Question 1 of 30
Consider an organization that has meticulously developed and documented a comprehensive data retention schedule for all its information assets, including customer records and employee data. During an audit against ISO 24143:2022, it is discovered that while the schedule exists and is approved, there is no established, documented, or demonstrably implemented procedure for the systematic review and secure deletion of data that has reached the end of its defined retention period. This oversight persists across multiple data categories. What is the most critical finding an Information Governance Lead Auditor would identify in this scenario, considering the principles of information lifecycle management and relevant data protection legislation such as GDPR?
Absence of a documented and operational data disposal process that aligns with the retention schedule and legal requirements.
The existence of a detailed data inventory that does not fully map to the retention schedule.
A well-defined data classification scheme that is not consistently applied to all data repositories.
The presence of a data breach incident response plan that has not been recently tested.

Preparing for ISO 24143:2022 - Information Governance Lead Auditor? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free