NIST800-PT-8 PT-8 Computer Matching Requirements
NIST800-PT-8 in NIST SP 800-53 Rev 5 (NIST SP 800-53 Rev 5, Release 5.2.0). All NIST SP 800-53 Rev 5 controls held. Open NIST SP 800-53 Rev 5 on the standards site.
The control as we hold it
PT-8 Computer Matching Requirements. When a system or organization processes information for the purpose of conducting a matching program: a. Obtain approval from the Data Integrity Board to conduct the matching program; b. Develop and enter into a computer matching agreement; c. Publish a matching notice in the Federal Register; d. Independently verify the information produced by the matching program before taking adverse action against an individual, if required; and e. Provide individuals with notice and an opportunity to contest the findings before taking adverse action against an individual.
Reviewed and closest counterparts in the other frameworks
Reviewed rows come from a released pair; a closest match is the nearest held text and is not a reviewed row.
SOC 2
- SOC2-CC1.2 CC1.2 Board independence and oversight of internal control (COSO principle 2) (closest match)
- SOC2-P6.2 P6.2 Record of authorised disclosures (closest match)
- SOC2-P6.3 P6.3 Record of unauthorised disclosures and breaches (closest match)
- SOC2-P6.4 P6.4 Privacy commitments from vendors and third parties (closest match)
What an auditor commonly asks for
General guidance for this control area (domain: PT - PII Processing and Transparency), in our words, not a statement of the standard and not binding on an assessor.
- the privacy policy
- the consent and processing-purpose records