BaselineWatch
Desk

SI-19(02) Archiving

NIST SP 800-53 (controls) 5.1.1+u4
All changes in this version
first version loaded SI part of SI-19

Title

Archiving

Control

Prohibit archiving of personally identifiable information elements if those elements in a dataset will not be needed after the dataset is archived.

Discussion

Datasets can be archived for many reasons. The envisioned purposes for the archived dataset are specified, and if personally identifiable information elements are not required, the elements are not archived. For example, social security numbers may have been collected for record linkage, but the archived dataset may include the required elements from the linked records. In this case, it is not necessary to archive the social security numbers.

Assessment objective

SI-19(02) the archiving of personally identifiable information elements is prohibited if those elements in a dataset will not be needed after the dataset is archived.

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).