Does the SEC restrict which type of archiving media we can use?

Does the SEC restrict which type of archiving media we can use?

Do governing bodies like the SEC still restrict which types of archiving media we can use in order to stay compliant?

    Requires Free Membership to View

    Login

    When you register for SearchDataBackup.com, you’ll also receive targeted emails from my team of award-winning editorial writers. Because your job never seems to get any easier, it’s our goal to keep you up-to-date on the latest backup tips, trends and technologies that will help you get the job done.

    Rich Castagna, Editorial Director

    By submitting your registration information to SearchDataBackup.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchDataBackup.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

No, and they never meant to in the first place. Remember to check all of the final rules on regulations, as well as the commentaries (and responses to the commentaries in the final rule) and you'll see that the regulators don't really care which media is used, as long as the principles of availability, integrity, confidentiality and accountability are met. These principles were outlined long ago in NIST 800-33 by Gary Stoneburner and should serve as a bellwether guideline as to whether or not your media is capable of withstanding the pressures of a preservation order audit.

Also, turn to standards bodies such as ISO and NIST for guidance on media selection because it becomes very important down the road in the Disposition Authority document you'll have to create. Remember, there are going to be records you have to maintain that are going to outlive any media that you are using today (name a hard drive that has lasted over 10 years, or an optical or tape format that has lasted that long, other than DAT, and I don't know anyone who has DAT drives in their tape libraries anymore).

The questions that the auditors will ask you is whether or not the media serves the purpose of good faith retention (does it meet the NIST 800-33 guidelines), and how you are going to handle continuing retention through transfer of media, etc. while preserving the integrity of the archive index.

This was first published in August 2004