Back

Include the data source in the data dictionary.


CONTROL ID
13519
CONTROL TYPE
Establish/Maintain Documentation
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish and maintain an organizational data dictionary, including data syntax rules., CC ID: 00600

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • The sources of the data within the set (PI1.1 ¶ 2 Bullet 2.2.c. Defines Data Necessary to Support a Product or Service, 2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy (with Revised Points of Focus – 2022))
  • When data is provided as part of a service or product or as part of a reporting obligation related to a product or service: (1) The definition of the data is available to the users of the data (2) The definition of the data includes the following information: — The population of events or instance… (PI1.1 Defines Data Necessary to Support a Product or Service, Trust Services Criteria)
  • Source(s) of the data (PI1.1 ¶ 2 Bullet 2.2.c. Defines Data Necessary to Support a Product or Service, Trust Services Criteria, (includes March 2020 updates))
  • Inventories the data sources, assesses the information type according to the entity's data classification policy, and appropriately secures those sources. (App A Objective 3:9c, FFIEC Information Technology Examination Handbook - Architecture, Infrastructure, and Operations, June 2021)