SlideShare a Scribd company logo
1 of 4
Download to read offline
What constitutes a long-term record? How should organizations manage
records with long retention periods, and assure such records are accessible
many years into the future? This white paper, the first in a four-part series,
focuses on the definition and basic challenges of long-term record retention
and introduces the topics discussed in the following papers.
DISTINGUISHING LONG-TERM RECORDS FROM
ALL THE REST
What is the temporal threshold that defines a long-term record? Record
retention requirement periods vary, depending on the information’s value to
the business, regulations and jurisdictions. To a certain extent, organizations
with a “keep everything” culture may find that most of their records are long-
term. Every organization will define long-term records differently as well as the
media types used for retention and storage. Archive solutions will also vary.
Despite these differences, there are some simple guidelines to help determine
your organization’s long-term record threshold:
»» Any record designated as “permanent” qualifies as long-term (see sidebar),
as do those records considered historical for the corporation. These records
may not always be in paper or electronic format, but may include physical
artifacts of the organization’s history.
»» Those records with the longest retention periods in the Records Retention
Schedule (RRS) as mandated by business continuity, law or regulation,
typically 10 years or longer.
»» “Event-based” records whose retention may not begin for a long time after
they are created or received.
»» Records whose value continues past their retention period, by transitioning
to a “big data lake” where the information can be used for analytics.
»» Records housed in systems with older technology that may become obsolete
during the retention period of the record itself. (See sidebar on page 2
regarding common long-term formats for electronic records.)
While the exact definition of long-term records may vary based on an
organization’s specific business drivers, media format and storage solutions,
in general, any record that needs to be stored for more than 10 years can be
considered a long-term record.
CONTENTS
—— Introduction
—— Distinguishing Long-Term Records From
All the Rest
—— Retention Strategies for Long-Term
Electronic Records
—— Practices that Undermines Long-Term
Records Management
—— Management Strategies for Long-Term
Records
—— Conclusion
WHITE PAPER
GUIDEBOOK TO LONG-TERM RETENTION
PART 1: CHALLENGES AND EFFECTIVE APPROACHES
PERMANENT
RECORDS
Permanent records document
significant transactions, policies,
decisions or services and
retain legal, administrative and
historical value without regard
to any timeframe. They should
be routinely committed to a
secure archive in order to provide
accessibility for future users.
2800.899.IRON | ironmountain.com
RETENTION STRATEGIES FOR LONG-TERM
ELECTRONIC RECORDS
Changing technologies will have an effect on the management of long-
term electronic records. The main considerations are predictable hardware
obsolescence, ever-changing software platforms and releases, obsolete data
formats and questionable integrity of storage media. These considerations
can force a change in the way you store your records. Below are some
strategies for meeting these challenges:
»» Convert records from proprietary or potentially obsolete formats to standard
archival formats (see sidebar on PDF/A and NARA 2014-10: Appendix A).
»» Extract electronic records from obsolete software, hardware and other
media into a central repository appropriate for long-term retention, so that
records can be moved from retired systems or media with a short shelf life.
»» Consolidate and/or regularly migrate electronic records to the most current
version of the record format to ensure that they will be readable in the
future (e.g, Microsoft Office application files).
»» Convert records from digital to analog, by printing out digital records and
storing them along with physical record — for instance, adding a small
amount of email correspondence documenting contract negotiations with a
set of hard copy contracts.
Each of these approaches has advantages and disadvantages. Before
undertaking a conversion or consolidation, it is wise to raise the subject with
your information governance council or seek legal advice and make sure the
new format will maintain any metadata necessary to prove its authenticity. The
bottom line is that organizations should have a strategy for dealing with the
inevitable obsolescence of software and hardware systems in place today and
provide for archiving and managing records for the long term.
PRACTICES THAT UNDERMINE LONG-TERM
RECORDS MANAGEMENT
While all organizations face the challenges of long-term records management,
certain practices can make things even more problematic. Here are some
situations that could exist:
»» Retention of records far beyond their required period because an
organization does not want to manage event-driven or conditional retention
periods. As an example, a company decides to keep all employee records for
30 years. While the turnover rate is low, managing the records for according
to the retention schedule (i.e., 10 years after employee departure) would
result in more efficient disposition.
»» Consolidation of all records in a department into a single “high watermark”
retention period (i.e., 12 years) where the majority of the records could be
defensibly destroyed in five years or less.
THE PDF/A
DEFINITION OF
“LONG-TERM”
Here’s some food for thought:
long-term can be regarded as
“…the period of time long enough
for there to be concern about the
impacts of changing technologies,
including support for new media
and data formats, and of a
changing user community, on
the information being held in a
repository, which may extend into
the indefinite future.”1
LEGAL IMPLICATIONS
OF FORMAT
CONVERSION
Rules 1001 and 1003 of the
Federal Rules of Evidence state
that a duplicate of a document
is legally admissible unless
a genuine question is raised
about the original’s authenticity.
Similar guidelines apply in other
countries. Duplicates of long-
term records must be accurate
and trustworthy representations
of the originals, securely stored
along with relevant metadata. So,
are long-term records that are
converted or migrated from one
format (e.g., native format to PDF)
to another legally admissible?
Perhaps, but before embarking on
a conversion, involve legal counsel
in the decision.
1
Source: ISO 19005-1:2005 (PDF/A-1)
3 800.899.IRON | ironmountain.com
»» All information for a single activity is kept, regardless of
the legal or regulatory requirements, multiple versions
and drafts, correspondence and other trivial information
that was not separated from the record content.
»» Blanket legal holds are widely used to preserve records,
as opposed to targeted groups of records.
»» No formal email management program.
In all of these scenarios, it is very difficult if not impossible
for Records and Information Management (RIM)
professionals, without the assistance of technology, to
identify the legitimate long-term records they should
preserve and remove the duplicate, obsolete or transient
information from the storage media or physical container.
There is no question that saving everything for the long-
term drives up storage costs and increases the expense
and risk of legal discovery.
MANAGEMENT STRATEGIES FOR
LONG-TERM RECORDS
In many ways, the practices and procedures for managing
long-term records should differ little from those used to
manage any other kind of records. These strategies should
come as no surprise to RIM professionals.
»» Start with an up-to-date and media-agnostic enterprise-
wide records retention schedule and corporate
classification plan. Business, regulatory and legal
requirements are always changing, so the classification
plan and schedule should be reviewed at least annually
and updated as needed.
»» Classify long-term and permanent records using
repeatable processes, assisted classification or
automated classification as much as possible. This
process is much easier when first creating or receiving
the information rather than later on when it is no longer
actively used.
»» Segregate short-term and long-term data. Do not simply
apply a generic, long retention rule to all records created
from a single activity or department.
»» Use a modern data management system, coupled with
defined reviews or periodic processes to manage your
event-based and conditional electronic data and prevent
over-retention of records.
»» Prepare an index of inactive information needed to be
retained for a long period of time to make it easier to
retrieve the occasional record when required for legal,
regulatory or business productivity.
»» When feasible and to reduce ambiguity, the term
“permanent” should be replaced with a measureable
time period (i.e., 30 years).
»» Create an overall strategy for dealing with the eventual
obsolescence of your business applications so the
appropriate records and transactions can be indexed
and stored in a long-term format that can be accessible
for the life of the retention period. This strategy will
ensure that your records are available when needed, and
greatly reduce the number of obsolete applications being
managed
CONCLUSION
Records and Information Management departments face
many challenges when dealing with the organization,
retrieval, disposition and preservation of long-term records.
Consistent strategies for each of the major challenges
and continual governance and review of your information
environment can greatly reduce both the cost and risk of
long-term retention.
Subsequent papers in this series will go into greater
detail on the key issues of long-term retention to outline
procedures, technologies and practical strategies for
addressing these issues, including:
»» Developing an effective media strategy for
long-term retention
»» Managing long-term retention of event-based or
conditional records
»» Management and disposition of long-term records in
databases and structured applications
US-RM-EXT-WP-073115-001 800.899.IRON | ironmountain.com
ABOUT IRON MOUNTAIN
Iron Mountain Incorporated (NYSE: IRM) is a leading provider of storage and information management
services. The company’s real estate network of over 67 million square feet across more than 1,000 facilities
in 36 countries allows it to serve customers around the world. And its solutions for records management,
data management, document management, data center management and secure shredding help
organizations to lower storage costs, comply with regulations, recover from disaster and better use their
information. Founded in 1951, Iron Mountain stores and protects billions of information assets, including
business documents, backup tapes, electronic files and medical data. Visit www.ironmountain.com for more
information.
© 2015 Iron Mountain Incorporated. All rights reserved. Iron Mountain and the design of the mountain are registered trademarks of Iron Mountain
Incorporated in the U.S. and other countries. All other trademarks and registered trademarks are the property of their respective owners.

