CAS-003 · Question #306
Legal counsel has notified the information security manager of a legal matter that will require the preservation of electronic records for 2000 sales force employees. Source records will be email…
The correct answer is B. Legal hold. A legal hold is a formal directive that suspends normal data retention schedules and disposal procedures to preserve electronic records for pending or anticipated litigation. In this scenario, records for 2,000 employees were placed under legal hold across multiple data…
Question
Legal counsel has notified the information security manager of a legal matter that will require the preservation of electronic records for 2000 sales force employees. Source records will be email, PC, network shares, and applications. After all restrictions have been lifted, which of the following should the information manager review?
Options
- AData retention policy
- BLegal hold
- CChain of custody
- DScope statement
How the community answered
(48 responses)- A4% (2)
- B92% (44)
- C2% (1)
- D2% (1)
Explanation
A legal hold is a formal directive that suspends normal data retention schedules and disposal procedures to preserve electronic records for pending or anticipated litigation. In this scenario, records for 2,000 employees were placed under legal hold across multiple data sources. Once all legal restrictions are lifted-meaning the matter is resolved-the information security manager must review and formally release the legal hold. This is necessary to resume normal data lifecycle management, including retention, archiving, and disposal. Failing to release the hold properly can create compliance and storage issues. The data retention policy (A) governs routine lifecycle management, not litigation holds. Chain of custody (C) tracks evidence handling. Scope statement (D) defines project boundaries-neither is the primary review after a hold is lifted.
Topics
Community Discussion
No community discussion yet for this question.