retention
termgovernance & riskops culture
How long records are kept before deletion - a decision with legal, financial and investigative consequences that usually gets made on storage cost alone.
Two opposite pressures meet here and both are legitimate. Investigations need history, and intrusions are frequently discovered months after they began, so a ninety-day window can mean the beginning is already gone before anyone looks. Privacy regulation and litigation exposure push the other way, because data kept is data that can be demanded or leaked. Deciding deliberately is the whole exercise; letting the default win means the answer was set by whoever priced the storage tier.
Also known as: log retention