Electronic File Retention 1911
-
I’m working developing a policy around the retention and restriction of electronic files stored on company file servers.
I am wondering if there are basic rules/guidelines that most companies follow. Any information or guidance on where to look would be appreciated.
Thanks
-
Hi and welcome to the forums
By using the Search button above, and entering retention as a keyword, there are 44 posts discussing this. In a quick search, these might help:
http://www.sarbanes-oxley-forum.com/modules.php?name=Forums-and-file=viewtopic-and-p=6727#6727
http://www.sarbanes-oxley-forum.com/modules.php?name=Forums-and-file=viewtopic-and-p=5948#5948
http://www.sarbanes-oxley-forum.com/modules.php?name=Forums-and-file=viewtopic-and-t=1690
http://www.sarbanes-oxley-forum.com/modules.php?name=Forums-and-file=viewtopic-and-p=5936#5936
With respect to electronic retentions, you might consider the following:- Use of electronic documentation where possible (making sure it’s acceptable to audit and everyone involved)
- Capture timestamp info and ensure it can’t be altered
- Ensure off-site backup for D.R. purposes
- At least a 7 year retention period on all key items
- Ensure security is in place for read and write activities to the SOX electronic repositories
- Periodically test backups and the process