The organization retains the accounting of disclosures for the life of the record or five years after the disclosure is made, whichever is longer.
No STIG checks reference this CCI.