>>
Only include in a RIM policy what an organization can attain and enforce, so that the company does not find themselves in non-compliance with their own policy.
<<

Blake makes a good point that you do not want to be caught in a situation where you have a policy that you're not following. A point to be made to the contrary is that if you have an aspirational policy and have a roadmap to compliance and can show your work, it might be forgiven if you're found to be not there yet. (Emphasis on "might")

Consider your organization's regulatory environment: What are the requirements of applicable laws & rules, and how specific are they in regard to recordkeeping and retention? What are the expectations of your regulators and likelihood that they will examine your operations and recordkeeping? Then write your policy to what you know they will require. Which also becomes your hammer. (You can name it Mjolnir)

You might also consider keeping your Policy very high-level, like "We will keep record email messages in accordance with our records retention schedule." Then leave the specifics on how staff are to do that to Procedures. Procedures can more easily be updated as you gain capability.

Gary Link
Pittsburgh, PA
[log in to unmask]




The contents of this email are the property of PNC. If it was not addressed to you, you have no legal right to read it. If you think you received it in error, please notify the sender. Do not forward or copy without permission of the sender. This message may be considered a commercial electronic message under Canadian law or this message may contain an advertisement of a product or service and thus may constitute a commercial electronic mail message under US law. You may unsubscribe at any time from receiving commercial electronic messages from PNC at http://pages.e.pnc.com/globalunsub/
PNC, 249 Fifth Avenue, Pittsburgh, PA 15222; pnc.com

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance
To unsubscribe from this list, click the below link. If not already present, place UNSUBSCRIBE RECMGMT-L or UNSUB RECMGMT-L in the body of the message.
mailto:[log in to unmask]