Section navigation

ARCS-PV: Preservation and Legal Hold

Minimum Profile

The ARCS-PV family addresses situations in which records cannot continue through ordinary deletion or purge schedules because a preservation obligation has attached. The controls in this family govern hold initiation, scope, communication, and tracking across relevant systems and custodians. These controls are grouped together because preservation changes the normal lifecycle posture. Once a hold is in effect, ordinary automation is no longer sufficient. Systems must be able to suspend deletion and maintain a clear account of which records are affected and why.

The formal definition and scope of this family are maintained in the Standard.

ControlDescription
PV-01Preservation trigger: the operator SHALL define conditions requiring preservation posture (litigation, regulatory inquiry, audit, internal investigation).
PV-02The operator SHALL define the legal hold process: authority, scope, notification, and documentation.
PV-03Preservation SHALL override deletion: routine deletion SHALL be suspended for affected categories during preservation posture.
PV-04Preservation responsibility: the operator SHALL identify who bears obligation across operator and vendor boundaries.
PV-05Multi-vendor preservation: the operator SHALL document vendor notice, compliance verification, and unverifiable locations.
PV-06Exit from preservation posture: the operator SHALL document authority required, categories eligible, and auditable release record.
PV-07Multi-vendor preservation communication: the operator SHALL document how preservation obligations are communicated to each vendor surface, including communication mechanism, expected vendor response, confirmation timeframe, and procedure when vendor cannot comply.