A legal department must maintain a backup from all devices that have been shredded and recycled by a third party. Which of the following best describes this requirement?

Data retention is the correct answer because it refers to the policies and practices for keeping information for a specified period. The legal department's requirement to maintain a backup of data from shredded and recycled devices directly aligns with data retention policies, ensuring that even after physical destruction, a copy of the data is preserved for legal or compliance purposes. Certification refers to the process of verifying that a system or person meets specific standards, which is not directly related to keeping data backups. Sanitization is the process of irreversibly removing data from a storage device, making it unrecoverable, which is the opposite of retaining a backup. Destruction refers to the physical obliteration of storage media, which, while performed on the original devices, doesn't address the requirement to keep a backup.