I85PREP
⌘ K
NVRA CM Certified Master study materials
NVRA CM Certified Master study resources

NVRA CM Certified Master practice questions

One question at a time. Build your NVRA CM Certified Master understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Records Management Program Governance and Compliance

A CM candidate asks which document establishes the authority, scope, and accountability structure for an organization's records management program. Which document is that?

  1. The file plan
  2. The retention schedule
  3. The records management policy Correct answer.
  4. The disposition log

Explanation

The records management policy is the governing instrument that assigns authority, defines program scope, and states accountability for records across the organization. Schedules, file plans, and disposition logs are operational instruments that implement the policy rather than establish its authority.

Question 2Records Management Program Governance and Compliance

An organization's records management policy must be formally approved before it takes effect. Which approval approach best supports defensible governance?

  1. Approval by informal consensus of the records team
  2. Approval at the executive level with documented sign-off Correct answer.
  3. Approval by the records manager who drafted it
  4. Approval by the vendor supplying the records system

Explanation

Policy authority flows from senior leadership, so executive-level approval with documented sign-off gives the policy enforceable standing across business units. Drafters, working teams, and vendors can contribute but cannot confer organizational authority on the policy.

Question 3Records Management Program Governance and Compliance

A records manager is mapping roles for a new program. Which responsibility belongs specifically to records owners rather than to IT or to the records management unit?

  1. Administering user access permissions in the system
  2. Delivering the annual training curriculum
  3. Approving retention decisions for their record series Correct answer.
  4. Maintaining backup infrastructure for the repository

Explanation

Records owners are the business managers accountable for the content, quality, and retention decisions of the record series they own. Infrastructure, access administration, and training delivery are typically operational duties of IT or the records management function.

Question 4Records Management Program Governance and Compliance

Which statement best describes how a records management policy should relate to the organization's information security policy?

  1. The security policy should override the records policy in every retention decision
  2. The two policies should be aligned and cross-referenced, each governing its own scope Correct answer.
  3. The two policies must be kept entirely separate to avoid conflicts
  4. The records policy should replace the security policy for all record types

Explanation

Records management and information security govern overlapping but distinct concerns, so effective governance aligns them and cross-references obligations while each retains its own scope. Replacement, blanket override, or total separation all create gaps or contradictions that weaken compliance.

Question 5Records Management Program Governance and Compliance

During an audit, an assessor asks for evidence that staff understood the records management policy. Which artifact provides the strongest direct evidence?

  1. The policy document stored on the intranet
  2. The minutes of the committee that approved the policy
  3. A completed attestation log with dated staff acknowledgements Correct answer.
  4. The vendor contract for the records repository

Explanation

A dated attestation log showing individual acknowledgements demonstrates that staff received and confirmed the policy, which is direct evidence of awareness. The policy text, approval minutes, and vendor contract show the policy exists but not that staff understood it.

Question 6Records Management Program Governance and Compliance

A regulator requests the organization's retention schedule. Which characteristic most directly supports its defensibility?

  1. It is reviewed and updated on a documented, periodic cycle Correct answer.
  2. It is stored in the same system as the records themselves
  3. It uses the same naming conventions as the file plan
  4. It lists every record series in a single spreadsheet

Explanation

A schedule is defensible when it reflects current legal, regulatory, and business requirements, which requires documented periodic review and update. Format, storage location, and naming consistency are conveniences that do not by themselves demonstrate that retention periods remain valid.

Question 7Records Management Program Governance and Compliance

An organization operates in multiple jurisdictions with conflicting retention requirements for the same record series. What is the most defensible governance approach?

  1. Apply the shortest applicable period everywhere to reduce storage costs
  2. Apply the longest applicable period or segregate records by jurisdiction Correct answer.
  3. Let each office choose whichever period it prefers
  4. Suspend the schedule until the conflict is resolved

Explanation

Where legal retention obligations conflict, the organization must satisfy every applicable requirement, which means adopting the longest period or segregating records so each jurisdiction's rule applies to its own data. Choosing the shortest period or allowing local preference risks unlawful destruction.

