nerdexam
(ISC)2

CCSP · Question #605

Three central concepts define what type of data and information an organization is responsible for pertaining to eDiscovery. Which of the following are the three components that comprise required disc

The correct answer is D. Possession, custody, control. In the context of eDiscovery, the Federal Rules of Civil Procedure (FRCP) define the scope of what an organization must disclose based on three criteria: Possession, Custody, and Control (PCC). 'Possession' means physically holding the data. 'Custody' means having legal responsib

Submitted by kim_seoul· Apr 18, 2026Legal, Risk and Compliance

Question

Three central concepts define what type of data and information an organization is responsible for pertaining to eDiscovery. Which of the following are the three components that comprise required disclosure?

Options

  • APossession, ownership, control
  • BOwnership, use, creation
  • CControl, custody, use
  • DPossession, custody, control

How the community answered

(30 responses)
  • B
    7% (2)
  • C
    3% (1)
  • D
    90% (27)

Explanation

In the context of eDiscovery, the Federal Rules of Civil Procedure (FRCP) define the scope of what an organization must disclose based on three criteria: Possession, Custody, and Control (PCC). 'Possession' means physically holding the data. 'Custody' means having legal responsibility for it. 'Control' means having the legal right or practical ability to obtain it. If an organization meets any one of these three conditions with respect to electronically stored information (ESI), it may be required to produce that data in legal proceedings.

Topics

#eDiscovery#Legal hold#Data responsibility#Required disclosure

Community Discussion

No community discussion yet for this question.

Full CCSP Practice