Skip to content

Information Lifecycle

What is Information Lifecycle?

The stages through which information passes from creation and collection through use, storage, archival, and eventual destruction.

Information Security

Frameworks that govern information lifecycle

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →

What the standards actually require on information lifecycle

Requirements naming information lifecycle across 3 standards, quoted from the control text.

Jamaica Data Protection Act 20201 control

Standard 5 per Section 23 + the Schedule of the Jamaica Data Protection Act 2020: Personal data shall be kept for no longer than is necessary for the purposes for which they are processed.

JM-DPA2020-Standard5-Retention-Sec23-Time-Limit-No-Longer-Than-Necessary-Erasure-Deletion-Anonymisation · Jamaica DPA 2020 Standard 5 - Retention + Section 23 + Time Limit + No Longer Than Necessary + Erasure + Deletion + Anonymisation + Retention Schedule + Legal Hold + Backup Considerations + Storage Limitation →
OAIC Privacy Management Framework1 control

Develop and maintain processes that make the handling of personal information consistent with the entity's obligations. The processes cover the whole information lifecycle (before collection, after collection, while held and once no longer needed), give extra...

oaic-privacy-management-framework::2.2 · 2.2 Maintain personal information handling processes across the lifecycle →
UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities1 control

Physical and environmental controls for SNI are layered and based on a clearly scoped risk assessment in line with national protective security authority guidance, fed by asset identification and classification and done early in new projects.

uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.4-RA · Physical security risk assessment for information →

Questions people ask about information lifecycle

What is Information Lifecycle?
The stages through which information passes from creation and collection through use, storage, archival, and eventual destruction.
Why is Information Lifecycle important for compliance?
Information Lifecycle is a key concept in Information Security. Understanding information lifecycle helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Information Lifecycle?
Information Lifecycle appears in the requirement text of Jamaica Data Protection Act 2020, OAIC Privacy Management Framework, UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities. Across these standards we have identified 3 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Information Lifecycle?
Explore our compliance framework pages to see how information lifecycle applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Information Lifecycle applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.