Chapter 4 – Information Technology

49170.6 Audit Controls and Managment

• Documented procedures shall be in place for this policy and reviewed annually and updated as needed. Effective organizational management, audit controls, and employee practices include:

  • Documented record retention schedules and archival information of the department.

  • Procedures and anecdotal evidence of data migrations to manage electronic record compatibility with newer systems.

  • Documented encryption and decryption strategies that allow for retrieval of archival electronic records.

  • Employee procedures and documentation of records management and archival processes.

  • Direct observation of archival records organization and storage.