Guidance Document: Selecting a Commercial Records Storage Provider



Similar documents
GUIDELINES. under THE PRIVATE HOSPITALS AND MEDICAL CLINICS ACT (1980) AND REGULATIONS (1991) MINISTRY OF HEALTH SINGAPORE

GENERAL OPERATING PRINCIPLES

Euler Hermes Services Ireland Ltd. Terms & Conditions of Business for your Debt Collection Services

2. Use of Internet attacks in terrorist activities is termed as a. Internet-attack b. National attack c. Cyberterrorism d.

European Convention on Social and Medical Assistance

Lesson 1: Getting started

Would your business survive a crisis? A guide to business continuity planning.

ORGANIZER QUICK START GUIDE

National Firefighter Ability Tests And the National Firefighter Questionnaire

Active Directory Service

JCM TRAINING OVERVIEW Multi-Download Module 2

Enterprise Digital Signage Create a New Sign

Corrigendum-II Dated:

Application Note Configuring Integrated Windows Authentication as a McAfee Firewall Enterprise Authenticator. Firewall Enterprise

Student Access to Virtual Desktops from personally owned Windows computers

Architecture and Data Flows Reference Guide

European Convention on Products Liability in regard to Personal Injury and Death

OxCORT v4 Quick Guide Revision Class Reports

Maximum area of polygon

Word Wisdom Correlations to the Common Core State Standards, Grade 6

TOA RANGATIRA TRUST. Deed of Trust

Allianz Insurance plc. Complete Business. Policy Wording

Complete Property Owner

Qualmark Licence Agreement

The Integrated Competencies for Dietetic Education and Practice ICDEP. Developed by the Partnership for Dietetic Education and Practice

End-to-end development solutions

The art of Paperarchitecture (PA). MANUAL

Allianz Insurance plc. Complete Business. Policy Wording

Unit 5 Section 1. Mortgage Payment Methods & Products (20%)

Allianz Insurance plc. Complete Flatowner. Policy Wording

REVIEW OF THE EMPLOYMENT RELATIONS ACT 2000: PART 9 PERSONAL GRIEVANCES

Revised products from the Medicare Learning Network (MLN) ICD-10-CM/PCS Myths and Facts, Fact Sheet, ICN , downloadable.

S-Scrum: a Secure Methodology for Agile Development of Web Services

TAX RETURN FILING INSTRUCTIONS

MATH PLACEMENT REVIEW GUIDE

Return of Organization Exempt From Income Tax

KEY SKILLS INFORMATION TECHNOLOGY Level 3. Question Paper. 29 January 9 February 2001

OUTLINE SYSTEM-ON-CHIP DESIGN. GETTING STARTED WITH VHDL August 31, 2015 GAJSKI S Y-CHART (1983) TOP-DOWN DESIGN (1)

Start Here. Quick Setup Guide. the machine and check the components. NOTE Not all models are available in all countries.

VMware Horizon FLEX Administration Guide

Allianz Insurance plc. Complete Contractor. Policy Wording TRADESMAN INSURANCE

Angles 2.1. Exercise Find the size of the lettered angles. Give reasons for your answers. a) b) c) Example

Audit Regulations. (This includes all amendments to the 2008 printed version of the Regulations as previously notified to firms in Audit News 53)

the machine and check the components Black Yellow Cyan Magenta

CHAPTER 31 CAPACITOR

INSTALLATION, OPERATION & MAINTENANCE

VMware Horizon FLEX Administration Guide

Combined Liability Insurance. Information and Communication Technology Proposal form

How To Set Up A Network For Your Business

You should have the following for this examination a multiple-choice answer sheet a pen with black or blue ink

Start Here. Quick Setup Guide. the machine and check the components DCP-9020CDW

ELECTROVALUE: a LCA Approach

- DAY 1 - Website Design and Project Planning

Health insurance exchanges What to expect in 2014

Quick Guide to Lisp Implementation

THE ROYAL CORNWALL HOSPITALS NHS TRUST RESPONSE TO INFORMATION REQUEST. Date Request Received: 24 November 2014 FOI Ref: 605

Car insurance. Policy Booklet. In association with

the machine and check the components Starter Ink Cartridges Basic User s Guide Product Safety Guide Telephone Line Cord

Boğaziçi University Department of Economics Spring 2016 EC 102 PRINCIPLES of MACROECONOMICS Problem Set 5 Answer Key

Allianz Insurance plc. Motor Trade Select. Policy Wording

2. Transaction Cost Economics

McAfee Network Security Platform

FCC Form 471 Do not write in this area. Approval by OMB

Data Security 1. 1 What is the function of the Jump instruction? 2 What are the main parts of the virus code? 3 What is the last act of the virus?

