Privacy plan

{
  "id": "MLC-T-CYB-003259",
  "term": "Privacy plan",
  "field": "Cybersecurity",
  "definition": "1. Formal document that provides an overview of the privacy requirements for an information system or program and describes the privacy controls in place or planned for meeting those requirements. The privacy plan may be integrated into the organizational security plan or developed as a separate plan.\n\n2. A formal document that details the privacy controls selected for an information system or environment of operation that are in place or planned for meeting applicable privacy requirements and managing privacy risks, details how the controls have been implemented, and describes the methodologies and metrics that will be used to assess the controls.",
  "references": [
    "NIST SP 800-53A Rev. 4 [Superseded]",
    "NIST SP 800-37 Rev. 2 from OMB Circular A-130 (2016); NIST SP 800-53 Rev. 5 from OMB Circular A-130 (2016); NIST SP 800-53B from OMB Circular A-130 (2016); NIST SP 800-53A Rev. 5 from OMB Circular A-130 (2016); NIST SP 800-18r2 from OMB Circular A-130 (2016); CNSSI 4009-2022 from OMB Circular A-130 (2016)",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/privacy-plan/"
}