ISC2 Governance, Risk and Compliance (CGRC) Practice Question

The organization met its requirements for data creation, storage, and ongoing retention, but failed to act when the prescribed retention period expired. The information-lifecycle phase that ensures records are irretrievably eliminated once they are no longer needed-thereby preventing unauthorized disclosure and reducing liability-is the disposal or destruction phase. Neglecting disposal allowed the tapes to remain long past the seven-year limit. Data creation, usage, and retention phases had already occurred, so the root issue is not initial collection, day-to-day use, or prescribed storage but rather the absence of timely and secure destruction.