controlSI-18

Personally Identifiable Information Quality Operations (SI-18)

Check the accuracy, relevance, timeliness, and completeness of personally identifiable information across the information life cycle [organization-defined] ; and Correct or delete inaccurate or outdated personally identifiable information.

integritymalwareflaw-remediationmonitoring

Why These Connect

Maps To2

These are equivalent or closely aligned requirements in other frameworks.

Supports18

These related controls work together — a change to one may affect the others.

Enhances5

These enhancements add specific capabilities or refinements to the base control.

Related Controls(10)

AC-16Security and Privacy Attributes (AC-16)IR-7Incident Response Assistance (IR-7)

LMH

MP-6Media Sanitization (MP-6)

LMH

PM-22Personally Identifiable Information Quality Management (PM-22)PM-26Complaint Management (PM-26)PT-2Authority to Process Personally Identifiable Information (PT-2)PT-3Personally Identifiable Information Processing Purposes (PT-3)PT-5Privacy Notice (PT-5)PM-24Data Integrity Board (PM-24)SI-4System Monitoring (SI-4)

LMH

Cross-Framework Mappings(2)

ID.AM-08ID.AM-08Final

NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5

ID.AM-08ID.AM-08Final

NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5

Organization-Defined Parameters(4)

Assignmentorganization-defined frequency

Control Enhancements(5)

SI-18(1)Automation Support (SI-18(1))

SI-18(2)Data Tags (SI-18(2))

SI-18(3)Collection (SI-18(3))

SI-18(4)Individual Requests (SI-18(4))

SI-18(5)Notice of Correction or Deletion (SI-18(5))