Marian

The National Archives of Australia has a publication "General Disposal
Authority for Encrypted Records Created in Online Security Processes"
available at
http://www.naa.gov.au/recordkeeping/disposal/authorities/GDA/PDF/GDA_enc
rypted_records.pdf which basically says "decrypt the signed record,
destroy the original, manage the decrypted version"

Obviously the requirements of your jurisdiction may be different, but it
will show you what is happening in other places.

John Lovejoy
[log in to unmask]
My words, not theirs

-----Original Message-----
From: Ellis, Marian P. [mailto:[log in to unmask]] 
Sent: Saturday, February 17, 2007 6:47 AM
To: [log in to unmask]
Subject: [RM] Researching Electronic Signatures

I am trying to do some benchmarking on electronic signatures, in
particular, developing retention schedules around items necessary to
prove their authenticity.  I am assuming that we should retain
identification credentials for as long as the longest retention period
for the record being e-signed. Have any of you established schedules for
e-sig credentials?  If so, can you share what e-sig credentials you
identified as being necessary to retain, and how long you are retaining
them? It would also be helpful to know what went into your
decision-making process.  Any help you can provide is most appreciated. 
 
Marian P. Ellis
Manager, Research Intelligence and Information Management Services
(RI2MS)
Research Information Services
[log in to unmask]

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance