I believe that any research on this topic will reveal that the financial or insurance institutions, not their subcontracted storage vendors bear the regulatory burdens. I don't believe that an insurance firm, or a financial institution can outsource their responsibilities to anyone else. That's why it is so important for those who outsource records storage to understand their requirements first, then to incorporate those requirements into a contract with a vendor. Douglas P. Allen, CRM, CDIA+ -----Original Message----- From: Records Management Program [mailto:[log in to unmask]] On Behalf Of Cynthia Hobson Sent: Wednesday, March 19, 2008 3:47 PM To: [log in to unmask] Subject: Re: [RM] Offsite Storage What is required for offsite storage facility with regard to security of Financial Institution/Insurance records? I can't find the regs regarding the security of the storage facility. Thanks, Cynthia A. Hobson Security (808) 539-7119 List archives at http://lists.ufl.edu/archives/recmgmt-l.html Contact [log in to unmask] for assistance To unsubscribe from this list, click the below link. If not already present, place UNSUBSCRIBE RECMGMT-L or UNSUB RECMGMT-L in the body of the message. mailto:[log in to unmask]