BaselineWatch
Desk

SI-21 Information Refresh

NIST SP 800-53 (controls) 5.1.1+u4
All changes in this version
first version loaded SI

Title

Information Refresh

Control

Refresh [Assignment: information] at [Assignment: frequencies] or generate the information on demand and delete the information when no longer needed.

Discussion

Retaining information for longer than it is needed makes it an increasingly valuable and enticing target for adversaries. Keeping information available for the minimum period of time needed to support organizational missions or business functions reduces the opportunity for adversaries to compromise, capture, and exfiltrate that information.

Parameters

si-21_odp.01: information
si-21_odp.02: frequencies

Related controls

si-14

Assessment objective

SI-21 the [Assignment: information] is refreshed [Assignment: frequencies] or is generated on demand and deleted when no longer needed.

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).