Skip to content

PM-26: Complaint Management

An OSCAL Control

Statement

    • Implement a process for receiving and responding to complaints, concerns, or questions from individuals about the organizational security and privacy practices that includes:

      • a.

        Mechanisms that are easy to use and readily accessible by the public;

      • b.

        All information necessary for successfully filing complaints;

      • c.

        Tracking mechanisms to ensure all complaints received are reviewed and addressed within ;

      • d.

        Acknowledgement of receipt of complaints, concerns, or questions from individuals within ; and

      • e.

        Response to complaints, concerns, or questions from individuals within .