Governance Risk Compliance
数据保留
The set of policies and procedures governing how long organizational data must be kept, archived, or deleted in compliance with legal, regulatory, or business requirements.
Quick answer: The set of policies and procedures governing how long organizational data must be kept, archived, or deleted in compliance with legal, regulatory, or business requirements.
This term page is part of the Protermify Cybersecurity glossary and is published as static HTML for fast indexing and clear language coverage.
Definition
The set of policies and procedures governing how long organizational data must be kept, archived, or deleted in compliance with legal, regulatory, or business requirements.
Operational example
Our GRC policy requires that all customer records are subject to the organization's data retention schedule, aligned with applicable laws.
Localized example
我们的GRC政策要求所有客户记录均按照相关法律，遵循组织的数据保留计划。
Definition language
English reference definition
Source
ISO 27001, NIST Cybersecurity Framework, MITRE ATT&CK
Exam relevance
- CISSP
- CompTIA Security+
- CEH
Target audience
- SOC Analysts
- Security Engineers
- Incident Responders
