Data retention and destruction policies should meet all of the following requirements EXCEPT?
A.
Data destruction triggers and methods should be documented.
B.
Personal information should be retained only for as long as necessary to perform its stated purpose.
C.
Documentation related to audit controls (third-party or internal) should be saved in a non-permanent format by default.
D.
The organization should be documenting and reviewing policies of its other functions to ensure alignment (e.g. HR, business development, finance, etc.).
C. Documentation related to audit controls (third-party or internal) should be saved in a non-permanent format by default.
Audit control documentation is critical for verifying and demonstrating compliance and should typically be retained in a permanent or durable format until it's no longer needed, based on the organization's retention schedule and any applicable legal or regulatory requirements. Saving it in a non-permanent format by default would potentially jeopardize the organization's ability to validate and demonstrate past compliance.
upvoted 3 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
carlosbui
12 months agoSsourav
1 year, 2 months ago