7 mm Diameter Miniature Cermet Trimmer

The Principle of No Punishment Without a Law for It LEARNING OBJECTIVES: CRLA.GAAN:

1 Fractions from an advanced point of view

Health insurance marketplace What to expect in 2014

How To Organize A Meeting On Gotomeeting

Reasoning to Solve Equations and Inequalities

BSA E-Filing - Report of Foreign Bank and Financial Accounts (FBAR) THEFREE

State-Funded Indigent Defense Services, 1999

Allianz Insurance plc. Motor Trade Select. Policy Wording

DiaGen: A Generator for Diagram Editors Based on a Hypergraph Model

Recognition Scheme Forensic Science Content Within Educational Programmes

Transcription:

G C P R e o r s M n g e r s A s s o i t i o n Guine Doument: Seleting Commeril Reors Storge Provier 1 Seleting Commeril Reors Storge Provier 1.1 Generl Remrks 1.1.1 The following is heklist to ssist in the seletion n evlution of rhive storge filities, storge lotions n infrstruture, prtiulrly if these re ontrte to ommeril reors storge proviers. 1.1.2 This heklist is not intene to e omprehensive list of requirements n shoul not e interprete s "mntory" or "minimum". It ontins list of stnr onsiertions to mke when estlishing ommeril reors storge ontrt of suitle qulity. 1.1.3 These onsiertions go eyon the seletion of the physil reors storge fility s there re other spets tht re eqully importnt to ensure tht the servie will e suitle in its entirety for the ompny's requirements; it is just piee in the overll proess. The primry onsiertion to e me in the seletion of ommeril reors storge provier is to ontrt high qulity servies tht minimize risk n filitte ompline. 1.1.4 This heklist shoul e use in onjuntion with the Compny's internl rhiving n retrievls ontrols; it oes not negte the nee for these. Responsiility for ensuring the seurity n preservtion of- n ess to- the Compny's reors hel with ommeril reors storge proviers remins with the Compny n the funtion mnging the reors mngement servies. Internl reors mngement ontrols shoul ensure ommeril reors storge proviers eliver optimum enefit to the ompny. GCP-RMA Guine Doument: Seleting Commeril Reors Storge Provier v1.0 2012-03-27 1

1.2 Commeril Reors Storge Provier Seletion Proess 1.2.1 Where they exist, the Compny shoul follow n use its internl SOPs regring the seletion of ommeril reors storge proviers. In ny event, the SOP (or other proess) for the seletion of thir-prty venors shoul ientify severl ommeril reors storge proviers n selet from them numer for evlution. Post evlution single ommeril reors storge provier shoul e sujet to omprehensive QA uit prior to mking finl eision. 1.2.2 The Compny shoul estlish whether or not the ommeril reors storge provier mnges reors for other phrmeutil ompnies or hs experiene or unerstning of pplile GxP stnrs. If not, the Compny shoul enquire whether or not the ommeril reors storge provier mnges reors for ompnies from other regulte inustries. 1.2.3 The Compny shoul utilise its own prourement eprtment to ommene prourement n tener negotitions 1.2.4 The Compny shoul e minful uring the seletion proess tht low ost storge hrges shoul not e the min eterminnt of seletion of ommeril reors storge provier. There re host of other hrges tht must lso e onsiere. Moreover, stisftory long-term reltionship with the ommeril reors storge provier is of equl -if not greter- importne. Less out prie more out long-term working reltionship 2 Contrt 2.1 Generl 2.1.1 The Compny shoul ensure tht onfientility greements re in ple with the ommeril reors storge provier efore ommening negotitions 2.1.2 If the ontrt is written y the ommeril reors storge provier, the Compny shoul supplement this with ontrt n servie level greements to ensure tht the Compny's nees re eing met. The Compny shoul not ept the ommeril reors storge provier s ontrt without review n negotition. GCP-RMA Guine Doument: Seleting Commeril Reors Storge Provier v1.0 2012-03-27 2

