Certified in the Governance of Enterprise IT (CGEIT) — Question 102

A recent benchmarking analysis has indicated an IT organization is retaining more data and spending significantly more on data retention than its competitors.
Which of the following would BEST ensure the optimization of retention costs?

Answer options

• A. Requiring that all business cases contain data deletion and retention plans
• B. Revalidating the organization's risk tolerance and re-aligning the retention policy
• C. Redefining the retention policy to align with industry best practices
• D. Moving all high-risk and medium-risk data backups to cloud storage

Correct answer: B

Explanation

The correct answer is B because reassessing the organization's risk tolerance allows for a more tailored retention policy that aligns with the actual needs and risks faced by the organization. Options A and C are helpful but do not address the current risk levels effectively, while option D may not necessarily lead to cost optimization and could introduce new complexities.