Which of the following should be the PRIMARY basis for procedures to dispose of data securely?
Which of the following should be the PRIMARY basis for procedures to dispose of data securely?
The primary basis for procedures to dispose of data securely should be the classification of data. Data classification determines the sensitivity and criticality of data, guiding decisions on the appropriate level of protection and the necessary disposal methods to ensure secure handling. While factors like the type of media used for storage, environmental regulations, and data retention policies are important considerations, the classification of data is fundamental in setting the standards for secure disposal procedures.
Answer should be C
i think D is right as procedures should be based on policy
procedures, could equal policy
D, this is because the data retention policy normally incorporates data classification and must be aligned with environmental regulations.
The question is about the "procedure" for safe disposal, not about any criteria for disposal per se. The procedure for safe disposal depends on the storage medium. Therefore, the answer only possible answer is 'A. Type of media used for data storage.'
While the type of media used for data storage (option A) is a factor to consider in the disposal process, it does not provide the full context needed to determine the appropriate disposal procedures. The classification of data guides decisions regarding the level of protection and disposal methods required, regardless of the type of media used.