What is the purpose of retention schedules within auditing?

• A. To define encryption standards
• B. To schedule employee training sessions
• C. To determine which records must be preserved and when they can be disposed
• D. To specify desktop software licenses

Answer: (C)

Retention schedules specify how long different kinds of records should be kept and when they can be disposed of. In an auditing context, their purpose is to ensure that the organization preserves all records that may be needed as evidence or to meet regulatory requirements, while disposing of them only after their required retention period has passed or when no legal hold applies. This provides a clear, controlled approach to information lifecycle management, so auditors can verify that records are available when needed, that relevant compliance requirements are met, and that unnecessary or outdated material isn’t being kept. Retention schedules also support efficient retrieval, reduce storage costs, and help prevent improper destruction that could undermine an audit or compliance. While encryption standards, training timelines, and software licenses involve other policy areas, retention schedules focus specifically on what to keep and when to dispose.