A business uses a hosted archiving service for logs. Local regulations require certain records to be stored for a specific duration, but the new contract does not specify how the provider will satisfy that timeframe. Which action helps meet the requirement?
Submit an updated contract with specific clauses to address record-retention requirements
Implement on-site archiving to meet the requirement without altering the vendor agreement
Secure the logs via encryption to address potential compliance gaps
Proceed based on verbal assurances from the vendor that the requirement will be met
An updated agreement clarifies the vendor’s responsibility to retain data for the mandatory span, satisfying legal obligations. Depending on verbal assurances or shifting archiving onsite might not guarantee the external provider’s compliance. Encrypting data preserves confidentiality but does not mandate storage for the required length of time.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the importance of record-retention requirements?
Open an interactive chat with Bash
Why is an updated contract better than verbal assurances for compliance?