Require the developer of the system or system component to minimize the use of personally identifiable information in development and test environments.
|
|
| Control Identifier | SA-15(12) |
| Latest Sync Date | 19/12/24 09:18:14 |
| Discussion | Organizations can minimize the risk to an individual’s privacy by using techniques such as de-identification or synthetic data. Limiting the use of personally identifiable information in development and test environments helps reduce the level of privacy risk created by a system. |
| Related Controls | PM-25, SA-3, SA-8. |