ISC2 Governance, Risk and Compliance (CGRC) Practice Question
Your organization's retention schedule requires financial transaction logs be destroyed seven years after the fiscal year ends. Before approving destruction of a batch that has reached seven years, what must you verify to remain compliant with best-practice retention policy?
That the cost of storing the logs now exceeds their projected business value
That the encryption keys protecting the logs were rotated within the last 12 months
That the logs are not subject to any current litigation, audit, or regulatory hold requiring their preservation
That the logs have been officially reclassified from confidential to public information
Sound data-retention policy requires that routine destruction be suspended whenever records are subject to a litigation, audit, or regulatory hold. Industry guidance such as NIST SP 800-88 Rev. 1 and records-management standards (e.g., ISO 15489) state that records must be preserved until any legal or investigative requirement is satisfied, even if the scheduled retention period has expired. Reclassification, storage-cost considerations, or recent key rotation do not override a formal hold and therefore do not satisfy the prerequisite for destruction.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is NIST SP 800-88 Rev. 1 and how does it relate to data destruction?
Open an interactive chat with Bash
What is ISO 15489 and how does it support record management policies?
Open an interactive chat with Bash
What are litigation and regulatory holds in the context of record retention?
Open an interactive chat with Bash
ISC2 Governance, Risk and Compliance (CGRC)
Security and Privacy Governance, Risk Management, and Compliance Program
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .