In your policy, you should define what type of data needs to be retained and for how long. You need to specifically...
By submitting your personal information, you agree that TechTarget and its partners may contact you regarding relevant content, products and special offers.
illustrate how the data will be retained -- what kind of media, off-site storage, with what data protection – especially for sensitive data. Discussing specific technologies isn't necessary since technology changes often, but you need to be as distinct as possible. Specifying how and when data will be destroyed is also important.
Relative to questions for consultants, you want to focus on a few critical areas relative to retention:
For more information:
Dig Deeper on Data security strategies and governance
Related Q&A from Mike Rothman
The CISSP certification can be a challenge to obtain. Mike Rothman unveils how to get on the right education and career tracks in order to get CISSP ...continue reading
In the world of security certifications, what is the GISP and how alike is it to the CISSP? In this security management expert response, learn about ...continue reading
Depending on your enterprise, it may or may not be necessary to utilize a QSA. In this security management expert response, learn how to determine ...continue reading
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.