Control: The organization conducts a privacy impact assessment on the information system in accordance with OMB policy.

Supplemental Guidance: OMB Memorandum 03-22 provides guidance for implementing the privacy provisions of the E-Government Act of 2002.

Control Enhancements: (0) None.

Baseline: LOW PL-5 MOD PL-5 HIGH PL-5

Family: Planning

Class: Management

ISO 17799 mapping: 15.1.4

COBIT 4.1 mapping: None.