2.1.3 The Compny shoul ensure tht speifie lotion is esignte for the Compny's reors. The ommeril reors storge provier must e ontrtully oun to notify n otin greement from the ompny efore moving its reors to lotion other thn the speifie lotion. Speifition of lotion. Oligtion to notify n otin greement from the Sponsor if ouments re move to nother lotion. 2.1.4 The Compny shoul ensure tht there is luse in the ontrt to stte tht the Compny's t n the Compny's reors re owne y the Compny. "Dt" n "reors" inlues ut is not limite to: physil reors, reor ontiners, roe informtion, mett, t out the Compny's reors hel on ommeril reors storge provier tses (e.g. historil movement t) n ll other informtion pture to ientify reors n their movements. 2.1.5 The Compny shoul ensure tht there is luse in the ontrt to stte tht islosure of the Compny's t n the Compny's reors to thir prties requires the Compny's prior, express onsent. 2.1.6 The Compny shoul ensure tht there is luse in the ontrt to stte tht the Compny's t n the Compny's reors re sujet to t protetion legisltion n my not e esse y ny prty other thn the Compny. 2.2 Priing 22 2.2.1 The Compny shoul ensure tht osts re fixe for speifie perio (generlly one yer) n re ssoite with trnsprent inrement inex (e.g. the Consumer Pries Inex or Retil Pries Inex ) s ontrt termintion n swith of estlishe rhiving proeures will e expensive ue to internl n externl osts n efforts. 2.3 Insurne 2.3.1 The Compny shoul therefore onsult with their own insurers to etermine n pproprite level of insurne to over the risks ssoite with the loss of reors (e.g. osts to reover or reonstrut reors). The stnr insurne offering from ommeril reors storge proviers overs only the slvge vlue of reors; this is insuffiient to ensure the reovery of lost reors. GCP-RMA Guine Doument: Seleting Commeril Reors Storge Provier v1.0 2012-03-27 3

2.4 Monitoring n Issue Hnling 2.4.1 The Compny shoul estlish n esltion proeure with the ommeril reors storge provier to el with unforeseen irumstnes 2.4.2 The Compny shoul gree in vne the proess with the ommeril reors storge provier for hnling n oumenting hnges to the ontrt fter the ontrt hs een let. Hnling n oumenting hnges in the proess, fter signing ontrt 2.4.3 The Compny shoul estlish single point of ontt with the ommeril reors storge provier for ll enquiries n k-up to ontts on oth sies. 2.5 Contrt Termintion 2.5.1 The Compny shoul ensure tht stisftory mehnisms n ontrols re estlishe regring ny future lrge volume trnsfers or relotions, prtiulrly in reltion to ulk withrwls or ontrt termintion. 2.5.2 The Compny shoul gree in vne the hrges regring ny future lrge volume trnsfers or relotions, prtiulrly in reltion to ulk withrwls or ontrt termintion. 3 Compny Detils 3.1 Generl 3.1.1 The Compny shoul stisfy itself tht the ommeril reors storge provier: hs een in the ommeril reors storge usiness for stisftory perio. In orer not to isvntge newly estlishe ommeril reors storge provier or one for whom no referrl informtion or history is ville, the Compny my hoose to institute loser level of monitoring; GCP-RMA Guine Doument: Seleting Commeril Reors Storge Provier v1.0 2012-03-27 4

