From an information security perspective, information that no longer supports the main purpose of the...

 Retention Policy Importance:

Information that no longer serves a business purpose should be managed according to the organization’s data retention policy. This ensures that obsolete data is appropriately archived or disposed of while maintaining compliance with legal and regulatory requirements.

 Key Considerations:

Legal Compliance: Retention policies often stipulate the minimum and maximum durations for retaining various data types.

Cost Efficiency: Managing outdated data can become a cost burden if retention policies are not enforced.

Risk Mitigation: Retention policies help prevent unnecessary data exposure or breaches.

 Why Other Options Are Incorrect:

A. Business Impact Analysis: This is for assessing the impact of disruptions, not managing outdated information.

B. Classification Policy: Only ensures data protection according to its sensitivity, not relevance.

C. Data Ownership Policy: Focuses on accountability for data, not its lifecycle.

 References:

EC-Council emphasizes the role of data retention policies in managing the lifecycle of information effectively within an information security framework.