This is a potential security issue, you are being redirected to https://csrc.nist.gov
Formal document that provides an overview of the privacy requirements for an information system or program and describes the privacy controls in place or planned for meeting those requirements. The privacy plan may be integrated into the organizational security plan or developed as a separate plan.
NIST SP 800-53A Rev. 4 under Privacy Plan
A formal document that details the privacy controls selected for an information system or environment of operation that are in place or planned for meeting applicable privacy requirements and managing privacy risks, details how the controls have been implemented, and describes the methodologies and metrics that will be used to assess the controls.
NIST SP 800-37 Rev. 2