Exam CISA topic 1 question 541 discussion

Answer should be C

The retention policy will have the dispose procedure

While the type of media used for data storage (option A) is a factor to consider in the disposal process, it does not provide the full context needed to determine the appropriate disposal procedures. The classification of data guides decisions regarding the level of protection and disposal methods required, regardless of the type of media used.

The question is about the "procedure" for safe disposal, not about any criteria for disposal per se. The procedure for safe disposal depends on the storage medium. Therefore, the answer only possible answer is 'A. Type of media used for data storage.'

D, this is because the data retention policy normally incorporates data classification and must be aligned with environmental regulations.

procedures, could equal policy

i think D is right as procedures should be based on policy