2.5 Ensure Appropriate Asset Retention

Question 1

What data often has the most stringent and long-lived retention policies?

Answer 1

Health care records.

Question 2

What is the issue with an extensive retention policy, say 150 years?

Answer 2

Deciding what media to keep the data on, how to format the media so it’s readble in 150 years, etc.

Question 3

What two questions do Data Archiving Policies answer?

Answer 3

How long do we need to keep the data for? | Technically speaking, how do we achieve that?

Question 4

What are some considerations when deciding how to archive data?

Answer 4

Media Type | Security Requirements (Encryption, etc) | Availability Requirements (Ease of Access) | Retention period (Time till deletion) | Associated Costs

Question 5

What elements make up a Data Archiving Policy?

Answer 5

Based on laws, regulations, industry standards, and business needs | Classify Records Accordingly | Educate employees and provide them the tools for proper archiving

Question 6

What are some specific questions to ask when considering to write a Data Archive Policy?

Answer 6

Who needs access to the data? | Do access requirements change over time? | How long does the data need to be kept? | What are the data disposal requirements?