thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

NIST Privacy Framework

Voluntary NIST tool for managing privacy risk through enterprise risk management, structured like the Cybersecurity Framework.

Definition

Version 1.0 (2020) has five functions: Identify-P, Govern-P, Control-P, Communicate-P, and Protect-P, with Profiles and Tiers. Version 1.1 aligns it with CSF 2.0 and adds AI-related considerations. It addresses privacy risk arising from data processing, not just security breaches.

Example

An organization uses Control-P outcomes to design data minimization and de-identification practices.

Exam tip

Privacy risk can arise from authorized processing, not only from unauthorized access.

Related terms