally identifiable information processing and transparency responsibilities; organizational personnel with information security and privacy responsibilities].
Test
[SELECT FROM: Organizational processes for managing the enforcement of authorized processing of personally identifiable information; automated tracking mechanisms].
STIGs & CCIs
No STIG checks or CCI mappings are currently loaded for PT-3(2). This section is architected to display, per product: STIG ID, Finding ID, Severity, Title, Description, Check, Fix, CCI, and NIST control mapping — but nothing is populated here until a real DISA STIG/CCI dataset is ingested.
Learn more about STIG/CCI integration →Evidence
Categorized from the SP 800-53A "Examine"/"Test" artifact list above by keyword — not an authoritative NIST evidence list.
Policy
- Personally identifiable information processing and transparency policy and procedures
- privacy plan
Testing
- Organizational processes for managing the enforcement of authorized processing of personally identifiable information
- automated tracking mechanisms
Other Records
- data extracts with corresponding data tags
- other relevant documents or records