Which retention period applies to digital incident reports?

• A. 5 years
• B. 2 years
• C. 3 years
• D. 1 year

Answer: (A)

Digital incident reports are kept for five years to ensure there’s a complete and usable record for investigations, audits, and trend analysis over time. Retaining these reports longer supports accountability and compliance with regulatory or organizational requirements, and it prevents losing valuable data that might only become relevant in future reviews or actions. Shorter retention periods, like one to three years, can create gaps where past incidents aren’t available for study or verification, which weakens the ability to identify recurring issues or learn from events. Five years provides a practical balance between data usefulness and storage considerations, keeping the information accessible when it’s needed most.