CISA · Question #67
Which of the following is the MOST important consideration when evaluating the data retention policy for a global organization with regional offices in multiple countries?
The correct answer is B. The policy aligns with local laws and regulations. For a global organization, the most important consideration when evaluating a data retention policy is its alignment with local laws and regulations across all operating regions.
Question
Which of the following is the MOST important consideration when evaluating the data retention policy for a global organization with regional offices in multiple countries?
Options
- AThe policy aligns with business goals and objectives
- BThe policy aligns with local laws and regulations
- CThe policy aligns with corporate policies and practices
- DThe policy aligns with global best practices
How the community answered
(28 responses)- A18% (5)
- B43% (12)
- C7% (2)
- D32% (9)
Why each option
For a global organization, the most important consideration when evaluating a data retention policy is its alignment with local laws and regulations across all operating regions.
While alignment with business goals is important for operational efficiency, it is secondary to legal compliance, which represents mandatory requirements that must be met.
Non-compliance with local data retention laws and regulations, such as GDPR in Europe or specific industry mandates in other regions, can lead to severe legal penalties, fines, and significant reputational damage for a global organization. Therefore, ensuring alignment with these diverse and often strict legal requirements is paramount when establishing retention policies.
Concept tested: Data retention policy (legal compliance)
Source: https://gdpr-info.eu/art-5-gdpr/
Topics
Community Discussion
No community discussion yet for this question.