ComplianceNIST 800-53 enhancement
NIST-SA-15(12) Minimize Personally Identifiable Information
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- SA System and Services Acquisition
- Control
- SA-15(12)
Control statement
Require the developer of the system or system component to minimize the use of personally identifiable information in development and test environments.
Discussion
Organizations can minimize the risk to an individual’s privacy by using techniques such as de-identification or synthetic data. Limiting the use of personally identifiable information in development and test environments helps reduce the level of privacy risk created by a system.
Related
Enhancement of · Compliance (1)
- NIST-SA-15 Development Process, Standards, and Tools NIST 800-53 control
Related control · Compliance (3)
- NIST-PM-25 Minimization of Personally Identifiable Information Used in Testing, Training, and Research NIST 800-53 control
- NIST-SA-3 System Development Life Cycle NIST 800-53 control
- NIST-SA-8 Security and Privacy Engineering Principles NIST 800-53 control