IM/IS POLICY RECORDS MANAGEMENT

Similar documents
Council Policy. Records & Information Management

Records Management Policy.doc

Scotland s Commissioner for Children and Young People Records Management Policy

Approved by: Vice President, Human Resources & Corporate Resources and Vice President, Treasury & Compliance Date: October 14, 2009

COUNCIL POLICY R180 RECORDS MANAGEMENT

Records Management - Department of Health

Government records findings--recognition of public policy.

Chapter RECORDS MANAGEMENT Sections:

RUTGERS POLICY. Approval Authority: Executive Vice President for Academic Affairs and Senior Vice President for Administration

Records and Information Management. General Manager Corporate Services

CORK INSTITUTE OF TECHNOLOGY

WEST LOTHIAN COUNCIL RECORDS MANAGEMENT POLICY. Data Label: Public

Policy. Government of Newfoundland and Labrador (GNL)

RECORDS MANAGEMENT POLICY

Information Management Policy for The Cayman Islands Department of Tourism

West Midlands Police and Crime Commissioner Records Management Policy 1 Contents

Association of Professional Geoscientists of Ontario Records Management Policy

Records Management - Council Policy Version 2-28 April Council Policy. Records Management. Table of Contents. Table of Contents... 1 Policy...

Managing Government Records A Cooperative Undertaking. An Introduction to Kentucky s Public Records Management Law

PLEASE NOTE. For more information concerning the history of this Act, please see the Table of Public Acts.

Policy Document RECORDS MANAGEMENT POLICY

REGIONAL COUNCIL OF GOYDER. Records Management

Records Management Plan. April 2015

Records Management Policy

Records Management Policy

RECORDS MANAGEMENT POLICY

COLORADO COMMUNITY COLLEGE SYSTEM SYSTEM PRESIDENT S PROCEDURE ELECTRONIC COMMUNICATIONS MANAGEMENT AND RETENTION PROCEDURES

How To Manage Records And Information Management In Alberta

Information Governance Framework. June 2015

Records Management. 1. Introduction. 2. Strategic Plan Desired Outcomes

9. GOVERNANCE. Policy 9.8 RECORDS MANAGEMENT POLICY. Version 4

State of Florida ELECTRONIC RECORDKEEPING STRATEGIC PLAN. January 2010 December 2012 DECEMBER 31, 2009

Disposal Schedule for Functional records of the Electricity Supply Industry Expert Panel

Why organizations need to archive ? The underlying reasons why corporate archiving is important

Office of the Data Protection Commissioner of The Bahamas. Data Protection (Privacy of Personal Information) Act, A Guide for Data Controllers

Basic Records Management Practices for Saskatchewan Government*

Disposal Schedule for Asbestos CompensationTribunal

Information Management Policy for The Tax Information Authority

UNIVERSITY OF NAIROBI POLICY ON RECORDS MANAGEMENT

How To Ensure Health Information Is Protected

Corporate Records Management Policy

TOWN OF COTTESLOE POLICY MANAGEMENT

1. Each employee is responsible for managing college records in a responsible and professional manner.

4.10 Information Management Policy

RECORDS MANAGEMENT POLICY MANUAL

YORK REGION DISTRICT SCHOOL BOARD. Policy and Procedure #160.0 Records and Information Management

CCG: IG06: Records Management Policy and Strategy

District Council of Yankalilla

Administrative Procedures Memorandum A2005

NCI-Frederick Safety and Environmental Compliance Manual 03/2013

Records Management plan

Queensland recordkeeping metadata standard and guideline

Life Cycle of Records

Cultural Human Resources Council (CHRC) Personal Information Protection and Electronic Documents Act (PIPEDA) Privacy Policy

Information and records management. Purpose. Scope. Policy

MANAGING ELECTRONIC RECORDS IN GOVERNMENTAL BODIES: POLICY, PRINCIPLES AND REQUIREMENTS

POLICY FOR PRESERVATION / ARCHIVAL OF DOCUMENTS

MENTAL HEALTH TRIBUNAL FOR SCOTLAND: RECORDS MANAGEMENT POLICY. Ensuring Information is Accurate and Fit for Purpose

