OAR 166-450-0060
Information Management Systems
(1)
Computer Services Disaster Recovery Plans: Records document the steps to take in case of a major disaster which has destroyed or compromised the operations of the department. Components of the recovery plan include but are not limited to physical plant repair which includes a description of equipment needed and steps to be taken to repair the physical plant and its infrastructure such as electrical and air conditioning systems; equipment restoration including contacts with equipment suppliers and a list of replacement equipment to be purchased; data restoration including steps to be taken to reload data, recover data, reconnect networks, reestablish telephone connections, and reconnect modems and data phones; and related procedures and needs dealing with risk management, public relations, and financial issues. (Minimum retention: Until superseded).(2)
Computer System Maintenance Records: Records document the maintenance of computer systems and are used to ensure compliance with any warranties or service contracts; schedule regular maintenance; diagnose system or component problems; and document system backups. Records may include but are not limited to computer equipment inventories; hardware performance reports; component maintenance records (invoices, warranties, maintenance logs, correspondence, maintenance reports, and related records); system backup reports; backup tape inventories; and related documentation. (Minimum retention: Records related to system or component repair or service: Life of system or component; Records related to regular or essential records backups: Until updated or obsolete).(3)
Computer System Program Documentation: Records document the addition, modification, or removal of software from a computer system. Records usually fall into six categories: Records that document operating systems; Records that document the in-house creation and modification of application programs; Records that document the structure and forms of datasets; Records that document the use of commercial software packages; Records that document the structure of the system; and Records that document system-to-system communication. Records may include but are not limited to system overviews, operations logs, job listings, operator instruction manuals, system development logs, system specifications and changes, conversion notes, dataset logs, dataset inventories, dataset record layouts, hard copies of table, data dictionaries, data directories, programming logs, program specifications and changes, record layouts, user views, control program table documentation, program listings, commercial software manuals and related documentation. SEE ALSO: Information System Planning and Development Records, Software Management Records, and Computer System Maintenance Records, this section. (Minimum retention: For the life of the system).(4)
Information System Planning and Development: Records document the planning and development of information systems. Although these records typically document computerized information systems, they may also document manual filing systems and microfilm systems. The records are used to ensure that planned systems will help the department fulfill its missions, are cost-effective, conform to adopted information standards, and integrate with existing information systems. Records may vary according to the level of documentation required for each system and may include but are not limited to information technology plans, feasibility studies, cost-benefit analyses, department or program studies and surveys, system specifications and revisions, component proposals, technical literature, vendor literature and proposals, and related correspondence and documentation. SEE ALSO: Computer System Program Documentation in this section. (Minimum retention: Implemented systems: For the life of the system; Unimplemented systems: three years).(5)
Software Management Records: Records document the use of information systems software. Records are used to ensure that software packages are compatible, that license and copyright provisions are complied with, and that upgrades are obtained in a timely manner. Records may include but are not limited to software purchase records, software inventories, software licenses, site licenses, and related correspondence and documentation. SEE ALSO: Software Licensing Agreements in Contracts and Agreements Records section. (Minimum retention: Until software is disposed of).
Source:
Rule 166-450-0060 — Information Management Systems, https://secure.sos.state.or.us/oard/view.action?ruleNumber=166-450-0060.