• No results found

ELECTRONIC RECORDS MANAGEMENT

N/A
N/A
Protected

Academic year: 2021

Share "ELECTRONIC RECORDS MANAGEMENT"

Copied!
35
0
0

Loading.... (view fulltext now)

Full text

(1)

ELECTRONIC RECORDS

MANAGEMENT

An Introduction to

MANAGEMENT

Dr. Patricia C. Franks, CA, CRM, IGP

Associate Professor

MARA Program Coordinator

SLIS Internship Coordinator

School of Library & Information Science

San José State University

San José, CA

(2)

Workshop Topics

Part 1 – Electronic Records Management Basics

 Introduction to Electronic Records Management

 Role of Records Management in an Information Governance Strategy

 Electronic Records Management Program Fundamentals

 Records Appraisal, Retention and Disposition

Part 2 – Electronic RIM Systems & Technologies

 Systems Design/Functional Requirements

 Custodial vs. Non-custodial Models of ERM

 Emerging Technology and New Forms of Unstructured Data

 Getting Started with Real World Examples

 Conclusion 2

Electronic Records

Management

Part 1: Introduction

3

Records

Information created, received, and

maintained as

evidence and information

by an organization or person, in

pursuance of

legal obligations

or in

pursuance of

legal obligations

or in

the

transaction of business

.

(3)

Electronic Records

(also digital record; automated record, largely obsolete), n. ~ Data or information that has been captured and fixed for storage and manipulationin an automated system and that requires the use of the system to render it intelligible by a person.

~SAA Glossary of Archival and Records Terminology.

Information captured through electronic means, and which may or may not have a paper record to back it up. Also called machine readable record.

~Business Dictionary.com

5

SAA Glossary of Archival and Records Terminology.

General Characteristics of a

Record

Content

Context

M

d

Context

Structure

6

+

Metadata

~ISO 15489-1:2001

Characteristics of an

Authoritative Record

Authenticity– Proven to be what it purports to

be, created or sent by the person purported to have created or sent it, and created or sent at the time purported.

ReliabilityReliability– Trusted as a full and accurate Trusted as a full and accurate

representation of the transactions, activities, or fact to which it attests.

Integrity– Complete and unaltered.  Usability– Can be located, retrieved, presented,

and interpreted.

7 ~ISO 15489-1:2001

(4)

Records

and Information

Management

The field of management responsible

for the efficient and systematic control

of the creation, receipt, maintenance,

d

d

f

d

use, and disposition of records,

including processes for capturing and

maintaining

evidence of

and

information

about

business activities and

transactions in the form of records.

~ISO 15489-1

8

Electronic Records

Management (ERM)

(1)

The application of records

management principles to electronic

records.

(1)

The management of records using

electronic systems to apply records

management

principles

(e.g., paper,

CDs/DVDs, magnetic tape, audio-visual,

and other physical records)

.

~ARMA Glossary, 4thedition

(5)

Structured Data

11 The primary key (ID in bold) in

each table relates to the same ID in another table.

Everything else!

12

Each different type of file has a

different

file format

(format for encoding

information in a file)

 Adobe Flash (.swf)  Adobe Portable

Document Format (.pdf)

 Autodesk Design Web Format ( dwf)

 Scalable Vector Graphics

(.svg)

 Text (.txt, .text, other file extensions), including source code in Format (.dwf)  Google Earth (.kml, .kmz)  HTML (.htm, .html)  MS Word (.doc, .docx)

 Open Office Spreadsheet (.ods)

 Rich Text Format (.rtf, .wri)

programming languages such as C/C++ (.c, .cc), Java source code (.java), Perl source code (.pl)

 Wireless Markup Language (.wml, .wap)

 XML (.xml)

http://support.google.com/webmasters/bin/ans wer.py?hl=en&answer=35287

(6)

14

Records Management

Lifecycle

The

span of time

of a records from

its creation or receipt, through its

useful life, to its final disposition,

whether that disposition is

destruction or retention as a

historical record.

~ARMA, Requirements for Managing Electronic Messages as Records

15

Creation

Distribution

& Use

Archival

Preservation

Records Management Lifecycle

& Use

Storage &

Maintenance

Retention &

Destruction

Preservation

(7)

Information Lifecycle

Management (ILM)

ILM is not a technology - it is a combination of

processes and technologies that

determines how

data flows through an environment

.

