ID.IM-P4: Data actions of the systems/products/services are inventoried
Description
[csf.tools Note: Subcategories do not have detailed descriptions.]
Related Controls
NIST Special Publication 800-53 Revision 5.2.0
CM-13: Data Action Mapping
Develop and document a map of system data actions.
Cloud Controls Matrix v4.0
DSP-12: Limitation of Purpose in Personal Data Processing
Define, implement and evaluate processes, procedures and technical measures to ensure that personal data is processed according to any applicable laws and regulations and for the purposes declared to the data subject.
IPY-01: Interoperability and Portability Policy and Procedures
Establish, document, approve, communicate, apply, evaluate and maintain policies and procedures for interoperability and portability including requirements for: Communications between application interfaces Information processing interoperability Application development portability Information/Data exchange, usage, portability, integrity, and persistence Review and update the policies and procedures at least annually.
IVS-08: Network Architecture Documentation
Identify and document high-risk environments.