OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/GLBA Safeguards Rule (16 CFR 314)/314.4

314.4(c)(6)(ii)

paragraph (action item)

Periodically review your data retention policy to minimize the unnecessary retention of data;

314.4 Elements.

Related Frameworks

2 mappings across 5 frameworks
SCF2 mappings
DCH-01Data Protection
1.00
DCH-18Media & Data Retention
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AC-2Account Management
1.00
AC-2(12)Account Monitoring for Atypical Usage
1.00
AC-20(5)Portable Storage Devices — Prohibited Use
1.00
AC-3Access Enforcement
1.00
AC-3(11)Restrict Access to Specific Information Types
1.00
AC-4Information Flow Enforcement
1.00
AC-4(15)Detection of Unsanctioned Information
1.00
AT-1Policy and Procedures
1.00
AT-3(5)Processing Personally Identifiable Information
1.00

+90 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (30) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.1.1
1.00
3.1.2
1.00
3.1.3
1.00
3.12.1
1.00
3.12.2
1.00
3.12.3
1.00
3.12.4
1.00
3.13.1
1.00
3.13.10
1.00
3.13.11
1.00

+20 more (top 10 by confidence shown)

CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-000421
1.00
CCI-000422
1.00
CCI-000423
1.00
CCI-000424
1.00
CCI-000425
1.00
CCI-000426
1.00
CCI-000571
1.00
CCI-000572
1.00
CCI-000573
1.00
CCI-000574
1.00

+90 more (top 10 by confidence shown)

STIG0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

SV-275585r1147805_ruleUbuntu OS must configure "/var/log/syslog" file with mode "640" or less permissive.
0.50

Federal Trade Commission, Standards for Safeguarding Customer Information (GLBA Safeguards Rule). Edition dated 2026-01-01. Read the publication.