Non-Profit Records Management Tool Kit

Polices and Procedures

Information Management Advice 50 Developing a Records Management policy

Management: A Guide For Harvard Administrators

CENTRALISED DOCUMENT MANAGEMENT SYSTEM (CDMS)

INTERNATIONAL SOS. Data Retention, Archiving and Destruction Policy. Version 1.07

LSUHSC-NEW ORLEANS RECORDS RETENTION AND DISPOSITION POLICY

RECORDS MANAGEMENT POLICY

Taking care of what s important to you

Chester Beatty Library Records Management Policy

RECORDS MANAGEMENT POLICY

ADMINISTRATIVE DATA MANAGEMENT AND ACCESS POLICY

Records Management Policy

Metadata, Electronic File Management and File Destruction

The Archives and Public Records Management Act

TEMPLE UNIVERSITY POLICIES AND PROCEDURES MANUAL

Archiving and Backup - The Basics

Information Security Policy

THE UNIVERSITY OF THE WEST INDIES Electronic Mail & Messaging Services Policy 1. Introduction

Information Security Policy

Records management policy. Document author Assured by Review cycle. Audit and Risk Commitee. 1. Introduction Purpose or aim Scope...

DePaul University Records Management Manual November 1, 2014

TERRITORY RECORDS OFFICE BUSINESS SYSTEMS AND DIGITAL RECORDKEEPING FUNCTIONALITY ASSESSMENT TOOL

Joint Universities Computer Centre Limited ( JUCC ) Information Security Awareness Training- Session One

Friends of Black Rock High Rock Records Management Policy

INFORMATION TECHNOLOGY SECURITY STANDARDS

a Business Owners: Senior staff members with delegated accountability for the collection, dissemination and security of data.

WHEREAS, the City of Shavano Park wishes to clarify the procedures for the organization, maintenance, disposition and destruction of City Records;

Records Management Policy

Student Records. 4. Data Security: Upper Yarra Community House Inc. will protect the personal information it

Data Protection Policy

ARMAGH CITY, BANBRIDGE AND CRAIGAVON BOROUGH COUNCIL GPRC/P4.0/V1.0.

LONDON DOWNTOWN CLOSED CIRCUIT TELEVISION (CCTV) PROGRAM CODE OF PRACTICE CITY OF LONDON, ONTARIO

Records Management Policy & Guidance

Best Practices for Protecting Individual Privacy in Conducting Survey Research (Full Version)

Information Management Policy for The Treasury Department

Policy Rules for Business Partners of Siemens

Information Management Policy CCG Policy Reference: IG 2 v4.1

Taking care of what s important to you

INFORMATION AND DOCUMENTATION RECORDS MANAGEMENT PART 1: GENERAL IRISH STANDARD I.S. ISO :2004. Price Code

UNIVERSITY OF MANITOBA PROCEDURE

Information and Compliance Management Information Management Policy

Transcription:

IM/IS POLICY RECORDS MANAGEMENT 1

Contents 1. FOREWORD - 3 2. SCOPE - 3 3. POLICY STATEMENT - 4 3.1 Regulatory Framework - 4 3.2 Policy principles - 4 3.3 Relationship with other policies - 4 3.4 Records classification systems and related storage areas - 4 3.5 Disposal of records - 6 3.6 Storage and custody - 6 3.7 Access and security - 7 3.8 Legal admissibility and evidential weight - 7 3.9 Training - 8 3.10 Monitor and review - 8 4. Version Control and Approval - 8 2

