Page 58 - Ipsos
P. 58

Information Classification: Internal Use
                                                                      Ipsos Book of Policies & Procedures


                    Information    Retention Period        Backup        Justification      Information
                                                        requirements                          owner
                                     (unless otherwise
                                  specified by the local law,   (unless otherwise
                                   client or the asset owner)   specified by the
                                                        client or the asset
                                                            owner)


                                  2 years retention for
                                  all employees
                                  7 years retention for:

                                    Country manager;                                        -   Group
                                                                                                CFO
                                    Finance;
                   Legal hold on                                                             -   Group
                       Email        Human                              To allow official       Legal
                     accounts       Resources;               All        investigation or        Counsel
                    starting with                                          litigation
                    leaving date     Legal;                                                 -   Group
                                    Information                                                Internal
                                    Technologies;                                               Audit
                                                                                                Director
                                    MBEC;

                                    Others at specific
                                    request of
                                    Information
                                    owners




                   7.0  Information Destruction Policy



                   Strictly confidential information and Internal Information will be destroyed according to the media
                   destruction policy and process below for the applicable Assets:

                       -   Working hard drives will either be wiped, shredded, stored or degaussed as per sections
                          7.1 to 7.4 below.

                       -   Non-working hard drives will be shredded, stored or degaussed as per sections 7.1 to 7.3
                          below.

                       -   Magnetic media such as tapes will be shredded, stored or degaussed as per sections 7.1
                          to 7.3 below.




                                                   Page 18 of 22
   53   54   55   56   57   58   59   60   61   62   63