Skip to main content

💼 PM-25 Minimization of Personally Identifiable Information Used in Testing, Training, and Research

  • Contextual name: 💼 PM-25 Minimization of Personally Identifiable Information Used in Testing, Training, and Research
  • ID: /frameworks/nist-sp-800-53-r5/pm/25
  • Located in: 💼 PM Program Management

Description​

a. Develop, document, and implement policies and procedures that address the use of personally identifiable information for internal testing, training, and research; b. Limit or minimize the amount of personally identifiable information used for internal testing, training, and research purposes; c. Authorize the use of personally identifiable information when such information is required for internal testing, training, and research; and d. Review and update policies and procedures [Assignment: organization-defined frequency].

Similar​

  • Internal
    • ID: dec-c-fd2c2586

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags