How should an organization approach the retention of data that is no longer needed for...

Data should be retained for a reasonable period of time in case of system rollback.

Data should be destroyed or retained on the basis of a cost-benefit analysis.

Data should be retained based on regulatory requirements.

Data should be destroyed to avoid any risk exposure.