SI-14(02) Non-persistent Information
(a) si-14.02_odp.01 ; and
(b) Delete information when no longer needed.
Parameter ID | Definition |
---|---|
si-14.02_odp.01 |
Selection (one):
|
si-14.02_odp.02 | information |
si-14.02_odp.03 | frequency |
si-14.02_odp.04 | information |
Baselines
- L
- M
- H
- P
Guidance
Retaining information longer than is needed makes the information a potential target for advanced adversaries searching for high value assets to compromise through unauthorized disclosure, unauthorized modification, or exfiltration. For system-related information, unnecessary retention provides advanced adversaries information that can assist in their reconnaissance and lateral movement through the system.