In which of the following should the data record retention period be defined and established?

[Reference: https://www.isaca.org/resources/isaca-journal/past-issues/2010/an-introduction-to-digital-records-management, A data management plan is a document that describes how data will be collected, stored, processed, shared, and disposed of throughout the data lifecycle. A data management plan should include information such as the purpose and scope of data processing, the data sources and types, the data quality and integrity standards, the data security and privacy measures, the data retention and destruction periods, the data ownership and governance structure, etc. A data management plan should also align with the organization’s privacy policies and applicable privacy regulations and standards. Therefore, a data management plan is where the data record retention period should be defined and established. References: : CDPSE Review Manual (Digital Version), page 169]