More Related Content

What's hot

15. Brian Bailey presentation 2 DQ Asia Pacific 2010
15. Brian Bailey presentation 2 DQ Asia Pacific 201015. Brian Bailey presentation 2 DQ Asia Pacific 2010
15. Brian Bailey presentation 2 DQ Asia Pacific 2010Brian Bailey
 
Seven Essential Strategies for Effective Archiving
Seven Essential Strategies for Effective ArchivingSeven Essential Strategies for Effective Archiving
Seven Essential Strategies for Effective ArchivingEMC
 
Filing, documentation, and effective meetings
Filing, documentation, and effective meetingsFiling, documentation, and effective meetings
Filing, documentation, and effective meetingsCG Hylton Inc.
 
How to implement Electronic Records Management?
How to implement Electronic Records Management?How to implement Electronic Records Management?
How to implement Electronic Records Management?Atle Skjekkeland
 
Information Governance, Managing Data To Lower Risk and Costs, and E-Discover...
Information Governance, Managing Data To Lower Risk and Costs, and E-Discover...Information Governance, Managing Data To Lower Risk and Costs, and E-Discover...
Information Governance, Managing Data To Lower Risk and Costs, and E-Discover...David Kearney
 
Guía de plazos de conservación de documentos
Guía de plazos de conservación de documentos Guía de plazos de conservación de documentos
Guía de plazos de conservación de documentos Sergio Gomez Florez
 
Archiving files. kainaiwa.15
Archiving files. kainaiwa.15Archiving files. kainaiwa.15
Archiving files. kainaiwa.15CG Hylton Inc.
 
Effective Records Management Introduction
Effective Records Management   IntroductionEffective Records Management   Introduction
Effective Records Management IntroductionFe Angela Verzosa
 
RECORDS MANANGEMENT SYSTEM (Electronic Records Management)
RECORDS MANANGEMENT SYSTEM (Electronic Records Management)RECORDS MANANGEMENT SYSTEM (Electronic Records Management)
RECORDS MANANGEMENT SYSTEM (Electronic Records Management)Abolade Lekan
 
Michael Josephs
Michael JosephsMichael Josephs
Michael JosephsdaveGBE
 
Records and Information Management for Law Firms
Records and Information Management for Law FirmsRecords and Information Management for Law Firms
Records and Information Management for Law FirmsMCS Management Services
 
Enterprise Records Management : New challenges & Better Solutions Whitepaper ...
Enterprise Records Management : New challenges & Better Solutions Whitepaper ...Enterprise Records Management : New challenges & Better Solutions Whitepaper ...
Enterprise Records Management : New challenges & Better Solutions Whitepaper ...Jone Smith
 
