CISSP · Question #505
What is a common mistake in records retention?
The correct answer is D. Adopting a retention policy with the longest requirement period. A common mistake in records retention is adopting a retention policy with the longest requirement period, meaning that the records are kept for the maximum possible time, regardless of the legal or regulatory requirements, the business needs, or the risk assessment. Adopting a…
Question
Options
- AHaving the organization legal department create a retention policy
- BAdopting a retention policy based on applicable organization requirements
- CHaving the Human Resource (HR) department create a retention policy
- DAdopting a retention policy with the longest requirement period
How the community answered
(27 responses)- B7% (2)
- C4% (1)
- D89% (24)
Explanation
A common mistake in records retention is adopting a retention policy with the longest requirement period, meaning that the records are kept for the maximum possible time, regardless of the legal or regulatory requirements, the business needs, or the risk assessment. Adopting a retention policy with the longest requirement period can have negative consequences, such as increasing the storage costs and complexity, reducing the efficiency and performance of the records management system, exposing the records to unauthorized access or disclosure, or violating the privacy or security of the records. Having the organization legal department create a retention policy, adopting a retention policy based on applicable organization requirements, and having the Human Resource (HR) department create a retention policy are not common mistakes in records retention, as they are either good practices or acceptable options for records retention, depending on the context and the scope of the records.
Topics
Community Discussion
No community discussion yet for this question.