Data Lifecycle, Retention, and Data Security Controls

Introduction

This lesson completes Domain 2, Asset Security (10% of the exam, ISC2 exam outline effective 15 April 2024). The previous lesson taught you to identify, classify, and provision assets. Here you follow data through its whole life: where it is collected and stored, who is accountable under privacy law, how long it is kept, how it is protected in each state, and how it is finally destroyed so that it cannot come back.