Is Your Business at Risk? Document Management Facts & Aspects - Whitepaper By...
Is Your Business at Risk? Document Management Facts & Aspects - Whitepaper By...Is Your Business at Risk? Document Management Facts & Aspects - Whitepaper By...
Is Your Business at Risk? Document Management Facts & Aspects - Whitepaper By...Jone Smith
 
Partner enablement GDPR
Partner enablement GDPRPartner enablement GDPR
Partner enablement GDPRJuan Niekerk
 

What's hot (20)

15. Brian Bailey presentation 2 DQ Asia Pacific 2010
15. Brian Bailey presentation 2 DQ Asia Pacific 201015. Brian Bailey presentation 2 DQ Asia Pacific 2010
15. Brian Bailey presentation 2 DQ Asia Pacific 2010
 
Seven Essential Strategies for Effective Archiving
Seven Essential Strategies for Effective ArchivingSeven Essential Strategies for Effective Archiving
Seven Essential Strategies for Effective Archiving
 
Filing, documentation, and effective meetings
Filing, documentation, and effective meetingsFiling, documentation, and effective meetings
Filing, documentation, and effective meetings
 
rm, 10e ch02 copy
rm, 10e ch02 copyrm, 10e ch02 copy
rm, 10e ch02 copy
 
How to implement Electronic Records Management?
How to implement Electronic Records Management?How to implement Electronic Records Management?
How to implement Electronic Records Management?
 
Information Governance, Managing Data To Lower Risk and Costs, and E-Discover...
Information Governance, Managing Data To Lower Risk and Costs, and E-Discover...Information Governance, Managing Data To Lower Risk and Costs, and E-Discover...
Information Governance, Managing Data To Lower Risk and Costs, and E-Discover...
 
Guía de plazos de conservación de documentos
Guía de plazos de conservación de documentos Guía de plazos de conservación de documentos
Guía de plazos de conservación de documentos
 
Archiving files. kainaiwa.15
Archiving files. kainaiwa.15Archiving files. kainaiwa.15
Archiving files. kainaiwa.15
 
Effective Records Management Introduction
Effective Records Management   IntroductionEffective Records Management   Introduction
Effective Records Management Introduction
 
Pp6
Pp6Pp6
Pp6
 
RECORDS MANANGEMENT SYSTEM (Electronic Records Management)
RECORDS MANANGEMENT SYSTEM (Electronic Records Management)RECORDS MANANGEMENT SYSTEM (Electronic Records Management)
RECORDS MANANGEMENT SYSTEM (Electronic Records Management)
 
Michael Josephs
Michael JosephsMichael Josephs
Michael Josephs
 
INTRODUCTION
INTRODUCTIONINTRODUCTION
INTRODUCTION
 
Records and Information Management for Law Firms
Records and Information Management for Law FirmsRecords and Information Management for Law Firms
Records and Information Management for Law Firms
 
Enterprise Records Management : New challenges & Better Solutions Whitepaper ...
Enterprise Records Management : New challenges & Better Solutions Whitepaper ...Enterprise Records Management : New challenges & Better Solutions Whitepaper ...
Enterprise Records Management : New challenges & Better Solutions Whitepaper ...
 
Legal Case Management Software For Lawyers and Law Firms - Legodesk
Legal Case Management Software For Lawyers and Law Firms - LegodeskLegal Case Management Software For Lawyers and Law Firms - Legodesk
Legal Case Management Software For Lawyers and Law Firms - Legodesk
 
Information Governance
Information GovernanceInformation Governance
Information Governance
 
Is Your Business at Risk? Document Management Facts & Aspects - Whitepaper By...
Is Your Business at Risk? Document Management Facts & Aspects - Whitepaper By...Is Your Business at Risk? Document Management Facts & Aspects - Whitepaper By...
Is Your Business at Risk? Document Management Facts & Aspects - Whitepaper By...
 
The Impact Of e- Discovery On The CIO
The Impact Of e- Discovery On The CIOThe Impact Of e- Discovery On The CIO
The Impact Of e- Discovery On The CIO
 
Partner enablement GDPR
Partner enablement GDPRPartner enablement GDPR
Partner enablement GDPR
 

Similar to Managing Long-Term Records Guide

ITS 833 – INFORMATION GOVERNANCEChapter 9Information Gover.docx
ITS 833 – INFORMATION GOVERNANCEChapter 9Information Gover.docxITS 833 – INFORMATION GOVERNANCEChapter 9Information Gover.docx
ITS 833 – INFORMATION GOVERNANCEChapter 9Information Gover.docxvrickens
 
Digital Records Management & Preservation
Digital Records Management & PreservationDigital Records Management & Preservation
Digital Records Management & Preservationvictor Nduna
 
Brian Dirking Software Selection For Records Management
Brian Dirking Software Selection For Records ManagementBrian Dirking Software Selection For Records Management
Brian Dirking Software Selection For Records Managementbdirking
 
Records retention shrm
Records retention shrmRecords retention shrm
Records retention shrmcinderella1961
 
Getting to Paperlite: Strategies for More Efficient Records Management Part 1
Getting to Paperlite: Strategies for More Efficient Records Management Part 1Getting to Paperlite: Strategies for More Efficient Records Management Part 1
Getting to Paperlite: Strategies for More Efficient Records Management Part 1TAB
 
Designing A Compliant Record Retention Policy
Designing A Compliant Record Retention PolicyDesigning A Compliant Record Retention Policy
Designing A Compliant Record Retention Policyrlhicksjr
 
Brian Dirking Knowing Your Organizations Goals Before Choosing A Product
Brian Dirking Knowing Your Organizations Goals Before Choosing A ProductBrian Dirking Knowing Your Organizations Goals Before Choosing A Product
Brian Dirking Knowing Your Organizations Goals Before Choosing A Productbdirking
 
Best Practices for Managing Archive Migrations
Best Practices for Managing Archive MigrationsBest Practices for Managing Archive Migrations
Best Practices for Managing Archive MigrationsOsterman Research, Inc.
 
