Less is More: The Role of Data Retention Policies in Cybersecurity Preparedness