Section 64.2009(e) requires telecommunications carriers + interconnected VoIP providers to file an ANNUAL COMPLIANCE CERTIFICATION with the FCC by 1 MARCH OF EACH YEAR covering the previous calendar year. The certification must be SIGNED BY A CORPORATE OFFICER WITH PERSONAL KNOWLEDGE + must state that the officer has personal knowledge that the carrier has established operating procedures adequate to ensure compliance with the rules in this subpart. The certification must INCLUDE: (a) a statement explaining how the carrier's operating procedures ensure compliance; (b) an EXPLANATION OF ANY ACTIONS taken AGAINST DATA BROKERS + a summary of all consumer complaints received in the past year concerning the unauthorised release of CPNI. The certification must be FILED IN THE EB-CPNI DOCKET + made publicly available. Failure to file the annual certification is a per se violation + has resulted in FCC enforcement actions + fines. The certification format is established by FCC Public Notice + is updated periodically.
This control maps to 14 controls across 5 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 14 it maps to, and the evidence behind each claim, over MCP and REST.