Inappropriate destruction or retention of data

Control

Documented backup and data retention policies and procedures