The organisation retains audit records for a defined period consistent with its records retention policy to support after-the-fact investigations and regulatory and organisational retention requirements. The GC discussion covers access to information, Privacy Act requests, subpoenas and law enforcement; audit records used for an administrative decision about a person are kept at least two years after last use unless the person consents to disposal, unneeded personal information is removed or redacted before retention, and retention follows the standard internal audit personal information bank and Library and Archives Canada policy. 1 enhancement.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.