An OSCAL Control
elements of personally identifiable information to be removed from datasets are defined;
the frequency at which to evaluate the effectiveness of de-identification is defined;