Records management program
Records management programRecords management program
Records management programDhani Ahmad
 
Key Records Management Considerations During a Life Sciences Merger or Acquis...
Key Records Management Considerations During a Life Sciences Merger or Acquis...Key Records Management Considerations During a Life Sciences Merger or Acquis...
Key Records Management Considerations During a Life Sciences Merger or Acquis...Everteam
 
Records-Management_Getting_Started_WP[9]
Records-Management_Getting_Started_WP[9]Records-Management_Getting_Started_WP[9]
Records-Management_Getting_Started_WP[9]Deja Nichols
 
LVA Electronic Records Management
LVA Electronic Records ManagementLVA Electronic Records Management
LVA Electronic Records ManagementPaul Neal
 
CHAPTER 8INFORMATION GOVERNANCEInformation Governance & .docx
CHAPTER 8INFORMATION GOVERNANCEInformation Governance & .docxCHAPTER 8INFORMATION GOVERNANCEInformation Governance & .docx
CHAPTER 8INFORMATION GOVERNANCEInformation Governance & .docxmccormicknadine86
 
TDWI Checklist Report: Active Data Archiving
TDWI Checklist Report:  Active Data ArchivingTDWI Checklist Report:  Active Data Archiving
TDWI Checklist Report: Active Data ArchivingRainStor
 
Records & Information Management and the Law Firm - MCS Management Services
Records & Information Management and the Law Firm - MCS Management ServicesRecords & Information Management and the Law Firm - MCS Management Services
Records & Information Management and the Law Firm - MCS Management ServicesMCS Management Services
 

Similar to Managing Long-Term Records Guide (20)

ITS 833 – INFORMATION GOVERNANCEChapter 9Information Gover.docx
ITS 833 – INFORMATION GOVERNANCEChapter 9Information Gover.docxITS 833 – INFORMATION GOVERNANCEChapter 9Information Gover.docx
ITS 833 – INFORMATION GOVERNANCEChapter 9Information Gover.docx
 
Digital Records Management & Preservation
Digital Records Management & PreservationDigital Records Management & Preservation
Digital Records Management & Preservation
 
Brian Dirking Software Selection For Records Management
Brian Dirking Software Selection For Records ManagementBrian Dirking Software Selection For Records Management
Brian Dirking Software Selection For Records Management
 
Records retention shrm
Records retention shrmRecords retention shrm
Records retention shrm
 
Records Management
Records ManagementRecords Management
Records Management
 
Getting to Paperlite: Strategies for More Efficient Records Management Part 1
Getting to Paperlite: Strategies for More Efficient Records Management Part 1Getting to Paperlite: Strategies for More Efficient Records Management Part 1
Getting to Paperlite: Strategies for More Efficient Records Management Part 1
 
Designing A Compliant Record Retention Policy
Designing A Compliant Record Retention PolicyDesigning A Compliant Record Retention Policy
Designing A Compliant Record Retention Policy
 
Brian Dirking Knowing Your Organizations Goals Before Choosing A Product
Brian Dirking Knowing Your Organizations Goals Before Choosing A ProductBrian Dirking Knowing Your Organizations Goals Before Choosing A Product
Brian Dirking Knowing Your Organizations Goals Before Choosing A Product
 
Best Practices for Managing Archive Migrations
Best Practices for Managing Archive MigrationsBest Practices for Managing Archive Migrations
Best Practices for Managing Archive Migrations
 
Records management program
Records management programRecords management program
Records management program
 
Key Records Management Considerations During a Life Sciences Merger or Acquis...
Key Records Management Considerations During a Life Sciences Merger or Acquis...Key Records Management Considerations During a Life Sciences Merger or Acquis...
Key Records Management Considerations During a Life Sciences Merger or Acquis...
 
Information Governance - presentation to inforum 2013
Information Governance - presentation to inforum 2013Information Governance - presentation to inforum 2013
Information Governance - presentation to inforum 2013
 
Data Archiving white paper
Data Archiving white paperData Archiving white paper
Data Archiving white paper
 
Records-Management_Getting_Started_WP[9]
Records-Management_Getting_Started_WP[9]Records-Management_Getting_Started_WP[9]
Records-Management_Getting_Started_WP[9]
 
LVA Electronic Records Management
LVA Electronic Records ManagementLVA Electronic Records Management
LVA Electronic Records Management
 
Conducting_a_Business_and_Systems_Analysis
Conducting_a_Business_and_Systems_AnalysisConducting_a_Business_and_Systems_Analysis
Conducting_a_Business_and_Systems_Analysis
 
CHAPTER 8INFORMATION GOVERNANCEInformation Governance & .docx
CHAPTER 8INFORMATION GOVERNANCEInformation Governance & .docxCHAPTER 8INFORMATION GOVERNANCEInformation Governance & .docx
CHAPTER 8INFORMATION GOVERNANCEInformation Governance & .docx
 
TDWI Checklist Report: Active Data Archiving
TDWI Checklist Report:  Active Data ArchivingTDWI Checklist Report:  Active Data Archiving
TDWI Checklist Report: Active Data Archiving
 
Retrieval and Workflows
Retrieval and WorkflowsRetrieval and Workflows
Retrieval and Workflows
 
Records & Information Management and the Law Firm - MCS Management Services
Records & Information Management and the Law Firm - MCS Management ServicesRecords & Information Management and the Law Firm - MCS Management Services
Records & Information Management and the Law Firm - MCS Management Services
 

