Records management meets IT

News Analysis
Oct 2, 20064 mins

Privacy regulations and corporate accountability bring these disciplines together.

Records management has always been technology intensive, says Virginia Jones, certified records manager for the 400,000-customer Department of Public Utilities in Newport News, Va.

As times changed, so did Jones. Now she reports directly to the manager of IT, and she and others like her see records management as a path to IT leadership roles.

Records managers are being driven to IT management out of necessity, because of increasing scrutiny, data privacy regulations and the complexities of managing records data in multiple applications across enterprise systems, says Betsy Fanning, director of standards and content for the Association for Information and Image Management (AIIM), an international authority on enterprise content management.

Records management calls for business knowledge about the use of records data, certifications in records management processes and an understanding of the information systems touching those records, says Gary Wolfe, CIO and vice president of IT for consulting firm Source One Management, where he oversees the information management and administrative support contractor’s IT needs and provides records management expertise to Source One and its clients.

Wolfe took a technological path to his records-management career; he began 20 years ago by constructing drafting and imaging systems for mining companies. He joined Source One in 1995.

Records information could be anywhere in the IT systems that process, store, secure and purge records data, Wolfe says. On a technical level, that makes database management, storage management, access controls, VPN and endpoint security key components of records management, he says.

Roles and responsibilities

Although IT job-placement firms could not define technical jobs in records management, because they haven’t been tracking this trend, AIIM has posted several, including jobs for documentation and workflow engineers, storage specialists, architects and information/enterprise content management consultants. The AIIM site didn’t list a salary for those job openings, but the national average salary for a certified records manager is $74,100, according to Salary.com.

For IT and records management to merge, the systems that house and process records information have to understand the structures set around the records, including author, title, abstract, file type, access and document creation, Jones says.

As an example, she points to a file-classification project 18 months ago for a shared drive on a Windows 2000 server. “Before that project, data classification on that server was a free-for-all. There were no naming schemes or conventions, because IT wasn’t familiar with managing records,” Jones says. “I worked with IT to create a three-tiered directory – root folders, set folders and division names. Now administrators know there should be no loose folders hanging around on that server.”

Another key to managing records is knowing when and how to make the data expire, Wolfe adds. This would have saved one of his clients several hundreds of thousands of dollars and several months of Wolfe’s billable time pulling up keyword search records in a litigation case.

“We had to go through some very old tape sets, because e-mails went back 10 years that should have been expired 30 days after use,” he says. “And they never deleted old e-mail accounts when employees left.”

Wolfe uses this story to train managers, users and IT staffs about records-retention policies in a way they can absorb – which leads to another critical skill that records managers need: the ability to communicate the concepts of records management to every level of the business.

“Everyone in the organization needs to know how the data they access and use applies to the four values of retention – fiscal, legal, administrative and historic,” Jones explains.

Records recovery

Disaster recovery is another set of skills that records managers and IT do well together, continues Jones, who is co-author of Emergency Management for Records and Information Programs.

“We went through Hurricane Isabel a couple years ago, and we have a whole methodology of how to respond. My piece and the whole IT division were closely intertwined,” she says. “We got through it without loss of service or loss of records.”

Radcliff is a freelance writer specializing in online safety and network security. She can be reached at deb@radcliff.com.

deb_radcliff

Deb Radcliff is an investigative journalist and analyst focused on computer crime and security. Her work has appeared on Security Boulevard, the SANS Cyber Security Blog, and SC Media, among other outlets. She stood up an analyst program for SANS Institute and ran it for 15 years before joining the Cyber Risk Alliance as strategic analyst on the business intelligence unit. She is author of the popular cyber thriller series, “Breaking Backbones,” available at Amazon.

Deb won two Neal Awards for investigative business reporting. She holds a Bachelor’s degree in journalism from San Jose State University.

More from this author