Which policy category includes implementing permission, encryption, and data retention policies to prevent corruption or loss?

Which policy category includes implementing permission, encryption, and data retention policies to prevent corruption or loss?

• A. Access Control
• B. Encryption and Retention Policies
• C. Data Integrity Standards
• D. Data Cataloging

Answer: (B)

The question tests how policy categories cover protecting data from corruption or loss by combining access controls, encryption, and retention policies. The category that best fits is Encryption and Retention Policies because it explicitly brings together how data is protected through who can access it (permissions), how it is protected in storage and transit (encryption), and how long it is kept or disposed of (retention policies). This combination directly addresses preventing data loss or corruption by limiting access to authorized users, safeguarding data content with encryption, and ensuring data is retained or purged according to rules, reducing risk from improper handling or deletion. Other categories focus on narrower aspects: access control centers on permissions, not encryption or retention; data integrity standards emphasize accuracy and protection against tampering but not the broader retention and access controls; data cataloging deals with metadata organization rather than protective measures.

The question tests how policy categories cover protecting data from corruption or loss by combining access controls, encryption, and retention policies. The category that best fits is Encryption and Retention Policies because it explicitly brings together how data is protected through who can access it (permissions), how it is protected in storage and transit (encryption), and how long it is kept or disposed of (retention policies). This combination directly addresses preventing data loss or corruption by limiting access to authorized users, safeguarding data content with encryption, and ensuring data is retained or purged according to rules, reducing risk from improper handling or deletion. Other categories focus on narrower aspects: access control centers on permissions, not encryption or retention; data integrity standards emphasize accuracy and protection against tampering but not the broader retention and access controls; data cataloging deals with metadata organization rather than protective measures.