<?xml version="1.0" encoding="UTF-8"?><!--Serialized by the GTRI Trustmark Framework API, version: 1.4.74--><tf:TrustInteroperabilityProfile xmlns:tf="https://trustmarkinitiative.org/specifications/trustmark-framework/1.4/schema/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><tf:Identifier>https://artifacts.trustmarkinitiative.org/lib/tips/nist-sp-800-53-r4-privacy-control-family_-accountability_-audit_-and-risk-management/4/</tf:Identifier><tf:Name>NIST SP 800-53 r4 Privacy Control Family: Accountability, Audit, and Risk Management</tf:Name><tf:Version>4</tf:Version><tf:Description>Profile of requirements corresponding to NIST Special Publication 800-53 r4, Privacy Control Family Accountability, Audit, and Risk Management.</tf:Description><tf:PublicationDateTime>2021-04-26T00:00:00.000Z</tf:PublicationDateTime><tf:Primary>false</tf:Primary><tf:LegalNotice>This document and the information contained herein is provided on an "AS IS" basis, and the Georgia Tech Research Institute disclaims all warranties, express or implied, including but not limited to any warranty that the use of the information herein will not infringe any rights or any implied warranties or merchantability or fitness for a particular purpose. In addition, the Georgia Tech Research Institute disclaims legal liability for any loss incurred as a result of the use or reliance on the document or the information contained herein.</tf:LegalNotice><tf:Issuer><tf:Identifier>https://trustmarkinitiative.org/</tf:Identifier><tf:Name>TMI</tf:Name><tf:Contact><tf:Kind>PRIMARY</tf:Kind><tf:Responder></tf:Responder><tf:Email>help@trustmarkinitiative.org</tf:Email><tf:Telephone>555-555-5555</tf:Telephone><tf:WebsiteURL>https://trustmarkinitiative.org/</tf:WebsiteURL></tf:Contact></tf:Issuer><tf:Keywords><tf:Keyword>800-53</tf:Keyword><tf:Keyword>Accountability</tf:Keyword><tf:Keyword>Audit</tf:Keyword><tf:Keyword>NIST</tf:Keyword><tf:Keyword>Privacy</tf:Keyword><tf:Keyword>Risk Management</tf:Keyword></tf:Keywords><tf:References><tf:TrustInteroperabilityProfileReference tf:id="TIP_NISTSP80053r4PrivacyControlAR1GovernanceandPrivacyProgram"><tf:Identifier>https://artifacts.trustmarkinitiative.org/lib/tips/nist-sp-800-53-r4-privacy-control-ar-1_-governance-and-privacy-program/4/</tf:Identifier><tf:Number>1</tf:Number><tf:Name>NIST SP 800-53 r4 Privacy Control AR-1: Governance and Privacy Program</tf:Name><tf:Version>4</tf:Version><tf:Description>Profile of requirements corresponding to NIST Special Publication 800-53 r4, Privacy Control AR-1: Governance and Privacy Program.</tf:Description></tf:TrustInteroperabilityProfileReference><tf:TrustInteroperabilityProfileReference tf:id="TIP_NISTSP80053r4PrivacyControlAR2PrivacyImpactandRiskAssessment"><tf:Identifier>https://artifacts.trustmarkinitiative.org/lib/tips/nist-sp-800-53-r4-privacy-control-ar-2_-privacy-impact-and-risk-assessment/4/</tf:Identifier><tf:Number>2</tf:Number><tf:Name>NIST SP 800-53 r4 Privacy Control AR-2: Privacy Impact and Risk Assessment</tf:Name><tf:Version>4</tf:Version><tf:Description>Profile of requirements corresponding to NIST Special Publication 800-53 r4, Privacy Control AR-2: Privacy Impact and Risk Assessment.</tf:Description></tf:TrustInteroperabilityProfileReference><tf:TrustInteroperabilityProfileReference tf:id="TIP_NISTSP80053r4PrivacyControlAR3PrivacyRequirementsforContractorsandServiceProviders"><tf:Identifier>https://artifacts.trustmarkinitiative.org/lib/tips/nist-sp-800-53-r4-privacy-control-ar-3_-privacy-requirements-for-contractors-and-service-providers/4/</tf:Identifier><tf:Number>3</tf:Number><tf:Name>NIST SP 800-53 r4 Privacy Control AR-3: Privacy Requirements for Contractors and Service Providers</tf:Name><tf:Version>4</tf:Version><tf:Description>Profile of requirements corresponding to NIST Special Publication 800-53 r4, Privacy Control AR-3: Privacy Requirements for Contractors and Service Providers.