|
controlRA-8
Privacy Impact Assessments (RA-8)
Conduct privacy impact assessments for systems, programs, or other activities before:
risk-assessmentvulnerabilitythreat
Why These Connect
Maps To2
These are equivalent or closely aligned requirements in other frameworks.
Supports24
These related controls work together — a change to one may affect the others.
Related Controls(14)
AU-2Event Logging (AU-2)
LMH
CM-3Configuration Change Control (CM-3)MH
CM-4Impact Analyses (CM-4)LMH
CM-9Configuration Management Plan (CM-9)MH
CM-13Data Action Mapping (CM-13)PL-2System Security and Privacy Plans (PL-2)LMH
PM-20Dissemination of Privacy Program Information (PM-20)PT-2Authority to Process Personally Identifiable Information (PT-2)PT-3Personally Identifiable Information Processing Purposes (PT-3)RA-2Security Categorization (RA-2)LMH
PT-5Privacy Notice (PT-5)RA-1Policy and Procedures (RA-1)LMH
RA-3Risk Assessment (RA-3)LMH
RA-7Risk Response (RA-7)LMH
Cross-Framework Mappings(2)
ID.RA-04ID.RA-04Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
ID.RA-04ID.RA-04Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5