Certified Cloud Security Professional (CCSP) — Question 330

Three central concepts define what type of data and information an organization is responsible for pertaining to eDiscovery.
Which of the following are the three components that comprise required disclosure?

Answer options

• A. Possession, ownership, control
• B. Ownership, use, creation
• C. Control, custody, use
• D. Possession, custody, control

Correct answer: D

Explanation

The correct answer is D, as 'Possession, custody, control' are the three legal concepts that define an organization's responsibility for information in eDiscovery. Options A, B, and C include terms that do not accurately reflect the established legal framework for required disclosure.