e f g hs suffiient (inter)-ntionl spre to ter for the Compny's urrent n future nees. It shoul e note tht t protetion issues my pply if the ommeril reors storge provier wishes to store t in n inpproprite jurisition; hs suffiient long-term, full-time, ppropritely trine employees to ter for the Compny's urrent n future nees. A high turnover of stff woul inite trnsient stff who my e employe vi n geny or on short-term ontrt n who my onsequently e less qulifie, less experiene or less trine thn employees of the ommeril reors storge provier. hs suffiient emonstrle experiene s ommeril reors storge ontrtor to ter for the Compny's urrent n future nees hs experiene of eing le to stisftorily respon to offiil uits y regultory oies hs the ility to seurely hnle highly onfientil reors hs the ility to hnle reors of high intelletul property worth 3.2 Stff Qulifition (Speifilly for Involve Sites/Filities) 3.2.1 The Compny shoul stisfy itself tht the ommeril reors storge provier hs eviene: tht estlishe proesses re in ple regring stff seletion tht estlishe proesses re in ple regring stff vetting tht estlishe proesses re in ple regring su-ontrting regring stff retention n volumes of temporry stff GCP-RMA Guine Doument: Seleting Commeril Reors Storge Provier v1.0 2012-03-27 5

e of estlishe proesses to ensure tht stff re ppropritely trine n qulifie for their roles. NB Aess ton hnling of- iniviul GxP ouments will require ifferent qulifitions over n ove the logistil hnling of sele oxes. 3.3 Qulity Mngement 3.3.1 The Compny shoul stisfy itself tht the ommeril reors storge provier hs eviene: of suffiient qulity ontrol systems eing estlishe n followe (e.g. QA funtion, written proeures, trining progrmme) tht relevnt stnrs re institute in ll pplile lotions (e.g. ISO-9001, ISO-11799, GLP ertifite) 4 Risks n Risk Mitigtion 4.1 Generl 4.1.1 The Compny shoul stisfy itself tht the ommeril reors storge provier hs in ple stisftory: risk mngement mesures n plns usiness ontinuity plns 4.2 Environment 4.2.1 The Compny shoul stisfy itself tht the ommeril reors storge provier is lote t site tht is suffiiently istnt of free of potentil hzrs pose y: mjor trnsport routes (e.g. rilwys, irports, motorwys) mjor wterwys (e.g. nls, lkes, rivers, ses, floo plins) GCP-RMA Guine Doument: Seleting Commeril Reors Storge Provier v1.0 2012-03-27 6

inustries or servies using voltile sustnes (e.g. petroleum, gs) the nturl environment (e.g. floo plins, mrshes, forests) 4.3 Filities 4.3.1 The Compny shoul stisfy itself tht eh of the ommeril reors storge provier premises (in loing oks n nillry opertionl res): e f g is uilt or pte to e suitle for storing reors (purpose-uilt, stn-lone uilings without seprte floors re preferle). is esigne to prevent or minimize risks (e.g. wetherproof, wterproof, fire-resistnt, vermin proof, protete ginst intrusion) hs fility supply systems seprte from the storge re (e.g. heting, eletriity, wter, sewerge et) Is suffiiently protete (e.g. wether protetion, fire, seurity) is sujet to regulr oumente mintenne (e.g. lrms) is stisftorily mintine (e.g. len, tiy n uniform in pperne) is ple of storing non-stnr size items, shoul the nee rise 4.4 Seurity 4.4.1 The Compny shoul stisfy itself tht eh of the ommeril reors storge provier premises (in loing oks n nillry opertionl res) offers stisftory seurity for: perimeter ess (e.g. ring fene, seurity gtes, properly mnge) GCP-RMA Guine Doument: Seleting Commeril Reors Storge Provier v1.0 2012-03-27 7

internl wrehouse ess (e.g. iometri, keyp, swipe r et) whih shoul e restrite to nominte iniviuls n e le to proue reor of ess to the rhive inluing stff nme n time of ess visitors (who shoul e heke, oumente n esorte ll times) site n uiling ess (whih shoul inlue 24-7-365 monitoring vi regulrly servie motion etetors, CCTV surveillne, seurity gurs, lrm systems onnete to polie sttion or seurity servie) 4.5 Fire 4.5.1 The Compny shoul stisfy itself tht eh of the ommeril reors storge provier premises (in loing oks n nillry opertionl res) offers stisftory protetion ginst fire y: e f g h i j prohiiting smoking in working n storge res limiting potentil soures of [prtiulrly flmmle] heting evies (eg storge heters) prohiiting the storge of explosive or inflmmle mterils the instlltion of fire-rte wlls n oors ensuring tht stff re trine in fire etetion n suppression regulr ssessment n inspetion y the fire servie. loting fire extinguishers & hoses ppropritely hving suffiiently esigne utomte, intelligent sprinkler systems n smoke etetors in ple hving shelves n storge rks onstrute of fire resistnt mterils hving fire/het/smoke etetion n lrm systems instlle n onnete to nerest fire sttion GCP-RMA Guine Doument: Seleting Commeril Reors Storge Provier v1.0 2012-03-27 8

