+CON.6.A8 Creating a Policy for Deleting and Destroying Information [Employee, IT Operation Department, Data Protection Officer] (S)

CON.6.A8 Creating a Policy for Deleting and Destroying Information [Employee, IT Operation Department, Data Protection Officer] (S)

An organisation SHOULD document its regulations regarding deletion and destruction in a policy. The policy SHOULD be known to all the relevant employees of the organisation and represent the basis for their actions and work. In terms of its content, the policy SHOULD include all employed storage media, applications, IT systems, and other resources and information that are subject to deletion and destruction. Employee compliance with the policy SHOULD be checked regularly and at random. The policy SHOULD be updated at regular intervals.

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information