Question 8Records Management Program Governance and Compliance

Which element is essential in a records management policy to make non-compliance enforceable?

  1. Defined consequences and escalation paths for violations Correct answer.
  2. An appendix of historical policy versions
  3. A glossary of records terminology
  4. A list of the software tools in use

Explanation

Enforceability depends on the policy stating what happens when requirements are breached and how violations escalate to accountable management. Glossaries, tool inventories, and version histories support understanding and administration but do not create consequences.

Question 9Records Management Program Governance and Compliance

A records manager wants to confirm that a business unit is complying with disposition requirements. Which control provides the most reliable assurance?

  1. Annual self-certification without supporting records
  2. A count of the number of records created
  3. Verbal confirmation from the unit manager
  4. Periodic sampling of destroyed and transferred records against approvals Correct answer.

Explanation

Sampling actual destruction and transfer activity against documented approvals tests whether disposition followed the schedule and authorization rules. Self-certification without evidence, verbal confirmation, and creation counts do not verify that disposition was properly authorized.

Question 10Records Management Program Governance and Compliance

Which body is typically responsible for resolving disputes between business units over ownership of a shared record series?

  1. The external audit firm
  2. The records management governance committee Correct answer.
  3. The individual record creators
  4. The IT service desk

Explanation

A governance committee with cross-functional representation is the forum empowered to adjudicate ownership disputes and assign accountability for shared series. The service desk, external auditors, and individual creators lack the authority to settle organizational ownership questions.

Question 11Records Management Program Governance and Compliance

A new privacy regulation shortens the permitted retention for one record series. What should the records manager do first?

  1. Wait for the next scheduled review cycle
  2. Ask staff to stop creating records in that series
  3. Assess the change and initiate a documented schedule amendment Correct answer.
  4. Immediately destroy all existing records in that series

Explanation

A regulatory change should trigger a documented assessment and formal amendment of the affected schedule entries so that disposition authority stays current. Immediate destruction, delay to the next cycle, or halting record creation all bypass the change control process.

Question 12Records Management Program Governance and Compliance

Which metric best indicates whether a records management training program is effective rather than merely delivered?

  1. Number of slides in the training deck
  2. Number of training sessions scheduled
  3. Total hours of training budget spent
  4. Percentage of staff who passed a post-training assessment Correct answer.

Explanation

Assessment results measure whether staff actually acquired the required knowledge, which is the outcome training aims to produce. Session counts, slide counts, and budget figures measure activity and input rather than effectiveness.

Question 13Records Management Program Governance and Compliance

Who should serve as the primary point of accountability for the overall records management program in a large organization?

  1. A designated senior executive sponsor Correct answer.
  2. The largest business unit manager
  3. The external legal counsel
  4. The most senior records clerk

Explanation

Program accountability requires authority and visibility at the executive level, so a designated senior sponsor is the standard governance model. Operational staff, outside counsel, and a single business unit manager lack the enterprise-wide mandate the role requires.

Question 14Records Management Program Governance and Compliance

An organization discovers that a business unit has been destroying records without documented authorization. Which response best reflects sound governance?

  1. Take no action because the records are already gone
  2. Reassign the unit's records to another department without review
  3. Document the finding, halt unauthorized destruction, and remediate the control gap Correct answer.
  4. Destroy the remaining records to match the unit's practice

Explanation

Sound governance requires that the finding be recorded, that further unauthorized destruction be stopped, and that the underlying control weakness be remediated and monitored. Matching the improper practice, quietly reassigning records, or ignoring the issue compounds the compliance failure.

Question 15Records Management Program Governance and Compliance

Which document translates the records management policy into specific, auditable requirements that staff must follow day to day?

  1. The records management standard or procedure Correct answer.
  2. The strategic plan
  3. The disaster recovery plan
  4. The annual report

Explanation

Standards and procedures operationalize policy by stating concrete, testable requirements and steps that staff perform routinely. Strategic plans, annual reports, and disaster recovery plans serve different purposes and do not specify day-to-day records requirements.

