From the course: CompTIA Advanced Security Practitioner (CASP+) (CAS-004) Cert Prep

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Data retention

Data retention

- When we talk about data retention, it's really just talking about a set of policies, procedures, and tools for managing the storage of persistent data. Essentially, think about how long I should keep a particular piece of data. Now, as an organization, we may have legal requirements that bind us to retain certain types of data for a specified period of time to meet our compliance and e-discovery requirements. For example, let's say you work for a publicly traded American company and it has a value of at least $75 million per year. Now you have data retention standards that are dictated by the US law known as Sarbanes Oxley. Your company simply can't go and shred all their paperwork prior to a prescribed retention period. Instead, they have to wait until the time runs out and then they can tread those documents. That's what we're talking about here when we talk about meeting compliance requirements. Now, when we talk about data retention, this is the process that an organization's…

Contents