What Should an Auditor Do When Conducting a Periodic Audit

What should an auditor do when conducting a periodic audit on media retention?

A) Check electronic storage media to ensure records are not retained past their destruction date
B) Ensure authorized personnel are in possession of paper copies containing Personally Identifiable Information (PII)
C) Check that hard disks containing backup data that are still within a retention cycle are being destroyed correctly
D) Ensure that data shared with outside organizations is no longer on a retention schedule