Electronic Records as Documentary Evidence

This standard applies to those who receive, create, capture, maintain, use, store or dispose of records electronically. This standard applies to private and public sector activities of Persons irrespective of whether such activities are undertaken on a for-profit or not-for-profit basis. This standard is intended for use by those who want to ensure that the recorded information (electronic records and transactions) in their IT Systems is trustworthy, reliable and recognized as authentic. Typical users include a) managers of private and public sector organizations; b) IT Systems and records management system (RMS) professionals; c) all other personnel in organizations, including those responsible for security services and risk management; and d) legal professionals and other Persons responsible for creating and maintaining records. This standard provides principles for developing policies, procedures, practices and documentation for the integrity and authenticity of electronically recorded information to a) ensure that electronic records can reliably support business decisions and exchanges of commitments; b) enhance the admissibility and the weight of electronic records in a court of law, a tribunal or an inquiry; and c) protect the value of electronic records in documenting the content and accountability for decisions and transactions. This standard also defines best practices for electronic storage of business or other recorded information. Therefore, organizations conforming to its recommendations benefit even when evidentiary issues are not relevant. In addition, this standard provides guidelines for a) records management supporting a quality process framework; and b) identifying and implementing appropriate measures to protect the evidentiary value of electronic records, including their incorporation within systems design and management processes.