Organizations must periodically revisit retention policies to ensure they align not only with regulatory edicts but also business imperatives. Where legacy policies are outdated and inadequate, leaders must attack the problem head on by organizing cross-functional teams involving records management, legal, IT, business units and auditing to perform a risk/reward analysis and set cogent policies based on ever-changing business requirements.