Law / Frameworks / NIST Privacy Framework / Identify-P
NIST Privacy Framework, Identify-PID.DE-P1
Data processing ecosystem risk management policies, processes, and procedures are identified, established, assessed, managed, and agreed to by organizational stakeholders.NIST Privacy Framework, version 1.0, January 2020, ID.DE-P1
We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .
- 1
- law
- 1
- jurisdiction
- 0
- with court rulings behind them
- 0
- not yet in force
Sector security regimes
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 New York |
New York Department of Financial Services Cybersecurity Regulation, Third-Party Service Provider Security Policy |
Implement written policies and procedures, based on your risk assessment, designed to ensure the security of information systems and nonpublic information that are accessible to, or held by, third-party service providers (persons who are not your affiliates or governmental entities, provide services to you, and maintain, process or are permitted access to your nonpublic information through those services). |
Full text of the NIST Privacy Framework, public domain (a US government work). Every control of the framework.