ILM uses a number of technologies and business

methodologies, including Assessment,

Classification, and Automation.

17

http://www.computerworld.com/s/article/79885/The_new_buzzwords_Information _lifecycle_management?pageNumber=1

Creation

Active

Active

Semi-

Final

O

Information Lifecycle Model

Use

Active

Use

Outcome

Information Lifecycle Model, based on model used as a basis for the JISC InfoNet

Information Management infoKits.

http://www.jiscinfonet.ac.uk/information-management/Information-Management.pdf

18

Records Continuum

A

model of archival science

that

emphasizes

overlapping characteristics

of recordkeeping, evidence,

transaction, and the identity of the

creator.

(8)

20

Practical Application:

Vermont State

Archives

21

http://vermont-archives.org/records/vclas/

Practical Application:

Minnesota State

Archives

Electronic Records Management Guidelines /

Electronic Records Management Strategy

g

gy

Minnesota State Archives, Minnesota Historical Society, March 2012, Version 5, pp. 3-4.

http://www.mnhs.org/preserve/records/electronicrecords/docs_pdfs/ElectronicRecordsMa nagementStrategy-v5-march2012.pdf

(9)

To summarize …

 Records provide evidence of business activity.

 Their context, content, structure and related metadata must remain intact.

 To accomplish this, we look to the field of electronic records management.

 Each person who touches the record should collaborate on the electronic records management strategy.

23

Role of Records Management

in an Information Governance

Strategy

Part 2

24

Accountability Framework

Information Governance

Roles Metrics Processes Standards

to encourage desirable behavior

(10)

Goes beyond Records Management

because of the

focus on electronically

stored information (ESI)

, which includes

management of metadata storage

Information Governance

management of metadata, storage

platforms, security classifications, data

privacy attributes, and digital rights

management.

26

Benefits of Effective

Information Governance

Reduce risk

Improve e-discovery and FOIA

p

y

preparedness

Increase transparency, trust &

reputation

Improves information flows

27

What is the difference?

Records management

with its traditional

focus on retention and disposition of both

paper and electronic records is considered a

component of information

governance.

Information governance

focuses on the

preservation of confidentiality, integrity,

availability, and quality of

ALL electronically

stored information. (ESI).

(11)

29

To summarize …

 Information governance is an accountability framework to encourage desirable behavior (Gartner).

 An effective information governance strategy can result in reduced risk, improved e-discovery and FOIA preparedness, increased transparency, trust, and reputation, and improved information flows.

 Records management is considered a subset of information governance.

 The Information Governance Reference Model (IGRM) can be used to promote cross-functional dialogue and collaboration among stakeholders.

(12)

ERM Program Fundamentals

Part 3

32

Phases in Planning & Managing an

ERM Program

1.

Inventory e-records

2.

Link to the business process

3.

Develop a taxonomy

3.

Develop a taxonomy

4.

Create a retention and disposition schedule

5.

Protect vital records

33 Franks, P. (2013). Records and Information Management, p. 162.

ALA/Neal-Schuman Publishers, Chicago, IL.

Electronic Records Inventory – Location of

Electronic Records

 Centralized information systems 

 Decentralized information systems 

 Personal work stations and storage devices 

(13)

Document Management Systems (DMS)

The use of a computer system and software to store, manage and track electronic documents and electronic images of paper based information captured through the use of a document scanner. The term document is defined as "recorded information or an object which can be treated as a unit".

DM systems allow documents to be modified and managed but i ll l k h d i d di i i f i li

35 typically lack the records retention and disposition functionality for managing records. Key DM features are: Check In / Check Out and Locking, Version Control, Roll back, Audit Trail, and Annotation.

http://www.aiim.org/What-is-Document-Management#sthash.JqZEtG1s.dpuf

Content Management System

(CMS)

The term content management system can be used to describe specific types of systems in use for different purposes or within different industries, for example:

• Web content management system

36

• Industry-specific content management system

• Social content management system

Enterprise Content Management

System (ECMS)

Enterprise Content Management System: ECMS are used to

control unstructured content so that the information can be put to use in daily operations. But they are also designed to protect digital documents (primarily text and graphics) that serve as accurate and complete evidence of transactions. ECMS are able to perform five major functions:

• Capture

• Manage

• Store

• Preserve

(14)

