ComplianceNIST 800-53 enhancement

NIST-SI-19(8) Motivated Intruder

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
SI System and Information Integrity
Control
SI-19(8)

Control statement

Perform a motivated intruder test on the de-identified dataset to determine if the identified data remains or if the de-identified data can be re-identified.

Discussion

A motivated intruder test is a test in which an individual or group takes a data release and specified resources and attempts to re-identify one or more individuals in the de-identified dataset. Such tests specify the amount of inside knowledge, computational resources, financial resources, data, and skills that intruders possess to conduct the tests. A motivated intruder test can determine if the de-identification is insufficient. It can also be a useful diagnostic tool to assess if de-identification is likely to be sufficient. However, the test alone cannot prove that de-identification is sufficient.

Related

Enhancement of · Compliance (1)

  • NIST-SI-19 De-identification NIST 800-53 control