![[logo] US EPA](http://www.epa.gov/epafiles/images/logo_epaseal.gif){kind=logo}
EPA Records Schedule 129
Status: Final, 02/13/2007
Title: User Identification, Profiles, Authorizations, and Password Files
Program: Information Technology
Applicability: Agency-wide
Function: 404-140 - IT Security
NARA Disposal Authority:
This schedule authorizes the disposition of the record copy in any media (media neutral), excluding any records already in electronic form. Records designated for permanent retention must be transferred to the National Archives in accordance with NARA standards at the time of transfer.
- General Records Schedule 24/6
Description:
Consists of records related to user identification, profiles, authorizations, security logs, and passwords.
Excludes: Records relating to electronic signatures.
Disposition Instructions:
Item a: Systems requiring special accountability
Includes those systems containing information that may be needed for audit or investigative purposes and those that contain classified records.
-
Disposable
-
Destroy inactive records 6 years after user account is terminated or password is altered, or when no longer needed for investigative or security purposes, whichever is later.
Item b: Routine systems
Includes those not covered by item a.
-
Disposable
-
Destroy when no longer needed for administrative, legal, audit, or other operational purposes.
Guidance:
Reasons for Disposition:
Retention conforms to the NARA General Records Schedule 24, item 6
Item c for electronic mail and word processing system copies was deleted 08/16/2006 pursuant to NARA Bulletin 2006-04.
Custodians:
Multiple units
Related Schedules:
Previous NARA Disposal Authority:
Entry: 07/30/2003
EPA Approval: Not applicable
NARA Approval: 04/00/2003