Skip to main content
Hafan

Records management checklist

Your business has defined and allocated records management responsibilities. (optional)
More information

You should assign lead responsibility for records management at a senior enough level to be able to change policy, process and culture.
Where resources are available, you should nominate an appropriately skilled lead to coordinate records management within your business. You may combine this with other roles within your business.

Where resources are available, you should nominate an appropriately skilled records management lead to coordinate the management of records within the business. This may be combined with other roles within the organisation.

* [Organisational arrangements to support records management](

You should assign lead responsibility for records management at a senior enough level to be able to change policy, process and culture.
Where resources are available, you should nominate an appropriately skilled lead to coordinate records management within your business. You may combine this with other roles within your business.

Where resources are available, you should nominate an appropriately skilled records management lead to coordinate the management of records within the business. This may be combined with other roles within the organisation.

* Organisational arrangements to support records management The National Archives website

Your business has approved and published an appropriate records management policy. This is subject to a regular review process. (optional)
More information

A policy will address how records are used within your business in a consistent manner. This can be part of a general policy or a standalone policy statement that is supported by specific records management procedures such as storage and maintenance or disposal of records.

The policy should clearly set out your approach to records management and should address your overall commitment, the role of records management, references to related policies and documents, staff roles and responsibilities and monitoring of compliance.

Your business has identified records management risks as part of a wider information risk management process. (optional)
More information

You should carry out regular exercises to identify, assess and manage records management risks. This review should identify what might go wrong with a process and why. You can then put measures in place to mitigate these risks.

If you already have a corporate risk register, you can use this to include risks to records management functions. These might include records not being either updated, destroyed in a timely manner or held securely.

Your business incorporates records management within a formal training programme. This comprises mandatory induction training with regular refresher material, and specialist training for those with specific records management functions. (optional)
More information

You should brief all new staff on their responsibilities for the creation, use, maintenance and eventual destruction of records with regular refreshers to maintain levels of awareness. Awareness materials might include posters, office-wide emails, intranet updates and records management content in newsletters.

You should give specialist training to staff with specific records management responsibilities such as management of disposal schedules, monitoring of data quality or oversight of records management practice in order to allow them to carry out their role effectively.

Your business carries out periodic checks on records security and there is monitoring of compliance with records management procedures. (optional)
More information

You should develop ways of checking staff compliance with policies and procedures; eg after hours desk sweeps to ensure adherence with clear desk policy and checks of disposal procedures to ensure that confidential waste is being disposed of correctly.

Performance measures might include progress against a records management action plan, archive retrieval rates measured against a service level agreement (SLA), progress regarding deletion of records against requirements of a retention schedule or data quality and accuracy. You should report on performance to key performance indicators (KPIs) periodically to management to provide assurances on compliance.