# NIST Privacy Framework GOVERN Function — Assessment Template

## Organization Information

| Field | Value |
|-------|-------|
| Organization Name | |
| Assessment Date | |
| Assessed By | |
| Assessment Scope | |

## GV.AT — Awareness and Training

### Training Program Status

| Metric | Value | Target | Status |
|--------|-------|--------|--------|
| Overall completion rate | | > 95% | |
| Average quiz score | | > 80% | |
| New hire training (avg days) | | < 14 days | |
| Specialist certification rate | | > 80% | |
| Executive briefing frequency | | Quarterly | |

### Training Gaps and Actions

| Gap | Action | Owner | Deadline |
|-----|--------|-------|----------|
| | | | |

## GV.PO — Policy

### Policy Inventory

| Policy | Owner | Last Review | Next Review | Ack Rate | Status |
|--------|-------|------------|-------------|----------|--------|
| | | | | | |

## GV.RR — Roles and Responsibilities

### Privacy Team Structure

| Role | Name | Reports To | FTE/Part-time |
|------|------|-----------|---------------|
| CPO/DPO | | | |
| Privacy Engineer | | | |
| Privacy Counsel | | | |
| Privacy Analyst | | | |

### Budget

| Category | Allocated | Spent | Remaining |
|----------|-----------|-------|-----------|
| Personnel | | | |
| Technology | | | |
| Training | | | |
| External Counsel | | | |

## GV.MT — Monitoring and Review

### Review Schedule

| Review Type | Frequency | Last Conducted | Next Scheduled | Owner |
|-------------|-----------|---------------|----------------|-------|
| Operational review | Quarterly | | | |
| Strategic review | Annual | | | |
| Policy review | Annual | | | |
| Risk reassessment | Quarterly | | | |

## Sign-Off

| Role | Name | Date |
|------|------|------|
| Assessor | | |
| CPO/DPO | | |
| Executive Sponsor | | |