DM-11—Personal Information Inventory

>Control Description

Organization maintains a documented inventory of media containing personal information.

Theme

Process

Type

Preventive

Policy/Standard

Data Management Policy

>Implementation Guidance

1. Ensure that an inventory of media containing personal information is documented, approved, and communicated to appropriate stakeholders. 2. Ensure that this inventory is reviewed and update periodically.

>Testing Procedure

1. Inspect and validate whether an inventory of media containing personal information is formally documented. 2. Ensure that a process is defined to review and update the inventory periodically.

>Audit Artifacts

E-DM-01

E-DM-15

>Framework Mappings

Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.

CIS Controls
1

3.2

Ask AI

Configure your API key to use AI features.