k l hving regulrly teste n oumente lrm tests hving gs fire suppression protete rooms e.g. using Inergen/FM200 or similr (if require) 4.6 Floo 4.6.1 The Compny shoul stisfy itself tht eh of the ommeril reors storge provier premises (in loing oks n nillry opertionl res) offers stisftory protetion ginst floo y: hving suffiient spe etween floor n shelves to protet ginst risks from the groun (floo, fire wter) voiing overhe wter servies in the floor ove (eg wter pipes, servie pipes n sewerge pipes) hving storge res tht re not lote in n re lower thn the surrouning groun (sement) hving wter sensors/etetors instlle, mintine, inspete n teste 4.7 Storge Conitions 4.7.1 The Compny shoul stisfy itself tht eh of the ommeril reors storge provier premises (in loing oks n nillry opertionl res where relevnt) offers stisftory storge onitions tht: e llow the estlishment of Compny eite spe (to mitigte ginst loss this is NOT reommene) provie suffiient pity for future nees hve suffiient ontrols in ple to prevent ross-ontmintion o not permit the storge of non-pper items with pper reors provie shelving of suffiient qulity in terms of uil, mterils, nhorge n hzr resistne GCP-RMA Guine Doument: Seleting Commeril Reors Storge Provier v1.0 2012-03-27 9

f g h i offer temperture & humiity ontrols tht re regulrly monitore, mintine n reore ( log of mesurement reorings n CAPA reors shoul e mintine) llow ir to irulte to provie suffiient ventiltion n prevent moul, ust n other pollutnts enefit from regulrly onute n oumente pest monitoring progrm offer environmentlly soun filities for eletroni mei storge if require tht meet pplile stnrs liste in the stnrs ppenix. 4.8 Business Continuity 4.8.1 The Compny shoul stisfy itself tht the ommeril reors storge provier hs oumente eviene of: plns for isster response n reovery, whih shoul exten eyon personnel sfety n inlue ll spets of usiness ontinuity). The ommeril reors storge provier shoul provie oumenttion to emonstrte tht the plns hve een teste n psse ontrts n/or reltionships with oument reovery proviers in the event of mge to the Compny's ouments GCP-RMA Guine Doument: Seleting Commeril Reors Storge Provier v1.0 2012-03-27 10

5 Storge Logistis 5.1 Storge 5.1.1 The Compny shoul stisfy itself tht the ommeril reors storge provier hs oumente eviene of: e proeures tht prevent the reors eing ientifie s elonging to the Compny (s first line of efene to protet itself, the Compny shoul use unmrke reors n oxes n permit only non-compny speifi, unique ientifier n roe to e ffixe to its reors n oxes). the lotions of multiple sites t whih the Compny's reors re lote (where permitte) the proeures use y the ommeril reors storge provier uring reors retrievl, espeilly proeures to ensure onfientility when retrieving loose files from oxes n when repling mge oxes (these proeures shoul inlue instrutions for otining written uthoristion from the Compny to el with oxes tht re seurity sele) the proeures use when hnling reors to ensure tht they re hnle with re n pproprite equipment the mesures in ple to voi short n long term mge to the reors (refer to the snrs liste in Appenix1) 5.2 Reors Ingestion/Inventory 5.2.1 The Compny shoul stisfy itself tht the ommeril reors storge provier hs oumente eviene of: the tehniques n proesses employe to pture the movements of reors, inluing inherent mehnisms use to ensure qulity, prevent errors n mitigte ginst risk. The mehnisms will inlue ut not e limite to: roes or RFID lels n ompnying reers GCP-RMA Guine Doument: Seleting Commeril Reors Storge Provier v1.0 2012-03-27 11

