CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ57

Information Security Program

An organization maintains several data repositories in different departments. The information security manager has been assigned to develop an enterprise strategy for data protection. Which information security initiative should receive the HIGHEST priority?

  • A Data loss prevention (DLP)
  • B Data retention strategy
  • C Data encryption standards
  • D Data masking
Explanation

A data-retention strategy defines enterprise-wide requirements for retaining and securely disposing of information. It establishes a governance baseline across repositories, limits the amount of sensitive data exposed over time, and supports legal, regulatory, and business obligations; technical controls such as DLP, encryption, and masking can then be applied consistently to data that must be retained.

Community Discussion

No comments yet. Be the first to start the discussion!