Network Trace
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

10) Does your organisation have a Records Retention Policy?

August 30, 2022
Records Retention Policy

Answer yes if your organisation has a Records Retention Policy that has been reviewed in the last year. Please provide your Records Retention Policy (as a PDF file) as evidence.

A Records Retention Policy is a policy that defines how long data items must be kept and provides disposal guidelines for how data items should be discarded. This is important to ensure that data is only kept for as long as the business needs to keep it and to ensure it is disposed of correctly.

The Records Retention Policy may be included as a section in your Data Privacy Policy or Information Security Policy.

How to implement the control

Risk Ledger have included a Records Retention Policy within its template Information Security Policy. The template can be taken and adapted to suit your organisation.

The template policy for a small organisation can be requested at

If you would like to contribute to this article or provide feedback, please email Contributors will be recognised on our contributors page.

Pattern Trapezoid Mesh

Defend against supply chain attacks with Defend-As-One.

No organisation is an island.