Back to all 93 controls
Annex A 8.10
Technological
A.8.10 Information deletion
Delete information when no longer needed.
What good looks like
Retention rules enforced; secure deletion from systems and backups (where lawful).
Evidence an auditor will ask for
Retention policy, deletion logs, sample tickets.
Put this control into practice
Check whether your organisation already meets Annex A 8.10 with the free Gap Analysis tool, or get implementation-ready templates for every Annex A control with the Document Pack.