CISM: Certified Information Security Manager

By Isaca · Question Mode

QuestionQ57

VerifiedInformation Security Program

An organization maintains several data repositories in different departments. The information security manager has been assigned to develop an enterprise strategy for data protection. Which information security initiative should receive the HIGHEST priority?

Explanation

A data-retention strategy defines enterprise-wide requirements for retaining and securely disposing of information. It establishes a governance baseline across repositories, limits the amount of sensitive data exposed over time, and supports legal, regulatory, and business obligations; technical controls such as DLP, encryption, and masking can then be applied consistently to data that must be retained.

Community Discussion

No comments yet. Be the first to start the discussion!