Question 16Records Management Program Governance and Compliance

A records manager is designing a compliance monitoring plan. Which approach provides the broadest coverage across business units?

  1. Combining periodic audits with continuous automated controls monitoring Correct answer.
  2. Relying solely on complaints received from staff
  3. Conducting a single audit at program launch
  4. Reviewing only the units with the largest record volumes

Explanation

Layering periodic independent audits with continuous automated monitoring gives both breadth and timeliness across all units. Complaint-driven review, volume-based selection, and a one-time audit leave large areas unmonitored over time.

Question 17Records Management Program Governance and Compliance

Which statement correctly distinguishes records management governance from records management operations?

  1. Governance performs destruction; operations approve the policy
  2. Governance and operations are interchangeable terms
  3. Governance applies only to electronic records; operations apply only to paper
  4. Governance sets direction and accountability; operations execute disposition and storage tasks Correct answer.

Explanation

Governance establishes direction, authority, and accountability through policy and oversight, while operations carry out the routine activities such as storage, retrieval, and disposition. The other options misassign activities or invent distinctions that do not exist.

Question 18Records Management Program Governance and Compliance

An executive asks why the records management program needs a documented risk assessment. Which rationale is most accurate?

  1. It satisfies a preference for lengthy documentation
  2. It replaces the need for a retention schedule
  3. It guarantees that no regulatory breach will occur
  4. It identifies and prioritizes compliance risks so controls and resources target the highest exposures Correct answer.

Explanation

A documented risk assessment identifies where the program is most exposed and lets leadership prioritize controls and funding accordingly. It does not substitute for the schedule and cannot guarantee that breaches will never occur.

Question 19Records Management Program Governance and Compliance

Which practice best ensures that records management requirements remain embedded when the organization adopts a new enterprise system?

  1. Adding records review after the system goes live
  2. Delegating all records decisions to the system vendor
  3. Excluding records staff from the project to avoid delay
  4. Including records requirements in system procurement and design criteria Correct answer.

Explanation

Building records requirements into procurement and design ensures that retention, classification, and disposition capabilities exist in the system from the start. Post-implementation review, vendor delegation, and excluding records staff typically produce costly retrofits and compliance gaps.

Question 20Records Management Program Governance and Compliance

A records manager must justify the program's budget to leadership. Which framing is most persuasive in governance terms?

  1. Comparing the program to peer organizations' staffing levels
  2. Emphasizing the number of boxes stored
  3. Linking program controls to reduced legal, regulatory, and operational risk Correct answer.
  4. Describing the program as a clerical support function

Explanation

Leadership funds programs that manage identifiable risk, so tying controls to reduced legal, regulatory, and operational exposure aligns the program with organizational priorities. Framing it as clerical, counting storage volume, or benchmarking staffing does not convey the risk value.

Question 21Records Management Program Governance and Compliance

An auditor finds that the retention schedule has not been reviewed in five years despite several regulatory changes. Which governance weakness does this most directly indicate?

  1. Poor file naming conventions
  2. Overstaffing in the records unit
  3. Excessive training frequency
  4. Inadequate change management for policy instruments Correct answer.

Explanation

A stale schedule in a shifting regulatory environment points to a missing or ineffective change management process for policy instruments. Training frequency, staffing levels, and naming conventions are unrelated to the failure to update the schedule.

Question 22Records Management Program Governance and Compliance

Which element should a records management policy include to address third-party service providers who handle organizational records?

  1. A note that vendor staff report to the records manager
  2. A list of vendor marketing contacts
  3. Contractual obligations for retention, security, and return or destruction of records Correct answer.
  4. A statement that vendors are exempt from records requirements

Explanation

When records are held by third parties, the policy must require contractual terms that preserve retention, protection, and lawful return or destruction. Exempting vendors, misstating reporting lines, or listing marketing contacts does not protect the organization's records obligations.

Question 23Records Management Program Governance and Compliance

A records manager is asked to define what makes the program auditable. Which combination is most essential?