More from Iron Mountain

729 Solutions Helps Connect The Dots - Our Services At A Glance
729 Solutions Helps Connect The Dots - Our Services At A Glance729 Solutions Helps Connect The Dots - Our Services At A Glance
729 Solutions Helps Connect The Dots - Our Services At A GlanceIron Mountain
 
10 huge-reasons-why-businesses-need-custom-software-development1
10 huge-reasons-why-businesses-need-custom-software-development110 huge-reasons-why-businesses-need-custom-software-development1
10 huge-reasons-why-businesses-need-custom-software-development1Iron Mountain
 
CABA Whitepaper - Cybersecurity in Smart Buildings
CABA Whitepaper - Cybersecurity in Smart BuildingsCABA Whitepaper - Cybersecurity in Smart Buildings
CABA Whitepaper - Cybersecurity in Smart BuildingsIron Mountain
 
Cybersmart_buildings_securing your investment in connectivity and automation
Cybersmart_buildings_securing your investment in connectivity and automationCybersmart_buildings_securing your investment in connectivity and automation
Cybersmart_buildings_securing your investment in connectivity and automationIron Mountain
 
Moving from tape to cloud
Moving from tape to cloudMoving from tape to cloud
Moving from tape to cloudIron Mountain
 
Cloud services - moving from tape to cloud
Cloud services - moving from tape to cloudCloud services - moving from tape to cloud
Cloud services - moving from tape to cloudIron Mountain
 
9 Steps to Successful Information Lifecycle Management
9 Steps to Successful Information Lifecycle Management9 Steps to Successful Information Lifecycle Management
9 Steps to Successful Information Lifecycle ManagementIron Mountain
 
10 Ways Intelligent Transportation Makes A Difference
10 Ways Intelligent Transportation Makes A Difference10 Ways Intelligent Transportation Makes A Difference
10 Ways Intelligent Transportation Makes A DifferenceIron Mountain
 
Using Business and Technology to solve business challenges
Using Business and Technology to solve business challengesUsing Business and Technology to solve business challenges
Using Business and Technology to solve business challengesIron Mountain
 
Security VoIP Assessment
Security VoIP AssessmentSecurity VoIP Assessment
Security VoIP AssessmentIron Mountain
 
10 Tips for CIOS Data Security in the Cloud
10 Tips for CIOS Data Security in the Cloud10 Tips for CIOS Data Security in the Cloud
10 Tips for CIOS Data Security in the CloudIron Mountain
 
The need for IT to get in front of the BYOD (Bring Your Own Device) problem
The need for IT to get in front of the BYOD (Bring Your Own Device) problemThe need for IT to get in front of the BYOD (Bring Your Own Device) problem
The need for IT to get in front of the BYOD (Bring Your Own Device) problemIron Mountain
 

More from Iron Mountain (13)

729 Solutions Helps Connect The Dots - Our Services At A Glance
729 Solutions Helps Connect The Dots - Our Services At A Glance729 Solutions Helps Connect The Dots - Our Services At A Glance
729 Solutions Helps Connect The Dots - Our Services At A Glance
 
10 huge-reasons-why-businesses-need-custom-software-development1
10 huge-reasons-why-businesses-need-custom-software-development110 huge-reasons-why-businesses-need-custom-software-development1
10 huge-reasons-why-businesses-need-custom-software-development1
 
9 Proven-Strategies
9 Proven-Strategies9 Proven-Strategies
9 Proven-Strategies
 
CABA Whitepaper - Cybersecurity in Smart Buildings
CABA Whitepaper - Cybersecurity in Smart BuildingsCABA Whitepaper - Cybersecurity in Smart Buildings
CABA Whitepaper - Cybersecurity in Smart Buildings
 
Cybersmart_buildings_securing your investment in connectivity and automation
Cybersmart_buildings_securing your investment in connectivity and automationCybersmart_buildings_securing your investment in connectivity and automation
Cybersmart_buildings_securing your investment in connectivity and automation
 
Moving from tape to cloud
Moving from tape to cloudMoving from tape to cloud
Moving from tape to cloud
 
Cloud services - moving from tape to cloud
Cloud services - moving from tape to cloudCloud services - moving from tape to cloud
Cloud services - moving from tape to cloud
 
9 Steps to Successful Information Lifecycle Management
9 Steps to Successful Information Lifecycle Management9 Steps to Successful Information Lifecycle Management
9 Steps to Successful Information Lifecycle Management
 
10 Ways Intelligent Transportation Makes A Difference
10 Ways Intelligent Transportation Makes A Difference10 Ways Intelligent Transportation Makes A Difference
10 Ways Intelligent Transportation Makes A Difference
 
Using Business and Technology to solve business challenges
Using Business and Technology to solve business challengesUsing Business and Technology to solve business challenges
Using Business and Technology to solve business challenges
 
Security VoIP Assessment
Security VoIP AssessmentSecurity VoIP Assessment
Security VoIP Assessment
 
10 Tips for CIOS Data Security in the Cloud
10 Tips for CIOS Data Security in the Cloud10 Tips for CIOS Data Security in the Cloud
10 Tips for CIOS Data Security in the Cloud
 
The need for IT to get in front of the BYOD (Bring Your Own Device) problem
The need for IT to get in front of the BYOD (Bring Your Own Device) problemThe need for IT to get in front of the BYOD (Bring Your Own Device) problem
The need for IT to get in front of the BYOD (Bring Your Own Device) problem
 

Recently uploaded

Understanding the Laravel MVC Architecture
Understanding the Laravel MVC ArchitectureUnderstanding the Laravel MVC Architecture
Understanding the Laravel MVC ArchitecturePixlogix Infotech
 
New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024
New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024
New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024BookNet Canada
 
