← Home

PM — Program Management

PM-1Information Security Program PlanNot in a baselinePM-2Information Security Program Leadership RoleNot in a baselinePM-3Information Security and Privacy ResourcesPrivacyPM-4Plan of Action and Milestones ProcessPrivacyPM-5System InventoryNot in a baselinePM-6Measures of PerformancePrivacyPM-7Enterprise ArchitecturePrivacyPM-8Critical Infrastructure PlanPrivacyPM-9Risk Management StrategyPrivacyPM-10Authorization ProcessPrivacyPM-11Mission and Business Process DefinitionPrivacyPM-12Insider Threat ProgramNot in a baselinePM-13Security and Privacy WorkforcePrivacyPM-14Testing, Training, and MonitoringPrivacyPM-15Security and Privacy Groups and AssociationsNot in a baselinePM-16Threat Awareness ProgramNot in a baselinePM-17Protecting Controlled Unclassified Information on External SystemsPrivacyPM-18Privacy Program PlanPrivacyPM-19Privacy Program Leadership RolePrivacyPM-20Dissemination of Privacy Program InformationPrivacyPM-21Accounting of DisclosuresPrivacyPM-22Personally Identifiable Information Quality ManagementPrivacyPM-23Data Governance BodyNot in a baselinePM-24Data Integrity BoardPrivacyPM-25Minimization of Personally Identifiable Information Used in Testing, Training, and ResearchPrivacyPM-26Complaint ManagementPrivacyPM-27Privacy ReportingPrivacyPM-28Risk FramingPrivacyPM-29Risk Management Program Leadership RolesNot in a baselinePM-30Supply Chain Risk Management StrategyNot in a baselinePM-31Continuous Monitoring StrategyPrivacyPM-32PurposingNot in a baseline