  1. Verbal assurances, informal logs, and self-review
  2. Documented requirements, traceable evidence, and independent review Correct answer.
  3. A single large audit at the end of each decade
  4. Continuous destruction without approval records

Explanation

Auditability rests on documented requirements that can be tested, traceable evidence of performance, and independent review of that evidence. Verbal assurances, self-review, infrequent audits, and undocumented destruction all undermine the ability to verify compliance.

Question 24Records Management Program Governance and Compliance

Which statement about the relationship between a records management policy and a records retention schedule is correct?

  1. The policy mandates the schedule and the schedule implements retention rules Correct answer.
  2. The two documents are identical in purpose
  3. The schedule authorizes the policy
  4. The schedule replaces the policy for electronic records

Explanation

The policy establishes the requirement and authority for retention management, and the schedule implements that requirement by specifying periods for each series. The schedule cannot authorize the policy, the two have different purposes, and media type does not change the relationship.

Question 25Records Management Program Governance and Compliance

An organization wants to confirm that its records management program meets an accepted external framework. Which action is most appropriate?

  1. Ask the software vendor to certify compliance
  2. Adopt the framework's terminology without changing practices
  3. Assume existing practices already meet the framework
  4. Conduct a gap assessment against the framework's requirements Correct answer.

Explanation

A gap assessment compares current practice to each framework requirement and produces a prioritized remediation plan. Assuming conformance, adopting terminology only, or relying on a vendor's certification does not demonstrate that the program actually meets the framework.

Question 26Records Management Program Governance and Compliance

A records management program is establishing its governance structure. Which description best captures the function of a records management steering committee?

  1. It negotiates contracts with storage vendors and approves vendor invoices.
  2. It conducts individual performance reviews for records staff in each department.
  3. It performs the daily classification and filing of records on behalf of each business unit.
  4. It provides cross-functional oversight and decision-making authority for program direction, priorities, and escalations. Correct answer.

Explanation

A steering committee is a governance body, meaning it sets direction, resolves cross-functional issues, and holds the program accountable rather than executing operational tasks. It typically includes representatives from legal, IT, compliance, and business units so decisions reflect enterprise interests. Operational work such as filing, vendor invoicing, and staff reviews belongs to the program team or line management.

Question 27Records Management Program Governance and Compliance

An organization wants its records management policy to carry real authority. Which approval and issuance approach most strengthens the policy's governance standing?

  1. Having it formally approved and signed by executive leadership and communicated enterprise-wide Correct answer.
  2. Allowing each department to adopt its own version independently
  3. Circulating it as guidance from the records manager's team only
  4. Posting it on the intranet without a designated owner

Explanation

Policy authority derives from formal executive endorsement, which signals that requirements are mandatory and backed by leadership accountability. Enterprise-wide communication ensures staff know the policy applies to them. Issuance without executive approval or with fragmented departmental versions weakens enforceability and consistency.

Question 28Records Management Program Governance and Compliance

Which statement best describes the role of a records management program charter?

  1. It records the daily disposition transactions completed by staff.
  2. It specifies the technical backup schedule for the email system.
  3. It lists the retention periods assigned to each record series.
  4. It defines the program's mandate, scope, authority, and reporting lines. Correct answer.

Explanation

A charter is the foundational governance document that establishes why the program exists, what it covers, who has authority, and to whom it reports. Retention periods belong in the retention schedule, and transaction logs or backup schedules are operational artifacts. The charter thus anchors accountability before operational tools are built.

Question 29Records Management Program Governance and Compliance

A records manager is drafting the scope section of the records management policy. Which approach produces the most defensible scope statement?

  1. Defining scope by record type, medium, business function, and all jurisdictions of operation Correct answer.
  2. Leaving scope undefined so the program can expand without amendment
  3. Limiting scope to paper records held in the central file room
  4. Describing scope only in terms of the departments that requested the policy

Explanation

A defensible scope covers all formats and media, all business functions, and every jurisdiction in which the organization operates, so no records fall outside governance by accident. Narrow or requester-driven scope leaves electronic and decentralized records unmanaged. Undefined scope creates ambiguity that undermines enforcement and audit.

