Governance Risk Compliance
データ保持
The set of policies and procedures governing how long organizational data must be kept, archived, or deleted in compliance with legal, regulatory, or business requirements.
Quick answer: The set of policies and procedures governing how long organizational data must be kept, archived, or deleted in compliance with legal, regulatory, or business requirements.
This term page is part of the Protermify Cybersecurity glossary and is published as static HTML for fast indexing and clear language coverage.
Definition
The set of policies and procedures governing how long organizational data must be kept, archived, or deleted in compliance with legal, regulatory, or business requirements.
Operational example
Our GRC policy requires that all customer records are subject to the organization's data retention schedule, aligned with applicable laws.
Localized example
当社のGRCポリシーでは、すべての顧客記録は、関連法規に準拠した組織のデータ保持スケジュールに従う必要があります。
Definition language
English reference definition
Source
ISO 27001, NIST Cybersecurity Framework, MITRE ATT&CK
Exam relevance
- CISSP
- CompTIA Security+
- CEH
Target audience
- SOC Analysts
- Security Engineers
- Incident Responders
