STIGhub
STIGs
RMF Controls
Compare
← All Controls
RA-8
Risk Assessment
Rev 5
Privacy Impact Assessments
CCI Identifiers (3)
CCI-004645
Conduct privacy impact assessments for systems, programs, or other activities before developing or procuring information technology that processes personally identifiable information.
CCI-004646
Conduct privacy impact assessments for systems, programs, or other activities before initiating a new collection of personally identifiable information that will be processes using information technology.
CCI-004647
Conduct privacy impact assessments for systems, programs, or other activities before initiating a new collection of personally identifiable information that includes personally identifiable information permitting the physical or virtual (online) contacting of a specific individual, if identical questions have been posed to, or identical reporting requirements imposed on, ten or more persons, other than agencies, instrumentalities, or employees of the Federal Government.
Linked STIG Checks (0)
No STIG checks reference this control.