CISSP: Certified Information Systems Security Professional

Discovery requires parties to preserve, identify, collect, and produce relevant evidence. Without a formal data-destruction policy, an organization may be unable to show that records were disposed of consistently and routinely rather than improperly destroyed, creating significant preservation, production, and potential spoliation issues.