Requirement
"Information stored in information systems, devices or in any other storage media shall be deleted when no longer required."[1]
Explanation
To further protect the organization's information information that is no longer useful to the organization shall be deleted. The organization should establish criteria for the deletion of information for example information that is more than 10 years old shall be reviewed and then deleted if no longer required.
