Top Banner
1 © 2004, R.E.Barry Record Record making making vs. vs. Record Record keeping keeping Systems: Systems: Making Sure IT Doesn’t Making Sure IT Doesn’t Get Blindsided Get Blindsided Rick Barry, Principal, Rick Barry, Principal, Barry Associates Barry Associates Virtual Handouts @ Virtual Handouts @ www.mybestdocs.com www.mybestdocs.com
37

© 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

Mar 26, 2015

Download

Documents

Luke Sinclair
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

11© 2004, R.E.Barry

RecordRecordmakingmaking vs. vs. RecordRecordkeepingkeeping Systems: Making Systems: Making Sure IT Doesn’t Get Blindsided Sure IT Doesn’t Get Blindsided

Rick Barry, Principal, Barry Rick Barry, Principal, Barry AssociatesAssociates

Virtual Handouts @ Virtual Handouts @ www.mybestdocs.comwww.mybestdocs.com

Page 2: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

22© 2004, R.E.Barry

About “About “RecordRecordmakingmaking vs. Record vs. Recordkeepingkeeping Systems: Systems: Making Sure IT Doesn’t Get Blindsided”Making Sure IT Doesn’t Get Blindsided”

Major systems that produce recordsMajor systems that produce records—record—recordmakingmaking systems systemsHow these relate to systems that How these relate to systems that properly manage records—properly manage records—recordrecordkeeping keeping systemssystemsOptions for getting them into lineOptions for getting them into lineHow compliance requirements and How compliance requirements and standards can helpstandards can helpFutures Futures

Page 3: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

33© 2004, R.E.Barry

StatsStatsStatsStats: : Indicative trends; Hide standard deviationsIndicative trends; Hide standard deviationsInformation productionInformation production:: World population: 6.3 billion. ~ 800 MB of recorded World population: 6.3 billion. ~ 800 MB of recorded information produced p.c., p.a. Equivalent: ~ 30’books information produced p.c., p.a. Equivalent: ~ 30’books Print, film, magnetic, optical storagePrint, film, magnetic, optical storage media produced ~ 5 exabytes of new info in media produced ~ 5 exabytes of new info in 2002. 92% magnetic media—mostly HDs 2002. 92% magnetic media—mostly HDs 1 exabyte = 1024 petabytes, each of which = 1024 terabytes1 exabyte = 1024 petabytes, each of which = 1024 terabytes 5 exabytes? If digitized with full formatting, the 17,000,000 books in the Library of 5 exabytes? If digitized with full formatting, the 17,000,000 books in the Library of

Congress contain about 136 terabytes; 5 exabytes is equivalent to info contained Congress contain about 136 terabytes; 5 exabytes is equivalent to info contained in 37,000 new libraries the size of Library of Congressin 37,000 new libraries the size of Library of Congress

EmailEmail:: Average users in US spend 25+ hrs per month on Internet at home and 74 Average users in US spend 25+ hrs per month on Internet at home and 74 hours at work. 19% use to do research for work hours at work. 19% use to do research for work IMIM:: 31% U.S. business Internet users used IM >/ once in May ‘02 31% U.S. business Internet users used IM >/ once in May ‘02 WWWWWW:: 2000 estimated public (surface) Web volume: 20 to 50 terabytes; 2003 2000 estimated public (surface) Web volume: 20 to 50 terabytes; 2003 measured volume: 167 terabytes - 3X BrightPlanet estimates deep web ~ 66,800 measured volume: 167 terabytes - 3X BrightPlanet estimates deep web ~ 66,800 and 91,850 terabytes.and 91,850 terabytes.BlogsBlogs: 2003: : 2003: ~ 2.9 million active weblogs containing about 81 GB~ 2.9 million active weblogs containing about 81 GBSource: “How Much Information? 2003,” UC Berkeley's School of Information Management and Systems, Source: “How Much Information? 2003,” UC Berkeley's School of Information Management and Systems, http://www.sims.berkeley.edu/research/projects/how-much-info-2003/execsum.htmhttp://www.sims.berkeley.edu/research/projects/how-much-info-2003/execsum.htm

