← CIS Controls v8 in plain English

3.4 IG1

Control 3 / Data Protection

Enforce Data Retention

Think of it likeKeeping important documents for a set number of years before safely discarding them.

In plain English

Data is kept only for the time it is actually needed, then disposed of once retention rules say it can go.

Related CSF subcategories (unofficial mapping)