|
controlPT-7
Specific Categories of Personally Identifiable Information (PT-7)
Apply [organization-defined] for specific categories of personally identifiable information.
piiprivacytransparencydata-processing
Why These Connect
Maps To1
These are equivalent or closely aligned requirements in other frameworks.
Supports24
These related controls work together — a change to one may affect the others.
Enhances2
These enhancements add specific capabilities or refinements to the base control.
Related Controls(13)
AC-21Information Sharing (AC-21)
MH
AU-2Event Logging (AU-2)LMH
AU-16Cross-organizational Audit Logging (AU-16)CA-3Information Exchange (CA-3)LMH
CA-7Continuous Monitoring (CA-7)LMH
IR-9Information Spillage Response (IR-9)PM-20Dissemination of Privacy Program Information (PM-20)PM-23Data Governance Body (PM-23)PM-31Continuous Monitoring Strategy (PM-31)PT-3Personally Identifiable Information Processing Purposes (PT-3)PT-5Privacy Notice (PT-5)PT-2Authority to Process Personally Identifiable Information (PT-2)RA-3Risk Assessment (RA-3)LMH
Cross-Framework Mappings(1)
ISO 27001ISO/IEC 27001:20221 mappingFinal
NIST OLIR informative reference — SP 800-53 Rev 5 to ISO/IEC 27001:2022