Certified Information Privacy Technologist (CIPT) — Question 138

Which of the following is considered a records management best practice?

Answer options

• A. Archiving expired data records and files.
• B. Storing decryption keys with their associated backup systems.
• C. Implementing consistent handling practices across all record types.
• D. Using classification to determine access rules and retention policy.

Correct answer: D

Explanation

The correct answer, D, is important because classification helps organizations to define who can access specific records and how long they should be retained, ensuring compliance and security. Options A and B are not best practices as they do not encompass the holistic approach required for effective records management, while C, though valuable, lacks the specificity of classification regarding access and retention.