SI-12.3: Information Disposal

techniques are used to dispose of information following the retention period;

techniques are used to destroy information following the retention period;

techniques are used to erase information following the retention period.

System and information integrity policy

system and information integrity procedures

personally identifiable information processing policy

personally identifiable information processing procedures

records retention and disposition policy

records retention and disposition procedures

laws, Executive Orders, directives, policies, regulations, standards, and operational requirements applicable to information disposal

media protection policy

media protection procedures

system audit records

audit findings

information disposal records

system security plan

privacy plan

privacy impact assessment

privacy risk assessment documentation

other relevant documents or records

Organizational personnel with information and records management, retention, and disposition responsibilities

organizational personnel with information security and privacy responsibilities

network administrators

Organizational processes for information disposition

automated mechanisms supporting and/or implementing information disposition