Page 4: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

USS Blue Action Report Re Dec 7, 1941: ExcerptUSS Blue Action Report Re Dec 7, 1941: Excerpt

Page 5: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

55© 2004, R.E.Barry

RecordRecordmakingmaking systems systems

Create documentation that meet Create documentation that meet commonly accepted definitions of recordscommonly accepted definitions of recordsVirtually all digital systems used to create, Virtually all digital systems used to create, communicate and record business in communicate and record business in support of business processes (BPs)support of business processes (BPs)Human to humanHuman to humanHuman to systemHuman to systemSystem to system System to system System to humanSystem to human

Page 6: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

66© 2004, R.E.Barry

Core RecordCore Recordmakingmaking Systems Systems Old fashioned office systems, email, EDMS; new fashioned Old fashioned office systems, email, EDMS; new fashioned instant messaging (IM) systemsinstant messaging (IM) systemsBack room – Enterprise Resources Planning (ERP) Back room – Enterprise Resources Planning (ERP) (SAP/PeopleSoft/Oracle/JDE)—finance, HR (SAP/PeopleSoft/Oracle/JDE)—finance, HR

Indiana Univ. project Indiana Univ. project www.indiana.edu/~librarch/phase.htmlwww.indiana.edu/~librarch/phase.html

““OneStart/EDEN – A Description of IU's Transaction OneStart/EDEN – A Description of IU's Transaction Processing/Recordkeeping Environment" by Rosemary Processing/Recordkeeping Environment" by Rosemary Pleva Flynn mybestdocscom Guest AuthorsPleva Flynn mybestdocscom Guest Authors

Front room – CIM, CRMFront room – CIM, CRM Integrated voice/text/data systemsIntegrated voice/text/data systems

Workflow, forms managementWorkflow, forms managementFacility Management (CAD/CAFM/CMMS)Facility Management (CAD/CAFM/CMMS)Business intranets, extranets, websites, blogsBusiness intranets, extranets, websites, blogs

Page 7: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

77© 2004, R.E.Barry

Survey of IT Directors Survey of IT Directors AssociationAssociation

23 CIOs, CTOs, IT Directors of South Carolina 23 CIOs, CTOs, IT Directors of South Carolina State AgenciesState AgenciesWhat functions and systems were they What functions and systems were they responsible for?responsible for?What kind of systems had their organizations What kind of systems had their organizations implemented?implemented?What did they see as the major issues, including What did they see as the major issues, including electronic recordelectronic record

Page 8: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

88© 2004, R.E.Barry

CIO Organizations With/Without CIO Organizations With/Without Responsibility For:Responsibility For:

0

20

40

60

80

100

%

IT

IM

Telecom

RM

Web Tech

Web Content

n = 23

Page 9: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

99© 2004, R.E.Barry

Major Systems Major Systems ImplementedImplemented

0

20

40

60

80

100

%

WWWsite

Intranet

Extranet

EDMS

ERP

EDMS+

n = 23

Page 10: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

1010© 2004, R.E.Barry

70

48 4843

39

26 2622

94 4

0

10

20

30

40

50

60

70

%

Info SecurityStaff UsersElect RecsCommunicatePublic UsersLegacy SysEmaile-GovText SysMultimediaOther

Topics Deemed Major Concerns Topics Deemed Major Concerns What main concerns face your IT Departments?1=not at all/minor 2=somewhat 3=Major

Other: Continuing operations under current Legislative ‘Budget Priorities’n = 23

Page 11: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

1111© 2004, R.E.Barry

CIO Organizations With/Without CIO Organizations With/Without Responsibility for RecordkeepingResponsibility for Recordkeeping

16

7

With RK

W/O RK

30% 70%

0

2

4

6

8

10

ER-1 ER-2 ER-3

With RK

Without RK

Q: What main concerns face your ITD? Electronic Records?

