Back

Include the factors to determine what is included or excluded from the data element in the data dictionary.


CONTROL ID
13525
CONTROL TYPE
Establish/Maintain Documentation
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish and maintain an organizational data dictionary, including data syntax rules., CC ID: 00600

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • In addition to the date or period of time, the factors that determined the inclusion and exclusion of items in the data elements and population (PI1.1 ¶ 2 Bullet 2.2.h. Defines Data Necessary to Support a Product or Service, 2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy (with Revised Points of Focus – 2022))
  • When data is provided as part of a service or product or as part of a reporting obligation related to a product or service: (1) The definition of the data is available to the users of the data (2) The definition of the data includes the following information: — The population of events or instance… (PI1.1 Defines Data Necessary to Support a Product or Service, Trust Services Criteria)
  • The factors in addition to the date and period of time used to determine the inclusion and exclusion of items in the data elements and population (PI1.1 ¶ 2 Bullet 2.2.h. Defines Data Necessary to Support a Product or Service, Trust Services Criteria, (includes March 2020 updates))
  • Data elements within the data actions are inventoried. (ID.IM-P6, NIST Privacy Framework: A Tool For Improving Privacy Through Enterprise Risk Management, Version 1.0)