Navigate

DM-2 (1)

DM-2 (1): System Configuration

The organization, where feasible, configures its information systems to record the date PII is collected, created, or updated and when PII is to be deleted or archived under an approved record retention schedule.

Supplemental

None

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
Privacy (PHI)

Related Controls

The controls below (if any) were marked by NIST as being related to DM-2 (1).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of DM-2 (1).

Control	Description
No controls

Related CCIs

The CCIs below are tied to DM-2 (1).

CCI	Definition
CCI-003503	The organization, where feasible, configures its information systems to record the date personally identifiable information (PII) is collected, created, or updated.
CCI-003504	The organization, where feasible, configures its information systems to record the date personally identifiable information (PII) is created.
CCI-003505	The organization, where feasible, configures its information systems to record the date personally identifiable information (PII) is updated.
CCI-003506	The organization, where feasible, configures its information systems to record when personally identifiable information (PII) is to be deleted or archived under an approved record retention schedule.