# PM-24 — Data Integrity Board

- **Control ID:** PM-24
- **Family:** [PM](/md/families/PM.md)
- **Baselines:** No content available.
- **Enhancement of:** No content available.

## Description

Establish a Data Integrity Board to: Review proposals to conduct or participate in a matching program; and Conduct an annual review of all matching programs in which the agency has participated.

## Discussion

A Data Integrity Board is the board of senior officials designated by the head of a federal agency and is responsible for, among other things, reviewing the agency’s proposals to conduct or participate in a matching program and conducting an annual review of all matching programs in which the agency has participated. As a general matter, a matching program is a computerized comparison of records from two or more automated \[PRIVACT\](\#18e71fec-c6fd-475a-925a-5d8495cf8455) systems of records or an automated system of records and automated records maintained by a non-federal agency (or agent thereof). A matching program either pertains to Federal benefit programs or Federal personnel or payroll records. At a minimum, the Data Integrity Board includes the Inspector General of the agency, if any, and the senior agency official for privacy.

## Implementation guidance

No content available.

## CSF 2.0 subcategories

- [GV.RR-01](/md/csf/GV.RR-01.md) — Organizational leadership is responsible and accountable for cybersecurity risk and fosters a culture that is risk-aware, ethical, and continually improving
- [GV.RR-02](/md/csf/GV.RR-02.md) — Roles, responsibilities, and authorities related to cybersecurity risk management are established, communicated, understood, and enforced

## Related controls

- [AC-4](/md/controls/AC-4.md)
- [PM-19](/md/controls/PM-19.md)
- [PM-23](/md/controls/PM-23.md)
- [PT-2](/md/controls/PT-2.md)
- [PT-8](/md/controls/PT-8.md)

---

Derived from official NIST publications (NIST SP 800-53 Rev 5 and NIST CSF 2.0). nistcontrols.com is not affiliated with NIST.