Which of the following should be done FIRST when information is no longer required to support business objectives?
A . Assess the information against the retention policy.
B . Archive the information to a backup database.
C . Securely and permanently erase the information.
D . Protect the information according to the classification policy.
Answer: A