QuestionQ115

Data Life Cycle Management

Which of the following BEST ensures that an organization’s data-retention requirements are met in a public cloud environment?

  • A Service level agreements (SLAs)
  • B Cloud vendor agreements
  • C Data classification schemes
  • D Automated data deletion schedules
Explanation

Cloud vendor agreements can explicitly require the provider to meet specified data-retention, preservation, retrieval, and disposal obligations. NIST guidance for public-cloud use advises recording contractual requirements explicitly in the service agreement; an SLA is principally a statement of technical performance promises rather than the complete set of contractual data-governance obligations.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!