nerdexam
(ISC)2

CISSP · Question #1006

A corporation does not have a formal data destruction policy. During which phase of a criminal legal proceeding will this have the MOST impact?

The correct answer is D. Discovery. The absence of a formal data destruction policy most critically impacts the discovery phase, where parties must produce relevant evidence and demonstrate good-faith data management practices.

Submitted by eva_at· Mar 5, 2026Security and Risk Management

Question

A corporation does not have a formal data destruction policy. During which phase of a criminal legal proceeding will this have the MOST impact?

Options

  • AArraignment
  • BTrial
  • CSentencing
  • DDiscovery

How the community answered

(49 responses)
  • A
    6% (3)
  • B
    4% (2)
  • C
    14% (7)
  • D
    76% (37)

Why each option

The absence of a formal data destruction policy most critically impacts the discovery phase, where parties must produce relevant evidence and demonstrate good-faith data management practices.

AArraignment

Arraignment is the initial court appearance where charges are read and a plea is entered, which does not involve the examination of corporate data policies or evidence handling procedures.

BTrial

While evidence is presented at trial, the admissibility and completeness of evidence has already been determined during discovery, making the lack of a data destruction policy less directly impactful at this stage.

CSentencing

Sentencing occurs after a verdict has been reached and focuses on determining punishment, not on the corporation's data management practices or the completeness of evidence produced.

DDiscoveryCorrect

During discovery, both parties are legally required to preserve and produce relevant electronically stored information (ESI) and documents. Without a formal data destruction policy, a corporation cannot demonstrate that data was destroyed in good faith through routine business processes (safe harbor), meaning destroyed data could be considered spoliation of evidence, leading to severe sanctions such as adverse inference instructions or case dismissal.

Concept tested: Legal hold, data destruction policy, and discovery obligations

Source: https://www.justice.gov/archives/jm/civil-resource-manual-89-electronic-discovery

Topics

#data retention#data destruction#legal hold#e-discovery

Community Discussion

No community discussion yet for this question.

Full CISSP Practice