1=not at all/minor 2=somewhat 3=Major

Is your organization responsiblefor records management?

n = 23

Page 12: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

1212© 2004, R.E.Barry

Findings/ConclusionsFindings/Conclusions

E-recs tied for 2E-recs tied for 2ndnd place among concerns place among concernsAbout 30% felt that the balance in their org was too About 30% felt that the balance in their org was too much on IT, too little IMmuch on IT, too little IMAbout 90% responsible for IM, 70% RM and ~½ for About 90% responsible for IM, 70% RM and ~½ for web contentweb contentNearly all operating websites & intranets; few had Nearly all operating websites & intranets; few had EDMS, ERP systems or EDMS+ (EDMS + 5015) EDMS, ERP systems or EDMS+ (EDMS + 5015) Directors with RM responsibility for RM saw e-recs Directors with RM responsibility for RM saw e-recs as major issueas major issueDirectors without RM responsibility saw e-recs as a Directors without RM responsibility saw e-recs as a minor or no issueminor or no issueResponsibility for e-recs brings respect for issuesResponsibility for e-recs brings respect for issues

Page 13: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

1313© 2004, R.E.Barry

RecordRecordkeepingkeeping Systems ( Systems (RRKKS)S)

ISO 15489 defines “records” as: “information ISO 15489 defines “records” as: “information created, received, and maintained as evidence created, received, and maintained as evidence and information by an organization or person, in and information by an organization or person, in pursuance of legal obligations or in the pursuance of legal obligations or in the transaction of business” with following transaction of business” with following characteristics: authenticity, integrity and characteristics: authenticity, integrity and usability. usability.

It defines “records system”: information system It defines “records system”: information system which captures, manages and provides access which captures, manages and provides access to records through time.to records through time.

Page 14: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

1414© 2004, R.E.Barry

RecordRecordkeepingkeeping Systems ( Systems (RKS)RKS) Most, not all, business communications = recordsMost, not all, business communications = recordsWhat characterizes records? Content, context, structure. What characterizes records? Content, context, structure. Not Not

technology platformtechnology platform..Importance of the BP determines the value of records they Importance of the BP determines the value of records they

produce.produce.Assessment of BPs is how:Assessment of BPs is how: value is determinedvalue is determined disposition management policy is applieddisposition management policy is applied

Keep or not? If so, how long? Specified # yrs/Indefinite?Keep or not? If so, how long? Specified # yrs/Indefinite? disposition is carried outdisposition is carried out

All records can constitute legal evidence. They can also be All records can constitute legal evidence. They can also be challenged as legal evidence.challenged as legal evidence.

Page 15: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

1515© 2004, R.E.Barry

Trustworthy RecordTrustworthy Recordkeepingkeeping Systems Systems

Systems with robust archives & records management Systems with robust archives & records management (ARM) functionality for records capture, maintenance of (ARM) functionality for records capture, maintenance of integrity, long-term preservation & disposition integrity, long-term preservation & disposition management: Univ.of Penn. Functional Requirements management: Univ.of Penn. Functional Requirements for Evidence in Recordkeeping: for Evidence in Recordkeeping: http://web.archive.org/web/20000818163633/www.sis.pitt.edu/~nhprc Trustworthy Electronic Recordkeeping SystemsTrustworthy Electronic Recordkeeping Systems are are generally accepted as maintaining the integrity, generally accepted as maintaining the integrity, accuracy, authenticity and accessibility of electronic accuracy, authenticity and accessibility of electronic records.records. Information Nation, Seven Keys to Information Management Information Nation, Seven Keys to Information Management

ComplianceCompliance, by Randolph A. Kahn & Barclay T. Blair, AIIM, 2004, by Randolph A. Kahn & Barclay T. Blair, AIIM, 2004 ““Best Practices for Document Management in an Emerging Digital Best Practices for Document Management in an Emerging Digital

Environment” by R.Barry,1994, www.mybestdocs.com, Other Environment” by R.Barry,1994, www.mybestdocs.com, Other Papers sectionPapers section

