+SI-21 Information Refresh
|
SI-21 Information Refresh
Control
Refresh [Assignement: information] at [Assignement: frequencies] or generate the information on demand and delete the information when no longer needed.
Discussion
Retaining information for longer than it is needed makes it an increasingly valuable and enticing target for adversaries. Keeping information available for the minimum period of time needed to support organizational missions or business functions reduces the opportunity for adversaries to compromise, capture, and exfiltrate that information.
Assessment Objective
the [Assignement: information] is refreshed [Assignement: frequencies] or is generated on demand and deleted when no longer needed.
Assessment Method
Examine
System and information integrity policy
system and information integrity procedures
personally identifiable information processing policy
procedures addressing software and information integrity
system design documentation
system configuration settings and associated documentation
information refresh procedures
list of information to be refreshed
system security plan
privacy plan
other relevant documents or records
Interview
Organizational personnel responsible for refreshing information
organizational personnel with information security and privacy responsibilities
organizational personnel with systems security engineering responsibilities
system developers
1. Přehled
1.1 Odkazy
1.2 Identifikované požadavky
1.3 Související regulace
2. Identifikované požadavky
Požadavky
| Zdroj |
Požadavek |
3. Související regulace
Propojené úkoly
|