What is the FIRST step required in establishing a records retention program?

The correct answer is D. Draft a records retention policy.. The first step required in establishing a records retention program is to draft a records retention policy. A records retention policy is a document that defines the objectives, scope, roles, and responsibilities of the records retention program. A records retention policy also s

Submitted by zhang_li· Mar 5, 2026Security and Risk Management

Question

What is the FIRST step required in establishing a records retention program?

Options

AIdentify and inventory all records.
BIdentify and inventory all records storage locations
CClassify records based on sensitivity.
DDraft a records retention policy.

How the community answered

(22 responses)

A
5% (1)
C
5% (1)
D
91% (20)

Explanation

The first step required in establishing a records retention program is to draft a records retention policy. A records retention policy is a document that defines the objectives, scope, roles, and responsibilities of the records retention program. A records retention policy also specifies the criteria and procedures for identifying, classifying, storing, preserving, retrieving, and disposing of records, as well as the legal, regulatory, and business requirements for records retention. A records retention policy provides the foundation and guidance for the records retention program, and helps to ensure the compliance, security, and availability of the records.

Topics

#records retention#data governance#data lifecycle#policy development

Community Discussion

No community discussion yet for this question.

Full CISSP Practice