Page 16: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

1616© 2004, R.E.Barry

Ergo:Ergo:A trustworthy recordkeeping system:A trustworthy recordkeeping system:Maintains and permits continuing management of Maintains and permits continuing management of

records in a manner consistent with rigorous records in a manner consistent with rigorous recordkeeping requirements and standardsrecordkeeping requirements and standards

Maximizes likely acceptance as evidence Maximizes likely acceptance as evidence

A records management application (RMA) is the A records management application (RMA) is the software component of a broader recordkeeping software component of a broader recordkeeping regime to facilitate management of recordsregime to facilitate management of records

Most RMost RMMS are not RS are not RKKSS

Page 17: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

1717© 2004, R.E.Barry

DoD 5015.2 Records Management DoD 5015.2 Records Management Applications standard Applications standard

Meets minimal requirements for trustworthy Meets minimal requirements for trustworthy recordkeepingrecordkeeping

Recommended by Archivist of US for all Recommended by Archivist of US for all federal agencies federal agencies www.archives.gov/records_management/policy_and_guidance/bwww.archives.gov/records_management/policy_and_guidance/b

ulletin_2003_03.html ulletin_2003_03.html Most portions are applicable to private sectorMost portions are applicable to private sectorAbout 60 products, product partnerships About 60 products, product partnerships

certified under 5015.2 certified under 5015.2 http://jitc.fhu.disa.mil/recmgt http://jitc.fhu.disa.mil/recmgt

Page 18: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

1818© 2004, R.E.Barry

What 5015.2 RequiresWhat 5015.2 Requires

RMAs shall provide capabilities to:RMAs shall provide capabilities to: Define file plan - record categories/series and their associated Define file plan - record categories/series and their associated

disposition schedulesdisposition schedules

Identify/declare records, provide contextIdentify/declare records, provide context

Store, preserve, protect electronic recordsStore, preserve, protect electronic records

Search for and retrieve electronic recordsSearch for and retrieve electronic records

Track records’ disposition schedule statusTrack records’ disposition schedule status

Execute disposition instructions - cutoff, transfer, destroyExecute disposition instructions - cutoff, transfer, destroy

Page 19: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

1919© 2004, R.E.Barry

Beyond 5015.2 (V2 June 2002)Beyond 5015.2 (V2 June 2002)

Possible topics for inclusion in V3Possible topics for inclusion in V3Incorporation of standard data elementsIncorporation of standard data elementsInteroperability within enterprise Interoperability within enterprise

environment/among disparate RMAsenvironment/among disparate RMAsManual transfer of electronic records to NARAManual transfer of electronic records to NARADirect transfer of electronic records to archivesDirect transfer of electronic records to archivesMinor changes in security section reflecting recent Minor changes in security section reflecting recent

amendment to Executive Order on national securityamendment to Executive Order on national securityMigration of some non-mandatory features to Migration of some non-mandatory features to

mandatory, e.g., extraction/redaction, more DMmandatory, e.g., extraction/redaction, more DM

Page 20: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

2020© 2004, R.E.Barry

FUTURESFUTURES

Not necessarily a world of our makingNot necessarily a world of our making

Not necessarily one we want to see emergeNot necessarily one we want to see emerge

But one that is changing the way we must do But one that is changing the way we must do business and manage recordsbusiness and manage records

Few people are asking for our advice Few people are asking for our advice

And no one is asking our permissionAnd no one is asking our permission

Page 21: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

2121© 2004, R.E.Barry

FuturesFuturesBusiness: Business:

Increased focus on BPs as links between strategic aims & Increased focus on BPs as links between strategic aims & assets: human, financial, facilities, technology, information assets: human, financial, facilities, technology, information More multi-national/international business transactions & More multi-national/international business transactions & operationsoperationsGreater emphasis on post-911 info security needsGreater emphasis on post-911 info security needsFurther globalization of business transactions under Further globalization of business transactions under multiple RK/FOI practices and lawsmultiple RK/FOI practices and lawsContinued concerns over privacy issuesContinued concerns over privacy issues

