BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

PM-05(01) Inventory of Personally Identifiable Information

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
unchanged PM Privacy baseline part of PM-5

Title

Inventory of Personally Identifiable Information

Control

Establish, maintain, and update [Assignment: frequency] an inventory of all systems, applications, and projects that process personally identifiable information.

Discussion

An inventory of systems, applications, and projects that process personally identifiable information supports the mapping of data actions, providing individuals with privacy notices, maintaining accurate personally identifiable information, and limiting the processing of personally identifiable information when such information is not needed for operational purposes. Organizations may use this inventory to ensure that systems only process the personally identifiable information for authorized purposes and that this processing is still relevant and necessary for the purpose specified therein.

Parameters

pm-05.01_odp: frequency

Related controls

ac-3, cm-12, cm-13, cm-8, pl-8, pm-22, pt-3, pt-5, si-12, si-18

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).