CAS-001 · Question #299
A company receives a subpoena for email that is four years old. Which of the following should the company consult to determine if it can provide the email in question?
The correct answer is A. Data retention policy. The first question when responding to a subpoena for old data is whether that data still exists - and the data retention policy governs exactly that. It defines how long different categories of data (including email) are kept before being purged or destroyed. If the policy…
Question
A company receives a subpoena for email that is four years old. Which of the following should the company consult to determine if it can provide the email in question?
Options
- AData retention policy
- BBusiness continuity plan
- CBackup and archive processes
- DElectronic inventory
How the community answered
(55 responses)- A95% (52)
- B4% (2)
- C2% (1)
Explanation
The first question when responding to a subpoena for old data is whether that data still exists - and the data retention policy governs exactly that. It defines how long different categories of data (including email) are kept before being purged or destroyed. If the policy specifies a retention period shorter than four years, the emails may no longer exist and cannot be produced. The data retention policy is therefore the authoritative starting point. Option B (BCP) addresses how the business continues during disruption, not data availability. Option C (backup and archive processes) describes HOW data is stored and retrieved - useful once you know the data should exist - but it does not determine whether the emails are still retained. Option D (electronic inventory) does not address retention periods or legal obligations.
Topics
Community Discussion
No community discussion yet for this question.