Which SP 800 document focuses on the confidentiality of PII and breach response requirements?

• A. Guide to Protecting the Confidentiality of PII
• B. Guideline for Media Santitization
• C. Information Security Handbook - A guide for managers
• D. Guide to Computer Security log Management

Answer: (A)

Protecting the confidentiality of PII and handling breach response is the focus of a specific NIST SP 800 guide that targets Personally Identifiable Information. This document, commonly cited as the Guide to Protecting the Confidentiality of Personally Identifiable Information, provides a structured approach for recognizing what counts as PII, assessing the risk to its privacy, and selecting safeguards that protect its confidentiality. It covers practical controls such as data minimization, encryption, access controls, and secure handling and disposal of PII, all chosen based on the level of risk to the information.

Crucially, it also addresses how to prepare for and respond to incidents involving PII, including incident detection, containment, and the steps needed to notify affected individuals or authorities as required by policy or law. The other options focus on different areas—media sanitization, broad security management guidance for managers, and log management—so they don’t specifically target PII confidentiality and breach response like this guide does.