Which of the following should be the PRIMARY area of focus when creating a data retention policy for the services that an organization provides?

The correct answer is A. Ensuring the policy is aligned with the business strategy. The primary focus when creating a data retention policy should be alignment with the business strategy. This ensures that data is retained for the right duration to support operational, legal, regulatory, and strategic objectives, while also balancing risk, cost, and value to…

Submitted by parkjh· Apr 18, 2026Information Security Governance

Question

Options

AEnsuring the policy is aligned with the business strategy
BAnalyzing storage capacity
CEnsuring the policy complies with customer requirements
DEstimating data storage costs

How the community answered

(14 responses)

A
93% (13)
B
7% (1)

Explanation

The primary focus when creating a data retention policy should be alignment with the business strategy. This ensures that data is retained for the right duration to support operational, legal, regulatory, and strategic objectives, while also balancing risk, cost, and value to the organization.

Topics

#Data Retention Policy#Business Alignment#Information Security Governance#Policy Development

Community Discussion

No community discussion yet for this question.

Full CISM Practice