Home > Ask the Data Center Experts > Business continuity Questions & Answers > Restrictions on archiving media used for compliance
Ask The Data Center Expert: Questions & Answers
EMAIL THIS

Restrictions on archiving media used for compliance

Dorian Cougias EXPERT RESPONSE FROM: Dorian Cougias

Pose a Question
Other Data Center Categories
Meet all Data Center Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 21 April 2005
Do governing bodies like the SEC still restrict which types of archiving media we can use in order to stay compliant?

>

No, and they never meant to in the first place. Remember to check all of the final rules on regulations, as well as the commentaries (and responses to the commentaries in the final rule), and you'll see that the regulators don't really care which media is used, as long as the principles of availability, integrity, confidentiality and accountability are met. These principles were outlined long ago in NIST 800-33 by Gary Stoneburner and should serve as a bellwether guideline as to whether or not your media is capable of withstanding the pressures of a preservation order audit.

Also, turn to standards bodies such as ISO and NIST for guidance on media selection because it becomes very important down the road in the Disposition Authority document you'll have to create. Remember, there are going to be records you have to maintain that are going to outlive any media that you are using today (name a hard drive that has lasted over 10 years, or an optical or tape format that has lasted that long, other than DAT, and I don't know anyone who has DAT drives in their tape libraries anymore).

The questions that the auditors will ask you is whether or not the media serves the purpose of good faith retention (does it meet the NIST 800-33 guidelines), and how you are going to handle continuing retention through transfer of media, etc. while preserving the integrity of the archive index.


BROWSE BY TAG
Business continuity,   VIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED CONTENT
Business continuity
Why a disaster recovery plan is a core part of compliance

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Building Green Data Centers
HomeNewsTopicsITKnowledge ExchangeTipsBlogsMultimediaWhite PapersEvents
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2005 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts