|
PM-01
|
Information Security Program Plan |
|
|
|
|
|
PM-02
|
Information Security Program Leadership Role |
|
|
|
|
|
PM-03
|
Information Security and Privacy Resources |
|
|
|
|
|
PM-04
|
Plan of Action and Milestones Process |
|
|
|
|
|
PM-05
|
System Inventory |
|
|
|
|
|
PM-05(01)
|
Inventory of Personally Identifiable Information |
|
|
|
|
|
PM-06
|
Measures of Performance |
|
|
|
|
|
PM-07
|
Enterprise Architecture |
|
|
|
|
|
PM-07(01)
|
Offloading |
|
|
|
|
|
PM-08
|
Critical Infrastructure Plan |
|
|
|
|
|
PM-09
|
Risk Management Strategy |
|
|
|
|
|
PM-10
|
Authorization Process |
|
|
|
|
|
PM-11
|
Mission and Business Process Definition |
|
|
|
|
|
PM-12
|
Insider Threat Program |
|
|
|
|
|
PM-13
|
Security and Privacy Workforce |
|
|
|
|
|
PM-14
|
Testing, Training, and Monitoring |
|
|
|
|
|
PM-15
|
Security and Privacy Groups and Associations |
|
|
|
|
|
PM-16
|
Threat Awareness Program |
|
|
|
|
|
PM-16(01)
|
Automated Means for Sharing Threat Intelligence |
|
|
|
|
|
PM-17
|
Protecting Controlled Unclassified Information on External Systems |
|
|
|
|
|
PM-18
|
Privacy Program Plan |
|
|
|
|
|
PM-19
|
Privacy Program Leadership Role |
|
|
|
|
|
PM-20
|
Dissemination of Privacy Program Information |
|
|
|
|
|
PM-20(01)
|
Privacy Policies on Websites, Applications, and Digital Services |
|
|
|
|
|
PM-21
|
Accounting of Disclosures |
|
|
|
|
|
PM-22
|
Personally Identifiable Information Quality Management |
|
|
|
|
|
PM-23
|
Data Governance Body |
|
|
|
|
|
PM-24
|
Data Integrity Board |
|
|
|
|
|
PM-25
|
Minimization of Personally Identifiable Information Used in Testing, Training, and Research |
|
|
|
|
|
PM-26
|
Complaint Management |
|
|
|
|
|
PM-27
|
Privacy Reporting |
|
|
|
|
|
PM-28
|
Risk Framing |
|
|
|
|
|
PM-29
|
Risk Management Program Leadership Roles |
|
|
|
|
|
PM-30
|
Supply Chain Risk Management Strategy |
|
|
|
|
|
PM-30(01)
|
Suppliers of Critical or Mission-essential Items |
|
|
|
|
|
PM-31
|
Continuous Monitoring Strategy |
|
|
|
|
|
PM-32
|
Purposing |
|
|
|
|