SI-12 INFORMATION HANDLING AND RETENTION

Page last updated:

PCF Compliance

Compliance with this requirement is the responsibility of the PCF deployer.


Control Description

The organization handles and retains information within the information system and information output from the system in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and operational requirements.

Supplemental Guidance

Information handling and retention requirements cover the full life cycle of information, in some cases extending beyond the disposal of information systems. The National Archives and Records Administration provides guidance on records retention.