Which of the following is a recommended practice for maintaining audit trails during data retention and archiving?

• A. Maintain audit trails as part of retention strategy
• B. Delete all audit logs after 30 days
• C. Do not track auditing
• D. Audit trails are unnecessary

Answer: (A)

Maintaining audit trails as part of data retention and archiving ensures traceability and accountability across the data lifecycle. By preserving records of who accessed or changed data, what actions were taken, and when those actions occurred, you create a verifiable history that supports regulatory compliance, forensic investigations, and incident response. This approach also helps detect unauthorized activity and verify data integrity, which are critical when data is stored long-term or moved to archives. Implementing this well means making logs immutable or append-only, applying strong access controls, ensuring accurate timestamps, and storing them in a centralized, protected archive with retention periods that align with policies and laws. Deleting audit logs after a short window undermines accountability and makes it hard to reconstruct events; not tracking auditing or deeming audit trails unnecessary conflict with governance and compliance needs. So, the best practice is to keep audit trails as an integral part of the retention strategy.