In an information governance framework, which component defines retention, archival, and deletion timelines to ensure data integrity and regulatory compliance?

In an information governance framework, which component defines retention, archival, and deletion timelines to ensure data integrity and regulatory compliance?

• A. Data encryption and access controls
• B. Data archival
• C. It defines retention, archival, and deletion timelines to ensure data integrity and compliance
• D. It ignores regulatory requirements

Answer: (C)

The concept being tested is how information governance handles the data lifecycle through defined policies. The component that defines retention, archival, and deletion timelines sets exactly how long data should be kept, when it should be moved to archival storage, and when it should be removed. This policy ensures data remains available for legitimate business or legal needs and is disposed of when no longer required, supporting data integrity and regulatory compliance. Other items focus on security (encryption and access controls) or file-specific actions (archival as a process) but do not establish the comprehensive lifecycle rules needed to meet compliance. Ignoring regulatory requirements would undermine governance entirely.

The concept being tested is how information governance handles the data lifecycle through defined policies. The component that defines retention, archival, and deletion timelines sets exactly how long data should be kept, when it should be moved to archival storage, and when it should be removed. This policy ensures data remains available for legitimate business or legal needs and is disposed of when no longer required, supporting data integrity and regulatory compliance. Other items focus on security (encryption and access controls) or file-specific actions (archival as a process) but do not establish the comprehensive lifecycle rules needed to meet compliance. Ignoring regulatory requirements would undermine governance entirely.