CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ386

Governance

Information no longer needed to support business objectives should be:

  • A securely deleted according to the disposal policy.
  • B transferred and archived to an enterprise data vault.
  • C managed according to the retention policy.
  • D recoverable according to the business impact analysis (BIA).
Explanation

Information that has no remaining business purpose should be securely disposed of in accordance with the organization’s approved disposal policy, reducing unnecessary storage and exposure risk.

Community Discussion

No comments yet. Be the first to start the discussion!