Exam CISSP topic 1 question 448 discussion

not being able to be read affects availability. Answer is C.

Answer: C. Data recorded in obsolete media cannot be read. Archived data is INACTIVE DATA that is stored LONG-TERM OR INDEFINITELY for legal or compliance reasons; for example student transcripts or hospital records. Cloud storage doesn't present any higher risk for archived data than it does for backup data. Offline data does have a higher time to access, but this is ARHIEVED (inactive data) so it’s not like backup data that would be used in a recovery and so time to access is really irrelevant for archived data. There's a cost associated whether it's cloud or offsite storage and that is a given 'cost of doing business' not necessarily a risk. If you have data on 40 year old media; a 40 yr old corporate level system is not something typically available on eBay. If you didn't copy the archived data to a newer media that would run on a current system, your data is gone.

Answer B) Data maintained offline requires a higher time to access. I believe that this question should be answered with more generalization when it comes to Availability. - Cost has nothing to do with Availability..so D can be eliminated. - Data recorded in obsolete media cannot be read....(not sure about you, but I can easily find old equipment on eBay)...so this may/may not be a problem. But answer B is a general statement and answer A may be able to fold into it as it may take time to make requests to 3rd party company to access archive data (even if it is a new system like AWS/Azure archives).

C. Data recorded in obsolete media cannot be read. This risk factor highlights the issue of data stored on outdated or obsolete storage media, such as obsolete physical formats (e.g., floppy disks, magnetic tapes) or digital formats that have become incompatible with modern systems. Over time, as technology evolves, older storage media and file formats may become unreadable or incompatible with current hardware and software. When data is stored on such media, there is a significant risk that it may become inaccessible in the future due to the unavailability of compatible readers or equipment.

Option C is the main risk for availability. For A we need consider confidentiality.

C) Data recorded in obsolete media cannot be read is the main risk factor for the availability of archived information in regards to data retention policies. If archives are stored on legacy media formats that become obsolete, there is a major risk the data will no longer be readable or accessible when needed for compliance or legal purposes. For example, if data is archived to floppy disks or tape formats that modern systems can no longer interface with, the information is effectively lost. The other factors are manageable risks: A) Third-party archiving can be done securely with diligence. B) Offline data retrieval delays can be planned for. D) Data retention costs can be budgeted.

Where does the question say what kind of media it's stored on or that it's on a 3rd party vendors site? You could have archived it yesterday.

The main risk factor for the availability of archived information is option C, data recorded in obsolete media cannot be read. This is because as technology changes, old storage formats may become obsolete, and the hardware or software needed to read the data may no longer be available. This can make it difficult or impossible to access the archived information, which can be a serious issue if the information is needed for legal or business reasons. Options A, B, and D are also important considerations for appropriate data retention policies, but they are not the main risk factors for the availability of archived information. Storing data in third-party environments can introduce security and privacy risks, but this does not necessarily affect the availability of the archived information. Maintaining data offline may require a higher time to access, but it does not necessarily affect the ability to access the information if the storage format is still readable. Retention of data involves a cost, but this is a separate issue from the availability of the archived information.

I'd go with A here

I am torn between A and C here. Main risk factor is storing in third party environments but the question ask main risk factor for the AVAILABILITY, so it could be either A or C here; Do companies store archive data in obsolete media more often or in cloud media. I would say cloud media and I vote for A. There are always tools out there that can read obsolete media.