Commit 341269ea authored by JANSSEN; jeroen's avatar JANSSEN; jeroen
Browse files

Adjust MI-NPII-2 to the new format

parent 7d240879
Loading
Loading
Loading
Loading
+6 −3
Original line number Diff line number Diff line
@@ -242,9 +242,12 @@ The VPN provider shall not collect PII without explicit authorization.

VPN provider shall not send PII outside of the endpoint at all.

* Test: Packet capture during typical hour of use
* Result: No PII is sent
* Output: Packet capture
  * Reference: TR-DMIN
  * Objective: Data minimization
  * Preparation: Packet capture during typical hour of use and document all data sent to the VPN provider
  * Activities: Review the documentation of the packet capture for any form of PII
  * Verdict: There is no PII collected => PASS, otherwise FAIL
  * Evidence: Packet capture

#### 5.2.X.x **MI-NPII-3**: