nerdexam
Isaca

CISM · Question #789

Which of the following is the MOST important reason for an information security manager to archive and retain the organization's electronic communication and email data?

The correct answer is B. To provide as evidence in legal proceedings when required. Retaining communications ensures the organization can produce evidence for litigation or regulatory investigations, which is often a legal obligation. "Organizations must retain electronic communications to support legal discovery, compliance audits, and investigative needs."

Submitted by skyler.x· Apr 18, 2026Information Security Governance

Question

Which of the following is the MOST important reason for an information security manager to archive and retain the organization's electronic communication and email data?

Options

  • ATo track personal use of electronic communication by users
  • BTo provide as evidence in legal proceedings when required
  • CTo meet the requirements of global security standards
  • DTo identify and scan attachments for malware

How the community answered

(18 responses)
  • A
    6% (1)
  • B
    72% (13)
  • C
    17% (3)
  • D
    6% (1)

Explanation

Retaining communications ensures the organization can produce evidence for litigation or regulatory investigations, which is often a legal obligation. "Organizations must retain electronic communications to support legal discovery, compliance audits, and investigative needs."

Topics

#Data Retention#Legal Compliance#E-discovery#Information Governance

Community Discussion

No community discussion yet for this question.

Full CISM Practice