EDM Council CDMC - Cloud Data Management Capability Framework KC11: Key Control 11: Data Retention, Archiving and Purging

Data is retained, archived and purged under a defined retention schedule, reflecting the master schedule that sets retention per jurisdiction and classification. Automation opportunities: automate retention, archiving and purging according to the schedule, driven by the classification, purpose and jurisdiction of the data; gather and supply evidence of the plan for retention, archiving and purging and of how it was carried out. Certification test steps: confirm the catalog exists and scanning recurs; report lifecycle classifications and identify sensitive or critical assets with no lifecycle policy; create an asset and confirm a retention schedule is attached; change an asset or schedule and confirm the lifecycle flags or triggers archival, and likewise purge.