Navigate

CCI-005015

CCI-005015 Definition

Delete information when no longer needed.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Determine if information is deleted when no longer needed.

Validation Procedures

Examine: [SELECT FROM: System and information integrity policy; system and information integrity procedures; procedures addressing non-persistence for system components; system design documentation; system configuration settings and associated documentation; system audit records; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel responsible for ensuring that information is and remains non-persistent; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Organizational processes for ensuring that information is and remains non-persistent; automated mechanisms supporting and/or implementing component and service refreshes].

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-005015.

Control	Description
SI-14(2)	(a): [one of "refresh {{ insert: param, si-14.02_odp.02 }} {{ insert: param, si-14.02_odp.03 }} "/"generate {{ insert: param, si-14.02_odp.04 }} on demand"] ; and (b): Delete information when no longer needed.