Enterprise Information

Systems (EIS)

The applications that constitute an enterprise's existing system for handling companywide information. An enterprise information system offers a well-defined set of services to its clients as l l i f b h E l f i

38 local or remote interfaces or both. Examples of enterprise information systems include enterprise resource planning systems, mainframe transaction processing systems, and legacy database systems. 39

Collect data:

System title

Business Owner

IT Owner

Dates covered

System description

File type & format

Relationship to other

records

Retention

requirements

Supporting files

Backup procedures

File type & format

Quantity and estimated

growth

Hardware

Software

Media characteristics

p p

Provisions for

migration

Reference & retrieval

Restrictions on use

Vital records status

(15)

41

NARA recommends that e-records

are inventoried by information

system versus file series which is

system, versus file series, which is

the traditional approach for physical

records.

42

Electronic Records Inventory and

an ESI Data Map & Data Atlas

A data map must be maintained for

centralized and decentralized systems.

It

t i l d i t

l ll b

ti t l

It must include internal collaboration tools

such as SharePoint.

It must also include information hosted by

social media sites and third-party providers,

including records stored in the clouds.

(16)

A real-world example

44

To summarize …

 Electronic records can reside in various locations including centralized information systems, decentralized information systems, personal workstations and storage devices, and third-party systems.

 Among the systems used for active records are document management systems (DMS), Content Management System (CMS), Enterprise Content Management System (ECMS), and Enterprise Information Systems (EIS).

 NARA recommends that e-records are inventoried by information system, versus file series, which is the traditional approach for physical records.

 Information gathered should include system title, dates covered, hardware, software, supporting files, restrictions on use, and vital records status.

45

Records Appraisal &

Retention

(17)

Records Appraisal

Appraisal(records): The evaluation of a document’s

worth or value for retention or archival purposes, based upon its current or predicted future use(s) for administrative, legal, fiscal, research, or historical purposes

47 purposes.

~ARMA Glossary, 4thedition

Value of Records

• Primary value • Secondary value • Legal value 48 • Legal value

Essential (vital) records may be identified in e-records inventory or the subject of a paper or separate vital records inventory.

An

essential (vital) record

is recorded

information, regardless of format (e.g., paper,

digital, electronic, film, and tape) that contains

information required by an organization to

recreate its legal and financial status and to

Essential (Vital) Records

recreate its legal and financial status and to

preserve the rights and obligations of

stakeholders, including employees, customers,

investors, and citizens.

(18)

Records series

: A group of related records

filed/used together as a unit and evaluated as a

unit for retention purposes; e.g., a

personnel file

Records Series

50

consisting of an application, reference letters,

benefit forms, etc.

~ARMA International, 4thedition

Laws and rules will determine retention requirement; e.g., 6 years after last action unless legal action prevents destruction.

Records Retention & Disposition

Schedule

Records Retention Schedule (RSS): A

comprehensive list of records series

titles indicating for each series the length

51

titles, indicating for each series the length

of time it is to be maintained.

~ARMA International, 4thedition

Texas State Records Retention

Schedule (Revised 4

th

edition)

Effective July 4, 2012

(19)

Benefits of Disposing of

Electronic Records

Mitigating the risk of retaining records that

could be used against the organization (the

proverbial smoking gun)

Reducing the cost of locating the requested

Reducing the cost of locating the requested

records in response to e-discovery or

freedom of information requests

Reducing the cost of inspecting records to

redact personally identifiable information (PII),

such as SSN, credit card numbers, and driver’s

license numbers.

53

Big Buckets

54

Classification of Records as essential,

important, useful, or nonessential

(20)

To summarize …

 Records appraisal builds upon work accomplished during the records inventory and are dependent on the value of the records created and managed within the organization.

 Records have primary value, secondary value, and/or legal value.

 Laws and rules are referred to when developing a records retention

 Laws and rules are referred to when developing a records retention and disposition scheduled based on the retention requirement for a records series.

 Essential (vital) records are those that contain information required by an organization to recreate its legal and financial status and to preserve the rights and obligations of all stakeholders.

56

Systems Design/Functional

Requirements

q

Part 5

57

Implementation Strategies for

Compliant Records Systems

 Designing records systems,  Documenting records systems,

 Training records practitioners and other personnel,

 Converting records to new records systems, formats, g y and controls,

 Setting standards and measuring compliance and performance against them

 Determining retention periods and making decisions about records which have continuing value, in keeping with the regulatory environment.

