SI-21 Information Refresh
All changes in this version
Title
Information Refresh
Control
Refresh [Assignment: information] at [Assignment: frequencies] or generate the information on demand and delete the information when no longer needed.
Discussion
Retaining information for longer than it is needed makes it an increasingly valuable and enticing target for adversaries. Keeping information available for the minimum period of time needed to support organizational missions or business functions reduces the opportunity for adversaries to compromise, capture, and exfiltrate that information.
Parameters
si-21_odp.01: information
si-21_odp.02: frequencies
Related controls
si-14
Assessment objective
SI-21 the [Assignment: information] is refreshed [Assignment: frequencies] or is generated on demand and deleted when no longer needed.
STIG rules that implement this control 0
No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).