(a) [Selection: Refresh [Assignment: organization-defined information][Assignment: organization-defined frequency]; Generate [Assignment: organization-defined information] on demand]; and
(b) Delete information when no longer needed.
|
|
| Control Identifier | SI-14(2) |
| Latest Sync Date | 19/12/24 09:18:14 |
| Discussion | Retaining information longer than is needed makes the information a potential target for advanced adversaries searching for high value assets to compromise through unauthorized disclosure, unauthorized modification, or exfiltration. For system-related information, unnecessary retention provides advanced adversaries information that can assist in their reconnaissance and lateral movement through the system. |
| Related Controls | None. |