A court order has ruled that your company must surrender all the email sent and received by a
certain employee for the past five years. After reviewing the backup systems, the IT administrator
concludes that email backups are not kept that long. Which of the following policies MUST be

reviewed to address future compliance?

A.
Tape backup policies

B.
Offsite backup policies

C.
Data retention policies

D.
Data loss prevention policies