This Control directly supports the implied Control(s):
Establish, implement, and maintain records management procedures., CC ID: 11619
This Control has the following implementation support Control(s):
Attribute electronic records, as necessary., CC ID: 14820
SELECTED AUTHORITY DOCUMENTS COMPLIED WITH
An electronic record shall be attributed to the originator (§ IV.11 ¶ 1, India Information Technology Act 2008, 2008)
Sift through internal documents for responsibilities and rules and clarify who is responsible for these documents (§ 8.4.1 Subsection 1 Bullet 1, BSI-Standard 200-2 IT-Grundschutz Methodology, Version 1.0)
Document ownership and stewardship of all relevant documented personal and sensitive data. Perform review at least annually. (DSP-06, Cloud Controls Matrix, v4.0)
Establish and maintain a data management process. In the process, address data sensitivity, data owner, handling of data, data retention limits, and disposal requirements, based on sensitivity and retention standards for the enterprise. Review and update documentation annually, or when significant e… (CIS Control 3: Safeguard 3.1 Establish and Maintain a Data Management Process, CIS Controls, V8)
Documentation of the data types maintained, data owners and users, and purposes of reports. (App A Objective 3:9f Bullet 1, FFIEC Information Technology Examination Handbook - Architecture, Infrastructure, and Operations, June 2021)
Maintenance and ownership of the IT architecture repository. (App A Objective 2:9a Bullet 10, FFIEC Information Technology Examination Handbook - Architecture, Infrastructure, and Operations, June 2021)
