What is the purpose of data retention schedules in incident data management?

• A. To specify how long incident data is kept and when it is deleted in alignment with regulations.
• B. To store all data forever without retention policy.
• C. To define retention schedules that specify how long data is kept and when it is deleted in alignment with regulations.
• D. To publish all incident data publicly without restrictions.

Answer: (C)

Data retention schedules provide the defined framework for how long incident data should be kept and when it should be deleted, ensuring the data lifecycle complies with legal and regulatory requirements as well as internal policies. By specifying retention periods and deletion timing, organizations protect privacy, control storage costs, and maintain a clear audit trail for investigations and compliance reviews. This is why the best answer describes retention schedules as the defined framework that specifies both duration and deletion timing in alignment with regulations. Storing everything forever ignores legal obligations and privacy, while publicly publishing data without restrictions would breach confidentiality and security controls.