NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements 3.2.1: Account data storage is kept to a minimum through implementation of data retention and disposal policies, procedures, and processes that include at least the following: • Coverage for all locations of stored account data.

Account data storage is kept to a minimum through implementation of data retention and disposal policies, procedures, and processes that include at least the following: • Coverage for all locations of stored account data.

Other controls in Awareness, Training, and Personnel

3.2 Establish and Maintain a Data Inventory
3.9 Encrypt Data on Removable Media
3.9.1 Personnel Screening Assessment

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements controls