SI-12 Information Management and Retention

Assessment Objective

Determine if:

SI-12[01] information within the system is managed in accordance with applicable laws, Executive Orders, directives, regulations, policies, standards, guidelines, and operational requirements;
SI-12[02] information within the system is retained in accordance with applicable laws, Executive Orders, directives, regulations, policies, standards, guidelines, and operational requirements;
SI-12[03] information output from the system is managed in accordance with applicable laws, Executive Orders, directives, regulations, policies, standards, guidelines, and operational requirements;
SI-12[04] information output from the system is retained in accordance with applicable laws, Executive Orders, directives, regulations, policies, standards, guidelines, and operational requirements.

System and information integrity policy
system and information integrity procedures
personally identifiable information processing policy
records retention and disposition policy
records retention and disposition procedures
federal laws, Executive Orders, directives, policies, regulations, standards, and operational requirements applicable to information management and retention
media protection policy
media protection procedures
audit findings
system security plan
privacy plan
privacy program plan
personally identifiable information inventory
privacy impact assessment
privacy risk assessment documentation
other relevant documents or records

Organizational personnel with information and records management, retention, and disposition responsibilities
organizational personnel with information security and privacy responsibilities
network administrators

Organizational processes for information management, retention, and disposition
automated mechanisms supporting and/or implementing information management, retention, and disposition

Kapcsolatok
Kapcsolattípus	Feladat
blocks	SI-12 Information Management and Retention