CISSP · Question #552
A new Chief Information Officer (CIO) created a group to write a data retention policy based on applicable laws. Which of the following is the PRIMARY motivation for the policy?
The correct answer is B. To dispose of data in order to limit liability. The primary motivation for writing a data retention policy based on applicable laws is to dispose of data in order to limit liability. A data retention policy is a document that defines the rules and guidelines for retaining and disposing of the data that is created, received, or
Question
Options
- ATo back up data that is used on a daily basis
- BTo dispose of data in order to limit liability
- CTo reduce costs by reducing the amount of retained data
- DTo classify data according to what it contains
How the community answered
(37 responses)- A5% (2)
- B78% (29)
- C14% (5)
- D3% (1)
Explanation
The primary motivation for writing a data retention policy based on applicable laws is to dispose of data in order to limit liability. A data retention policy is a document that defines the rules and guidelines for retaining and disposing of the data that is created, received, or maintained by an organization. A data retention policy is based on various factors, such as the business needs, the legal requirements, the regulatory compliance, and the security risks of the data. The main purpose of a data retention policy is to dispose of the data that is no longer needed, used, or relevant for the organization, in order to limit the liability that may arise from keeping the data. For example, if the data is subject to litigation, discovery, or breach, the organization may face legal, financial, or reputational consequences. By disposing of the data according to the data retention policy, the organization can reduce the exposure and damage of the data, and avoid unnecessary costs and penalties.
Topics
Community Discussion
No community discussion yet for this question.