Which of the following is MOST important to ensure when reviewing processes associated with the destruction of data?

Question

Options

• AThe destruction of data is performed on site.
• BThe destruction of data is witnessed.
• CThe destruction is performed by a certified provider.
• DThe destruction method is approved by the data owner.

• A
  2% (1)
• B
  10% (5)
• C
  4% (2)
• D
  85% (44)

Explanation

The data owner is accountable for the data throughout its lifecycle, including its destruction. Ensuring that the data owner has reviewed and approved the destruction method is the most important control because it confirms that the chosen method is appropriate for the sensitivity and classification of the data. On-site destruction, witnessed destruction, and use of a certified provider are all good practices, but they are secondary to the data owner's authorization. If the data owner has not approved the method, the destruction process may not meet the data's specific sensitivity requirements, regardless of where or how it is performed.

No community discussion yet for this question.