Home
Frameworks and Standards
NIST Privacy Framework

NIST Privacy Framework

NIST Privacy Framework – PROTECT-P (PR-P) – Identity Management, Authentication, and Access Control (PR.AC-P)
Control(s) Category Identity Management, Authentication, and Access Control (PR.AC-P): Access to data and devices is limited to authorized individuals, processes,...
NIST Privacy Framework – IDENTIFY-P (ID-P) – Business Environment (ID.BE-P)
Control(s) Category Business Environment (ID.BE-P): The organization’s mission, objectives, stakeholders, and activities are understood and prioritized; this information is used...
NIST Privacy Framework – PROTECT-P (PR-P) – Maintenance (PR.MA-P)
Control(s) Category Maintenance (PR.MA-P): System maintenance and repairs are performed consistent with policies, processes, and procedures. Subcategory PR.MA-P1: Maintenance...
NIST Privacy Framework – IDENTIFY-P (ID-P) – Data Processing Ecosystem Risk Management (ID.DE-P)
Control(s) Category Data Processing Ecosystem Risk Management (ID.DE-P): The organization’s priorities, constraints, risk tolerance, and assumptions are established and used...
NIST Privacy Framework – PROTECT-P (PR-P) – Protective Technology (PR.PT-P)
Requirement(s) Category Protective Technology (PR.PT-P): Technical security solutions are managed to ensure the security and resilience of systems/products/services and associated...
NIST Privacy Framework – IDENTIFY-P (ID-P) – Inventory and Mapping (ID.IM-P)
Requirement(s) Category Inventory and Mapping (ID.IM-P): Data processing by systems, products, or services is understood and informs the management of...
NIST Privacy Framework – IDENTIFY-P (ID-P) – Risk Assessment (ID.RA-P)
Control(s) Category Risk Assessment (ID.RA-P): The organization understands the privacy risks to individuals and how such privacy risks may create...
NIST Privacy Framework – GOVERN-P (GV-P) – Awareness and Training (GV.AT-P)
Control(s) Category Awareness and Training (GV.AT-P): The organization’s workforce and third parties engaged in data processing are provided privacy awareness...
NIST Privacy Framework – GOVERN-P (GV-P) – Governance Policies, Processes, and Procedures (GV.PO-P)
Control(s) Category Governance Policies, Processes, and Procedures (GV.PO-P): The policies, processes, and procedures to manage and monitor the organization’s regulatory,...
NIST Privacy Framework – GOVERN-P (GV-P) – Monitoring and Review (GV.MT-P)
Control(s) Category Monitoring and Review (GV.MT-P): The policies, processes, and procedures for ongoing review of the organization’s privacy posture are...

NIST Privacy Framework

NIST Privacy Framework – PROTECT-P (PR-P) – Identity Management, Authentication, and Access Control (PR.AC-P)

NIST Privacy Framework – IDENTIFY-P (ID-P) – Business Environment (ID.BE-P)

NIST Privacy Framework – PROTECT-P (PR-P) – Maintenance (PR.MA-P)

NIST Privacy Framework – IDENTIFY-P (ID-P) – Data Processing Ecosystem Risk Management (ID.DE-P)

NIST Privacy Framework – PROTECT-P (PR-P) – Protective Technology (PR.PT-P)

NIST Privacy Framework – IDENTIFY-P (ID-P) – Inventory and Mapping (ID.IM-P)

NIST Privacy Framework – IDENTIFY-P (ID-P) – Risk Assessment (ID.RA-P)

NIST Privacy Framework – GOVERN-P (GV-P) – Awareness and Training (GV.AT-P)

NIST Privacy Framework – GOVERN-P (GV-P) – Governance Policies, Processes, and Procedures (GV.PO-P)

NIST Privacy Framework – GOVERN-P (GV-P) – Monitoring and Review (GV.MT-P)