Record Management, Retention, and Destruction Policy - Version History
The Record Management, Retention, and Destruction is a detail policy template which can be utilized on day one to create a records management process. Included with the policy are forms for establishing the record management retention and destruction schedule and a full job description with responsibilities for the Manager Records Administration.
Version History
Version 1.6 - June 2011
- Updated for latest I-9 record retention requirements
- Updated citations to include Lilly Ledbetter Fair Pay Act
Version 1.5 - August 2010
- Updated Citations for Federal Laws
Version 1.4 - July 2010
- Added Citations for Federal Laws
Version 1.3 - June 2010
- Updated Regulations and Impact Section
- Added citations for Pennsylvania in Appendix
- Added citations for Massachusetts in Appendix
Version 1.2 - February 2010
- Updated Job Description Manager Record Administration
- Added Record Management Best Practices
- Updated Regulations and Impact Section
Version 1.1 - October 2008
- Expanded Email Retention and Destruction Section
- Added Document Retention and Destruction Table in Appendix
Record Management, Retention, and Destruction Policy Template Contents
You areas included with this policy template are:
- Record retention requirements for SOX sections 103a, 302, 404, 409, 801a and 802.
- Policy
- Standard
- Scope
- Responsibilities
- Record Management
- Compliance and Enforcement
- Email Retention and Compliance (Policy)
- Job Description Manager Record Administrator
- 12 forms for Record Retention and Disposition Schedule
- List of Document Types with retention and destruction time periods
- Record Management Best Prqactices
You can download the Table of Contents and selected pages for this policy template.
Backup and Backup Retention Policy
The Backup and Backup Retention policy is an 11 page sample policy that
is a complete policy which can be implemented immediately.
The document is provided in both Word 2003 and Word 2007 format and is easily modified. This policy is included in the Disaster Recovery / Business Continuity Template.
Below is a table from the policy:
Type of Data |
Minimal Backup Policy |
Backup Retention Policy |
System software |
Latest Version plus patches |
Annual (verified) Backup |
Application software |
Latest Version plus patches |
Annual (verified) Backup |
System data |
Daily |
Annual (verified) Backup |
Application Data |
Daily with real time transaction files |
Annual (verified) Backup |
Software licenses, encryption keys, & Protocol Data |
Weekly |
Annual (verified) Backup |
IT Infrastructure Policies
The policies have just been updated to comply with all mandated requirements and include electronic forms that can be Emailed, filled out completely on the computer, routed and stored electronically. A totally solution that uses technology at its best.- CIO IT Infrastructure Policy PDF (All of the policies below which come as individual MS Word files)
- Backup and Backup Retention Policy
- Blog and Personal Web Site Policy (Includes electronic Blog Compliance Agreement Form)
- Incident Communication Plan Policy (Updated to include social networks as a communication path)
- Internet, e-Mail, Social Networking, Mobile Device, Electronic Communications, and Record Retention Policy (Includes 5 electronic forms to aid in the quick deployment of this policy)
- Mobile Device Access and Use Policy
- Patch Management Policy
- Outsourcing Policy
- Record Management, Retention, and Destruction Policy
- Sensitive Information Policy (HIPAA Compliant and includes electronic Sensitive Information Policy Compliance Agreement Form)
- Service Level Agreement (SLA) Policy Template with Metrics
- Social Networking Policy
- Telecommuting Policy
- Travel and Off-Site Meeting Policy
- IT Infrastructure Forms





