Skip to main content

💼 SI-12 Information Management and Retention (L)(M)(H)

  • ID: /frameworks/fedramp-high-security-controls/si/12

Stats

not available

Description

Manage and retain information within the system and information output from the system in accordance with applicable laws, executive orders, directives, regulations, policies, standards, guidelines and operational requirements.

Similar

  • Sections
    • /frameworks/nist-sp-800-53-r5/si/12
  • Internal
    • ID: dec-c-6b092b8e

Similar Sections (Take Policies From)

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 NIST SP 800-53 Revision 5 → 💼 SI-12 Information Management and Retention38no data

Similar Sections (Give Policies To)

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 FedRAMP Low Security Controls → 💼 SI-12 Information Management and Retention (L)(M)(H)8no data
💼 FedRAMP Moderate Security Controls → 💼 SI-12 Information Management and Retention (L)(M)(H)8no data

Sub Sections

SectionSub SectionsInternal RulesPoliciesFlagsCompliance

Policies (8)

PolicyLogic CountFlagsCompliance
🛡️ AWS Backup Vault contains unencrypted Recovery Points🟢1🟢 x6no data
🛡️ AWS DynamoDB Table does not have on-demand backups in the past 90 days🟢1🟢 x6no data
🛡️ AWS DynamoDB Table Point In Time Recovery is not enabled🟢1🟢 x6no data
🛡️ AWS ElastiCache Redis Cluster automatic backups are not enabled🟢1🟢 x6no data
🛡️ AWS EMR Cluster encryption is disabled🟢⚪🟢 x2, ⚪ x1no data
🛡️ AWS RDS Cluster Backup Retention Period is less than 7 days🟢1🟢 x6no data
🛡️ AWS RDS Instance automated backups are not enabled🟢1🟢 x6no data
🛡️ AWS S3 Bucket Versioning is not enabled🟢1🟢 x6no data