(21)

Records systems characteristics

Reliability

Integrity

Compliance

Comprehensiveness

Systematic

59 ~ISO 15489-1:2001

Records systems functionality

Document records transactions

Physical storage medium and

protection

Distributed management

Conversion and migration

Access, retrieval and use

Retention and disposition

60 ~ISO 15489-1:2001

ERM SYSTEM GUIDANCE

US DoD 5015.02-STD: Electronic Records

Management Software Applications Design

Criteria Standard

European Modular Requirements for Records

(22)

DoD 5015.2-STD - Electronic

Records Management Software

Applications Design Criteria Standard

 Presents mandatory baseline functional requirements and identifies non-mandatory but desirable features for managing the lifecycle of electronic records.

 Also includes requirements for managing non-electronic (paper) records; simply the capability to create a profile (metadata representation of a physical record) and to include the physical location.

 Is required for acquisition of RMA systems within the DoD. Versions 2 and 3 were endorsed by NARA for use by all Federal agencies.

62

63

(23)

Modular Requirements for Records

Systems (MoReq2010)

 The MoReq2010 specification was designed for users of electronic records, experts in records management, and suppliers of ERMS software outside of the United States.

 May 2011, this version contains functional and nonfunctional requirements for records systems as defined by ISO 15489-1:2001.

 Because it is a modular specification, it can be extended to allow for specialized application in different jurisdictions, markets, and industry sectors, including healthcare, finance, defense, and legal.

65

66

(24)

68

(25)

Utah Department of Administrative Services, Division of State Archives

71

http://www.geomapp.net/docs/ut_ERMBusinessCase.pdf

72

From the June 17, 2013 Open Archival Information System (OAIS): An Introduction

To summarize …

Implementation strategies for compliant records systems are provided in 15489-1:2011.

US DoD 5015.2-STD and MoReq2010 are two de facto standards designed for vendors who develop records management applications.

The ERM model developed by the Utah Department of Administrative Services, Division of State Archives, focuses on identification, ingest, action and preservation of records. The Utah ERM model is similar to the OAIS Basic Model

that involves ingest, management, preservation, and access to records.

(26)

Custodial vs. Non-Custodial

ERM Models

Example: SharePoint 2013

Part 6

74 75 SharePoint Server 2013 – Records Management http://technet.microsoft.com/en-us/library/cc261982.aspx
(27)

77

78

Drawbacks of in place RM

Records are mixed in with non-records

Cannot delete a team site (SharePoint) if even just

one declared record resides there

B ki

R

d

i

b ki

Backing up Records requires backing up

non-records as well

Less security and control of records for records

managers

No easy mechanism to report all

in place records

(28)

Select & Implement an ERMS

Establish the Project Plan

Determine the Business Requirements

Understand the Functional Requirements

Determine if the system will manage purely

physical records, purely electronic records or both

(hybrid)

(hybrid)

Prepare and publish a Request for Information

(RFI) or a Request for Proposal (RFP)

Select a system and vendor

Configure and Implement the ERMS

Monitor the system

Achieve success!

80 http://www.irmt.org/documents/educ_training/term%20modules/IRMT%20TERM%20Module%202.pdf

To summarize …

 Archivists may physically acquire and maintain records andprovide management oversight for records in the custody of the record creators as well as those transferred to the custody of the archives.

 SharePoint Server 2013 is an example of a product that provides the capability of managing records in a records archive or in place (in multiple collaboration sites).

 There are drawbacks of managing records in place using SharePoint, such as the fact that backup up records requires backing up on-records as well.

 Selecting and implementing an ERMS includes developing a project plan and understanding the functional requirements needed.

81

Emerging Technologies &

New Forms of Unstructured

Data

(29)

Emerging technologies to

consider

Social media

Cloud computing

Mobile computing

Big Data

83 http://govsm.com/w/Federal_Agencies

Primary Uses of Social Media

by Government

Share

Inform citizens of public services through

social content (result: increased access to information)

Listen

Engage

Observe, analyze and understand what citizens are sharing (result: improved customer service)

Respond, collaborate and create with citizens to improve public services (involve the community directly in government decision making)

(30)

PROVIDE INFORMATION

86

What does

MEME

mean—and why should

you care?