Legals:Legals:Growing court discovery judgments—e-recordsGrowing court discovery judgments—e-recordsEfforts to harmonize e-bus laws/regulations internationallyEfforts to harmonize e-bus laws/regulations internationallyDe facto changes in business law definitions of records by De facto changes in business law definitions of records by lawyers with no ARM backgroundlawyers with no ARM background

Page 22: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

2222© 2004, R.E.Barry

FuturesFuturesTechnology:Technology:

Tighter integration of BP & technologyTighter integration of BP & technology Greater consolidation of business-process based: records, Greater consolidation of business-process based: records,

compliance, information security and risk managementcompliance, information security and risk managementMore standards: IM, RM, IT; increased use of open source More standards: IM, RM, IT; increased use of open source platforms (Linux www.linux.org/, OpenReader platforms (Linux www.linux.org/, OpenReader www.openreader.com) www.openreader.com) Ubiquitous recordkeepingUbiquitous recordkeepingBurgeoning of wireless, natural language and video business Burgeoning of wireless, natural language and video business applications. More multimedia records applications. More multimedia records Computer-aided records detection, capture, classificationComputer-aided records detection, capture, classificationMore advanced personal electronic records toolsMore advanced personal electronic records toolsBusiness, government take-up of hip technologies—IM, blogs, Business, government take-up of hip technologies—IM, blogs, integrated mobile phones/PDAs, game technologies for business integrated mobile phones/PDAs, game technologies for business purposes purposes

Page 23: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

2323© 2004, R.E.Barry

For more on blogs and other For more on blogs and other such things…seesuch things…see

WWW.MYBESTDOC.COMWWW.MYBESTDOC.COM

Page 24: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

2424© 2004, R.E.Barry

www.mybestdocs.com

Page 25: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

2525© 2004, R.E.Barry

Recordmaking ImplicationsRecordmaking Implications

Technology doesn’t (yet) change ‘recordness’ of Technology doesn’t (yet) change ‘recordness’ of documents/objectsdocuments/objectsTechnology dramatically changes the ways we Technology dramatically changes the ways we must must managemanage records records‘‘Hands-off’ recordmaking by computersHands-off’ recordmaking by computersLocation-independent computing – universal Location-independent computing – universal workspaceworkspaceRecords created in homes, hotels, temporary offices & Records created in homes, hotels, temporary offices &

outsourced organizationsoutsourced organizationsEmployees need remote access to records; security Employees need remote access to records; security Workers need records in different renditions/formats Workers need records in different renditions/formats

Page 26: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

2626© 2004, R.E.Barry

ARM ImplicationsARM ImplicationsLarge-scale system replacement of legacy recordmaking Large-scale system replacement of legacy recordmaking systemssystems1 ERP supplants many legacy ‘paperful’ systems1 ERP supplants many legacy ‘paperful’ systemsSystems producing massive volumes of records without Systems producing massive volumes of records without own recordkeeping capabilitiesown recordkeeping capabilitiesWeb pages very dynamicWeb pages very dynamicPublic- or customer-facing Web pages often reflect Public- or customer-facing Web pages often reflect changing enterprise understandings or commitments to changing enterprise understandings or commitments to public or other clients. Often only place where records exist public or other clients. Often only place where records exist ((See “Web Sites as Recordkeeping and “Recordmaking” Systems, See “Web Sites as Recordkeeping and “Recordmaking” Systems, by R.E. Barry, by R.E. Barry, Information Management Journal, Information Management Journal, Nov/Dec 2004.) Nov/Dec 2004.)

New systems may use email/instant mail interface; no New systems may use email/instant mail interface; no humans involved humans involved Records produced but not managed = riskRecords produced but not managed = risk

Page 27: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

2727© 2004, R.E.Barry

Which way to turn?Which way to turn?

