![[logo] US EPA](http://www.epa.gov/epafiles/images/logo_epaseal.gif){kind=logo}
EPA Records Schedule 130
Status: Final, 02/13/2007
Title: Computer Security Incident Handling, Reporting, and Follow-up Records
Program: Information Technology
Applicability: Agency-wide
Function: 404-140 - IT Security
NARA Disposal Authority:
This schedule authorizes the disposition of the record copy in any media (media neutral), excluding any records already in electronic form. Records designated for permanent retention must be transferred to the National Archives in accordance with NARA standards at the time of transfer.
- General Records Schedule 24/7
Description:
Consists of records related to the handling of computer security incidents, reporting and follow-up activities, including reports and documentation of Web site defacement; security hacks, break-ins and failures; improper usage by staff; and virus threats.
Disposition Instructions:
Item a: Record copy
-
Disposable
-
Destroy 3 years after all necessary follow-up actions have been completed.
Guidance:
Reasons for Disposition:
Retention conforms to the NARA General Records Schedule 24, item 7.
Item b for electronic mail and word processing system copies was deleted 08/16/2006 pursuant to NARA Bulletin 2006-04.
Custodians:
Multiple units
Related Schedules:
Previous NARA Disposal Authority:
Entry: 07/30/2003
EPA Approval: Not applicable
NARA Approval: 04/00/2003