Glossary: Policies, Standards and Risk Management

data classification and retention policy

A policy that answers two questions about every kind of data: how sensitive is it (its classification level), and how long must it be kept (the retention schedule). It also covers legal holds.