Jump to main content.

EPA Records Schedule 128

Status: Final, 08/31/2007

Title: Security of Systems and Data

Program: Information Technology

Applicability: Agency-wide

Function: 404-140 - IT Security

NARA Disposal Authority:

This schedule authorizes the disposition of the record copy in any media (media neutral), excluding any records already in electronic form. Records designated for permanent retention must be transferred to the National Archives in accordance with NARA standards at the time of transfer.

Description:

Consists of records related to maintaining the security of systems and data, including the following types of documents: computer technical manuals, continuity of operations plans, disaster exercise evaluations and recovery plans, risk surveys, security plans for IT infrastructure, vulnerability assessments and studies, risk management analyses, security directives, security policy analyses, and virus handbooks.

Disposition Instructions:

Item a: System security plans and disaster recovery plans

Item b: Documents identifying IT risks and analyzing their impact

Includes risk measurements and assessments, actions to mitigate risks, implementation of risk action plan, service test plans, test files and data.

Guidance:

This schedule applies to records related to security of systems and data for the overall IT infrastructure (as opposed to individual systems). Records related to system security for individual systems are covered by the schedules for the individual systems (e.g., EPA 050 - CERCLIS). Financing of IT resources and services is scheduled as EPA 138 and other system life cycle documentation as EPA 144.

This schedule covers security and disaster recovery plans for IT operations maintained by IT offices. Copies of security plans, disaster recovery plans, and related documents maintained by other offices are covered by EPA 602 for the emergency preparedness program. Reports on disaster exercises and related documents are covered in EPA 603.

Reasons for Disposition:

Retention conforms to the NARA General Records Schedule 24, item 5.

Item c for electronic mail and word processing system copies was deleted 08/16/2006 pursuant to NARA Bulletin 2006-04.

Custodians:

Multiple units

Related Schedules:

EPA 138, EPA 144, EPA 602, EPA 603

Previous NARA Disposal Authority:

Entry: 07/28/2003

EPA Approval: Not applicable

NARA Approval: 04/00/2003

Explanation of Schedule Fields | Search the Schedules | Browse the Schedules
Guidance on Retiring Records

Local Navigation

Jump to main content.