An information security officer is asked to write a retention policy for a financial system. She is aware of the fact that some data must be kept for a long tim...