Certified Information Systems Auditor (CISA) — Question 1311

An organization seeks to control costs related to storage media throughout the information life cycle while still meeting business and regulatory requirements.
Which of the following is the BEST way to achieve this objective?

Answer options

• A. Perform periodic tape backups.
• B. Utilize solid state memory.
• C. Stream backups to the cloud.
• D. Implement a data retention policy

Correct answer: D

Explanation

Implementing a data retention policy ensures that data is stored only as long as necessary, thus optimizing storage costs while complying with regulations. Periodic tape backups, solid state memory, and cloud streaming may not effectively address cost management over the entire information lifecycle.