RECORDS MANAGEMENT POLICY IM/IS POLICY 1. FOREWORD 1.1 Section 13 of the National Archives and Records Service of South Africa Act, 1996 requires the Mpumalanga Tourism and Parks Agency to manage its records in a well-structured record keeping system, and to put the necessary policies and procedures in place to ensure that it s record keeping and records management practices comply with the requirements of the Act. 1.2 Information is a resource of the same importance to good management as other standard resources like people, money and facilities. The information resources of Mpumalanga Tourism and Parks Agency must therefore be managed as a valuable asset. Appropriate records management is a vital aspect of maintaining and enhancing the value of this asset. MTPA considers its records to be a valuable asset to: enable the Mpumalanga Tourism and Parks Agency to find the right information easily and comprehensively; enable the Mpumalanga Tourism and Parks Agency to perform its functions successfully and efficiently and in an accountable manner; support the business, legal and accountability requirements of the Mpumalanga Tourism and Parks Agency; ensure the conduct of business in an orderly, efficient and accountable manner; ensure the consistent delivery of services; support and document policy formation and administrative decision-making; provide continuity in the event of a disaster; protect the interests of the Mpumalanga Tourism and Parks Agency and the rights of employees, clients and present and future stakeholders; support and document the Mpumalanga Tourism and Parks Agency activities, development and achievements; provide evidence of business in the context of cultural activity and contribute to the cultural identity and collective memory. 1.3 Records management, through the proper control of the content, storage and volume of records, reduces vulnerability to legal challenge or financial loss and promotes best value in terms of human and space resources through greater co-ordination of information and storage systems. 2. SCOPE 2.1 This policy impacts upon the MTPA work practices for all those who: create records including electronic records; have access to records; have any other responsibilities for records, for example storage and maintenance responsibilities; have management responsibility for staff engaged in any of these activities; or manage, or have design input into, information technology infrastructure. 2.2 The policy therefore applies to all staff members of MTPA and covers all records regardless of format, medium or age. 3

3. POLICY STATEMENT 3.1 Regulatory Framework 3.1.1 By managing its paper-based records effectively and efficiently MTPA strives to give effect to the accountability, transparency and service delivery values contained in the legal framework established by: The Constitution, 1996; The National Archives and Records Service of South Africa Act (Act No 43 of 1996 as amended); National Archives and Records Service of South Africa Regulations; The Public Finance Management Act (Act No 1 of 1999); The Promotion of Access to Information Act (Act No 2 of 2000); The Promotion of Administrative Justice Act (Act No 3 of 2000); The Electronic Communications and Transactions Act (Act No 25 of 2002). 3.2 Policy principles 3.2.1 All records created and received by the Mpumalanga Tourism and Parks Agency shall be managed in accordance with the records management principles contained in section 13 of the National Archives and Records Service Act, 1996. 3.2.2 The following broad principles apply to the record keeping and records management practices of Mpumalanga Tourism and Parks Agency: MTPA follows sound procedures for the creation, maintenance, retention and disposal of all records, including electronic records. The records management procedures of MTPA comply with legal requirements, including those for the provision of evidence. MTPA follows sound procedures for the security, privacy and confidentiality of its records. Electronic records of MTPA are managed according to the principles promoted by the National Archives and Records Service. MTPA has performance measures for all records management functions and reviews compliance with these measures. 3.3 Relationship with other Policies 3.3.1 This policy also relates to the following policies: Relevant MTPA ICT Policies Access to Information and Classification Policy 3.4. Records classification systems and related storage areas MTPA has the following systems that organize and store records: 4

3.4.1 File plan Only the approved file plan shall be used for the classification of correspondence records. The file plan shall be used for the classification of paper-based and electronic (including e-mail) records. Each staff member shall allocate file reference numbers to all correspondence (paper, electronic, e-mail) according to the approved subjects in the file plan. When correspondence is created / received for which no subject exists in the file plan, the records manager should be contacted to assist with additions to the file plan. Under no circumstances may subjects be added to the file plan if they have not been approved by the records manager. 3.4.2 Storage areas Paper-based correspondence files are kept in the custody of- a. The central registry All paper-based correspondence system records that are not HR related are housed in the central registry. All these records are under the management of the records manager who is mandated to ensure that they are managed properly. The registry is a secure storage area and only registry staff is allowed in the records storage area. Staff members that need access to files in the registry shall place a request for the files at the counter. The registry shall be locked when not in operation. b. The Human Resources registry All Human Resources related records are housed in the HR Registry. The general HR subject files as well as HR personnel and case files are under the management of the records manager who is mandated to ensure that they are managed properly. The MTPA maintains a set of paper-based personnel files for each staff member. These files are confidential in nature and are housed in a secure storage area in the HR registry. The files exist only in paper-based format and the physical tracking of the case files are managed with the file tracking system in the Integrated Document and Records Management System 5