Question 30Records Management Program Governance and Compliance

An organization is mapping accountability using a RACI approach for its records management program. Which assignment is most appropriate for the records manager regarding the enterprise retention schedule?

  1. Informed, because the records manager has no role in schedule content
  2. Responsible, because the records manager maintains and updates the schedule Correct answer.
  3. Consulted, because only legal counsel may influence the schedule
  4. Accountable to no one, because the schedule is a technical artifact

Explanation

In a RACI model the records manager is typically responsible for maintaining the retention schedule, doing the work of drafting and updating it. Accountability usually sits with an executive sponsor or governance body that approves the schedule. Being merely consulted or informed would strip the role of its core duty.

Question 31Records Management Program Governance and Compliance

A records manager wants to verify that the program's governance documents reflect current legal obligations. Which practice provides the strongest ongoing assurance?

  1. Scheduling periodic legal and regulatory review with documented sign-off and version control Correct answer.
  2. Archiving superseded policy versions without review triggers
  3. Relying on staff to report when they notice a legal change
  4. Reviewing governance documents once at program launch

Explanation

Ongoing assurance requires a scheduled review cycle tied to legal and regulatory monitoring, with documented approval and version control so changes are traceable. One-time reviews and informal staff reporting leave gaps as regulations evolve. Archiving old versions without review triggers provides no mechanism for detecting needed updates.

Question 32Records Management Program Governance and Compliance

A business unit proposes creating a new record series. Which governance step should occur before the series is added to the retention schedule?

  1. Delegation of the decision to the requesting employee alone
  2. Immediate destruction of similar legacy records to free storage
  3. Formal review and approval by the retention schedule owner with legal input on requirements Correct answer.
  4. Adoption of the shortest possible retention to reduce cost

Explanation

Adding a series to the schedule is a governance decision requiring review by the schedule owner and legal input on statutory, regulatory, and business requirements. This ensures the assigned retention is defensible. Employee-level decisions or cost-driven shortening risk premature destruction and legal exposure.

Question 33Records Management Program Governance and Compliance

A regulator asks how the organization ensures that its records management requirements apply to a newly acquired subsidiary. Which governance mechanism most directly addresses this?

  1. A policy clause extending program requirements to acquired entities with a defined integration timeline Correct answer.
  2. An informal agreement among managers to follow group practice
  3. A plan to revisit the question at the next annual audit
  4. A note in the subsidiary's local handbook referencing the parent's intranet

Explanation

Merger and acquisition integration must be addressed explicitly in policy, with requirements extended to acquired entities and a timeline for alignment. This gives the organization a documented, auditable basis for bringing the subsidiary into compliance. Informal references or deferred action leave a governance gap that regulators will flag.

Question 34Records Management Program Governance and Compliance

A records manager must demonstrate that the program has clear authority to enforce disposition holds across business units. Which evidence most directly supports this?

  1. A vendor brochure describing hold management features
  2. An executive-approved policy clause granting the program authority to suspend disposition and require compliance Correct answer.
  3. A list of business units that volunteered to participate
  4. A slide deck describing the benefits of records management

Explanation

Enforcement authority must be traceable to an approved governance document that grants the program the power to suspend disposition and compel compliance. This is what makes holds binding across business units. Awareness materials, voluntary participation, and vendor literature do not confer authority.

Question 35Records Management Program Governance and Compliance

An organization wants to assess whether its records management governance is mature rather than merely present. Which evaluation approach is most informative?

  1. Surveying staff once about their general awareness
  2. Counting the number of policies that exist in the repository
  3. Confirming that a steering committee met at least once
  4. Comparing current governance practices against a defined maturity model with scored dimensions and gap analysis Correct answer.

Explanation

Maturity assessment requires structured comparison against defined dimensions such as policy, accountability, monitoring, and training, producing scores and identified gaps. Counting documents or confirming a single meeting measures existence, not maturity. A one-time awareness survey offers limited insight into governance capability.

