Under active development — Content is continuously updated and improved

DCH-18—Media & Data Retention

Weight: 8

>Control Description

Mechanisms exist to retain media and data in accordance with applicable statutory, regulatory and contractual obligations.

>Cross-Framework Mappings

NIST SP 800-53 r5

PCI DSS v4.0.1

CIS Controls v8

SOC 2 TSC

FedRAMP Rev 5

EU AI Act

Canada ITSP 10.171

Australia ISM

India DPDPA

India SEBI Guidelines

EU AI Act (Detailed)

Article 18.1(a)

Article 18.1(b)

Article 18.1(c)

Article 18.1(d)

Article 18.1(e)

EU Cyber Resilience Act

EU CRA Annexes

Annex 6 Module B.9

Annex 6 Module C.3.2

SOC 2 TSC (Detailed)

CIS Controls v8.1 (Detailed)

GovRAMP

ISO 27002:2022

NAIC Model Law 668

NIST SP 800-161

NIST SP 800-171 Rev 3

NIST SP 800-171A Rev 3

NIST AI 600-1

Data Privacy Management Principles

FBI CJIS

FCA CRM

GLBA (16 CFR 314)

314.4(c)(6)(ii)

HIPAA Simplification 2013

§ 164.316(b)(2)(i)

§ 164.530(j)(2)

NERC CIP

Nevada Regulation 5

NY DFS 23 NYCRR 500

Oregon CPA

Ask AI

Configure your API key to use AI features.