c. Records other than correspondence systems Schedule for records other than correspondence systems o o The records manager maintains a schedule of all records other than the correspondence system. The schedule contains a description of each set of records other than the correspondence system and indicates the storage location and retention periods of these records regardless of format. Should records be created/received that are not listed in the schedule, the records manager should be contacted to add the records to the schedule. Paper-based o o The MTPA also has paper-based records other than the correspondence systems that are in the custody of the various officials that use them on a daily basis. These records are under the control of the records manager who is mandated to ensure that they are managed properly. 3.5. Disposal of records No public records (including e-mail) shall be destroyed, erased or otherwise disposed of without prior written authorization from the records manager. Retention periods indicated on the file plan and schedule were determined by taking MTPA legal obligations and functional needs into account. Should a staff member disagree with the allocated retention periods, the records manager should be contacted to discuss a more appropriate retention period. All disposal actions should be authorized by the records manager prior to their execution to ensure that archival records are not destroyed inadvertently. Non-archival records that are needed for litigation, Promotion of Access to Information requests or Promotion of Administrative Justice actions may not be destroyed until such time that the Chief Governance and Compliance has indicated that the destruction hold can be lifted. Paper-based archival records shall be safely kept in the registry until they are due to be transferred to the Provincial Archives Repository. Transfer procedures shall be as prescribed by the National Archives in the Records Management Policy Manual. Specific guidelines regarding the procedure to dispose of electronic records are contained in the electronic records management policy. 3.6. Storage and custody All records shall be kept in storage areas that are appropriate for the type of medium. The National Archives and Records Services guidelines contained in the Records Management Policy Manual shall be applied. 6

Specific policies for the management of electronic storage media are contained in the electronic records management policy. 3.7. Access and security Records shall at all times be protected against unauthorized access and tampering to protect their authenticity and reliability as evidence of the business of the MTPA. Security classified records shall be managed in terms of the Information Security Policy which is included in the ICT Policies No staff member shall remove records that are not available in the public domain from the premises of the MTPA without the explicit permission of the records manager in consultation with the security manager. No staff member shall provide information and records that are not in the public domain to the public without consulting the records manager. Specific guidelines regarding requests for information are contained in the Access to Information and Classification Policy. Personal information shall be managed in terms of the Promotion of Access to Information Act until such time that specific protection of privacy legislation is enacted. No staff member shall disclose personal information of any member of staff or client of the MTPA to any member of the public without approval by the records manager. Records storage areas shall at all times be protected against unauthorized access and shall be locked when not in use. Records storage areas shall be fireproof and waterproof 3.8. Legal admissibility and evidential weight The records of the MTPA shall at all times contain reliable evidence of business operations. The following shall apply: 3.8.1 Paper-based records No records shall be removed from paper-based files without the explicit permission of the records manager. Records that were placed on files shall not be altered in any way. No alterations of any kind shall be made to records other than correspondence files without the explicit permission of the records manager. Should evidence be obtained that records were tampered with; the staff member involved shall be subject to disciplinary action. 7

3.8.2 Electronic records 3.9. Training The MTPA shall use systems which ensure that its electronic records are: - authentic; - not altered or tampered with; - Audio and visual - Produced in systems which utilize security measures to ensure their integrity. The records manager shall successfully complete the National Archives and Records Service s Records Management Course, as well as any other records management training that would equip him/her for his/her duties. The records manager shall identify such training courses that are relevant to the duties of the registry staff and shall ensure that the registry staff is trained appropriately. The records manager shall ensure that all staff members are aware of the records management policies and shall conduct or arrange such training as is necessary for the staff to equip them for their records management duties. 3.10 Monitor and review The records manager shall review the record keeping and records management practices of the MTPA on a regular basis and shall adapt them appropriately to ensure that they meet the business and service delivery requirements of MTPA. This policy shall be reviewed on a regular basis and shall be adapted appropriately to ensure that it meets the business and service delivery requirements of the MTPA. 4. Version Control & Approval This policy is submitted and approved as indicated below. Date Designation Result 18 August 2010 ICT Management Committee Supported for submission to EMC 3 September 2010 Executive Management Committee Supported for submission to Board 20 September 2010 Board Approved Version Date Author Details 0.1 July 2010 MTPA IM/IS Draft policy & procedure 0.2 August 2010 ICT Committee Draft policy & procedure 0.3 September 2010 EMC Draft policy & procedure 1 September 2010 Board Policy & procedure 8