Certified Information Systems Security Professional (CISSP) — Question 105

A corporation does not have a formal data destruction policy. During which phase of a criminal legal proceeding will this have the MOST impact?

Answer options

• A. Sentencing
• B. Trial
• C. Discovery
• D. Arraignment

Correct answer: C

Explanation

The correct answer is C, Discovery, because this phase involves the exchange of evidence between parties, and the absence of a data destruction policy could lead to relevant data being improperly handled or lost. The other phases, such as Trial, Sentencing, and Arraignment, focus on the presentation of evidence or legal proceedings rather than the collection and preservation of data.