In addition, for the
information a firm does retain, a strong data retention policy can ensure that
information that is no longer
needed for any immediate work is archived
to a location where it is only accessible
to a few select users, making it more
difficult for a cybercriminal
to access it.