Law / Frameworks / NIST Privacy Framework / Protect-P
NIST Privacy Framework, Protect-PPR.PO-P2
Configuration change control processes are established and in place.NIST Privacy Framework, version 1.0, January 2020, PR.PO-P2
We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .
- 2
- laws
- 2
- jurisdictions
- 0
- with court rulings behind them
- 0
- not yet in force
AI sector rules
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 Saudi Arabia |
Counter-Fraud Framework: fraud detection systems, machine learning and artificial intelligence |
Calibrate and test detection scenarios to validate that they are working as designed, implement feedback loops that review false positives, false negatives and alerts which identified fraud, periodically review scenarios and parameters, periodically test the effectiveness of systems through tuning and calibration measures that include model validation, update user behavior patterns and rules for the latest threats, retain a documented record of changes made to configuration or rules and the rationale for the decision, and monitor for unauthorized changes to the system such as rule tampering or disabling of monitoring (Section 5.2(i)). |
Sector security regimes
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 Netherlands |
Cyberbeveiligingsbesluit, Security Measures and Incident Notification Details |
Apply a policy for the risks of acquiring software, hardware or services, apply secure-development processes across all development phases where they apply, and apply maintenance processes that cover at least configuration management and change management (Article 11). |
Full text of the NIST Privacy Framework, public domain (a US government work). Every control of the framework.