"Federated learning: out of reach no matter how close",Oleksandr Lapshyn
"Federated learning: out of reach no matter how close",Oleksandr Lapshyn"Federated learning: out of reach no matter how close",Oleksandr Lapshyn
"Federated learning: out of reach no matter how close",Oleksandr LapshynFwdays
 
Swan(sea) Song – personal research during my six years at Swansea ... and bey...
Swan(sea) Song – personal research during my six years at Swansea ... and bey...Swan(sea) Song – personal research during my six years at Swansea ... and bey...
Swan(sea) Song – personal research during my six years at Swansea ... and bey...Alan Dix
 
FULL ENJOY 🔝 8264348440 🔝 Call Girls in Diplomatic Enclave | Delhi
FULL ENJOY 🔝 8264348440 🔝 Call Girls in Diplomatic Enclave | DelhiFULL ENJOY 🔝 8264348440 🔝 Call Girls in Diplomatic Enclave | Delhi
FULL ENJOY 🔝 8264348440 🔝 Call Girls in Diplomatic Enclave | Delhisoniya singh
 
Are Multi-Cloud and Serverless Good or Bad?
Are Multi-Cloud and Serverless Good or Bad?Are Multi-Cloud and Serverless Good or Bad?
Are Multi-Cloud and Serverless Good or Bad?Mattias Andersson
 
Beyond Boundaries: Leveraging No-Code Solutions for Industry Innovation
Beyond Boundaries: Leveraging No-Code Solutions for Industry InnovationBeyond Boundaries: Leveraging No-Code Solutions for Industry Innovation
Beyond Boundaries: Leveraging No-Code Solutions for Industry InnovationSafe Software
 
Pigging Solutions Piggable Sweeping Elbows
Pigging Solutions Piggable Sweeping ElbowsPigging Solutions Piggable Sweeping Elbows
Pigging Solutions Piggable Sweeping ElbowsPigging Solutions
 
Injustice - Developers Among Us (SciFiDevCon 2024)
Injustice - Developers Among Us (SciFiDevCon 2024)Injustice - Developers Among Us (SciFiDevCon 2024)
Injustice - Developers Among Us (SciFiDevCon 2024)Allon Mureinik
 
Scanning the Internet for External Cloud Exposures via SSL Certs
Scanning the Internet for External Cloud Exposures via SSL CertsScanning the Internet for External Cloud Exposures via SSL Certs
Scanning the Internet for External Cloud Exposures via SSL CertsRizwan Syed
 
SQL Database Design For Developers at php[tek] 2024
SQL Database Design For Developers at php[tek] 2024SQL Database Design For Developers at php[tek] 2024
SQL Database Design For Developers at php[tek] 2024Scott Keck-Warren
 
Making_way_through_DLL_hollowing_inspite_of_CFG_by_Debjeet Banerjee.pptx
Making_way_through_DLL_hollowing_inspite_of_CFG_by_Debjeet Banerjee.pptxMaking_way_through_DLL_hollowing_inspite_of_CFG_by_Debjeet Banerjee.pptx
Making_way_through_DLL_hollowing_inspite_of_CFG_by_Debjeet Banerjee.pptxnull - The Open Security Community
 
Connect Wave/ connectwave Pitch Deck Presentation
Connect Wave/ connectwave Pitch Deck PresentationConnect Wave/ connectwave Pitch Deck Presentation
Connect Wave/ connectwave Pitch Deck PresentationSlibray Presentation
 
My Hashitalk Indonesia April 2024 Presentation
My Hashitalk Indonesia April 2024 PresentationMy Hashitalk Indonesia April 2024 Presentation
My Hashitalk Indonesia April 2024 PresentationRidwan Fadjar
 
08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking Men08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking MenDelhi Call girls
 
Pigging Solutions in Pet Food Manufacturing
Pigging Solutions in Pet Food ManufacturingPigging Solutions in Pet Food Manufacturing
Pigging Solutions in Pet Food ManufacturingPigging Solutions
 
Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365
Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365
Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 3652toLead Limited
 
#StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024
#StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024#StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024
#StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024BookNet Canada
 
Human Factors of XR: Using Human Factors to Design XR Systems
Human Factors of XR: Using Human Factors to Design XR SystemsHuman Factors of XR: Using Human Factors to Design XR Systems
Human Factors of XR: Using Human Factors to Design XR SystemsMark Billinghurst
 

Recently uploaded (20)

Understanding the Laravel MVC Architecture
Understanding the Laravel MVC ArchitectureUnderstanding the Laravel MVC Architecture
Understanding the Laravel MVC Architecture
 
New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024
New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024
New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024
 
"Federated learning: out of reach no matter how close",Oleksandr Lapshyn
"Federated learning: out of reach no matter how close",Oleksandr Lapshyn"Federated learning: out of reach no matter how close",Oleksandr Lapshyn
"Federated learning: out of reach no matter how close",Oleksandr Lapshyn
 
Swan(sea) Song – personal research during my six years at Swansea ... and bey...
Swan(sea) Song – personal research during my six years at Swansea ... and bey...Swan(sea) Song – personal research during my six years at Swansea ... and bey...
Swan(sea) Song – personal research during my six years at Swansea ... and bey...
 
FULL ENJOY 🔝 8264348440 🔝 Call Girls in Diplomatic Enclave | Delhi
FULL ENJOY 🔝 8264348440 🔝 Call Girls in Diplomatic Enclave | DelhiFULL ENJOY 🔝 8264348440 🔝 Call Girls in Diplomatic Enclave | Delhi
FULL ENJOY 🔝 8264348440 🔝 Call Girls in Diplomatic Enclave | Delhi
 
Are Multi-Cloud and Serverless Good or Bad?
Are Multi-Cloud and Serverless Good or Bad?Are Multi-Cloud and Serverless Good or Bad?
Are Multi-Cloud and Serverless Good or Bad?
 
