CCI-003506

The organization, where feasible, configures its information systems to record when personally identifiable information (PII) is to be deleted or archived under an approved record retention schedule.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-003506.