Compliancemanzill.com
NIST 800-53 rev.5

NIST 800-53 rev.5/Program Management/565 of 1011

PM-20 (01)Dissemination of Privacy Program Information | Privacy Policies on Websites, Applications, and Digital Services

Control family: Program Management

Control description

Develop and post privacy policies on all external-facing websites, mobile applications, and other digital services, that:

(a) Are written in plain language and organized in a way that is easy to understand and navigate;

(b) Provide information needed by the public to make an informed decision about whether and how to interact with the organization; and

(c) Are updated whenever the organization makes a substantive change to the practices it describes and includes a time/date stamp to inform the public of the date of the most recent changes.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.