E-Vehicle_Hacking_by_Parul Sharma_null_owasp.pptx
E-Vehicle_Hacking_by_Parul Sharma_null_owasp.pptxE-Vehicle_Hacking_by_Parul Sharma_null_owasp.pptx
E-Vehicle_Hacking_by_Parul Sharma_null_owasp.pptx
 
Beyond Boundaries: Leveraging No-Code Solutions for Industry Innovation
Beyond Boundaries: Leveraging No-Code Solutions for Industry InnovationBeyond Boundaries: Leveraging No-Code Solutions for Industry Innovation
Beyond Boundaries: Leveraging No-Code Solutions for Industry Innovation
 
Pigging Solutions Piggable Sweeping Elbows
Pigging Solutions Piggable Sweeping ElbowsPigging Solutions Piggable Sweeping Elbows
Pigging Solutions Piggable Sweeping Elbows
 
Injustice - Developers Among Us (SciFiDevCon 2024)
Injustice - Developers Among Us (SciFiDevCon 2024)Injustice - Developers Among Us (SciFiDevCon 2024)
Injustice - Developers Among Us (SciFiDevCon 2024)
 
Scanning the Internet for External Cloud Exposures via SSL Certs
Scanning the Internet for External Cloud Exposures via SSL CertsScanning the Internet for External Cloud Exposures via SSL Certs
Scanning the Internet for External Cloud Exposures via SSL Certs
 
SQL Database Design For Developers at php[tek] 2024
SQL Database Design For Developers at php[tek] 2024SQL Database Design For Developers at php[tek] 2024
SQL Database Design For Developers at php[tek] 2024
 
Making_way_through_DLL_hollowing_inspite_of_CFG_by_Debjeet Banerjee.pptx
Making_way_through_DLL_hollowing_inspite_of_CFG_by_Debjeet Banerjee.pptxMaking_way_through_DLL_hollowing_inspite_of_CFG_by_Debjeet Banerjee.pptx
Making_way_through_DLL_hollowing_inspite_of_CFG_by_Debjeet Banerjee.pptx
 
Connect Wave/ connectwave Pitch Deck Presentation
Connect Wave/ connectwave Pitch Deck PresentationConnect Wave/ connectwave Pitch Deck Presentation
Connect Wave/ connectwave Pitch Deck Presentation
 
My Hashitalk Indonesia April 2024 Presentation
My Hashitalk Indonesia April 2024 PresentationMy Hashitalk Indonesia April 2024 Presentation
My Hashitalk Indonesia April 2024 Presentation
 
08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking Men08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking Men
 
Pigging Solutions in Pet Food Manufacturing
Pigging Solutions in Pet Food ManufacturingPigging Solutions in Pet Food Manufacturing
Pigging Solutions in Pet Food Manufacturing
 
Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365
Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365
Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365
 
#StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024
#StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024#StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024
#StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024
 
Human Factors of XR: Using Human Factors to Design XR Systems
Human Factors of XR: Using Human Factors to Design XR SystemsHuman Factors of XR: Using Human Factors to Design XR Systems
Human Factors of XR: Using Human Factors to Design XR Systems
 