Question 36Records Management Program Governance and Compliance

A records manager is preparing a governance report for the audit committee. Which content best demonstrates program accountability?

  1. A dashboard of compliance metrics, open remediation items, and disposition exceptions with trend data Correct answer.
  2. A narrative of activities performed by the records team during the quarter
  3. A summary of the records manager's professional certifications
  4. A list of records storage vendors currently under contract

Explanation

Accountability reporting to an oversight body requires measurable evidence of compliance, unresolved issues, and exceptions, ideally with trends showing whether controls are improving. Activity narratives and vendor or credential lists do not demonstrate control effectiveness. Metrics tied to remediation and exceptions give the committee a basis for governance decisions.

Question 37Records Retention, Disposition, and Legal Hold

Under a standard records retention schedule, which document type is typically assigned the shortest minimum retention period?

  1. Real estate deeds and title records
  2. Annual audited financial statements
  3. Employee pension plan documents
  4. General correspondence with no contractual or legal significance Correct answer.

Explanation

Routine administrative correspondence that lacks contractual, fiscal, or legal significance is normally placed in a transitory category with a very short retention period, often measured in months. Records with enduring legal, financial, or benefit value such as deeds, audited statements, and pension documents carry long or permanent schedules.

Question 38Records Retention, Disposition, and Legal Hold

What is the primary purpose of a legally defensible disposition process?

  1. To maximize the volume of records retained for potential litigation
  2. To demonstrate that records were destroyed in the ordinary course of business under a consistent policy Correct answer.
  3. To ensure every record is reviewed individually by legal counsel
  4. To transfer disposition decisions to the IT department

Explanation

A defensible disposition process shows that destruction occurred systematically, in good faith, and according to a published schedule applied uniformly. This ordinary-course evidence is what protects an organization when spoliation is alleged.

Question 39Records Retention, Disposition, and Legal Hold

A litigation hold notice is issued. What is the immediate effect on the retention schedule for the affected records?

  1. The schedule is amended permanently for that record series
  2. The records must be transferred to the opposing party
  3. Scheduled destruction is suspended until the hold is released Correct answer.
  4. Retention periods are automatically doubled

Explanation

A legal hold overrides the normal retention schedule and suspends destruction of any potentially relevant records. The schedule itself is unchanged; destruction resumes only after the hold is formally released.

Question 40Records Retention, Disposition, and Legal Hold

Which party typically holds ultimate authority to approve the destruction of records subject to an active legal hold?

  1. The legal department or counsel managing the hold Correct answer.
  2. The external audit firm
  3. The records manager alone
  4. The end user who created the records

Explanation

Because a hold exists to preserve evidence for litigation or investigation, only the legal team that owns the hold can authorize release and subsequent destruction. Records management executes disposition but cannot override counsel's preservation decision.

Question 41Records Retention, Disposition, and Legal Hold

In retention scheduling, what does the term 'event-based retention' mean?

  1. Records are kept until a user requests deletion
  2. Records are retained for a fixed number of years from creation only
  3. The retention clock starts when a specified trigger event occurs Correct answer.
  4. Retention is determined by the physical storage medium

Explanation

Event-based retention ties the start of the retention period to a defined trigger such as contract termination, employee separation, or case closure. The period then runs from that event rather than from the record's creation date.

Question 42Records Retention, Disposition, and Legal Hold

A record series has a retention of '3 years after fiscal year end.' A record was created in March 2023. When does the retention period begin?

  1. At the close of the fiscal year in which the record was created Correct answer.
  2. When the record is transferred to offsite storage
  3. On the exact creation date in March 2023
  4. When the record is last accessed

Explanation

'After fiscal year end' means the retention clock begins at the close of the relevant fiscal year, not at creation. The record is then held for the full three years following that fiscal year close.

Question 43Records Retention, Disposition, and Legal Hold

What is the function of a certificate of destruction?

