In addition,
for the information a firm does retain, a strong data retention policy can ensure that information that is no longer needed
for any
immediate work is
archived to a location where it is only accessible to a few select users, making it more difficult
for a cybercriminal to
access it.