dch-18-media&dataretention.md

SCF - DCH-18 - Media & Data Retention

Mechanisms exist to retain media and data in accordance with applicable statutory, regulatory and contractual obligations.

Mapped framework controls

GDPR

• Art 5.1

ISO 27002

• A.5.33
• A.8.10

NIST 800-53

• MP-7
• SI-12

SOC 2

• PI1.5

Control questions

Does the organization retain media and data in accordance with applicable statutory, regulatory and contractual obligations?