3.1: Establish and Maintain a Data Management Process
CSF v1.1 References:
PF v1.0 References:
Control is new to this version of the control set.
Control Statement
Establish and maintain a data management process. In the process, address data sensitivity, data owner, handling of data, data retention limits, and disposal requirements, based on sensitivity and retention standards for the enterprise. Review and update documentation annually, or when significant enterprise changes occur that could impact this Safeguard.
[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]