OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/GLBA Safeguards Rule (16 CFR 314)/314.4

314.4(c)(6)(i)

paragraph (action item)

Develop, implement, and maintain procedures for the secure disposal of customer information in any format no later than two years after the last date the information is used in connection with the provision of a product or service to the customer to which it relates, unless such information is necessary for business operations or for other legitimate business purposes, is otherwise required to be retained by law or regulation, or where targeted disposal is not reasonably feasible due to the manner in which the information is maintained; and

314.4 Elements.

Related Frameworks

4 mappings across 5 frameworks
SCF4 mappings
AST-09Secure Disposal, Destruction or Re-Use of Equipment
1.00
DCH-08Physical Media Disposal
1.00
DCH-21Information Disposal
1.00
PRI-05Personal Data (PD) Retention & Disposal
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (91) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AC-20(5)Portable Storage Devices — Prohibited Use
1.00
AC-4(25)Data Sanitization
1.00
AT-1Policy and Procedures
1.00
AU-1Policy and Procedures
1.00
CA-1Policy and Procedures
1.00
CA-2Control Assessments
1.00
CA-5Plan of Action and Milestones
1.00
CA-7Continuous Monitoring
1.00
CA-8Penetration Testing
1.00

+81 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (3) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.8.3
1.00
3.8.1
0.50
3.8.2
0.50
CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (19) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-001315
1.00
CCI-001678
1.00
CCI-003671
1.00
CCI-003672
1.00
CCI-003982
1.00
CCI-003983
1.00
CCI-003984
1.00
CCI-003985
1.00
CCI-003986
1.00
CCI-003987
1.00

+9 more (top 10 by confidence shown)

STIG0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

SV-275585r1147805_ruleUbuntu OS must configure "/var/log/syslog" file with mode "640" or less permissive.
0.50

Federal Trade Commission, Standards for Safeguarding Customer Information (GLBA Safeguards Rule). Edition dated 2026-01-01. Read the publication.