  1. To extend a retention period
  2. To authorize a legal hold
  3. To document that specified records were destroyed, when, how, and by whom Correct answer.
  4. To transfer record ownership to a vendor permanently

Explanation

A certificate of destruction provides an auditable record of the destruction event, including the record series, date, method, and responsible party. It supports defensibility if destruction is later challenged.

Question 44Records Retention, Disposition, and Legal Hold

Which action best describes 'defensible deletion' of electronic records?

  1. Deleting files whenever storage is full
  2. Purging all records older than one year regardless of schedule
  3. Allowing employees to delete their own email at will
  4. Removing records through a documented, policy-driven process that suspends automatically under hold Correct answer.

Explanation

Defensible deletion is systematic, documented, and governed by the retention schedule, with holds overriding deletion. Ad hoc or arbitrary deletion undermines defensibility.

Question 45Records Retention, Disposition, and Legal Hold

An organization receives a subpoena for records that its schedule would otherwise allow it to destroy next month. What should happen first?

  1. Destroy the records only after the subpoena deadline passes
  2. Issue a preservation notice covering the requested records and suspend their destruction Correct answer.
  3. Destroy the records now to avoid production burden
  4. Transfer the records to the requesting party without review

Explanation

Receipt of a subpoena creates a duty to preserve potentially relevant evidence, so a hold must be issued and scheduled destruction suspended. Destroying records after notice can constitute spoliation.

Question 46Records Retention, Disposition, and Legal Hold

A legal hold is released. What is the correct next step before resuming destruction of the affected records?

  1. Reissue the hold for another year automatically
  2. Confirm the release in writing, document the release, and reapply the retention schedule Correct answer.
  3. Immediately destroy all affected records the same day
  4. Keep the records indefinitely as a precaution

Explanation

Release should be documented in writing so the organization can show the hold ended and destruction resumed under the schedule. Destruction then follows normal disposition controls, not an immediate mass purge.

Question 47Records Retention, Disposition, and Legal Hold

Which scenario most clearly indicates that a legal hold was applied too narrowly?

  1. The hold was issued within 24 hours of notice
  2. The hold was tracked in a central register with periodic reminders
  3. The hold covered email, shared drives, and paper files
  4. Only the custodian named in the complaint was placed on hold while other likely custodians were omitted Correct answer.

Explanation

A hold must reach all sources and custodians reasonably likely to possess relevant information. Limiting it to a single named custodian while ignoring other likely custodians is a classic scope defect.

Question 48Records Retention, Disposition, and Legal Hold

A retention schedule assigns 'permanent' retention to board minutes. What does this require operationally?

  1. Retention until the board members leave the organization
  2. Retention only in paper form
  3. Preservation indefinitely with periodic migration to maintain readability Correct answer.
  4. Retention for 25 years then destruction

Explanation

Permanent retention means the records are never destroyed and must be actively preserved, including format migration so they remain readable over time. It is a preservation obligation, not a fixed term.

Question 49Records Retention, Disposition, and Legal Hold

What is the key difference between a retention schedule and a legal hold matrix?

  1. The schedule is advisory; the matrix is legally binding
  2. The schedule applies only to paper; the matrix applies only to email
  3. The schedule sets normal retention periods; the hold matrix tracks matters and affected custodians Correct answer.
  4. The schedule is maintained by IT; the matrix is maintained by end users

Explanation

A retention schedule governs how long record series are kept in the ordinary course, while a hold matrix identifies active matters and the custodians or systems subject to preservation. They serve different but complementary functions.

Question 50Records Retention, Disposition, and Legal Hold

During a system migration, records under legal hold are at risk of loss. Which control best addresses this?

  1. Rely on users to copy files manually
  2. Delete held records to simplify the migration
  3. Delay all migration until every matter closes
  4. Verify hold coverage is carried into the new system and validate preservation before decommissioning the old one Correct answer.

Explanation

Holds must survive technology changes, so the migration plan must map held records to the new environment and confirm preservation before source systems are retired. Manual copying and indefinite delay are unreliable.