e f tses n IT systems (in vlition, kup n reovery proeures, usiness ontinuity plnning) proeures mehnisms in ple to pture itionl mett e.g. (prout nme, oument type, retention perio) the pplition use y the ommeril reors storge provier to trk reors n whether or not this is interoperle with the Compny's reors trking system (e.g. roe reility) proeures use to generte reports n ny ssoite osts so tht the Compny n effet perioi reonilition reports 5.3 Trnsfers 5.3.1 The Compny shoul stisfy itself tht the ommeril reors storge provier n provie oumentry eviene tht: it mintins uitle hin of ustoy oumenttion (e.g. rel-time trking reeipts n reports) no ouments or reors re left in vehiles overnight.. only own trnsport or Compny pprove ouriers re use to trnsport reors. The irumstnes uner whih trnsporttion my e su-ontrte shoul e gree prior to use. the use of trnsport hus use for elivery n olletion is equtely ontrolle y proeures (e.g. vi flowhrt) NB For GCP reors prtiulrly, the use of hus is not reommene not lest euse the hu storge filities my not hve een sujet to evlution, inspetion or uit n my not provie suitle seurity, protetion or environmentl onitions. GCP-RMA Guine Doument: Seleting Commeril Reors Storge Provier v1.0 2012-03-27 12

6 Servies 6.1 Generl 6.1.1 The Compny shoul stisfy itself tht the ommeril reors storge provier provies: e hours of opertion suite to the Compny's nees methos of opertion n ommunitions suite to the Compny's nees (e.g. e-mil, telephone, fx, we-se online orering, ll entres, iret to site) equte rrngements for emergeny out of hours eliveries mximum retrievl times for regulr n urgent eliveries n olletions filities for viewing oxes on site 6.2 Supplies 6.2.1 The Compny shoul stisfy itself tht the ommeril reors storge provier provies: supplies of suitle qulity n prie (e.g. oxes, files, lels, roes) NB It is not reommene tht the Compny purhses seurity sels from the ommeril reors storge provier sels stisftory elivery timesles on supplies oxes esigne to permit the use of seurity sels without using mge to the ox GCP-RMA Guine Doument: Seleting Commeril Reors Storge Provier v1.0 2012-03-27 13

6.3 Inexing 6.3.1 The Compny shoul onfirm with the ommeril reors storge provier: the level n ost of ny inexing the Compny requires the ommeril reors storge provier to unertke 6.4 Retrievl 6.4.1 The Compny shoul stisfy itself tht the ommeril reors storge provier provies: tse of the Compny's reors tht is essile to the Compny for the purposes of orering olletions n eliveries n mintining stok reor n n uitle history of the movements of the Compny's reors NB For seurity n onfientility resons it is reommene tht the Compny provies the ommeril reors storge provier with miniml informtion regring the ontent of the Compny's reors perioi reports on the Compny's reors. The formt n hrges ssoite with these reports shoul e gree up front 6.5 Delivery/Colletion 6.5.1 The Compny shoul stisfy itself tht the ommeril reors storge provier provies: sme y eliveries n olletions urgent eliveries within gree timelines orering vi n online we portl, e-mil or telephone or omintion of one or mny tht onform to the Compny's seurity requirements eite elivery vn n ourier servies (these my e stellite trke) GCP-RMA Guine Doument: Seleting Commeril Reors Storge Provier v1.0 2012-03-27 14

6.6 Destrution 6.6.1 The Compny shoul stisfy itself tht the ommeril reors storge provier provies: if require, seure, onfientil n environmentlly responsile estrution servies tht inlues the provision of ertifites of estrution n re omplint with pplile stnrs (plese refer to Appenix 1) Stnrs Appenix BS 5454:2000 Reommentions for the storge n exhiition of rhivl ouments BS 1153:1992 Reommentions for proessing n storge of silver-geltine-type mirofilm BS EN 15713:2009 Seure estrution of onfientil mteril: Coe of prtie ISO 9706:1994 Informtion n oumenttion: Pper for ouments -requirements for permnene ISO 11799:2003 Informtion n oumenttion: Doument storge requirements for rhive n lirry mterils ISO 16245:2009 Informtion n oumenttion: Boxes, file overs n other enlosures, me from ellulosi mterils, for storge of pper n prhment ouments MHRA GLP Guine on Arhiving GCP-RMA Guine Doument: Seleting Commeril Reors Storge Provier v1.0 2012-03-27 15