NIST 800-53 rev.5/Personally Identifiable Information Processing and Transparency/612 of 1011
PT-06 (02)System of Records Notice | Exemption Rules
Control family: Personally Identifiable Information Processing and Transparency
Control description
Review all Privacy Act exemptions claimed for the system of records at [Assignment: organization-defined frequency] to ensure they remain appropriate and necessary in accordance with law, that they have been promulgated as regulations, and that they are accurately described in the system of records notice.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.