How should training records be stored and retained?

How should training records be stored and retained?

• A. Insecure, unencrypted email attachments.
• B. In secure, retrievable systems with defined retention periods and compliance with policies.
• C. On post-it notes in a desk drawer.
• D. On an unstructured network share with no access controls.

Answer: (B)

Proper records management for training data means storing securely, keeping records retrievable, and applying defined retention periods. Using secure, access-controlled systems protects sensitive information from unauthorized access, while defined retention periods ensure records are kept long enough for compliance and audits and then disposed of properly. This approach also makes it easy to locate and verify training completion when needed. In contrast, insecure email attachments expose data, post-it notes are easily lost, and unstructured network shares with no access controls risk exposure and inconsistent retention.

Proper records management for training data means storing securely, keeping records retrievable, and applying defined retention periods. Using secure, access-controlled systems protects sensitive information from unauthorized access, while defined retention periods ensure records are kept long enough for compliance and audits and then disposed of properly. This approach also makes it easy to locate and verify training completion when needed. In contrast, insecure email attachments expose data, post-it notes are easily lost, and unstructured network shares with no access controls risk exposure and inconsistent retention.