Managing Long-Term Records Guide

  • 1. What constitutes a long-term record? How should organizations manage records with long retention periods, and assure such records are accessible many years into the future? This white paper, the first in a four-part series, focuses on the definition and basic challenges of long-term record retention and introduces the topics discussed in the following papers. DISTINGUISHING LONG-TERM RECORDS FROM ALL THE REST What is the temporal threshold that defines a long-term record? Record retention requirement periods vary, depending on the information’s value to the business, regulations and jurisdictions. To a certain extent, organizations with a “keep everything” culture may find that most of their records are long- term. Every organization will define long-term records differently as well as the media types used for retention and storage. Archive solutions will also vary. Despite these differences, there are some simple guidelines to help determine your organization’s long-term record threshold: »» Any record designated as “permanent” qualifies as long-term (see sidebar), as do those records considered historical for the corporation. These records may not always be in paper or electronic format, but may include physical artifacts of the organization’s history. »» Those records with the longest retention periods in the Records Retention Schedule (RRS) as mandated by business continuity, law or regulation, typically 10 years or longer. »» “Event-based” records whose retention may not begin for a long time after they are created or received. »» Records whose value continues past their retention period, by transitioning to a “big data lake” where the information can be used for analytics. »» Records housed in systems with older technology that may become obsolete during the retention period of the record itself. (See sidebar on page 2 regarding common long-term formats for electronic records.) While the exact definition of long-term records may vary based on an organization’s specific business drivers, media format and storage solutions, in general, any record that needs to be stored for more than 10 years can be considered a long-term record. CONTENTS —— Introduction —— Distinguishing Long-Term Records From All the Rest —— Retention Strategies for Long-Term Electronic Records —— Practices that Undermines Long-Term Records Management —— Management Strategies for Long-Term Records —— Conclusion WHITE PAPER GUIDEBOOK TO LONG-TERM RETENTION PART 1: CHALLENGES AND EFFECTIVE APPROACHES PERMANENT RECORDS Permanent records document significant transactions, policies, decisions or services and retain legal, administrative and historical value without regard to any timeframe. They should be routinely committed to a secure archive in order to provide accessibility for future users.
  • 2. 2800.899.IRON | ironmountain.com RETENTION STRATEGIES FOR LONG-TERM ELECTRONIC RECORDS Changing technologies will have an effect on the management of long- term electronic records. The main considerations are predictable hardware obsolescence, ever-changing software platforms and releases, obsolete data formats and questionable integrity of storage media. These considerations can force a change in the way you store your records. Below are some strategies for meeting these challenges: »» Convert records from proprietary or potentially obsolete formats to standard archival formats (see sidebar on PDF/A and NARA 2014-10: Appendix A). »» Extract electronic records from obsolete software, hardware and other media into a central repository appropriate for long-term retention, so that records can be moved from retired systems or media with a short shelf life. »» Consolidate and/or regularly migrate electronic records to the most current version of the record format to ensure that they will be readable in the future (e.g, Microsoft Office application files). »» Convert records from digital to analog, by printing out digital records and storing them along with physical record — for instance, adding a small amount of email correspondence documenting contract negotiations with a set of hard copy contracts. Each of these approaches has advantages and disadvantages. Before undertaking a conversion or consolidation, it is wise to raise the subject with your information governance council or seek legal advice and make sure the new format will maintain any metadata necessary to prove its authenticity. The bottom line is that organizations should have a strategy for dealing with the inevitable obsolescence of software and hardware systems in place today and provide for archiving and managing records for the long term. PRACTICES THAT UNDERMINE LONG-TERM RECORDS MANAGEMENT While all organizations face the challenges of long-term records management, certain practices can make things even more problematic. Here are some situations that could exist: »» Retention of records far beyond their required period because an organization does not want to manage event-driven or conditional retention periods. As an example, a company decides to keep all employee records for 30 years. While the turnover rate is low, managing the records for according to the retention schedule (i.e., 10 years after employee departure) would result in more efficient disposition. »» Consolidation of all records in a department into a single “high watermark” retention period (i.e., 12 years) where the majority of the records could be defensibly destroyed in five years or less. THE PDF/A DEFINITION OF “LONG-TERM” Here’s some food for thought: long-term can be regarded as “…the period of time long enough for there to be concern about the impacts of changing technologies, including support for new media and data formats, and of a changing user community, on the information being held in a repository, which may extend into the indefinite future.”1 LEGAL IMPLICATIONS OF FORMAT CONVERSION Rules 1001 and 1003 of the Federal Rules of Evidence state that a duplicate of a document is legally admissible unless a genuine question is raised about the original’s authenticity. Similar guidelines apply in other countries. Duplicates of long- term records must be accurate and trustworthy representations of the originals, securely stored along with relevant metadata. So, are long-term records that are converted or migrated from one format (e.g., native format to PDF) to another legally admissible? Perhaps, but before embarking on a conversion, involve legal counsel in the decision. 1 Source: ISO 19005-1:2005 (PDF/A-1)
  • 3. 3 800.899.IRON | ironmountain.com »» All information for a single activity is kept, regardless of the legal or regulatory requirements, multiple versions and drafts, correspondence and other trivial information that was not separated from the record content. »» Blanket legal holds are widely used to preserve records, as opposed to targeted groups of records. »» No formal email management program. In all of these scenarios, it is very difficult if not impossible for Records and Information Management (RIM) professionals, without the assistance of technology, to identify the legitimate long-term records they should preserve and remove the duplicate, obsolete or transient information from the storage media or physical container. There is no question that saving everything for the long- term drives up storage costs and increases the expense and risk of legal discovery. MANAGEMENT STRATEGIES FOR LONG-TERM RECORDS In many ways, the practices and procedures for managing long-term records should differ little from those used to manage any other kind of records. These strategies should come as no surprise to RIM professionals. »» Start with an up-to-date and media-agnostic enterprise- wide records retention schedule and corporate classification plan. Business, regulatory and legal requirements are always changing, so the classification plan and schedule should be reviewed at least annually and updated as needed. »» Classify long-term and permanent records using repeatable processes, assisted classification or automated classification as much as possible. This process is much easier when first creating or receiving the information rather than later on when it is no longer actively used. »» Segregate short-term and long-term data. Do not simply apply a generic, long retention rule to all records created from a single activity or department. »» Use a modern data management system, coupled with defined reviews or periodic processes to manage your event-based and conditional electronic data and prevent over-retention of records. »» Prepare an index of inactive information needed to be retained for a long period of time to make it easier to retrieve the occasional record when required for legal, regulatory or business productivity. »» When feasible and to reduce ambiguity, the term “permanent” should be replaced with a measureable time period (i.e., 30 years). »» Create an overall strategy for dealing with the eventual obsolescence of your business applications so the appropriate records and transactions can be indexed and stored in a long-term format that can be accessible for the life of the retention period. This strategy will ensure that your records are available when needed, and greatly reduce the number of obsolete applications being managed CONCLUSION Records and Information Management departments face many challenges when dealing with the organization, retrieval, disposition and preservation of long-term records. Consistent strategies for each of the major challenges and continual governance and review of your information environment can greatly reduce both the cost and risk of long-term retention. Subsequent papers in this series will go into greater detail on the key issues of long-term retention to outline procedures, technologies and practical strategies for addressing these issues, including: »» Developing an effective media strategy for long-term retention »» Managing long-term retention of event-based or conditional records »» Management and disposition of long-term records in databases and structured applications
  • 4. US-RM-EXT-WP-073115-001 800.899.IRON | ironmountain.com ABOUT IRON MOUNTAIN Iron Mountain Incorporated (NYSE: IRM) is a leading provider of storage and information management services. The company’s real estate network of over 67 million square feet across more than 1,000 facilities in 36 countries allows it to serve customers around the world. And its solutions for records management, data management, document management, data center management and secure shredding help organizations to lower storage costs, comply with regulations, recover from disaster and better use their information. Founded in 1951, Iron Mountain stores and protects billions of information assets, including business documents, backup tapes, electronic files and medical data. Visit www.ironmountain.com for more information. © 2015 Iron Mountain Incorporated. All rights reserved. Iron Mountain and the design of the mountain are registered trademarks of Iron Mountain Incorporated in the U.S. and other countries. All other trademarks and registered trademarks are the property of their respective owners.