ISO 27001 8.10 Information Deletion Requirement:
"Information stored in information systems, devices or in any other storage media shall be deleted when no longer required."[1]
ISO 27001 8.10 Information Deletion Requirement Explanation:
To further protect the organization's information information that is no longer useful to the organization shall be deleted. The organization should establish criteria for the deletion of information for example information that is more than 10 years old shall be reviewed and then deleted if no longer required.
References:
Quick & Simple
Discover Our Cybersecurity Compliance Solutions:
Whether you need to meet and maintain your compliance requirements, help your clients meet them, or verify supplier compliance we have the expertise and solution for you
NIST SP 800-171 & CMMC Compliance
Become compliant, provide compliance services, or verify partner compliance with NIST SP 800-171 and CMMC requirements.
HIPAA Compliance
Become compliant, provide compliance services, or verify partner compliance with HIPAA security rule requirements.
FAR 52.204-21 Compliance
Become compliant, provide compliance services, or verify partner compliance with FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems requirements.
ISO 27001 Compliance
Become compliant, provide compliance services, or verify partner compliance with ISO 27001 requirements.