3.1—Establish and Maintain a Data Management Process

IG1

IG2

IG3

Data

Govern

>Control Description

Establish and maintain a documented data management process. In the process, address data sensitivity, data owner, handling of data, data retention limits, and disposal requirements, based on sensitivity and retention standards for the enterprise. Review and update documentation annually, or when significant enterprise changes occur that could impact this Safeguard.