+CON.6.A8 Creating a Policy for Deleting and Destroying Information [Employee, IT Operation Department, Data Protection Officer] (S)

CON.6.A8 Creating a Policy for Deleting and Destroying Information [Employee, IT Operation Department, Data Protection Officer] (S)

An organisation SHOULD document its regulations regarding deletion and destruction in a policy. The policy SHOULD be known to all the relevant employees of the organisation and represent the basis for their actions and work. In terms of its content, the policy SHOULD include all employed storage media, applications, IT systems, and other resources and information that are subject to deletion and destruction. Employee compliance with the policy SHOULD be checked regularly and at random. The policy SHOULD be updated at regular intervals.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information