SI-12 Information Output Handling And Retention

System and Information Integrity

Low Moderate High Privacy

Description

The organization handles and retains output from the information system in accordance with applicable laws, Executive Orders, directives, policies, regulations, standards, and operational requirements.\n

Supplemental Guidance

None.\n

Changes from Rev 4

Title changed from 'Information Handling and Retention' Control text changes 'information handling' to 'information management' and changes the wording of the list of 'in accordance with' specifics Discussion adds recommendation to coordinate with records management personnel and references numerous other controls Incorporates data retention elements of withdrawn App J control DM-2

Enhancements

(0) None.\n

Compliance Mappings

ISO 27002:2022

5.338.10

COBIT 2019

APO14.09

CIS Controls v8

3.13.43.5

NIST CSF 2.0

ID.AM-07

SOC 2 TSC

C1.1-POF3C1.2C1.2-POF1C1.2-POF2CC6.5CC6.5-POF2P4.0P4.2P4.2-POF1P4.3P4.3-POF2P4.3-POF3PI1.5

ISO 17799 (legacy)

10.7.312.2.4

COBIT 4.1 (legacy)

DS11.1DS11.6AC5