SI-14.2 ยท Non-persistent Information

Control Description

{{ insert: param, si-14.02_odp.01 }} ; and Delete information when no longer needed.

Impact Baselines
Security baselines where this control applies
Not in any baseline
Control Properties
SP800-53-enhancement
organization
Assurance
Enhancement
Control Statement
The control requirements

(a) {{ insert: param, si-14.02_odp.01 }} ; and

(b) Delete information when no longer needed.

Supplemental Guidance

Retaining information longer than is needed makes the information a potential target for advanced adversaries searching for high value assets to compromise through unauthorized disclosure, unauthorized modification, or exfiltration. For system-related information, unnecessary retention provides advanced adversaries information that can assist in their reconnaissance and lateral movement through the system.