risk managementred flagno data retention or deletion policy
No Data Retention or Deletion Policy
Why it matters

Non-compliance with data-protection statutes can trigger multimillion-dollar fines, litigation, and loss of institutional partnerships.

Risk Triggers
  • Data Breach Event

  • Policy Review Failure

  • Regulatory Audit

  • User Deletion Request

Controls & Mitigations

Sign in to view the monitoring controls, controls mitigations, and mitigation guidance for this red flag.

Risk profile

Sign in to view the risk matrix, time sensitivity, categories, impacted components, and detection methods for this red flag.