</tf:Description></tf:TrustInteroperabilityProfileReference><tf:TrustInteroperabilityProfileReference tf:id="TIP_NISTSP80053r4PrivacyControlAR4PrivacyMonitoringandAuditing"><tf:Identifier>https://artifacts.trustmarkinitiative.org/lib/tips/nist-sp-800-53-r4-privacy-control-ar-4_-privacy-monitoring-and-auditing/4/</tf:Identifier><tf:Number>4</tf:Number><tf:Name>NIST SP 800-53 r4 Privacy Control AR-4: Privacy Monitoring and Auditing</tf:Name><tf:Version>4</tf:Version><tf:Description>Profile of requirements corresponding to NIST Special Publication 800-53 r4, Privacy Control AR-4: Privacy Monitoring and Auditing.</tf:Description></tf:TrustInteroperabilityProfileReference><tf:TrustInteroperabilityProfileReference tf:id="TIP_NISTSP80053r4PrivacyControlAR5PrivacyAwarenessandTraining"><tf:Identifier>https://artifacts.trustmarkinitiative.org/lib/tips/nist-sp-800-53-r4-privacy-control-ar-5_-privacy-awareness-and-training/4/</tf:Identifier><tf:Number>5</tf:Number><tf:Name>NIST SP 800-53 r4 Privacy Control AR-5: Privacy Awareness and Training</tf:Name><tf:Version>4</tf:Version><tf:Description>Profile of requirements corresponding to NIST Special Publication 800-53 r4, Privacy Control AR-5: Privacy Awareness and Training.</tf:Description></tf:TrustInteroperabilityProfileReference><tf:TrustInteroperabilityProfileReference tf:id="TIP_NISTSP80053r4PrivacyControlAR6PrivacyReporting"><tf:Identifier>https://artifacts.trustmarkinitiative.org/lib/tips/nist-sp-800-53-r4-privacy-control-ar-6_-privacy-reporting/4/</tf:Identifier><tf:Number>6</tf:Number><tf:Name>NIST SP 800-53 r4 Privacy Control AR-6: Privacy Reporting</tf:Name><tf:Version>4</tf:Version><tf:Description>Profile of requirements corresponding to NIST Special Publication 800-53 r4, Privacy Control AR-6: Privacy Reporting.</tf:Description></tf:TrustInteroperabilityProfileReference><tf:TrustInteroperabilityProfileReference tf:id="TIP_NISTSP80053r4PrivacyControlAR7PrivacyEnhancedSystemDesignandDevelopment"><tf:Identifier>https://artifacts.trustmarkinitiative.org/lib/tips/nist-sp-800-53-r4-privacy-control-ar-7_-privacy-enhanced-system-design-and-development/4/</tf:Identifier><tf:Number>7</tf:Number><tf:Name>NIST SP 800-53 r4 Privacy Control AR-7: Privacy-Enhanced System Design and Development</tf:Name><tf:Version>4</tf:Version><tf:Description>Profile of requirements corresponding to NIST Special Publication 800-53 r4, Privacy Control AR-7: Privacy-Enhanced System Design and Development.</tf:Description></tf:TrustInteroperabilityProfileReference><tf:TrustInteroperabilityProfileReference tf:id="TIP_NISTSP80053r4PrivacyControlAR8AccountingofDisclosures"><tf:Identifier>https://artifacts.trustmarkinitiative.org/lib/tips/nist-sp-800-53-r4-privacy-control-ar-8_-accounting-of-disclosures/4/</tf:Identifier><tf:Number>8</tf:Number><tf:Name>NIST SP 800-53 r4 Privacy Control AR-8: Accounting of Disclosures</tf:Name><tf:Version>4</tf:Version><tf:Description>Profile of requirements corresponding to NIST Special Publication 800-53 r4, Privacy Control AR-8: Accounting of Disclosures.</tf:Description></tf:TrustInteroperabilityProfileReference></tf:References><tf:TrustExpression><![CDATA[TIP_NISTSP80053r4PrivacyControlAR1GovernanceandPrivacyProgram and TIP_NISTSP80053r4PrivacyControlAR2PrivacyImpactandRiskAssessment and TIP_NISTSP80053r4PrivacyControlAR3PrivacyRequirementsforContractorsandServiceProviders and TIP_NISTSP80053r4PrivacyControlAR4PrivacyMonitoringandAuditing and TIP_NISTSP80053r4PrivacyControlAR5PrivacyAwarenessandTraining and TIP_NISTSP80053r4PrivacyControlAR6PrivacyReporting and TIP_NISTSP80053r4PrivacyControlAR7PrivacyEnhancedSystemDesignandDevelopment and TIP_NISTSP80053r4PrivacyControlAR8AccountingofDisclosures]]></tf:TrustExpression><tf:Sources><tf:Source tf:id="Source-2112165102"><tf:Identifier>SP800-53R4</tf:Identifier><tf:Reference>NIST Special Publication 800-53 Revision 4, Security and Privacy Controls for Federal Information Systems and Organizations, National Institute of Standards and Technology, April 2013 (Includes updates as of 01-15-2014). Available at &lt;a href="http://dx.doi.org/10.6028/NIST.SP.800-53r4"&gt;http://dx.doi.org/10.6028/NIST.SP.800-53r4&lt;/a&gt;.</tf:Reference></tf:Source></tf:Sources></tf:TrustInteroperabilityProfile>