SI-21 Information Refresh. Refresh [organization-defined] at [organization-defined] or generate the information on demand and delete the information when no longer needed
Information Refresh. Refresh [organization-defined] at [organization-defined] or generate the information on demand and delete the information when no longer needed.
system holds itEvidence a system already holds
- Configuration evidence implementing the refresh or on demand generation · Cloud console / configuration management
- Records showing refresh actually occurred at the stated frequency · Document repository
periodic reviewEvidence produced at each review
- Deletion evidence showing the information is removed when no longer needed · Document repository
governing documentDocuments that govern the control
- The defined information subject to refresh and the defined refresh frequency, or the decision to generate on demand · Document repository
- Verification that deleted information is gone from caches, backups and derived stores within the retention rules · Policy repository / GRC workspace
First move
Common gaps auditors find
- Refresh implemented as an overwrite that leaves prior versions recoverable
- On demand generation adopted while a cached copy persists indefinitely
- Deletion at the primary store only, with the derived and backup copies untouched
Do this for your whole sheet
Paste the rows you run your controls from and get this mapping for every control at once, with the periodic-review ones flagged and a first move per row. No account for the first run.
Build my evidence sheetSI-20 Tainting. Embed data or capabilities in the following systems or system components to determine if organizational data has been exfiltrated or improperly removed from the organization: [organization-defined] · SI-22 Information Diversity. Identify the following alternative sources of information for [organization-defined]: [organization-defined] ; and Use an alternative information source for the execution of essential functions or services on [organization-defined] when the primary source of