Capability catalogue
ASAMIA governance · Operations
Data retention and deletion planning
Data retention and deletion planning forms part of ASAMIA governance. Define human authority, controlled access and reviewable decisions.
Documented capability
Technical requirements
- 01
Identity policies and a least-privilege permission matrix
- 02
Approval owners, audit retention and incident procedures
- 03
Service-scoped assessment evidence and contractual controls
- 04
Define the inputs, expected output and acceptance checks for data retention and deletion planning.
Functional specification
Identity policies, least-privilege access, sensitive-action approvals, audit records and incident procedures define the governance requirements.
Operating controls
Compliance evidence must match the actual service and contract scope. Sample guardrail reviews are not certification or access enforcement.
Governance, security & identity