Page 28: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

2828© 2004, R.E.Barry

CEOsCEOsGet up on top of the issues. Number of stakeholders requires CEO to Get up on top of the issues. Number of stakeholders requires CEO to make it happen.make it happen.Put recordkeeping on your strategic agenda. Take another look at Put recordkeeping on your strategic agenda. Take another look at organization/staffing of ARMorganization/staffing of ARMCall for risk analysesCall for risk analyses Revisit Y2K risk analyses, auditsRevisit Y2K risk analyses, audits Do it in-house: See “Best Practices” paper with checklist at Do it in-house: See “Best Practices” paper with checklist at www.mybestdocs.comwww.mybestdocs.com in in

Other Papers Other Papers

Provide management mandate to make high-risk recordProvide management mandate to make high-risk recordmakingmaking systems systems into trustworthy recordkeeping systems into trustworthy recordkeeping systems Build alliances to keep you informed of risks, options Build alliances to keep you informed of risks, options Representative program managers, CIO, ARM manager, general counsel, auditor, Representative program managers, CIO, ARM manager, general counsel, auditor,

facility manager facility manager Adopt as enterprise standards:Adopt as enterprise standards:

ISO 15489 for regime-level records management ISO 15489 for regime-level records management DoD 5015.2 for ECM system-level records managementDoD 5015.2 for ECM system-level records management Metadata, document-access standardMetadata, document-access standard Others standards and regulations appropriate to businessOthers standards and regulations appropriate to business

Page 29: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

2929© 2004, R.E.Barry

StandardsStandardsUnlike laws, regulations, standards are voluntarily adopted or mandated by Unlike laws, regulations, standards are voluntarily adopted or mandated by organizations as policyorganizations as policyISO 15489 Records Management Standard—broad recordkeeping ISO 15489 Records Management Standard—broad recordkeeping regimeregime standardstandard5015.2 Records Management Applications (RMA) Standard (US DoD)—5015.2 Records Management Applications (RMA) Standard (US DoD)—softwaresoftware standard standardMetadata standards required for information discoveryMetadata standards required for information discovery Dublin Core Dublin Core http://dublincore.org/; http://dublincore.org/; W3C Recommendation 10 Feb 2004 W3C Recommendation 10 Feb 2004

www.w3.org/TR/rdf-primer/ www.w3.org/TR/rdf-primer/ Australian National Archives AGLS MetadataAustralian National Archives AGLS Metadata

www.naa.gov.au/recordkeeping/gov_online/agls/metadata_element_set.html www.naa.gov.au/recordkeeping/gov_online/agls/metadata_element_set.html

XFML Core - eXchangeable Faceted Metadata LanguageXFML Core - eXchangeable Faceted Metadata Language http://xfml.org/spec/;+RK http://xfml.org/spec/;+RK elements elements

Long-term document access standardsLong-term document access standards TIFF + ASCII; PDF, PDF-A, OpenReaderTIFF + ASCII; PDF, PDF-A, OpenReader

Page 30: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

3030© 2004, R.E.Barry

Chief CounselsChief CounselsCompliance Laws/RegulationsCompliance Laws/Regulations CFR 21 Part 11 Title 21 Federal Regulations Code: Electronic CFR 21 Part 11 Title 21 Federal Regulations Code: Electronic Records; Electronic Signatures Records; Electronic Signatures www.fda.gov/cder/gmp/index.htm www.fda.gov/cder/gmp/index.htm www.fda.gov/ora/compliance_ref/part11/ www.fda.gov/ora/compliance_ref/part11/

Freedom of Information Freedom of Information www.usdoj.gov/oip/foia_updates/Vol_XVII_4/page2.htm

HIPAA—Health Insurance Portability & Accountability ActHIPAA—Health Insurance Portability & Accountability Act www.hhs.gov/ocr/hipaa www.hhs.gov/ocr/hipaa

ADA Section 508—Americans with Disabilities ActADA Section 508—Americans with Disabilities Act www.section508.gov/ www.section508.gov/

