CM.PO-P: Communication Policies, Processes, And Procedures
Description
Policies, processes, and procedures are maintained and used to increase transparency of the organization’s data processing practices (e.g., purpose, scope, roles and responsibilities in the data processing ecosystem, and management commitment) and associated privacy risks.
Framework Subcategories
CM.PO-P1: Transparency policies, processes, and procedures for communicating data processing purposes, practices, and associated privacy risks are established and in place
[csf.tools Note: Subcategories do not have detailed descriptions.]
CM.PO-P2: Roles and responsibilities (e.g., public relations) for communicating data processing purposes, practices, and associated privacy risks are established
[csf.tools Note: Subcategories do not have detailed descriptions.]