Control Public Information
Control information posted or processed on publicly accessible information
Systems.
Scrub websites and publicly facing information to make sure no private information is posted publicly
Example
Your company decides to start issuing press releases about its projects in an effort to reach more potential customers. Your company receives FCI from the government as part of its DoD contract. Because you recognize the need to manage controlled information, including FCI, you meet with the employees who write the releases and post information to establish a review process [c]. It is decided that you will review press releases for FCI before posting it on the company website [a,d]. Only certain employees will be authorized to post to the website [a].
References
-NIST SP 800-171r2 Page 28 3.1.22 https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-171r2.pdf
-ANSI/ISA-62443-4-1-2018: 10.6 Breach Reporting to the Public
-NIST SP 800-82r3 6.4.2 Public information regarding incident response and breach reporting to the public