Exam CISA topic 1 question 931 discussion

While hardware capacity (Option C) is a consideration for data storage and management, it is typically not as critical as ensuring compliance with minimum regulatory requirements. Hardware capacity can be adjusted or expanded to accommodate data retention needs, but non-compliance with regulatory requirements can have far-reaching consequences for an organization's legal and regulatory standing. Therefore, adherence to regulatory requirements should be the MOST important consideration when establishing the retention period for customer data within a specific database or application.