3.8: Document Data Flows

CSF v1.1 References:

CSF v2.0 References:

Group:

Info icon.

Control is new to this version of the control set.

Control Statement

Document data flows. Data flow documentation includes service provider data flows and should be based on the enterprise’s data management process. Review and update documentation annually, or when significant enterprise changes occur that could impact this Safeguard.

[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]