NIST SP 800-122 April 2010An organization cannot properly protect PII it does not know about. This document uses a broad definition of PII to identify as many potential sources of PII as possible (e.g., databases, shared network drives, backup tapes, contractor sites). PII is any information about an individual maintained by an agency, including (1) any information that can be used to distinguish or trace an individual's identity, such as name, social security number, date and place of birth, mother's maiden name, or biometric records; and (2) any other information that is linked or linkable to an individual, such as medical, educational, financial, and employment information.Why buy a book you can download for free?First you gotta find it and make sure it’s the latest version (not always easy). Then you gotta print it using a network printer you share with 100 other people – and its outta paper – and the toner is low (take out the toner cartridge, shake it, then put it back). If it’s just 10 pages, no problem, but if it’s a 250-page book, you will need to punch 3 holes in all those pages and put it in a 3-ring binder. Takes at least an hour. An engineer that’s paid $75 an hour has to do this himself (who has assistant’s anymore?).If you are paid more than $10 an hour and use an ink jet printer, buying this book will save you money.It’s much more cost-effective to just order the latest version from Amazon.comThis book is published by 4th Watch Publishing Co. and includes copyright material. We publish compact, tightly-bound, full-size books (8 ½ by 11 inches), with glossy covers. 4th Watch Books is a Service Disabled Veteran-Owned Small Business (SDVOSB), and is not affiliated with the National Institute of Standards and Technology. For more titles published by 4th Watch Books, please visit: www.usgovpub.com NIST SP 500-299NIST Cloud Computing Security Reference Architecture NIST SP 500-291NIST Cloud Computing Standards Roadmap Version 2 NIST SP 500-293US Government Cloud Computing Technology Roadmap Volume 1 & 2 NIST SP 500-293US Government Cloud Computing Technology Roadmap Volume 3 DRAFT NIST SP 1800-8Securing Wireless Infusion Pumps NISTIR 7497Security Architecture Design Process for Health Information Exchanges (HIEs) NIST SP 800-66Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule NIST SP 1800-1 Securing Electronic Health Records on Mobile Devices NIST SP 800-177 Trustworthy Email NIST SP 800-184 Guide for Cybersecurity Event Recovery NIST SP 800-190 Application Container Security Guide NIST SP 800-193 Platform Firmware Resiliency Guidelines NIST SP 1800-1 Securing Electronic Health Records on Mobile Devices NIST SP 1800-2Identity and Access Management for Electric Utilities NIST SP 1800-5IT Asset Management: Financial Services NIST SP 1800-6 Domain Name Systems-Based Electronic Mail Security NIST SP 1800-7 Situational Awareness for Electric Utilities