CompTIA Project+ (PK0-005)Basics of IT and GovernanceHard

A project is establishing a new data retention policy for customer information to comply with recent privacy regulations. The policy dictates how long different categories of data must be kept, when it should be archived, and ultimately when it must be securely disposed of. Which data governance concept is this project primarily addressing?

  1. AData lifecycle management (DLM)
  2. BData classification
  3. CData minimization
  4. DData encryption
Show answer & explanation

Correct answer: A. Data lifecycle management (DLM)

Data Lifecycle Management (DLM) is a comprehensive approach to managing data from its creation to its eventual destruction, including defining retention periods, archiving strategies, and secure disposal, directly aligning with the project's goal of establishing a data retention policy.

Why the other options are wrong

  • B. Data classification categorizes data based on its sensitivity or importance but doesn't dictate its retention or disposal schedule.
  • C. Data minimization focuses on collecting only necessary data, not on its management throughout its entire lifespan.
  • D. Data encryption protects data confidentiality but doesn't define its retention or disposal schedule.

Data Lifecycle Management (DLM)

A comprehensive approach to managing the flow of an information system's data from its creation and initial storage to the time it becomes obsolete and is deleted.

  • Covers data from creation to destruction.
  • Includes retention, archiving, and disposal policies.
  • Critical for regulatory compliance and efficient storage management.

Memory trick: DLM guides data through its entire life, from birth to digital death.

More Basics of IT and Governance questions