SOX—Sarbanes-Oxley Act of 2002 SOX—Sarbanes-Oxley Act of 2002 www.law.uc.edu/CCL/SOact/soact.pdf www.law.uc.edu/CCL/SOact/soact.pdf www.sec.gov/divisions/corpfin/faqs/soxact2002.htm www.sec.gov/divisions/corpfin/faqs/soxact2002.htm

SEC Rule 17a-4 -- Records to Be Preserved by Certain SEC Rule 17a-4 -- Records to Be Preserved by Certain Exchange Members, Brokers and Dealers Exchange Members, Brokers and Dealers www.law.uc.edu/CCL/34ActRls/rule17a-4.html www.law.uc.edu/CCL/34ActRls/rule17a-4.html

Page 31: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

3131© 2004, R.E.Barry

What’s wrong with this picture?What’s wrong with this picture?

HR

Legal

Finance

Published here with the kind permission of Kevin Lindeberg.

Page 32: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

3232© 2004, R.E.Barry

CIOs/ITDs, ARM Managers: Getting CIOs/ITDs, ARM Managers: Getting recordmaking systems into linerecordmaking systems into lineECMS+ECMS+: also tested, certified/approved RMA: also tested, certified/approved RMA Centralized IT is back; but scalability remains an issueCentralized IT is back; but scalability remains an issue

PairingPairing: Port products of ECMS, EDMS, ERP and other : Port products of ECMS, EDMS, ERP and other recordmaking systems into a trustworthy RMA or recordmaking systems into a trustworthy RMA or ECMSECMS++/EDMS/EDMS++ recordkeeping recordkeeping UpgradeUpgrade recordmaking system to become a trustworthy recordmaking system to become a trustworthy RK systems—embed recordkeeping in business RK systems—embed recordkeeping in business processesprocessesHybridHybrid of above of above Whichever way: implement at enterprise IM-IT architecture Whichever way: implement at enterprise IM-IT architecture

levellevel Implement small. Plan enterprise.Implement small. Plan enterprise.

Page 33: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

3333© 2004, R.E.Barry

Procurement/Acquisition Managers Procurement/Acquisition Managers

Require bidding documents to require bidders toRequire bidding documents to require bidders to:: Commit to maintain 5015.2 certificationCommit to maintain 5015.2 certification Specify which “Additional Baseline Requirements,” Specify which “Additional Baseline Requirements,”

(C2.2.10) features are supported by its product(s) (C2.2.10) features are supported by its product(s) vs. expected of the user organizationvs. expected of the user organization

Specify other compliance requirements supported Specify other compliance requirements supported by its product(s) by its product(s)

Include costs of data conversion from legacy Include costs of data conversion from legacy information (including electronic records) to information (including electronic records) to proposed systemproposed system

Page 34: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

3434© 2004, R.E.Barry

Developers of B2E, B2B, B2CDevelopers of B2E, B2B, B2C

Design systems for ARM complianceDesign systems for ARM compliance

Partner with a certified RMA until you Partner with a certified RMA until you get your ownget your own

Gain 5015.2 or similar Gain 5015.2 or similar certificationcertification for for use in other countriesuse in other countries

Provide further functionality for major Provide further functionality for major compliance requirementscompliance requirements

Adopt ISO/DoD standards for own Adopt ISO/DoD standards for own internal operationsinternal operations

Page 35: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

3535© 2004, R.E.Barry

CIOs and IT DirectorsCIOs and IT Directors

Take your archivist/records Take your archivist/records manager to lunchmanager to lunch

Page 36: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

3636© 2004, R.E.Barry

Archivists & Records Archivists & Records ManagersManagers

Pay for the lunchPay for the lunch

Ask the CIO to pay for the systemAsk the CIO to pay for the system

Page 37: © 2004, R.E.Barry 1 Recordmaking vs. Recordkeeping Systems: Making Sure IT Doesnt Get Blindsided Rick Barry, Principal, Barry Associates Virtual Handouts.

3737© 2004, R.E.Barry

www.mybestdocs.com