Information deletion security control introduced in ISO 27001:2022 is efficacious. It avoids data leakage especially due to prolonged retention of unused information in an organization. Data from sources like the remote cloud system or on-site IT systems are subject to this rule for cyber security maintenance.