V-288271

Discussion

Data tags support the tracking and enforcement of authorized processing by conveying the types of processing that are authorized along with the relevant elements of PII throughout the system. Data tags may also support the use of automated tools. This requirement pertains to Zero Trust.

Check Content

Review the application documentation and deployed configuration to determine whether the application attaches data tags containing organization-defined authorized processing to organization-defined elements of PII.

If the application does not attach data tags containing organization-defined authorized processing to organization-defined elements of PII, this is a finding.