TRADITIONALLY:

An idea, behavior, style, or usage that spreads from person to person within a culture.

~Merriam-Webster Dictionary

87

Merriam Webster Dictionary

ON THE INTERNET:

MEME is "An idea that spreads like a virus by word of mouth, email, blogs etc.”

~InternetSlang.com

TURN THE TABLES

It's a good thing Obama isn't running for office again: the president, h h b k t b S k lik d d ti j t l t th who has been known to be Spock-like and nerd-courting, just lost the support of both Star Wars and Star Trek fans. Well, except maybe J.J. Abrams.

(31)

89

“The Point” – a community in Salem, MA The game is over but you can visit at

https://communit yplanit.org/salemp oint/

In the news…

Virginia Court Accepts Digitally Notarized Deed

The week of June 10 marked a first in the world of digital records as the Circuit Court of Alexandria, Va., accepted what it believes is the first digitally notarized property deed in the country, according to a report on The Chattanoogan. Chattanooga, Tenn.-based digital signature company SIGNiX partnered with Trustmark Certification Services to allow an American couple in France to complete the digital remote notarization of a property deed American couple in France to complete the digital, remote notarization of a property deed. In addition to making things simpler for customers, managing these types of processes digitally makes records management easier and more secure, Harris said. The types of security and authentication they use, he said, isn’t proprietary, which means customers don’t have to worry about getting tied to SIGNiX as a vendor. “It’s based on international cryptographic standards and that provides a lot of benefits in the long term for the signed document,” he said.

The State of Arkansas is one of the leaders for delivering government services via mobile devices. On http://mobile.ar.gov, citizens can access a wide array of services, such as secure payment processing for real estate taxes, voter registration status, employment opportunity search, and others. The services are available on any smartphone operating platform, including iPhone, Blackberry, Google Android, Windows Mobile, and Palm.

(32)

92

93

One thing to keep in mind is

that social media records

created with and/or posted to

bli i l di

it

public social media sites are

records

in the clouds

.

(33)

To summarize …

 Emerging technologies—including social media, cloud computing, mobile computing, and big data—present new records and information management challenges.

 The primary uses of social media by government agencies on all levels are sharing, listening, and engaging.

 Examples of the integration of records created through and stored in emerging technologies and records created and stored within the enterprise are emerging.

 Services to gather social media content and its metadata and present it to the public exist.

95

Get Started with Real

World Examples

Part 8

96 http://gcn.com/ar ticles/2013/01/0 9/oregon-cloud- statewide- records- management-system.aspx See also PDF file of paradigm Records Management in the Cloud written by Mary Beth Herkert, CRM, CA, Oregon State Archivist,
(34)

Entity Model -From ISO 23081-1: 2006

98 http://vermont-archives.org/records/standards/pdf/MetadataGuideline2008.pdf

(35)

101

To summarize …

Look to real world examples for ideas for your own

electronic records management programs, including:

 Oregon’s cloud-based records management system,  Vermont State Archives & Records Information

Administration’s metadata elements,  North Carolina’s social media archive,  Mecklenburg County’s social media hub, and  Utah’s Award Winning website.

102

Thank you!

Dr. Patricia C. Franks, CA, CRM, IGP

MARA Program Coordinator SLIS Internship Coordinator

School of Library and Information Science San José State University

References

Related documents

Project Objectives EDRMS Enable State Records Compliance Contribute to Secure Electronic Information Obligations Manage Growth of Documents & Records Address current

Optional modules are: Management of Physical (Non-electronic) Files and Re- cords, Disposition of Physical Records, Document Management and Col- laborative Working,

disposition schedules, or other plans which delineate proposed records retention and disposition practices. k) Oversee the continuing disposition of records in accordance

The Swiss Gever is collection of five standards that introduces management of electronic records and paper based records administration abandonment. The five standards are:

recommendations regarding an approach to electronic records management and retention by University Archives. The team has been tasked to make recommendations on two IT operational

A records class is a type of record with custom metadata needed for the handling of the document. Retention

 Unified Records Management (URM) enables everyone to consistently manage all records and information, physical and electronic, through their lifecycle, apply policy for

Most electronic records created and maintained by public offices are of temporary value and may be destroyed when they reach the minimum retention period specified within the public