STIGhub
STIGs
RMF Controls
Compare
← All Controls
AP-1
Authority and Purpose
Rev 4
Authority to Collect
CCI Identifiers (4)
CCI-003392
The organization determines and documents the legal authority that permits the collection of personally identifiable information (PII), either generally or in support of a specific program or information system need.
CCI-003393
The organization determines and documents the legal authority that permits the use of personally identifiable information (PII), either generally or in support of a specific program or information system need.
CCI-003394
The organization determines and documents the legal authority that permits the maintenance of personally identifiable information (PII), either generally or in support of a specific program or information system need.
CCI-003395
The organization determines and documents the legal authority that permits the sharing of personally identifiable information (PII), either generally or in support of a specific program or information system need.
Linked STIG Checks (0)
No STIG checks reference this control.